ML20065H786

Advanced BWR Certified Design Matl/Itaac Review Guidance

ML20065H786
Person / Time
Site:	05200001
Issue date:	04/13/1994
From:	GENERAL ELECTRIC CO.
To:
Shared Package
ML20065H778	List: ML20065H774 ML20065H786
References
NUDOCS 9404150148
Download: ML20065H786 (180)

Text

. .

1 1

ABWR CERTIFIED DESIGN MATERIAL /ITAAC REVIEW GUIDANCE ,

l l

l l

l I

1 APRIL 1994 GE NUCLEAR ENERGY SAN JOSE CA 9404150148 940413 PDR AICK 05200001 B PDR

ABSTRACT This memorandum provides guidance to personnel assigned to preparation of Certif ed Design -

3 Material (CDM) material for the Advanced Boiling Water Reactor (ABWR) design certification application. The CDM is the technical information that will be certified by the 10 CFR Part 52 miemaking process and must include entries for: design descriptions; inspections, tests, analyses and acceptance criteria; design acceptance criteria; site parameters; interface requirements. This ,

memorandum addresses all of these entries and provides preparation guidance based on the GE-NRC-Industry consensus that has now evolved regarding the necessary scope, form and content of the CDM.

M d

4

TABLE OF CONTENTS

-ABSTRACT INTRODUCTION

Background

Purpose of Document Overview of Contents GENERAL GUIDANCE The remainder of this memorandum uses the same section numbers as the ABWR CDM document.

1.0 Introduction Sections

2.0 Certified Design for ABWR Systems - General Guidance 2.1 System Selection 2.2 Design Descriptions 2.3 Figures 2.4 Inspections, Tests, Analyses and Acceptance Criteria 3.0 Certified Design for Non-System-Based Technical Issues 4.0 Interface Requirements 5;0 Site Parameters iii

_m l

q , q

>; ..^

l TABLE OF CONTENTS (Continued) 6.0 Other Guidelines and Recommendations l

.l 6.1 Tenses  !

6.2 Treatment of Units and Numbers I

6.3 Definitions, Usage and Standard Phrases 7.0 Regulatory Understandings i

i 7.1 Generic Issues 7.2 Miscellaneous Regulatory Agreements j ATTACHMENTS  !

l l

1.0 Not Used i

1 1

2.1 Mechanical and Fluid / Hydraulic Systems 2.2 Electrical Systems 2.3 Instrumentation and Control Systems  ;

2.4 Structures and Buildings i l

l i

'l 1

IV i

. _ , .,, 4

, . .~ - .. .. - - . . - - .. .

.l.0 -INTRODUCTION Proposed commercial nuclear power production facilities can receive design certification under the provisions of Federal Regulations 10 CFR Part 52. This involves rulemaking proceedings and formulation of a Rule to be published in the Code of Federal Regulation. As currently envisioned, only the principal design bases and principal design characteristics of a nuclear facility will be certified in a Rule. The larger body of design information included in the design certification application

• is part of the Rule but is not certified. The top-level design information to be certified -

is called the Certified Design Material (CDM). .

For the GE Advanced Boiling Water Reactor (ABWR), the form, scope and content of the CDM have been arrived at a result of extensive GE/NRC interactions in the time period mid - 1991 through mid - 1993. A summary of the broad guidelines agreed to as a result of these interactions is included in SSAR Section 14.3. These broader, global guidelines are not repeated here.

The purpose of this document is to provide explicit, detailed guidance to engineering personnel assigned responsibility for preparing the CDM required to support the Advanced Boiling Water Reactor (ABWR) design certification application. The intended user of this memorandum is an engineer who is thoroughly familiar with the technical content of his/her area of responsibility but may not be particularly familiar with the Part 52 design certification process and the associated documentation requirements.

The motivation for providing very explicit, detailed guidance is the recognition that in addition to being a technical description of the design, the CDM is also in a large part a legal document.' It will appear in the Federal Regulations as part of the Rule and will be valid for at least fifteen years. If

• Provided in a Standard Safety Analysis Report (SSAR) 1

the certified design is used as the basis for licensing a particular facility,'that facility _must maintain compliance with the certified design for the lifetime of the facility. In particular, the CDM defines acceptance criteria which will be used as a basis for authorizing loading of fuel at the end of the construction process. Consequently,it is very important that CDM language be clear, precise and unambiguous; poorly written material can lead to conflicting interpretations as to intended meaning and disputes as to compliance with acceptance criteria. Many of the guidelines presented in this document are intended to help the individual authors avoid these pitfalls.

4 Overview of Content This document addresses all of the entries that are required in the CDM for the ABWR. For ease of use, these guidelines have been structured using the same section numbering system as the proposcd CDM document. The following table summarizes this structure.

In addition to the material in this memorandum, the ABWR SS AR, Section 14.3 contains a discussion of the overall approach to selecting material for the CDM.

i:

Note 1: The terms Tier 1 and Tier 2 are currently in widespread use and are convenient ways of

< referring to a) the top-level, most important aspects of the design which will be certified by the Rule (Tier 1) (the CDM) and b) the larger body of technical information provided in the design certification application Standard Safety Analysis Report (SS AR-Tier 2) that is part of the Rule but is not certified. However, the terms Tier 1/2 are considered 4 informal in that they do not appear in any regulations. As a result of this lack of

definition in any regulation, the terms Tier 1 and Tier 2 will not be used in cenitication documentation formally submitted to NRC.

1 l I

2

STRUCTURE OF CDM DOCUMENTATION SECTIONS l

CDM THIS GUIDELINE CDM TITLE ISSUES ADDRESSED IN TIIESE GUIDELINES NA GENERAL NA Summary of key guidelines.

GUIDANCE 1.0

1.0 INTRODUCTION

No entry.

1.1 1.1 DEFINITIONS Guidelines on which terms require definition within the CDM document.

2.0 2.0 CERTIFIED DESIGN FOR ABWR - Content and Style Guide for all ABWR Systems:

SYSTEMS - System Design Descriptions

- System Figures

- Inspections, Tests, Analyses and Acceptance Criteria (ITAAC) Tables u Within this document (but not in the CDM), the following attachments give specific guidance on:

2.1 Mechanical and Fluid Systems 2.2 Electrical Systems 2.3 Instrumentation and Control Systems 2.4 Structures 3.0 3.0 CERTIFIED DESIGN FOR NON- Broad guidelines only; each issue require issue-specific treatment.

SYSTEM BASED FEATURES 4.0 4.0 INTERFACE REQUIREMENTS Guideliries on content and structure for CDM material required by Part 52 for systems which are (in whole or in part) outside the scope of the Certified Design. 1 5.0 5.0 SITE PARAMETERS Guidelines for selecting site-related design parameters to be included in CDM .

NA 6.0 .NA Other guidelines and Recommendations for preparing CDM material.

NA 7.0 NA Summary of NRC/ industry agreements on Part 52 implementation approaches for selected issues.

_____.___-___________.____________________m____u___________ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ . _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ - _ _ _ _ . _ _ _ _ . - _ _ - - -m._- .m -_ _. .m.____.______ _ _ _ _ _ ___-__-__ _ _ _ _ ________ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . - _ _ _ _ - _ - _ _ _ _ _ _

l GENERAL GUIDANCE The following is an overview of the sequence in which ABWR design certification documentation .

must be prepared.

Step Documentation 1- Complete the necessary design activities and prepare the plant Standard Safety Analysis Report (SSAR).

2 Using the SSAR design description as a basis, develop CDM design descriptions.

3 Develop (if necessary) figures and/or diagrams to support the design descriptions.

4 Based on the technical entries in the design description, develop inspections, tests, analyses and acceptance criteria (ITAAC) called for ,

by 10 CFR Pan 52. The ITAAC are intended to verify that the as-built facility complies with the certified design described in Steps 2 and 3.

5. Add to the SSAR any discussion of tests and analyses needed to support the ITAAC.

Steps 2,3 and 4 of these activities are described in detail in this memorandum. It is important to recognize that:

1. The CDM design descriptions derive from the SSAR and cannot be finalized before SSAR completion.

2. ITAAC contents derive from the CDM design description and can only address design ,

characteristics introduced in the design description.

r yn 4 "

+

_, .w , .g ;. - --

, . _ + . -

1.0 INTRODUCTION

'l.1 Definitions This sec' ion of the CDM provides definition and/or clarification of the terms used in the body of the CDM technical material. The section is intended to define terms that have a very specific and important meaning for the CDM but are not already defined elsewhere in regulations which are applicable to design certification under Part 52. The contents of Section 1.1 have been arrived at by.

GE/NRC interactions and decided on a case-by-case basis. No additional discussion is provided in -

this memorandum. See SSAR Section 14.3 for additionalinformation.

1.2 General Provisions

. Entries in this section have also been decided by GE/NRC interactions on a case-by-case basis.

The Section contains a mixture of provisions that were selected on the basis that the provision was

necessary to either a) define technical requirements applicable to multiple systems in the CDM or to b) to provide clarification and guidance for future users of the CDM. Funher discussion is .

provided in SSAR Section 14.3.

4 i

a l

> \

l 5

1 2.0 CERTIFIED DESIGN FOR ABWR SYSTEMS - GENERAL GUIDANCE I This section presents overall guidelines for preparing the system-by-system technicalinformation ,

l required for the ABWR CDM design certification material. The majority of these guidelmes are 1 applicable to all ABWR systems. Attachments 2.1,2.2,2.3 and 2.4 provide specific guidance on preparing entries for mechanical, electrical, control and instrumentation and structural systems.

2.1 System Selection It is intended that the Table of Contents for CDM Section 2 include all of the systems identified in the Standard Safety Analysis Report (SSAR) as being within the scope of the certified design.

(Currently a total of approximately 135 systems.) The extent to which a particular system is to be described in the CDM Section 2 depends upon the safety significance of the system. A graded approach is to be used, important safety-related systems are described in some detail; less l important non-safety-related systems will not be described at all. Table 2.1 provides guidelines for determining the level of CDM treatment for each of the ABWR systems. Application of this graded approach will result in significant system-to-system variations in the scope of CDM treatment.

2.2 Design Descriptions t

The intent of the CDM design description entry for each ABWR system is to define the top-level design features and committnents as they will appear in the Rule. The CDM design description is derived directly from the larger body of technical information presented in the SS AR.

Determining what (if any) of the SSAR contents should be extracted and given CDM status is,in part, ajudgmental process. The following guidelines should be used when selecting system design features to be included in the CDM design description. The checklists in Attachments 2.1, 2.2. 2.3 and 2.4 give more explicit guidance for the various types of systems in the certified design.

6 t y w - g- - P -

Table 2.1. CDM TREATMENT OF ABWR SYSTEMS TYPE OF SYSTEM EXAMPLE SCOPE OF CDM TREATMENT a Major safety-related features and performance Safety-related systents that contribute to plant fligh Pressure Core Flooder (2.4.2).

characteristics.

performance during design basis accidents.

Combustion Turbine Generator (2.12.1 l). Brief discussion of the system. In the event Systems that contribute to plant performance the CTG is an alternate source of AC power during beyond-design-basis events (severe for station blackout, an ITAAC on capacity accidents, ATWS,etc.)

would probably be required.-

Main Turbine (2.10.7) axis of rotation. Address aspects of these systems that have Non-safety-related systems or equipment some safety significance.

having some feature (s) of safety significance.

Drywell Cooling System (2.14.7). Case-by-case; these systems may be important elements of the ABWR with no significant enough that the overall direct safety significance but with some standardization goal warrants a brief CDM influence on overall plant design (i.e.,

description.

y arrangement).

Control Rod Drive Removal Machine Control ' CDM treatment not necessary except to retain Non-significant systems with no relationship Computer (2.2.13) and Plant Startup Test the system title in the overall CDM list of to safety or influence on basic plant design.

Equipment. (2.5.11). systems.

This catepy also includes special case systems such as plant startup equipment.

Unit Auxiliary Transformer (2.12.2) is No additional CDM treatment required for System for which the necessary CDM treatment has been handled in another system. covered in Emergency Power Distribution systems so covered.

System (2.12.1).

?

l

\

l L GUIDELINES FOR SELECTING CDM DESIGN DESCRIPTION ENTRIES l

l 1. CDM must be based on the SS AR design. It is important that the CDM include only design information and characteristics presented in the SSAR.

2. All CDM material must be nonproprietary. If use of data that is currently proprietary becomes unavoidable, the only acceptable approach will be to declassify the material to nonproprietary status.

3. The CDM design description will consist of a subset of the body of technical information in l the SSAR. The selection process reflects irrplementation of the tiered approach to the design 1

certification, and the selection process is (ultimately) based on engineering judgment.

Knowledgeable enF ineers must identify the set of top-level criteria and design features that will be included in the CDM. Not everything in the SSAR is of equal (high) importance, nor need be included in tte CDM. An all-inclusive approach would make the tiered concept meaningless. Exclusion of a particular technical issue from the CDM does not mean that either:

4

a. the SSAR commitment will be exposed to future undisciplined changes,* and

b. The technical issue will not be subject to a thorough construction certification process because it is not identified as a CDM entry. (Part 50 QA processes still apply under Part 52.)

• This memorandum does not describe the SSAR change control processes and controls.

8

w a' .

4. The CDM design description contains numerical information to the extent needed to identify the principal design criteria and design features. Numerical values should correspond to the information used in the SSAR safety analyses. All CDM numbers should have tolerances (e.g. i, n 2) except for ASME/ code design conditions.

, 5. The CDM is to be self-contained and must not make reference to the SSAR or any other l-documents. This approach is necessary because referencing other documents in the CDM would elevate the other documents to CDM status. This is unacceptable because it would : '

impose on the referenced document all of the more rigorous CDM controls and thus be incompatible with the intent of the tiered approach.

i

6. Design descriptions may include diagrams that define system scope and functional relationships. Section 2.3 provides guidelines for preparation of these figures. If a figure is provided, it should show all of the system components discussed in the design description.

7. The design descriptions should be limited to statements of what the design features am.

They should not include any infom1ation on plant operating conditions as these factors are covered separately by Technical Specifications. Examples of operations-related information that should not be included in the CDM are:

administrative control of components normal valve and breaker positions (some exceptions) operator actions to control systems

8. The design description text should be limited to statements as to what the design is and should avoid any discussion of what is achieved. For example, the following statements are not appropriate CDM entries:

This feature gives the RHR system the capability to withstand a single failure.

9

s ,:

- The three-division core cooling system design results in a highly reliable network of systems in the event ofloss of coolant accident. l The 2% reactor water cleanup system design minimizes buildup of impurities in the -l reactor water.

I p 9. The design description should not include a discussion of the design development process.

For example, the following is not appropriate: "The options of 3x50% pumps or 2x100%  !

l pumps were studied, and, on the basis of cost, it was decided to use the 2x100% option."  !

-)

, 10. All CDM figures and tables should be introduced and referenced in the design description.

I 1. All design-related numbers to be included anywhere in the CDM (e.g., pump flow rates, parameter tolerances, etc.) should appear first in the design description.

]

12. In general, the design description should avoid references to Codes, Standards, and Regulations. Exceptions are Codes and Standards already included in the Regulations such -  !

l as ASME references for mechanical system equipment and seismic classification of l structures.

13. In general, protection against pipe whip, jet impingement, flooding, fires, etc., will be included as part of the Piping Design DAC entry in Section 3.0 or the building entries in Section 2.0. Accordingly, these subjects should not also be addressed in the Section 2.0 entries for individual systems.

14. Each system should address the control room or remote shutdown panel features associated j with that system (that merit CDM treatment).

10

2.3 CDM Design Description Figures and Diagrams The CDM design descriptions may (but do not have to) include supporting figures and diagrams.

However, it is anticipated each system with a CDM design description entry will have a figure unless there is a well defined reason for not providing one. Figures are considered part of the system design description and have the same significance in terms of being certified. The following general guidelines should be used when preparing figures for the CDM:

1. It is anticipated that most systems having CDM design descriptions will also have supporting figures. However, it is not mandatory and will not be required in cases where the design description can be satisfactorily covered by text alone and there are legitimate reasons for not including a figure. The latter is likely to center on systems with extremely simple CDM treatment for which a figure would approach the trivial. The following table summarizes what is typically expected.

SYSTEM TYPE EXAMPLE FIGURE OR I)IAGRAM Mechanical 2.1.1 Reactor Pressure Vessel General arrangement drawing showing major dimensions and features.

Fluid / Hydraulic 2.4.1 Residual Heat Removal Process diagram showing relationship of major system components.

Electrical 2.12.1 Electrical Power One-line electrical diagram (for Distribution class IE portion) showing relationship of major system components.

Instrumentation and Control 2.2.3 Feedwater Control Block diagram showing major system functions.

Stmetural 2.15.10 Reactor Building Figures showing basic building arrangement and stmetural elements.

l l

l I

11 I

2. The figures should use the legends, symbols, and nomenclature provided in Appendix A of the CDM.

3. It is intended that the figures include all of the equipment items addressed in the design ,

description text.

4. The introductory paragraph included in the Append.ix A of the CDM discusses the regulatory / legal significance of these figures. This is important information since figures will be part of the certified design incorporated into the Rule and will have the same legal significance as the text of the design description. Briefly, CDM figures represent a functional description of the system and should identify important components and should not purport to reflect the exact location of components.

5. All figures will be standard size paper (8-1/2 x 11 inches). The CDM will contain no fold-out pages.

2.4 CDM Inspections, Tests, Analyses and Acceptance Criteria (ITAAC)

, 10 CFR Part 52 states that the intent ofITAAC entries is to provide procedures for determining that the as-built facility conforms with the certified design. - As currently envisioned, the ITAAC -

entries are to be prepared using the following general guidelines. The checklist given in Attachments 2.1,2.2,2.3 and 2.4 provide more explicit guidance on the details for each type of system. ,

GUIDANCE FOR PREPARING CDM ITAAC ENTRIES

1. The ITAACs are derived from the design description content and generally correspond to the elements in the CDM design description.' The overall intent is to have an ITAAC entry correspondmg to most of the design description material, but a strict one-for-one relationship i

12

A e

is not required. Groundrules guiding which design description entries do not need corresponding ITAAC are:

a. Minintize the number of cases where this occurs.

b. Where it occurs, there must be a rational basis as to why it is an acceptable approach.

n Examples oflegitimate reasons include:

Identifies a design characteristic that is in fact verified by other ITAAC. For example, the design description text might identify that a system is safety-related.

There is no specific test for this characteristic, but other ITAAC aimed at separation, Class IE power supplies, redundancy, etc., all address the issue of system safety status.

Design description text contains material necessary for a minimum explanation of the system but includes factors that do not warrant verification via ITAAC. For example, some of the building design descriptions give a summary of the type of structures (reinforced concrete, integrated slabs, etc.) that do not need specific verifying ITAAC.

Some systems have ITAAC which verify overall system functions and do not need to include ITAAC entries for design description text which discusses the set of specific system components which together yield the required system functional performance.

l Certain design description material cannot be made the subject ofITAAC entries .

because of the processes dermed in Part 52. Primarily, ITAAC must be 1

completed prior to fuel load which means that any testing that requires fuel in the l

reactor cannot be addressed by ITAAC.

13

2. ITAACs will be prepared in tabular form that links an ITAAC to commitments made in the CDM design description. Table 2.4 shows the required format for the ITAAC table.

3. The ITAACs are aimed at confirming the as-built facility complies with the CDM design contained in the design description. The left-hand column entry should use words directly -

from the design description text (if possible).

b 4. It is necessary to specify ranges and/or tolerances for numerical values included in the ITAAC U (except for ASME/ Code design conditions). The objective of specifying tolerances is to 1

recognize: a) legitimate site variances that can occur in complex construction projects such as a nuclear power plant, and b) values of input parameters can often vary without affecting safety. Tolerances specified should be technically justified by supporting analyses etc.; such supporting information need not be included in the CDM but should be in the SS AR.

5. Consistent with the provisions of Part 52, the ITAAC process ends prior to fuel load. This means that post-fuel load testing should not be included in the ITAAC entries.

6. To the extent possible, the verification activities defined in ITAAC will utilize existing nuclear power plant verification programs. ITAAC will not lead to a definition of new tests and inspections (unless necessary) that have not been used in past practices. (An example of i

a new test would be confirmation of multiplexed timing devices.)

7. Procedural and Training aspects of the design and construction process (operator training, l

qualification of welders, etc.) are part of the licensee's programs and are commitments made at the time of COL issuance; they are not part ofITAAC. An exception is any material in this category which is addressed in the DAC material in Section 3.

8. The ITAAC should not be written so as to require or imply that a separate test or inspection be performed for each ITAAC entry. Instead, the ITAAC should be written so as to permit a single test or inspection to cover one or more ITAAC entries (if possible).

14

. , _ .~.

Table 2.4. REQUIRED FORMAT FOR ITAAC TABLES Example Shown for Main Steam System Table 2.10.1: Main Steam System Inspections, Tests, Analyses and Acceptance Criteria Design Commitment Inspections. Tests, Analyses Acceptance Criteria G

4

-% , _e_ ._ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ c _ _ _ _ 1__.. -______ _ __ _ __ _

_m _ _ . - - _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ . _ _ _ , . - .

E l

J

9. The sequence in which subjects should be listed in the ITAAC table should follow as closely .

as possible the design description sequence.

10. Lefthand column - Design Commitment 4-

a. Column title should be Design Commitment.

b. Entries must derive from the design description; do not introduce technical issues in the ITAAC table that are not covered in the design description.

c. The Design Commitment should either quote directly or closely paraphrase the relevant design description entry being addressed.

d. Any design-related numbers addressed in the table should appear first in the design description.

e. Do not list any specific, detailed references to codes, standards and regulations; e.g., .

specific Regulatory Guide numbers, code paragraph references. It is acceptable to broadly reference the ASME Code,Section III. Do not reference the DAC entries in 2

Section 3.0.

11. Middle column -Inspections, Tests and Analyses (ITA)

a. A specific inspection, test or analysis should be identified. Terms such as

" demonstrate,"" verify," " confirm," should not be used. In general, the first word in this column should be either tests, inspections or analyses.

b Anything done in the field should be called an inspection rather than a walkdown.

c. The ITA must be aimed at the as-built facility; do not use terms like " review of the design."

16

g ,

,a 7 l

i:

d. If it is not self-evident, the proposed verification activity (i.e., inspection, test or -

analysis) should be briefly; described. The ITA column should briefly state the process and should use an action word. For example:

A valve closure test will be conducted using simulated signals.  !

e An analysis of containment volume will be performed using as-built dimensions.

It is anticipated that in most cases the scope and content of the ITA will either be self-1 evident or can be adequately described by a brief summary in the ITA column. In a j l

limited number of cases, this may not be possible, and it will be necessary to add descriptive material in the section of the SS AR describing the system in question.

e. Do not incorporate acceptance criteria into the middle column text.

f. The ITA entry should not identify the organization (e.g., licensee, vendor, constructor, 1 contractor) who will implement the inspection, test or analyses. R

g. To the extent possible, avoid direct reference to a " documentation review". Instead refer to the actual test, inspection or analysis to be perfonned. Documentation review  !

activities are generally an implicit part of any test, inspection or analysis activity I

specified. j 1

I

h. Existing preoperational testing may be used when defining proposed testing for -)

.q ITAAC. I

12. Right-hand column - Acceptance Criteria

I

a. It is very important that the acceptance criteria use objective and specific terms. Where practical, numerical acceptance criteria should be used. This will eliminate opportunities for multiple, subjective (and potentially conflicting) interpretations. The i

17 'J l

~

' I ,:

-O acceptance criteria should be a simple statement of what constitutes acceptance. For

- example:

"The pump flow is greater than 4200 gpm."

"The containment volume is equal to or greater than 135,000 ft3 ,"

Avoid use of prefaces such as:

"The tests demonstrate that ... "

"The inspections show that ... " ,

b. Avoid use of terms such as " include,"" including." For example:

" Instrumentation is provided including temperature monitors, ...'."

?

Instead, state that, " Temperature monitors, .... are provided".

c. I Do NOT reference design documents, specifications, etc. For example, avoid -

statements such as:

"The design complies with design documents."

Instead, describe the important requirements reflected in the design documents.

d. Although it should be avoided, it is acceptable to refer to the design commitment in the  !

.1 a

lefthand column. For example:

i An acceptance criteria can be q 1

"The design commitment is met " .

I 18 ,

i

,e . . e -c- , . - n - - ,,

I

e. Avoid use of terms such as "can" and "is capable of." For example, rather than stating that "the pump is capable of providing ....," state that "the pump provides ..."

'See Section 6.0 of this memorandum for other guidelines.

3.0 CERTIFIED DESIGN FOR NON-SYSTEM BASED FEATURES Section 3.0 of the CDM provides a design description, ITAAC and interface requirements for systems, structures and components for which the design process (in addition to selected design features)is being certified. For the ABWR only the following topics are in this category and are to appear in Section 3.0.

l 1. Human Factors Engineering

2. Radiation Protection

3. Piping Design 4, Instrumentation and Control Preparation of material for each of these topics must comply with the guidelines presented in this memorandum. Because each of these issues requires unique treatment, this memorandum provides no specific guidance for Section 3.0 entries.

4.0 INTERFACE REQUIREMENTS l l

The ABWR design information presented in the SS AR addresses portions of the plant that are within scope of the certified design. Some aspects of the overall facility are dependent upon specific site characteristics and cannot be designed and considered at the time of design certification. Consequently, the SSAR contains no design details for these features - other than the conceptual design called for by 10 CFR Part $2. Portions of the plant not included in the cenification will be designed by the individual combined license (COL) applicants and reviewed by

.j 19

-i

'i

_ _ . _ _ _ _ . _ . _ _ _ _ _ _ _ _ _ . _ . _ _ _ _ _ - - 11

the NRC on an application-specific basis. Systems not within the scope of the certiDed design fall

. into one of two categories:

a. The system is partially within the scope of plant design for which design certification is being sought. The remainder of the system is not within the ABWR design certification scope. The Reactor Service Water (RSW) is an example of a system in this category. The RSW equipment located in the Control Building is pan of the design certification scope whereas the piping, valves, pumps, etc., beyond the Control Building boundary are not within scope. The design of the latter is site-dependent and i

will be provided by the COL applicant.

b. The complete system is outside of the design certification scope. The Ultimate Heat Sink (UHS)is an example of a system in this category. The design of the UHS is completely dependent upon the type of heat skink (forced draft towers, natural draft towers, spray ponds, once-through cooling etc.) being proposed and is likely to vary

. considerably depending upon site particulars.

10 CFR Part 52 requires the design certification applicant to provide certain information for

. systems, structures and components that are not within scope of the design certification application. These information requirements center on entries in the SS AR (e.g., a reference design and consideration of the systems in the plant probabilistic risk analysis (PRA]). However, l Part 52 does call for the CDM to includ a definition ofinterface requirements. In the context of

- Part 52, interface requirements are defined as the characteristics of the out-of-scope system, structure or component that were relied upon when developing the cenified design and which must be provided by the COL applicant when the design of the out-of-scope ponions of the riant is completed. An example is the need for the out-of-scope RSW system to support the.in-scope 2

design by including three separate divisions of equipment in a Seismic Category 1 structure.

E

'f -

20

n g, . . ~ . .. . . - . . . . . . . ~ .- .-- -. . ~ . - .,

i

.- . i

\

In addition to providing interface requirements in the CDM, Part 52 requires there be sufficient evidence that compliance with the requirements can (ultimately) be verified through inspections, .

tests and analyses.

Interface requirements are to be documented in Section 4.0 of the CDM; the following guidelines should be used when preparing these interface requirements I

A. Systems Partially With Scope

1. The portion of the system within scope should be treated exactly like a fully in-scope system. The in. scope part of the system is to be addressed in Section 2.0 and given a

, design description, figure and ITAAC table. These should be prepared using the guidelines in this memorandum. The text of the Section 2.0 design description should

identify the scope split.

I 2. The design description text in Section 2.0 should have a separate section that specifies in text form the interface requirements between the in- and out-of-scope portions of the system.

3. It is not intended that the interface requirements be a comprehensive listing of all design requirements applicable to the out-of-scope equipment. The listing should be limited to 3

those requirements that were specifically assumed when designing the in-scope portion j of the system.

4. ITAAC are not required for the interface requirements.

5. Even if all interface requirements are fully discussed in Section 2.0, an entry is still

.i required in Section 4.0 that references back to the interface requirements in Section 2.0.

The intent of this approach is that Section 4.0 have an entry for all situations where 10 I. .

CFR Part 52 calls for a definition of interface requirements. i t

4 21

, _ . , . - . - ,. ~

_ . . , , _ . . . _ _ . _ _ _ = _ _ _ _ _ _ _ _ _ _ _ _ . . _ _

B. Systems Fully Out-of-Scope

1. Interface requirements for systems in this category are addressed exclusively in Section 4.0 of the CDM and no Section 2.0 entry is required. The Section 4.0 entry is to be prepared using guidelines noted above for interface requirements; i.e.,

- a simple : ext discussion,

- limited to characteristics assumed by the in-scope portion of the plant.

- no ITAAC are to be provided.

5.0 SITE PARAMETERS The intent of Section 5.0 of the CDM is to provide a summary of the site parameters that are significant to safety and were the basis of the design described in the CDM and SS AR. The site for any design which references the cenified design must either be within this envelope of conditions or the necessary exceptions must be obtained using the Part 52 provisions.for this process. Section 5.0 is to be prepared using the following guidelines.

9

1. The section will consist of a simple tabulation of the site parameters already defined in the SSAR.

2. No CDM discussion of these parameters is envisioned; i.e., no discussion of the bases for the assumed site characteristics nor any discussion of where/how the parameters were used in the design process.

3. No ITAAC entries are required. The Safety Analysis Report submitted by the COL applicant must demonstrate compliance with the site parameters (or obtain an exemption).

Consequently, ITAAC for site parameters are not required.

22

(

6.0 OTHER GUIDELINES AND RECOMMENDATIONS There is no Section 6.0 in the CDM document. This section of this memorandum contains information on miscellaneous subjects and collects in one place the accumulated agreements and guidelines that have been developed as a result of multiple NRC, GE and Industry interactions on issues associated with implementation of the Part 52 design cenification process. At this time, the L

information in this section is not ranked, but is valid and should be complied with (as applicable) during preparation of CDM entries.

! 6.1 Tenses The following table defines the tenses which should be used for CDM entries.

ENTRY TENSE EXAMPLE Design Description (DD) Present The valve opens when a low reactor waterlevel signal is received.

Figures and Diagrams Present The pump is powered from the Division  ;

1 Class IE bus. l l

ITAAC Table-Design --- Exactly the same as the DD. -

Commitment (DC) i ITAAC Table - Inspections, Future A valve test will be conducted using a Tests, Analyses (ITA) simulated signal.

ITAAC Table - Acceptance Present The valve opens on receipt of the low Criteria (AC) water level signal.

Interface Requirements Future There shall be three safety-related divisions of the site-specific RSW Site Parameters Present ---

J l

l l

l 23

---

______--_---___---__.-_--__------------------z-----.------_-----___----_----_

l ENTRY TENSE EXAMPLE DAC Items a) Description Optional (Future The MCR will be designed using Preferred) accepted HFE principles b) ITAAC Design Future The MCR will be designed using Commitment accepted HFE principles c) ITAAC Future An inspection will be performed ITA Entry d) ITAAC Optional Case-by-AC Entry case 6.2 Treatment of Units and Numbers Units The CDM will use the metric units defined in the SS AR for that parameter.

Numbers

1. Do not specify numerical values for any parameters that could cause unnecessary

implementation difficulties or that are likely to be changed during detailed design and construction activities. Factors to be considered when selecting numerical values are

safety significance of the parameter standard engineering practice and accepted BWR practice on use of significant digits values used in the SAR

2. All numerical values (except ASME/ Code design conditions) must incluse ranges or tolerances; e.g.,

flow rate is 2 4200 m3 hr 24

i pressure is 1280 iS% psig Such ranges or tolerances shall have a techmcaljustiGcation. It is not necessary to include this justiGcation in the CDM but it should be in the SS AR.

q

3. For building dimensions, the following approach will be used.

a. Building figures will include key dimensions (no tolerances). A statement will be 4

included in each of the building entries stating these dimensions are for reference only I l

and are SSAR information. ]

b. Critical dimensions only (e.g., shear wall thickness) will be included in the design i

description text and ITAAC. Tolerance. smust be included for these text entries.

l l

4. Rather than use non-quantified terms such as design basis wind velocity, use the actual values; e.g.., designed for a wind velocity of 300 mph.

6.3 Definitions, Usage and Standard Phrases The following is an un-ranked collection of guidelines covering preferred fonnat, usage and standard phrases. Unless stated otherwise, they are applicable to all elements of the CDM material.

1

1. Some of the standardized wording in this memorandum contains "and/or"; specific ..

applications should dictate which is correct and the appropriate word should be used.

2. Individual system Egures should not contain any Legend entries. All Legend 4

information should be accumulated in Appendix A of the CDM.

j l

i 25

T

3. The CDM will be structured with the figures located right after the design description (ext and before the ITAAC table. This arrangement is contrary to standard technical publication procedures, but'is appropriate because the figures are an' integral part of the text.

4. The correct phrasing for ASME Code Class and Seismic Category identification is:

... the pump is designed to ASME Code Class I requirements and is classified as Seismic Category I ... (II)."

5. There are no general statements in the Introduction and Definition sections of the CDM on accuracy / tolerances for numerical values. This issues needs to be addressed by each system on a system-by-system basis.

6. The following strategy is being used for dimensions of the buildings. Each building "

entry in Section 2.0 should clearly state that the dimensions identified in the figures for that building are provided for information only and should not be construed as part of the CDM material. The design description text for each building will identify critical building dimensions (with tolerances). These text entries will be considered CDM commitments and subject to ITAAC treatment.

7. If more than one figure is included for any system, the figures should be numbered with lower-case subscripts. For example, the RHR figures are numbered 2.4.la, 2,4.lb, and 2.4.1c. .

8. it is not acceptable to have a CDM design description entry where no corresponding ITAAC table entry is planned (some exceptions).

I 26

9.- It is important that the left-hand column of the ITAAC table be a statement of what the design is or does, it is not appropriate that this column be used to restate the system design basis or higher level goveming requirements. For example,in an ECCS  ;

i ITAAC, it is not appropriate for the left hand column entry to be: " System flow rate is sufficient to ensure the post-LOCA fuel clad temperatures remain within Appendix K limits." A more appropriate entry would be: " System flow rate when injecting into the reactor is equal to or greater than 7001/ min." The design basis accident analyses presented in the SS AR demonstrate that this pump flow rate will result in compliance with Appendix K requirements. This justification does not have to be repeated in the CDM.

10. For systems with more than one figure, general references to the figure in the design description text should call out all figures. Example: " Figure 2.4.la,2.4.lb, and 2.4.lc show the basic configuration of the RHR system."

11. When discussing mechanical systems, the correct phrases are " physical separation,"

. . are physically separated."

12. If a table is included in the design description text, treat it as an imbedded table without a table number Providing table numbers for these text entries would interfere with the ITAAC table numbering scheme that has been adopted.

13. Do not identify system modes on the figures.

14. Certain terms should not be used in fomtal submittal of design certification material to the NRC. These terms include design acceptance criteria (DAC), and Tier 1/rier 2.-

15. Any discussion of infom1ation availability in the main control room should use the phrase, " exists" or "can be retrieved." This is necessary because in practice most data q

27 I

l

will be stored electronically in large data pools that will be accessed by the operators on an as-needed basis.

16. When preparing the frAAC table entries, there is often an option of putting material in either the left-hand or right-hand column. For example, a pump flow rate can be included in either the left- or right-hand column. When this choice exists, the preferred approach is to put the detailed material in the right-hand column rather than the left-hand column. This helps ensure that the acceptance criteria is detailed and precise and ,

thus minimize potential ambiguities regarding implementation of the commitment.

However, it is important that this process does not result in the left-hand column being reduced to a commitment to a broad design basis or higher level design requirement.

4-

17. The design description text (in general) should not have any paragraph headings other than the introductory heading. For particularly complex systems such as the Nuclear Boiler System, sub-headings can be used for major groups of equipment in the system.

18. Quality Groups are not discussed in the CDM. Code Class is identified on figures and need not be duplicated in the design description text except for special cases such as ISLOCA commitments.

19. All specifications of pressure (other than differential pressure) should identify gauge or absolute.

^

20. When identifying interfacing systems, the formal system name as defmed in the CDM -

table of contents should be used.

21. It is not appropriate in the CDM to discuss the internal details of the equipment. For ,

example,it is not necessary in the Nuclear Boiler System to discuss the design of the main steam isolation valves in terms of how the springs, main disc, or pilot disc operate in relationship to each other.

28

22. CDM treatment of a particular piece of equipment should be handled in the Section 2.0 . l entry for the system to which the equipment is formally assigned via the GE MPL (Exceptions are permitted but should be deliberate.) i

23. The numbering of electrical Divisions should use Roman numerals. Mechanical division use A, B, C.

24. Avoid the use of the following words: " loops," " subsystems," " train." Where possible, use the word," divisions." Avoid the use of the word," functional." Use the i term, " inspections." rather than " visual inspections." Do not specify test type; i.e., .

l

" functional hydraulic. etc.," simply say, "a test will be performed."

^

25. Avoid use of the words, " determine" and "make a determination." This is an NRC request and has been made because the word " determine" has broad licensing implications not relevant to the CDM.

26. The correct term is " seismic interface restraint."

27. Official system names always start with capital letters.

28. Do not use mathematical symbols in text. For example, use the words " equal to or greater than" rather than the symbol for this.

29. Sub-paragraphs in ITAAC table entries should use sub-paragraph headings with small letters.

30. Most ABWR systems have multiple, direct or indirect connections with many other systems. For example, a typical hydraulic system has interfaces with power distribution systems, I&C systems, pneumatic systems, HVAC, flushing systems, radiation monitoring, etc. The CDM entries should not routinely identify all of these interfaces because it would not be useful and would add a lot of unnecesary detail to_

29 1

the CDM. However,in cases where there is a particularly significant interface, it may be appropriate to identify the interface in the system design description and confinn its existence via an ITAAC. For example, the RHR system figure shows the special connection to the plant fire protection system, and the existence of this connection will be verified via the RHR configuration ITAAC.

31. Overriding ofinitiation signals such as LOCA, ATWS, isolation, etc., should be addressed in the system whose performance requires the override. For example, the Flammability Control System should address the override of the isolation valve closure signal that is necessary to support system initiation.

32, Do not identify voltage levels in any of the AC or DC power supply systems.

33. Do not use the word," consumer" when discussing the multiple users of supporting auxiliary systems such as cooling systems, power supply systems.

34. Use the term " control blades," not " control rods."

35. Avoid uses of equipment identifiers such as SLU, TLU, etc. Instead, use a functional description.

36. When using the term " isolation," it should be defined. For example,is it containment isclation, isolation between systems, other? In addition, avoid the use of the word "iscution" if what is really meant is valve closure. When performing system logic tests using simulated input, the term " simulated actuation signals" should be used.

37. To the extent practical the middle column of the ITAAC table shall always start with I the words either, " Inspections,"" Tests," or " Analyses." It is important to use the term "as-built" when appropriate.

30 l

38. The system figures in the CDM should not include any logic descriptions. For example, there should be no definition of which signals cause isolation valves to close.

39. The term " sensors" is preferred rather than " transmitters."

40. Valve operators using gas-motive power should use the term " pneumatic" rather than

" air" or " nitrogen." The valve legends in CDM Appendix 'A will show P as the motive power.

41. The plural of electrical bus is spelled " busses."

42. Avoid any descriptive material on setpoints. For example, say, the valve closes on 1

receipt of high-temperature signal." and do not use such terms as "high-high temperature signal."

43. All design description and ITAAC table entries should use full sentences.

44. Care should be taken to differentiate between formal plant design basis conditions and the various beyond-design basis evaluations presented in the SSAR (ATWS, station blackout, severe accidents). Statements that certain aspects of the plant are designed for the beyond design-basis conditions should be avoided.

45. Avoid the use of percentage capacity figures. Just say what the capacity is rather than i quantifying it as a percentage.

46. Legalinterpretation: Adding items to the actual plant that are not identified in the CDM is acceptable because the CDM is not seen as being exclusive. That is, the CDM is not inclusive.

31

47. - Avoid use of terms such as " adequate,"" approved," " acceptable " proper,"

" appropriate,"" reasonable," and " sufficient." These terms usually have no commo1 definition and are subject to varying interpretations. Instead, use objective o criteria that are not subject to different interpretations.

, 48.

Avoid use of phrases such as " applicable codes and standards," " applicable requirements,"" applicable regulatory requirements," or " accepted industry prac These phrases do not provide any identification of which codes, requirements, or j

practices should be applied. In fact, use of these phrases may subject a future COL licensee to codes, requirements, or practices that are not even in existence to Instead, either specific sections of a code or requirements should be referenced, o i

specific provisions in codes, requirements, or practices should be paraphrased.

, 49.

With the exception of referenecs to the ASME Code, avoid general reterences to and standards such as references to the "ACI" or "AISC-123." Suc the entire code or standard applicable to the COL, and any nonconforman provision of such a code or standard should be a basis for withholding authorization load fuel or a request for a hearing prior to fuel load. Instead, either specific sec a code or standards should be referenced, or specific provisions in a code or standard should be paraphrased. When referencing a code or standard in the CDM, the edit or year should not be specified, and any edition or version may be utilized to sa requirements in the CDM. The SSAR may identify a specific edition or version of a Code, Standard, or Regulatory Guide that is referenced more generally in the CDM.

An applicant or licensee may utilize a different edition or version only if the applic licensee has complied with the applicable process for making changes in SSAR information.

32-

50. Avoid use of tenns such as "all," "every " "cach," " full." and "completc," unless the term is used in a very narrow or specific sense: e.g., "all three pumps," or "cach of the three trains " These tenns usually are unnecessary and do not allow future flexibility for any exceptions.

51. Unless a clear reference is provided, avoid use of tenus such as "as needed",

" required,"" selected," or "specified." Such tenns do not identify what is needed or-required and are subject to different interpretations.

52. In general, statements should be affirmative rather than negative in nature; e.g.,

statements should identify or describe the functions or components in a system, and 4

should not identify or describe what a system is not designed to do or components the -l system does not have.

53. In general, avoid use of terms that are pennissive in nature; e.g., tenns such as i

"should" or "may." Instead, the CDM should be reserved for mandatory i i

requirements.

54. In general, avoid use of tenns such as " including,"" include," and " included." Such terms leave the exact list of requirements open-ended. Instead, the CDM should be narrowed to a list of the important items or criteria. Such a list will not,in general, prohibit a licensee from adding additional items or criteria.

55. Avoid use of relative terms such as "high," " low," " minimize," "maximizo,"

" minimal," " dry,"" optimal," or " clean," unless it is used as a part of a speedcally defined term such as " low level setpoint."

56. Avoid use of the term "important to safety" because it has no accepted definition.

Instead, the tenn " safety-related" or other defined term should be used.-

33

Y

57. System entries should be used to describe features of that system; avoid repeating descriptions of other systems. For example, isolation logic described in the LDIS should not be repeated when describing the isolation valves of a particular system.

58. Within each system entry, define all acronyms at time of first use.

59. . Avoid use of terse language that might potentially be subject to misintegretation.

Examples:

, NOT OK: The isolation valves close on high radiation level.

OK: The main steam line isolation valves close on a high radiation signal from the steam line radiation monitors.

60. When discussing control logic, use the word signal rather than just the sensed variable.

See above example on high steam line radiation.

i

61. When durations are specified, tne initial point of the duration should be identified. For example:

Correct: The isolation valve closes within 30 seconds of receipt of an isolation signal.

Incorrect: The isolation valve closes within 30 seconds.

62. The CDM design description.s should not be prescriptive in areas where technological advances or acceptable altematives are likely to exist in the future. For such areas, the design description should identify the performance criteria that must be satisfied, rather than the specific feature that will be used to satisfy the criteria. Examples include:

defining the feedwater pump motive power that would preclude choosing either steam or adjustable speed driver.

34 _

d 1

- Specifying a traveling in-core probe (TIP) based neutron monitoring system that would preclude future implementation of more advanced concepts.

63. Data on plant operating conditions will (in most cases) be in the form of a digitized da*a pool that operating personnel will access as needed. Consequently, the tenn " display" I

should be used when referring to presentation ofinformation to the operators. In this context, terms such as " control room features,"" indicators,"" indications" should not I

be used. An example of correct usage is: " Control Room alarms, displays, and controls provided for the RilR System are defined in Section 4.2.1."

64. The term " design basis accident" should be used rather than the simple term -l

" accident". The latter is all inclusive and could be construed as including beyond-L design-basis events such as severe accidents and station blackout.

65. The correct tenninology for divisional identifiers is:

Divisions Power I II III IV Mechanical A B C D Instrumentation and I II III IV q Control l

66. Exercise care when using the word associated. This word has special meaning when applied to electrical circuits and in an electrical context should only be used when j specifically referring to circuits formally identified as " associated". When not referring to this type of circuit, instead of a term such as " including associated instrumentation -

and controls", it is better to say " including connected instrumentation and controls".

67. The term main control room should be used rather than control room.

35

d

68. Avoid using the QC/QA processes as a basis for fuel load justification; successful

. completion of the ITAAC is the only basis NRC has for authorizing fuel loading. An ITAAC may be based on use of site records; the preferred approach is to refer to this material as "The records of the as-built facility".

69. When discussing the stmeture of I&C controls, the term " architecture" should be used.

70. If a single figure is to be used for a system with multiple divisions, the figure should be

, identified as " representative". i.e.

This Figure is representative of four Divisions.

71. The term fail-safe should not be used as it is undefinable. Rather the test (or ITAAC left column entry) should state what the design is. For example:

On loss of power supply or open circuit failure, the system will go to a tripped condition.

Note: The ABWR CDM contains a few exceptions to this item but these exceptions include a precise definition of the failure mode and the consequences.

72. In the ITAAC tables, it will be assumed that tests specified in the ITA colunm apply to as-built (i.e. as-installed) components, unless that ITA explicitly states to the contrary.

Consequently, it is important to identify cases in which either shop tests or special qualification tests are intended.

73. In general, it is not necessary to identify that signals are being transmitted via the multiplexing systems. The system providing the signals should be identified; e.g. the -

Feedwater Control Sy. stem identifies that it gets water level signals from the Nuclear f

Boiler System. It does not state that these signals are transmitted by the Non-Essential Multiplexing System.

36

= " YF

74. Not Used.

75. Design description entries on location of equipment is intended to address the main elements of the system. It is not intended to be a detailed listing of the location of all system components.

76. In fonnal CDM submittals, do not use the tenn DAC; the preferred approach is (for example):

Certified Design Material addressing Radiation Protection.

77. Numerical values of ASME design conditions such as pressure, temperature do not need tolerances. It is acceptable (for example) to state:

The RHR pump design pressure is 500 psig.

78. Reserve the tenn " interface" for those situations when Part 52 specifically calls for interface requirements.

79. Use the term "as-built" rather than "as installed" except in specific cases when there is a specific need to use the phrase "as-installed."

80. The ITA column of the ITAAC Table should use the following action words:

Tests - conducted Inspections -conducted Analyses _- performed.

37

. . . - - - . ~

81. The Design Commitment colunm of the basic configuration ITAAC entry (usually the first entry is the table) should be structured as follows:

a) For configuration checks based on a figure, use the following approach:

The basic configuration of the RilR System is shown in Figures 2.4.la,2.4.lb, 2.4. lc, and 2.4.ld, b) For configuration checks based on entries in the system DD, use the following approach:

The equipment comprising the LDS is defined in Section 2.4.3.

82. The Safety System Logic and Control System, while not a formal ABWR system, will be treated as such stylistically, i.e.,it will be referred to as the SSLC.

83. Interfacing systems shown on the individual system diagrams will not identify the piping Code Class. If a significant length ofinterfacing system piping is shown on a system figure (which should not be the case usually), the co Tect Code Class legend will be used for this piping.

84. The term "wetwell" should be used rather than " suppression chamber." ' Suppression pool is appropriate.

85. . Interface requirements should use the future tense. They are requirements and the word "shall" should be used.

86. The Control Interface Diagnuns (CIDs) should not include any power supply systems in the interface boxes.

87, in general, logic tests should be performed using simulated signals (for input .

parameters).

38

88. " Control Blades" is preferred over " Control Rods".

89. " Reactor shield wall" should be used rather than " biological shield wall".

90. Use "startup" rather than " start-up".

91. Rules for use of acronyms:

in text, define at first use in each system entry all acronyms to be defined in Appendix B of the CDM if only used in Tables and Figures,it is acceptable to rely on Appendix B for definition (i.e., do not define).

92. Describe logic in the system that actually performs the logic (as defined in the SS AR IBD). In general SSLC does not own any logic (some exceptions) and only performs a processing function for other systems. Consequently, most logic is not described in SSLC. (Exceptions: part of the ATWS logic assigned to SSLC).

93. Use upper case for official CDM system names (e.g. Control Rod Drive System) but lower case for systems below this level (e.g., control rod drive hydraulic system). Do not use the term subsystem.

94. Use the word " operates" other than " functions" or " works". Basis: operates is defined in CDM 1.1.

95. Any tests called for in the middle column of the ITAAC table will be assumed to be in-situ unless specifically identifies as factory tests, laboratory tests, . . . .

96. Use the term " design basis accident" rather than the less precise " accident" (unless discussing severe accidents in which can use the term "beyond design basis accident").

4 39 l

-1

97. Interface requirements relating to site compliance with CDM Section 5.0 Site Parameters are not necessary. Basis: COL application activity.

98. ABWR 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> walk-away capability is a GE product enhancement commitment and not needed for regulatory compliance. Consequently, it is not necessary to address this issue in the CDM.

99. Logic equipment " sends" signals rather than " issues" them.

100. All Instrumentation and Control (I&C) systems (with a few exceptions) should have a CID.

101. For electrical and I&C systems, Class IE can be used instead of safety-related. Basis:

terms are equivalent.

102. Divisions is upper case (Divisions) when referring to a specific division. Use lower case for a general discussion of divisions.

103. A simulated signal means going to the transmitter / device and inserting an electrical signal.

104. For electrical and I&C systems, Class IE also means Seismic Category I; there is no need to restate the latter if a system is identified as Class IE.

i 105. The CIDs in the CDM should be coordinated. If system x says a signalis sent to system y, then system y should show it as input and state what use is made of it.-

V 106. Accessibility for ISIis not a CDM topic. Basis: as-procured issue.

t I

107. Any use of standardized ITAAC table entries must be supported by DD entries corresponding to the DC of the ITAAC entry.

40

108. Use the term Turbine Main Stop Valve for the turbine stop valves.

109. Signal names identified in the CID should (if possible) be the same as the signal name on the system IBD in the SSAR.

I10. For mechanical / fluid systems, the basic configuration check using system figures should include the CID.

I11. The CDM will use metric units and will achieve consistency with the NRC metrication policy by using the units for each parameter that are defined in the SS AR.

I 12. Nuclear fuel, control blades and channels will not have any ITAAC entrics. a 113. Remote Shutdown System (RSS) interfaces will be identified in each system that has l control / display interfaces with the RSS.

7.0 REGULATORY AGREEMENTS There is no Section 7.0 in the CDM document. This section of this memorandum documents understandings and agreements that have been reached between Industry and NRC.

In many cases, the currently proposed stmeture of the ABWR CDM reflects agreements and 1

understandings that have been reached with the NRC. These agreements and understandings have resulted from a long series of intensive (and public) interactions involving NRC, GE, other -

vendors, and industry groups. These types ofinteractions are a necessary part of implementing -

new regulatory processes for which the Regulations do not provide detailed, explicit guidance on form, scope and content. This section of the memorandum documents the agreed-to approache's that have the most influence on the structure of the CDM.

41

7.1 Generic Issues Generic issues are technical subjects which are relevant to more than one system. Generic issues -

can fall into several categories, and examples are:

CATEGORY EXAMPLES OF GENERIC ISSUES Construction processes and Welding, concrete properties, painting.

installation.

Procurement Equipment qualification, motor-operated valve testing.

Plant testing Instmmentation setpoints and accuracy, motor-operated valve testing.

The extent to which generic subjects should be addressed in the CDM and the methods (if any) for treating these issues have been extensively discussed by all parties. The following summarizes what GE believes the NRC has agreed to as an acceptable treatment of generic issues.

1. Only the following generic subjects will be addressed in the CDM; other detailed construction, installation and testing processes will be verified by the existing QA/QC programs deriving from 10 CFR Part 50, Appendix B.

a. Welding I' b. Equipment qualification i

c. Instrumentation setpoints I

d. Motor-operated valves l e. Electricalindependence L

f. Electromagnetic interference f

g. Dynamic qualification 42 l

o

2. Table 7.1 summarizes the methods by which these issues will be handled in the CDM.

Unless stated otherwise, this table only applies to safety-related equipment. The table includes a brief summary of the supporting entries that are required in various parts of the CDM and in the SS AR. .

3. The CDM no longer contains any separate sections specifically addressing generic items.

The generic issues that NRC has agreed should receive CDM treatment are now covered by various entries in Sections 1.0,2.0 and 3.0.

7.2 Miscellaneous Regulatory Agreements

1. Severe accident treatment in the CDM will be limited to the ABWR features which have been specil'ically added as a result of severt accident consideration; i.e.,

AC independent water addition containment vent lower drywell flooders lower drywell basaltic concrete The existence of these features will be identified in the appropriate system design description and their existence confirmed via the standard configuration ITAAC. There will be no (or very few) perfonnance verification ITAAC.

2. The following guidelines should be used when deciding which alarm functions should be included in a system design description and in the associated control room ITAAC,

a. Assume the Main Control Room design /Iluman Factors Engineering DAC will handle ahtrms identified in SSAR Chapter 18.f as an integral part of operator implementation of the EPG. Do not include these alarms in individual system entries.

43

Table 7.1. CDM TREATMENT OF GENERIC ISSUES NECESSARY SUPPORTING ENTRIES

SUMMARY

OF SECTION 2 SYSTEM DD ITAAC SSAR ISSUE APPROACII SECTION 1 identify CC 1,2,3 None Discussion of weld

• Welding - ASME Tie to configuration Configuration definition welding boundaries testing and acceptance Code Class I,2,3 ITAAC criteria (and some NNS) entry pressure boundary Equipment qualification (EQ) None Discussion of EQ Tie to configuration Configuration Identify items to be A) Electricalin definition EQ entry qualified methodology and EQ harsh ITAAC conditions environment Section 3 Include as a DAC Discussion of Cover under I&C None B) Instmments - Cover in scrpe entry applicable codes and f and controls DAC as part of standards hardware statement for DAC procurement Section 3 Include as a DAC Discussion of setpoint

- Instrument Cover under I&C None Cover in scope entry methodology setpoints/ accuracy DAC as a part of I&C testing statement for DAC A) Identify Class IE A) None A, Il

- Motor-operated A) Pre-installation A) Configuration definition MOV MOV Discussion of valve valves (Letter 89- testing- tie to testing methods and 10 issues) - configuration entry acceptance criteria -

ITAAC B) Covered by A B) Standard testing B) In-situ test. B) None ITAAC entry for System-by-system treatment

.MOV W

m

Table 7.1. CDM TREATMENT OF GENERIC ISSUES (CONTINUED)

NECESSARY SUPPORTING ENTRIES

SUMMARY

OF SECTION 2 ISSUE APPROACII SECTION 1 SYSTEM DD ITAAC SSAR

• Electrical llandle in electrical None Separation statements Standard elect +al Discussion of the independence systems separation entry design and applicable (including codes and standards separation)

• Electromagnetic Cover under I&C None Section 3 Include as a DAC Discussion of codes interference (I&C DAC as part of I&C Coverin scope entry and standards issue) designhesting statement for the DAC

- Dynamic Tie to configuration Configuration ITAAC Identify Seismic None Discussion of qualification ITAAC dynamic qualification Category I methodology and u entry acceptance entena

_ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ - _ = - -

b. Add to the system design description and ITAAC any other alarms that are considered important. Since alarms are not safety-related and are not relied upon for any safety related operator actions, there will be only a very few alamis added beyond those already covered in the HFE DAC.

c. Alanns related to maintaining systems in standby mode are not addressed in the CDM.

Example: The ECCS pump discha ge low pressure alarm aimed at alerting the operator to problems with the pipe keep-fill system.

3. In general, it is not necessary to identify ASME Code design conditions (pressure, temperature) in a system design description. Ilowever, where special specific design commitments have been made,it may be appropriate to identify these design conditions. An example is the higher design pressure commitments that have been made in response to intersystem loss of-coolant accident requirements (ISLOCA) on the RHR low pressure piping.

4. The following guidelines apply to treatment of piping relief valves in the CDM:

a.

CDM 1 treatment is not required for piping pressure relief valves associated with thermal expansion and anticipated valve leakages.

b. If relief valves have been added to address liigh/ Low pressure interface issues, they-should be treated in the CDM. (Not currently applicable to ABWR.)

Provided

5. ITAAC to address the issue of pump run-out protection are not necessary. Basis:

by other ITAAC and there are many ways of achieving protection.

6. When developing interface items for Section 4.0, it is not necessary to include PRA-based ;

requirements on the out-of-scope systems. This is acceptable to NRC because the COL applicant will be required to update the PRA to reflect the site-specific design details.

46

Furthermore, interface requirements are limited to functions and do not include I&C logic, etc.

7. The following table summarizes the extent to which Equipment Qualification is to be treated in CDM consistent with the seguirements of 10 CFR Part 50.49 Equipment Environment CDM Trentment Electrical Harsh Address via configuration Mechanical Harsh Do not address Electrical Mild Do not address Mechanical Mild Do not address I&C Harsh Address in I&C DAC I&C Mild Address in the I&C DAC

8. Design features associated with system flushing are not CDM material.

9. Not used

10. Individual system descriptions should not address shielding. To the extent this issue is addressed in the CDM, it is covered by the Radiation Protection DAC.

I1. CDM treatment of pumps is limited to the hydraulic performance items in each of the systems with pumps. Issues such as bearings or vibrations are considered SSAR items -

and/or are covered by Technical Specifications testing.

47

12. The failure modes of pneumatic valves should only be addressed in the CDM (Design Description and ITAAC) if the failure mode is important to accomplish the safety function.

13. The CDM should identify the limiting break size associated with rupture of high energy lines outside the containment. This does not include instmment lines and other small lin will only release limited amounts of fluid outside the containment.

14. The issue of site-specific external threats such as toxic gases, ammunition trains, etc., needs to be addressed in Section 4.0, Interface Requirements. The strategy will be to state that if the hazard exists, then a sensor and appropriate system design features will be provided.

15. Not used

16. It is not necessary for the CDM to specifically verify thermal overload protection on MOV.

This is done indirectly by other valve testing.

16. Confirmation of HVAC perfomiance may involve testing and observation of pressure, temperature and humidity conditions in the buildings. There is no requirement to perform analyses aimed at adjusting observed performance to the performance expected when worst-case weather and heat-load conditions are present. Basis: HVAC equipment will be in operation for extended periods prior to fuel load and performance shortcomings will be obvious. Furthermore, the HVAC sections are not required to commit to (and test for) specific volumetric flow rates. Bases: Covered by the testing described above.

17. The CDM need net address the following filter-related itents:

a. Char .ml filter thickness

b. Filter performance 48

18. Many safety related systems are actuated on the basis ofinput from several different sensed variables; this input is often subject to logic processing by another system. For example, the A'lWS signal that auto initiates the Standby Liquid Control System (SLCS) nvolves input-of neutron flux, reactor pressure and reactor water level; and these signals are processed in the Recirculation Flow Control System which then sends an ATWS signal to the SLCS and other systems. When referring to actuation signals that are in this category, preferred practice is to avoid a detailed discussion of the various inputs For example, the Standby Liquid Control System would state that automatic actuation rcurs on receipt of an ATWS signal rather than listing the conditions of flux, pressure and level that generate the signal. The system doing the logic processing (in this case, the Recirculvion Flow Control) will include a description of the sensed parameters and logic.

19. The following guidelines should be used when considering the CDM treatment ofinterlocks:

a. Do not (in general) address interlocks aimed specifically at equipment protection.

b. Interlocks aimed at preventing an event are candidates for the CDM and should be considered within the context of CDM selection criteria. For example,The RHR System does address the interlock which closes the injection valve if the reactor pressure increases. This is an ISLOCA protection feature,

c. Interlocks / logic that are an integral part of system performance during design basis events should be considered.

d. Treatment of bypasses around equipment protection interlocks: Some equipment protection features such as the RIIR injection valve thermal overload devices have bypass provisions that are operative during an accident. On the basis of 19m a. above, these bypass features will not be addressed in the CDM.

l 49

20. Unless stated otherwise, it is understood that check valves have no main control room indication. Those with some form ofindication should be explicitly identified.

21. All system figures must include all valves with an active safety-related function.

~

22. The approach for handling the remote shutdown system interface with other system is as follows:

4

a. Each system will add to the design description (usually in the figure) which of the system features interface with the remote shutdown system panel for control and/or monitoring of these features.

b. The remote shutdown system ITAAC will confirm that signals and features are present and can be used to control the assigned equipment.

23. Individual systems should not address the source of power to the busses to which they are connected; i.e., there should be no system discussion d off-site, on-site emergency diesels, etc. Each system should simply identify the busses to which they are connected. <

24. For mechanical systems is not acceptable for the Acceptance Criteria to be based on the existence of the ASME N stamp and associated documentation.

25. In general, there will be no ITAAC entries related to ISI access provisions. This issue is equipment-dependent and not related to safety. Exceptions would be cases where very specific design features have been provided to support ISI requirements in critical areas. The CDM entries should discuss the more important provisions for allowing the performance of.

in-service tests; e.g., full flow test loops.

26. Individual system CDM entries should pick up system-level initiation switches; e.g., testing and system-levelinitiation.

50

27. Nuclear fuel, control blades, and fuel channels will be treated in the CDM as follows:

a.

Section 2.0 will contain a sununary description of the design features and principal design bases.

b. No ITAAC table entries are necessary.

The ratior, ale for this approach is that a CDM commitment to design features coupled with a detailed description in the SSAR provides an envelope for fuel procurement by the COL applicant that will assure compatibility with the certified design.

28.

DO not include any local controls in the CDM unless a very special system-unique situation exists.

29.

The following summarizes the relationship between Techaical Specifications and ITAAC.

Since fuel loading cannot proceed until the plant is in compliance with the operability provisions of the Technical Specifications, it could be argued that any testing performed as part of Technical Specifications need not be duplicated in ITAAC. This is not an acceptable approach, and key safety features of ABWR systems need ITAAC entries independent of whether they are covered in Technical Specifications. For example, flow rates of ECCS pumps are addressed in the Technical Specifications but also must have ITAAC aimed at confirming satisfactory performance.

There are exceptions to this guideline. The need for plant compliance with Technical Specifications operability requirements prior to fuel load can be used as the basis for not addressing certain operability issues separately in ITAAC. For example, it is not necessary to have an ITAAC on the issue of ECCS pump bearing vibrations. The Technical

( Specifications for this system will not be met if there is an unacceptable level of bearing vibration, thus, fuel loading will not take place until the pumps operate correctly.

I 51

30. With some exceptions (e.g., reactor pressure vessel, piping DAC), issues related to material ,

integrity are not sufficiently significant to warrant CDM treatment. (CDM hydro-tests -

address pressure integrity) f 1

31. In general, the CDM for buildings need not discuss wall / column thickness. Instead, licensee calculation / analyses on thickness will be subject to NRC audit.

32. The recently passed Law related to Part 52 requires Emergency Planning to be addressed in ITAAC. For design certification, this treatment will be limited to the design features that are included in the plant to support emergency planning. These design features include TSC, OSC, and communication circuits.

33a. System figures will not identify the fail-open, fail-close characteristics of pneumatic valves.

33b. Safety Classes per the NRC Regulatory Guide are not addressed in the CDM

34. The following summarizes the current policy on CDM treatment of programmatic issues such as the Design Reliability Assurance Program (D-RAP) and the initial tests program (ITP). Only the ITP will be addressed and only a design description entry is required, i.e., no ITAAC. See SSAR Section 14.3 for further discussion.

35. The following table summarizes the overall approach to CDM treatment of separation and independence in terms of ITAAC entrie.sto verify physical separation and independence.

System Type Physical Separation Independence.

Mechanical, Fluid, Standardized entry - Table 2.1.3.1, Standardized entry -Table Hydraulic (including power Supplement 5 2.1.3.1, Supplement 4 '

supplies to components)

Attached standardized entry Attached standardized entry Electrical Power Supply Systems * (AC and DC)

Attached standardized entry Instmmentation and Control Attached standardized entry Structural ITAAC for the buildings will be N/A used to verify necessary divisionality

• For Class 1E Systems and non-Class IE Systems to which the requirements apply; e.g., off. site power sources.

52

ill!llIill4JI!?ll \llJlI1i lli lA n

m e ioE t

I t

s a s!

y r a a s a c ES pl irEt.n l

eCt s ci e s

l a

s l ael se c e ne s m a ip a C .i yt wrloCu s

q hp be o ne s e i

r e e ht i

t n si eE t r ,t s ah C ilyhe mi e x r

a n t

1 e t t epe s s a c n n s yn s e el n oi S olat wC a t s ts i e ni t

p i s e t t

a c ib o l

e x r o s s n c e e s yt c l d i h sd A a n l a Pi. x n n

g u icr e a s

n n n n s i

s o c oioo t

t i s s hlee s a is i t l ei v a

i m t t e i v l v

i c t e AD i

I n r odid s i o i r s t y c

l e S l

a b

E o l I r t r ~

f o n l a

e o n l l

C g . i

- c n mie e s w e d n

t s t mE I m

d a ye si t s e n s St a s t e t i at a ys p n s y a l e e g CS in n l

- d m a o d n u n di i s e A

I r vi l

l r t s oi v a f

o n t s

r pD t

s

- y I s e yE in r d lt s t

n n T iu bI d s a

E a s b- e s e y n s t a h eh .

d e

l p o a cl uC f t

t d

z p i

t c

ed ht n e ome u o n o n or n s m i

d e -

r S p nc o i ofr a r s t d

n e I n oe yn cys sbl i e -

- w t i p

t a o sl o ei l

n s" .v e i S P Twi I Db l

a D-I s

n

,. ,it o .

m s s n e niev t

n t

sdiDp oim -

e ye s di i t

mSi vi vEu oDI q i

r s e m pE s E sI a I m l es sCs s i

o C c nl el a na n eCeC L i

g s

d n n w-n e e peb e et o ne D h de w t t dd I

nnib enn a a 1

w ll  ! Ill l!ll1ll!!!l1 il\lLllli l!iIl-L

36. Do not address in the CDM the feature of valve operator thennal overload and th'eir bypass during LOCA conditions. Basis: This feature has been particularly troublesome in the field and is likely to change in the future.

37. Inspections, tests and analyses aimed at checking Seismic II-over-I need not be addressed in the CDM unless there is a special case to be addressed in a particular system. Basis: This-issue does not merit CDM treatment on the basis that the adequacy of the design is heavily tied to the as-built, as-procured characteristics of the equipment which makes definition of CDM acceptance criteria difficult. ,

38. Some PRA studies are dependent upon an assessment of the ability of certain key structures, systems and components (SSC) to function during seismic events that are more severe than the design basis SSE. It has been agreed that SCC seismic margin beyond the design basis is not a subject that needs to be treated in the CDM. Basis: If equipment is designed and qualified for the seismic design basis, the design process is such that the added capability assumed in the PRA willinherently be present. Consequently, no specific CDM treatment is required.

39. The safety-related Reactor Protection System (RPS) utilizes input from several safety-related instruments located in the non-Seismic Category I Turbine Building. It is not necessary to have a specific ITAAC entry aimed at confirming these instruments exist. Basis:

1) The instruments are qualified for their environment

2) Most likely failure mode is fail-safe.

3) The probability of there being a failure in enough of the fo'ur channels to give a'.

non-fail-safe situation is very low.

4) There is the manual scram backup in the event of non-fail-safe failures.

54

t

40. - All_microprocessed based I&C systems that are either safety related'or of safety significance,~

will have'a basic configuration ITAAC similar to the LDIS example (ITAAC #1). This configuration check is based on a reference to the section rather than the system figure.

41. The CDM will not define the feedwater pumping system motive power. Basis: not necessary to define this in the CDM and it retains flexibility for applicants to select from several acceptable altematives.

D

42. Some I&C systems list (in either the design description or figures) interfacing systems. It is not necessary to have an ITAAC entry specifically to address these interfaces. It is considered covered by the configuration ITAAC.

43. The CDM will not address the issue of recording of data.

44. Issues covered by any of the Section 3 DAC entries do not need to be repeated in the individual systems. For example, the I&C DAC will address setpoint methodology and this issue will not be discussed in the many systems that have safety-related setpoints.

45. For multichannel I&C systems, the CDM will not address the reliability ofinadvertent actuation. For example, the RPS ITAAC does not include a test to show that if one division of input channels reaches a trip condition. RPS trip does not occur. Basis: not a safety issue.

46. When a design description identifies that signals are sent to an interfacing system, there will i

be no discussion of what the interfacing system does with the signal. If CDM treatment is warranted, it will be handled in the system entry for the interfacing system. <

47. The following table summarizes the intent to which valve and pump testing will be addressed -

in the CDM.

l 55 i

Type of Valve CDM Treatment MOV Covered by a combination of; a) Configuration check b) Line item entry in each system with safety-related active valves Solenoid Valves Not specifically addressed. Covered by performance of the controlled equipment. EQ picked up by the EQ on the controlled equipment.

Additionally, not an historical source of problems.

Pneumatic Check the failure mode ifit is of safety significance.

Check Valve Line item entry in each system.

Pumps Functional testing only; no 80-10 or equivalent testing in the CDM.

48. One criteria for selecting CDM entries is that a particular aspect of the design has historically been troublesome and should this be elevated to the CDM. This information is not a primary selection criteria but will only be applied in borderline cases.

49. Pressure integrity testing of HVAC duct work is not required. Basis: Only RCPB testing ties back directly to a GDC. Also, the Control Room Habitability Area HVAC leak test covers the integrity of this system.

50. The CDM does not address local controls and displays. (A few exceptions)

51. Site parameters do not require either:

a) ITAAC, or, ,

b) Verification via COL Action Items Basis: Covered by Part 52 processes.

52. Site parameter listing in the CDM does not need to include a definition of aircraft crash. (The SSAR must contain a justification that the design basis tornado missile bounds the General Aviation crash applicable to the site).

56 l

+ , , ... .-. ~ . .-

I

.1 ,

53. Structural capability of Seismic Category I structures will be addressed by providing:

al- A summary in the design description of the design basis loading condition b) An ITAAC entry perthe attached Reactor Building exaniple.

c) SS AR material defining the contents if the analysis report.

54. No CDM figures are required for either the tmbine or radwaste buildings. Basis: not required for safety finding and likely to dependent upon as-procured equipment..

55. For non-safety-related control systems such as the Feedwater Control System,it is not .

necessary in the CDM to specify the number of processed channels. A commitment to .

redundancy is required.

56. The SSLC CDM entry will address all bypass and automatic, internal self-testability. ,

57. Mechanical systems designed to ASME Code Section III will no.1 have a verifying ITAAC ,

. based on the presence of an N stamp. Basis: the N stamp results from implementation of a program and does not involve an inspection or test of the as-built equipment.

57

l l

l l

Example ofITAAC Entry for Structural l Capability of Seismic Category I Structure Design Commitment Inspections, Tests, Analysis Acceptance Criteria The R/B is able to withstand the A stmetural analysis will be performed which A stmetural analysis report exists which concludes ,

structural design basis loads as reconciles the as-built data with the structural that the as-built R/B is able to withstand the stmetural defined in Section 2.15.10. design basis as de5ned in Section 2.15.10. design basis loads as de5ned in Section 2.15.10.

E 9

k O ATTACHED NUMBER 1.

NOT USED

.i

.' 5 J

- i 1

.l

'l

_I 1 i

)

1 a i 1

1

. l 4

1

. 59  ;

1

' I

ABWR DESIGN CERTIELCATION CDM GUIDELINES MEMORANDUM ATTACHMENT NUMBER 2.1 h1ECHANICAL AND FLUID / HYDRAULIC SYSTEMS Contents 2.1.1 Design Description Content 2.1.1.1 Checklist 2.1.2 CDM Design Description Figures and Diagrams 2.1.2.1 Checklist 2.1.3 CDM Inspections, Tests, Analyses and Acceptance Criteria (ITAAC) Entries 2.1.3.1 Checklist l

l l

I 60 j

J Mechanical and FluidAlvdraulic Systems 2.1.1 See Section 2.2 of the memorandum for general guidance on Design Description entries.

2.1.1.1 Design Description Checklist Table 2.1.1.1 is a list of technical subjects which should be considered for CDM design description L treatment for mechanical and fluid / hydraulic systems. Which of these subjects is appropriate for f any particular system is a judgment to be made by the responsible system engineer using the l

graded approach noted elsewhere in this memorandum. To the extent practical and depending on which subjects are addressed in any system entry, the design description text for that system l should follow the sequence of subjects listed in Table 2.1.1.1. Supplements to this table provide -

examples of wording that should be followed for all systems to the extent it is applicable.

4 i-

l. -

o l

l

.)

61 f

l1

' j

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATh1ENT IN CDM SYSTEh1 DESCRIPTIONS Applicable Corresponding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1) -

• System name, scope 1 Provide for all systems having Configuration: Entry I configuration and control any CDM Design Description flydrotest: Entry 2 i

interfaces (DD) entry. Reference any Note: The CID is usually the diagram showing the figures here or under functions or relationship between safety-related systems and modes. (Including the CID SSLC.

showing key input / output

$ interfaces.,if applicable.)

• System purpose 2 Overview of system purpose as None selected for CDM treatment. -

• Safety-related or non- 4 Identify ponions of system which None. Basis: system safety-related status covered safety-related are safety-related and non-safety- by other ITAAC such as separation, Class 1E power irlated. supplies, etc.

O w

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

Applicable Corresp<mding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1)

• System modes, logic, and 3 Overview of modes of operation. System-specific material. Examples shown in performance Treat mode-by-mode. Identify Entry 3.

the signals and logic associated with system initiation iflogic is performed by the system or is perfonned by SSLC fg the g system. Include major l

performance parameters such as flow, head. Also include key l logic / interlock features meriting  !

CDM treatment. l i

System seismic 5a identify Seismic Category I None (seismic / dynamic qualification covered by classification portions of safety-related systems. configuration).

t.

t

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

Applicable Corresponding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1) l

• ASME Code Class and 5b In general, do not identify Quality None. (Welding covered by configuration.)

Quality Groups Groups in the CDM. ASME Code Class should be identified on the figure using the legend in Appendix A of the CDM. This should be referred to in the text g per Supplement 5b.

Location, layout - 6 Major location of the system None. Covered in building sections for major (usually limited to describing mechanical and Huid/ hydraulic systems.

which building it is located in).

l l

e

. _ _ _ _ _ . ____--______-______-___-.______m _2____

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

Applicable Corresponding Treatment -

Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1)

• Power supplies - 7 Identify which items receive Class item 4 physical separation and 1E power and from which electrical independence divisions. (This information should be covered on the system figure or in the text.) Include the issues ofindependence between

& IE and non-lE equipment.

Physical separation - 8 Describe the extent to which Item 5 mechanical systems mechanical divisions of safety-related equipment are physically separated. Note: The issue of electrical and instmment/ control (I&C) separation for fluid systems is handled in the electrical and I&C systems.

l l

~

"Q Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

Applicable Corresponding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.I.3.1)

Instrumentation, controls 9 For safety-related systems, the item 6 and alarms DD text should identify (as NOTE: Modify text for system-specific conditions.-

appropriate) that the main control room has the following:

a status indication for all active safety-related components

'S shown on the system figure alarms (very few in the CDM)

- manual control of active safety-related components shown on the system figure a status indications (specify) on the' condition of the automatic logic-

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATNIENT IN CDhi SYSTEh! DESCRIPTIONS (Continued)

Applicable Corresp<mding Treatment Technical Supplement

• in ITAAC (See Issue Number CD51 Treatment Table 2.1.3.1) parameter displays for all instruments shown in the system figure manual system level initiation capabMity and other manual control features in the A1CR 10 The system interfaces with the Item 7 remote shutdown panel should be identified. (Operation from the panel is discussed elsewlere.)

+

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

Applicable Corresponding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1)

Equipment Qualification 1I State which safety-related None (covered by configuration)

! electrical equipment is qualified for a harsh environment. (An -

option is to address this issue in the system figure.)

Motor-operated valves 12 Identify which system MOVs item 8. This is the in-situ valve testing; pre-(MOV) have safety-related active installation testing is covered under configuration.

functions.

Check Valves (CVs) 15 Identify which system CVs have ite m 1 I safety-related functions.

l l

Pneumatic valves 14 Address the failure mode of any item 10 valve where this failure mode is 1

important to safety. l

Table 2.1.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRII'TIONS (Continued)

Applicable Corresponding Treatment Technical Supplement

• in ITAAC (See Issue Number CDM Treatment Table 2.1.3.1)

Special features 13a Describe any special features of Case-by-case. ITAAC usually necessary.

-and the system that need to be (ISLOCA does not require ITAAC. Basis:

13b addressed in the CDM. Of note addressed in piping DAC.)

is the need to address piping system design pressure commitments for ISLOCA. See

@ Supplement 16.

In addition, systems which are panially or completely out of scope, the design description should include a discussion of the interface requirements called for by Pan 52. (This information also should be discussed in Section 4.)

• Supplements to this table provide examples of wording for these CDM DD entries.

. ~ . _ -~ -. , . _ - . . . _

NOTE .,

The following supplements to Table 2.1.1.1 are examples 2nly of design description entries for various subjects.

These examples should be used to the extent applicable, but in many cases will require system-specific modification.

Furthermore, not all systems will require design description entries for each of the technical subjects covered in Table 2.1.1.1 and its supplements.

.h

.i

.l 1

1 70 l

\

4 4

i l

Table 2.1.1.1. SUPPLEMENT NUMBER 1 l

l TECHNICAL ISSUE I System name, scope, configuration and control interfaces.  ;

Note: Control interfaces only required for safety-related ESF systems.

EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT The Residual Heat Removal (RHR) System has three separate divisions. The major functions of ,

the RHR System are:

(1) Containment heat removal.

(2) Reactor decay heat removal.

(3) Emergency reactor vessel level makeup and (4) Augmented fuel pool cooling.

Figures 2.4.1a,2.4.1b, and 2.4.lc show the basic system configuration and scope. Figure 2.4.1d shows the RHR System control interfaces.

TYPICAL REFERENCE TO THE CONTROL INTERFACE DIAGRAM FOR SAFETY-RELATED SYSTEMS As shown on Figure 2.4.id, the RHR System channel measure ments are provided to the Safety System Logic and Control (SSLC) for signal processing, setpoint comparisons, and generating trip signals. The RHR System is automatically initiated when either a high drywell pressure or low reactor water level condition exists (i.e., LOCA signal). An RHR initiation signal is provided to the systems as identified on Figure 2.4.1d. The SSLC processors use a two-out-of-four voting logic for RHR System initiation. Each RHR division can also be initiated manually (LPFL) mode COMMENTS AND NOTES None 71

1 I

i

- , l Table 2.1.1.1. SUPPLEMENT NUMBER 2 TECIINICAL ISSUE  !

System purpose.

EXAMPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT The RHR System operates in the following modes:

(1) Low pressure core flooder (LPFL) (Divisions A, B, and C)

(2) Suppression pool cooling (Divisions A B, and C)

(3) Wetwell spray (Divisions B, and C)

(4) Drywell Spray (Divisions B, and C)

(5) Shutdown cooling (Divisions A, B, and C)

(6) Augmented fuel pool cooling, and fuel pool makeup (Divisions B, and C)

(7) AC power source independent water addition (Division C)

(8) Full flow test (Divisions A, B, and C)

(9) Minimum flow bypass (Divisions A, B, and C)

COMMENTS AND NOTES None 72

~

Table 2.1.1.1. SUPPLEMENT NUMBER 3 TECHNICAL ISSUE System modes and performance.

EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT The suppression pool cooling mode of the RHR System limits the long-term post-LOCA temperature of the suppression pool, and limits the long-term peak temperatures and pressures within the wetwell and drfwell regions of the containment. In this mode, the RHR System circulates water through the RHR heat exchangers and retums it directly to the suppression pool.

This mode is manually initiated by control of individual system components. In the suppression pool cooling mode, the total heat removal capacity between the RHR and ultimate heat sink is no less than 88.5 kcal/sec C for each division. 88.5 kcal/sec C is the limiting heat removal capacity of all the RHR modes. The heat removal path is the RHR heat exchanger, the Reactor Building Cooling Water (RCW) System, and the Reactor Service Water (RSW) System. In the suppression pool cooling mode, the RHR tube side heat exchanger (Hx) flow rate is 954 mhbr minimum per division. The RHR pumps have sufficient net positive suction head (NPSH) available at the pump. Suction from the suppression pool is the limiting NPSH condition of all the RHR modes.

COMMENTS AND NOTES This material is an example of the level of detail for an important safety-related mode of operation.

Other descriptions may have considerably less detail.

73

Table 2.1.1.1. SUPPLEMENT NUMBER 4 TECIINICAL ISSUE Safety-related and non-safety-related.

EXASIPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT

1. The main condenser is classified as non-safety-related.

2. Except for the non-ASME Code components of the AC independent water addition feature (Figure 2.4.1.c), the entire RHR System shown on Figures 2.4.la,2.4.lb,2.4.lc is classified as safety-related.

I COMMENTS AND NOTES i None 74

Table 2.1.1.1. SUPPLEMENT NUMBER 5a TECIINICAL ISSUE Seismic classification.

EXAMPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT

1. SLCS components required for RPV injection are classified as Seismic Category 1.

2. The safety-related equipment shown on Figure 2.10.3 is classified as Seismic Category 1.

3. The RHR System is classified as Seismic Category 1.

COMMENTS AND NOTES None r

l l

75 j l

Table 2.1.1.1. SUPPLEMENT NUMBER 5b TECHNICAL ISSUE ASME Code Class and Quality Groups.

EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT Figure ... shows the ASME Code Class for the . . system piping and components.

COMMENTS AND NOTES None j

76

Table 2.1.1.1. SUPPLEMENT NUMBER 6 TECHNICAL ISSUE Location, layout EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT

1. The SLCS System is located in the Reactor Building. The storage tank, test water tank, the two positive displacement pumps and associated valving, are located in the secondary containment on the floor elevation below the operating floor.

2. The main cor. denser is located in the turbine building which is not classified as a Seismic Category i structure.

3. The RHR System is located in the Reactor Building.

COMMENTS ANL) NOTES None 77 a ,

Table 2.1.1.1. SUPPLEMENT NUMBER 7 TECHNICAL ISSUE Power supplies.

EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT A. Design Description Text. (RHR example)

Each of the three divisions is powered from the Class lE division as shown on Figures 2.4.la, 2.4.lb,2.4.lc. In the RHR System, independence is provided between Class IE divisions, and also between the Class IE divisions and non-Class lE equipmut.

B. Figures 1

I The following is an example taken from one of the RHR Figures (Division C):

i All electrical power loads for the Class IE components shown on this figure are powered from Class lE Division III except the outboard containment isolation valve, which is Division I.

COMMENTS AND NOTES

1. The preferred approach is to treat this issue in the text and on the figure (s). Text treatment alone is acceptable ifit is more appropriate.

l

2. Note the importance ofidentifying exceptions such as the RHR outboard isolation valve example above.

l l

78

1 l

l l

Table 2.1.1.1, SUPPLEhlENT NUMBER 8 l TECIINICAL ISSUE  ;

Physical separation.

EXAMPLE OF WORDS TO IIE USED IN TIIE DESIGN DESCIllPTION TEXT Outside of the containment, each mechanical Division of the RilR System (Divisions A, B, C) is physically separated from the other Divisions.

COMMENTS AND NOTES Any exceptions to this statement should be identified in the Design Description and the Acceptance Criteria column of the corresponding ITAAC entry for physical separation.

79

Table 2.1.1.1. SUPPLEMENT NUMBER 9 TECIINICAL ISSUE Instrumentation and Controls A. Main Control Room k

EXAMPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT The RHR System has the following displays and controls in the main control room:

(1) Parameter displays for the instruments shown on Figures 2.4.1a,2.4.1b, and 2.4.lc.

(2) Controls and status indication for the active safety-related components shown on Figures 2.4.Ia,2.4.Ib, and 2.4.Ic.

(3) Manual system level initiation capability for the following modes:

(a) LPFL initiation (b) Standby (c) Shutdown cooling (d) Suppression pool cooling (e) Drywell spray COMMENTS AND NOTES Alarms should be added if (and only if) any are identified in the design description.

For safety-related systems, the DD text should (as applicable) identify that the main control room has the following:

Alarms for ... (specify; delete if none) ...

Parameter displays for the sensors shown on the figures or defm' ed in the DD text.

80

{

Table 2.1.1.1 SUPPLEMENT NUMBER 9 (Continued)

• Controls and status indication for the active safety-related components shown on the figures as defined in the text.

4

- Status indications of the condition of the automatic logic; e.g .- trip status Other manual control features such as system level initiation capability, reset, division.

trips, etc.

NOTE: Individual safety-related systems should not discuss sensor bypass, division maintenance

bypass, calibration /self diagnosis. These issues will be covered in SSLC. -

t

'a

)

l 81

(

Table 2.1.1.1. SUPPLEMENT NUMBER 10 TECIINICAL ISSUE Instrumentation and Controls B. ' Remote Shutdown System EXANIPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT RHR System components with display and/or* control interfaces with the Remote Shutdown System (RSS) are shown on Figures 2.4.la, and 2.4.lb.

COMMENTS AND NOTES The Remote Shutdown System has no alarms.

• For each system, be specific.

82 4

- _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ = _ _ _ _ _ _ _ _ _ _ _ _ _ _ . ___ ___

l Table 2.1.1.1 SUPPLEMENT NUMBER 11  !

l TECIINICAL ISSUE Equipment Qualification EXAMPLE OF WORDS TO IIE USED IN TIIE DESIGN DESCRIPTION TEXT The safety-related electrical equipment shown on Figures 2.4.la. 2.4.lb, and 2.4 lc located inside i

the primary containment and the Reactor Building is qualified for a harsh environment.

i l

COMMENTS AND NOTES ):

It is important that this entry identify only safety-related electrical equipment in a harsh environment.

! (

l 1

i I

I J

I i

I i

l 83

_ - _ _ -__ - _-_- - _ __-___-__-_- -______ ____-_____-____ __-_-__--___- -__- -___-- -_ _ -_ O

Table 2.1.1.1. SUPPLEMENT NUMBER 12 TECHNICAL ISSUE Motor-Operated Valves EXAMPLE OF WORDS TO IlE USED IN TIIE DESIGN DESCRIPTION TEXT The motor-operated valves shown on Figure (except for the heat exchanger bypass valve) have active safety-related functions and perform these functions to open, close, or both open and close under system pressure, fluid flow and temperature conditions.

COMMENTS AND NOTES The intent of the entry is to identify safety-related valves with active safety-related functions.

84

i l

l Table 2.1.1.1. SUPPLEMENT NUMBER 13a l

l TECIINICAL ISSUE Special Features EXAMPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT The RilR System main pumps are interlocked to prevent staning with a closed suction path.' l C051MENTS AND NOTES This type of special issue must be treated on a case-by-case basis.

l l

l 85 1

l

1 Table 2.1.1.1. SUPPLEMENT NUMilER 13b TECHNICAL ISSUE Inter-System Loss of Coolant Accident (ISLOCA)

EXAMPLE OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT The HPCF System suction piping and components from the pump suction valves to the pump inlet have a design pressure of 28.8 kg/cm2g for intersystem LOCA (ISLOCA) conditions.

COMMENTS AND NOTES No ITAAC table entry is necessary for this type of ISLOCA DD entry.

86

Table 2.1.1.1. SUPPLEMENT NUMBER 14 TECHNICAL ISSUE Pneumatic Valves.

EXAMPLE OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT The pneumatic-operated valves shown in Figures 2.11.3a,2.11.3b, and 2.11.3c fail as follows in the event that either electric power to the valve-actuating solenoid is lost or pneumatic pressure to the valve is lost: RCW makeup valves from the MUWP fail open, RCW water temperature control valves fail open RCW heat exchanger bypass valves fail closed, and the safety-related/

non-safety-related separation valve fails closed.

COMMENTS AND NOTES NOTE: The intent of this entry is to identify the failure mode of any pneumatic valve (s) when the failure mode is of safety significance.

l 87 1

Table 2.1.1.1. SUPPLEMENT NUMBER 15 TECEINICAL ISSUE Check Valves (CVs)

EXA51PLE OF WORDS TO DE USED IN Tile DESIGN DESCU(PTION TEXT The check valves (CVs) shown on Figures 2.4.la,2.4.lb, and 2.4.lc have safety-related functions.

to open,-close, or both open and close under system pressure, fluid flow, and temperature conditions.

COhl>1ENTS AND NOTES None a

88

2.1.2 CDM Design Description Figures and Diagrams See Sect i on

23. oft eh memoran dum orf genera lgu ance id on CDM figures.

2.1.21 Figure / Diagram Checklist Table 2.1.2.1 is a checklist of items that needs to be considered when preparing figures for mechanical and fluid / hydraulic systems.

e E

4 4

L 1

1

!f ,

d

89

Table 2.1.2.1, CHECKLIST OF ITEMS TO BE CONSIDERED WilEN PREPARING FLUID SYSTEM CDM DIAGRAMS  ;

ISSUE CORRECT TREATMENT Figure number and Identical to design description section number and system title.

system title Scope include all equipment items addressed in the design description. As a minimum, this will usually include all active safety-related components in the system.

Numbering (multiple Use section number with lower case subscripts; e.g., Figures 2.17.2a, figures) 2.17.2b . . .

Valves Use the non-specific valve type symbol (CDM Appendix A) unless there is a functional requirement for a particular valve type.

, The legend does not permit valve position (open/ closed) to be shown.

No attempt should be made to show different modes of operation, j i

System boundary Show system boundaries by identifying connected systems. l l

l Piping Piping to be shown with Code class as required by the Legend in the )

CDM Appendix A.

Code class Provide Code class numbering on figure where classification changes l l

and at system boundary..

1 Do not show Code class of interfacing systems. (Some exceptions.) l 90

, i Table 2.1.2.1. CliECKLIST OF ITEMS TO BE CONSIDERED WilEN PREPARING FLUID SYSTEM CDM DI AGRAMS (Continued)

ISSUE CORRECT TREATMENT Power supply Add note to state safety-related. Class 1E power supply Divisions.

Use Roman numeral for Division numbers. See Table 2.1.1.1 Supplement 7 for example wording.

State any exception to power supply divisions, instmments In general, the parameter being sensed (flow, temperature, etc.) should be identified, and the type of measurement device should not be identified. For example, use now element symbol without specifying the type of element used such as venturi or ori0cc type. Exception: if l

a now mca:;uring device also has a Dow limiting function, show the element type.

Show all instruments and devices which belong to the system and provide input to the automatic control of the system. Also show any additional instruments needed for operator monitoring of system performance and/or items needed by interfacing systems.

Terms All component names to be consistent with what is used in Design Description.

System name to be consistent with CDM Table of Contents listing.

Alarms Show any alarms that merit CDM treatment (very few).

Symbols All symbols to be as shown in the CDM Legend. .

91

--- ---_- -------~-__--____.,_,_m_ _ _ _ _ ,

l i e Table 2.1.2.1. CHECKLIST OF ITEN15 'O BE CONSIDERED WilEN PREPARING FLUID SYSTEh! CDhl DIAGRAh1S (Continued)

ISSUE CORRECT TREATh1ENT Penetrations Show a barner and specify what is being penetrated, such as Primary Containment, Reactor Building or equivalent.

Valves Indicate valve function, if necessary, to guide reader (not usually necessary)

Show only those valves whose function is impottant to the system.

(Usually limited to valves with active safety-related functions.)

Remote Shutdown Denote components that have status indicating and/or control on the System Remote Shutdown System with an "R" on the figure.

Flow direction Arrowheads may be (but do not have to be) added to pipe to indicate direction of flow.

Legend Do not define legend on figure. Add any symbols and abbreviations to Appendix A of the CDM forlegend.

Notes Provide notes under a heading for " Notes" and number all notes (even if there is only one note).

92 1

. i 2.1.3 CDM ITAAC Entries See Section 2.4 for general guidance on ITAAC entries.

2.1.3.1 ITAAC Table Checklist The sequence in which subjects should be listed in the ITAAC trbles must follow as closely as .

possible the design description sequence defined in Table 2.1.1.1. Table 2.1.3.1 is a list of the; technical subjects which should be considered for ITAAC table entries. Maximum use should be made of the standardized ITAAC table entries provided in the supplements to Table 2.1.3.1.- These standardized entries should be modified as needed for application to a particular system but are intended to be replicated verbatim unless there are legitimate reasons for not doing so. The sequence in Table 2.1.3.1 is based on the order in which subjects are addressed in the design description (Table 2.1.1.1) and should be followed to the extent practicable and/or applicable.

93 "e , =t,-,-vw -w- v -,y,, w c - -,- - v v -m- --e- - *+ v e-+--v -r- -

w y-

4 Table 2.1.3.1. ITAAC TABLE CllECKLIST Applicable Supplement Issue Number

• Treatment in ITAAC Table System name, scope, configuration I,2 Use the standardized words shown on Supplements Number I and 2.

i and control interfaces System purpose -

None.

System modes, logic, and 3 Provide ITAAC entries to address major perfomiance, logic and interlock features of :

. performance the design as discussed in the design description. Supplements 3a,3b, and 3e give y examples. Include system level manual initiation for safety-related systems (if applicable).

Safety-related or non-safety-related -

None

. System Seismic Classification -

None. (Covered by configuration.)

ASME Code Class and Quality ' -

None (Weiding aspects covered by configuration.)

Group 4

Location, Layout ' -

None, unless there is a specific special case that should be addressed.

4-

- - - _ - _ _ _ _ _ _ _ _ _ . . _ _ _ _ _______m

' k ,

. - l a )

i c C s

y &

I c

h it p g a n m s i e d u s u e s

e l

c n p

r n d i

( e r C.

d a s e h e A y i r l w A t

n p

p s T I

e u . e s n s s 7 a a r

e i

h e d c n l

T w n r i b a e d a o p .

6 ht e e T 4. l 5 s 8. o s s

l p

C t a t t n

t r e n

e c n e e n o r m A i r e f d a m m m e d x A e t

c e e e m

e c a e d

) T I lp l e

l p

l p l p n a

g n

n a

e p p p p d i u n u r o u u u i e r o

n i

t S f S S S g u b f s

i t

n n e c n n n s i 9 n

o e o n o o o a d t m n e n n )

n n n C (

t w d w w n w

0 1 a e a o n o o o o y m T e r h e p h h i

t a h t

n t e lp e

S s s s s e I T s d e s s r

u s m f

a p L dr n dr dr g dr e s u K o i

o o i l p o S C l f

n o p t

e E w a w w o w t n e c c u a S I

d i r d d d S v I

C e z

t c e z e y e n e .

i e i z i b i z i l e s

E dr l dr dr d e e a L e d e r l r

c-a d a a r a p s B d n d d e d m i

y A n a n n v n a e b-a a a o a x r

u T  :

s n o

t s

t s C t s e l es C e i e e (

e e i

a a A ht t

a ht h . ht ht f c r t e e t A e a p e e n e e v a e

T s e s s o s s l a r I U s U U N U U v T 1

3 1 l t

e n*

b e 2

e amer c

ieb 7 0 ppm 4 5 - 8 9 l

l l b 6 1

a ppu T

AuN S u

l a

i c

n a s h l l c o r

a e t c m n n i

s l

a r o o s e

e h y

i c fo C i t

a v r l u p t c n d n c a s

s - e i o m a i

f i V s e

I s

l e t e n l

a d v s e a r t o u e l e r

d e a s t a u Q

i l

p n c p y i t a V p a n e s a t r

e t

a u n e s f t

n n p c e S o d l o e e O

i t

a F i

t n c a n m m l a

r e a r

e p i o u ip r

o m i a e s y i t r u t u c w p d r t s o e e o e n h o n q n p P s i P p I E M P S 8

Table 2.1.3.1. ITAAC TABl.E CllECKLIST (Continued)'

Applicable Supplement Issue Number

• Treatment in ITAAC Table Check Valves iI Use the format shown on Supplement i1.

ISLOCA -

None. Design pressure covered by the piping DAC.

• Supplements to this table provide standardized and/or recommended wording for these CDM entries.

W -

_____._.2 _ _ _ _ _ _ . _ _ . _ _ _ _ _ - . . _ _ _ _ _ _ _ _ - - -____.___m__________-_____2 _______._____.___ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

a NOTE The following supplements to Table 2.1.3.1 are examples of ITAAC entries for various subject 3 and should, if possible, be used verbatim. However, they should be used only to the extent applicable and in many cases may require system.

specific modifications. Furthermore, not all systems will require ITAAC entries for each of the technical subjects in Table 2.1.3.1. (Only provide ITAAC entries to the extent subjects are addressed in the design description.) .

l t

i r

?

i 97

~

Table 2.13.1, SUPPLEMENT NUMBER I TECHNICAL ISSUE i

1. Configuration NOTE: This standardized entry is nol to be used for I&C Systems. See entry in Table 2.3.3.1 for I&C material.

STANDARDIZED ITAAC TABLE ENTRY i-DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSFS ACCEPTANCE CRITERIA'

l. The basic configuration of the 1. Inspections of the as-built systern will 1. The as-built Systern

$ System is shown on be conducted. conforms with the basic configuration Figure . (See Note 1.) shown in Figure -

COMMENTS- AND NOTES Note 1: If a figure is not used, reference the Section number.

l Note.2: This entry is intended to be a general verification that the' system described in the design description is in place in the as-built plant.

Particularly critical system characteristics may well justify a separate ITAAC table entry. An example would be a separate ITAAC to verify elevation of a flood protection float switch shown on the figure.

V .

l Table 2.13.1. SUPPLEMENT NUMBER ~2 1

1 TECIINICAL ISSUE l 2. Ilydrostatic Test STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TFSTS, ANALYSES ACCEPTANCE CRITERIA

2. The ASME Code components of the 2. A hydrostatic test will be conducted on 2. The results of the hydrostatic test of the System retain their those Code components of the ASME Code components of the pressure boundary integrity under System required to be System conform with the S

internal pressures that will be hydrostatically tested by the ASME requirements in the ASME Code, experienced during service. Code. (See Note 1.) Section 111. (See Note 1.)

COMMENTS AND NOTES Note 1: Modify to call out pressure test for pneumatic / gas and oil systems, if that is what is proposed.

l

Table 2.1.3.1. SUPPLEMENT NUMBER 3a t

TECIINICAL ISSUE

)

3a. System Modes and Performance - 11ydraulic Performance of a Fluid System STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSFS ACCEPTANCE CRITERIA

d. The LPFL injection flow for each d. Tests will be conducted on the as-built d. The converted RilR flow satisfies the.

division begins when the RPV dome RIIR System in the RilR LPFL mode. following:

pressure is no less than 15.8 kg/cm2 Analyses

• will be performed to convert g The LPFL injection flow for each above the drywell pressure. the test results to the conditions of the division begins when the RPV dome Design Commitment.

When the RPV dome pressure is no less pressure is no less than 15.8 kg/cm2 ,

than 2.8 kg/cm2 greater than the drywell above the drywell. pressureJ .

1 pressure, the LPFL injection flow for When the RPV dome pressure is no less -

each division is 954 m%hr minimum. ,

than~ 2.8 kg/cm2 greater than the drywell pressure, the LPFL injection flow for each division is 954(mVgtinimum.

• These analyses are defined'in the SSAR. . ,

i 11 ] b' I U , , , t i v .,

_i

_L

)

d e

u int n

o C(

a 3 .

s R i s

E a B b M i c

U f i

N c e

p T s-N m E e M t s

E y s

L a '

P P n U o S d e

p 1

l o

3 e v

1 e

2 d le e b b a t s

T u m

s i

e t

r n

e S e s

E e T h T

O N l y

D n N o e

A l p

S m T a x

N e E n M a s

M i s

O i C H 5-9

Table 2.1.3.1. SUPPLEMENT NUMBER 3b TECIINICAL ISSUE 3b. System Modes and Performance - Logic Test for a Fluid System STANDARDIZED ITAAC TABLE ENTRY INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA DFSIGN COMMITMENT

3. 3. 3.

a- The RIIR System is automatically a. Tests will be conduced using a. Each division of the RilR System o

initiated in the LPFL mode when simulated input signals for each receives an initiation signal.

either a high drywell pressure or a process variable to cause trip low reactor water level condition conditions in two, three, and four exists. instrument channels of the same process variable,

b. Each RIIR division can be initiated b. Tests will be conducted by initiating b. Each division of the RIIR System manually (LPFL mode). each division manually. receives an initiation signal.

O

Table 2.1.3.1. SUPPLEMENT NUMBER 3b (Continued)

COMMENTS AND NOTES This is an example only. These logic-based entries must be developed on a system-specific basis.

1 w

4 4

t

Table 2.1.3.1. SUPPLEMENT NUMBER 3c TECEINICAL ISSUE 3c. NPSil Evaluation STANDARDIZED ITAAC TABLE ENTRY DESIGN COh1MITMENT INSPECTIONS, TFSTS, ANALYSES ACCEPTANCE CRITERIA

3. 3. 3.

c. The System pumps c. Inspections, tests and analyses will c. The available NPSil exceeds the y have sufficient NPSil. be performed upon the as-built NPSil required by the pumps.

system. The analyses will consider the effects of:

- pressure losses for pump inlet piping and components, Er L e

__________.._________-_.__a _ _ _ _-.

. Y > . t A

I R

E T

I R

C E

C N

A T

P E

C C

A

)

d e

u i

n t

n o S n C (

F n o e r

c S o i

t u

Y i e c t c S 3 s ht u a i r

L s s r e C R A e r t p e p h C E p a p E

B N p l m m s A u e u p e o ,

M , s v e

t m g U f d .

S e l r e o i t

a e N T ht e u u s e l t a p T S m t

a l

a g f s

F v a t n m N T o r

w k i

s e u E f ht m c , a , .

p u o s b ) m e M S n o

i w m l

b r

e n n C i n r u

l a

E N i i ig 0 a s c L

P O t

c l

o o

n  % i a

r s 0 t

n s e

i t

I u p i

m 0 t e 1 o r p

i r

c P s 5 s d c U T (

r S C

• f o

E *

• s 1

P n S o 3 N i

t 1 I a u n 2 l a o e v i t

l b e a a i i c

l T S f

i d

P o N .-

T r o

m e .

N f u E d i q

M e n -

S w u- _

T I E o _

M T l l

o m

e _

O f t s _

M N b e y s

O D o e C N t

i r _

e u N A l p q e

G S m r .

I T a s _

S x m N

E e e _

D E n i t

M a e s s M i e

s h O i h T C T

• y

t I

l:

Table 2.13.1. SUPPLEMENT NUMBER 4 l TECIINICAL ISSUE

4. - Power Supplies STANDARDIZED ITAAC TABLE ENTRY l

DESIGN COMMITMENT INSPECTIONS, TFSTS, ANALYSFS ACCElvl'ANCE CRITERIA

~

9. Each of the three RIIR divisions is 9. 9.

powered from the Class IE division as

a. Tests will be performed on the a. The test signal exists only in the shown on Figures 2.4.la,2.4.lb and

, y RilR System by providing a test Class iE division under test in the 2.4.lc. In the RilR System, signal to only one Class IE RilR System.

independence is provided between division at a time.

Class 1E division, and between Class IE divisions and non-Class IE equipment.

{

m-

-~" -- ' -- ~

_ _ _ _ _ _ _ _ _ _ _ m____ _ _ _ _ _ _ __a-____.__d- _

Table 2 l.3.1. SUPPLEMENT NUMBER 4 (Continued)

DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA

9. 9. 9.

b. Inspection of the as-install:d Class b. In the RilR System, physical iE divisions in the R11R System separation or electricalisolation will be performed. exists between Class 1E divisions.

Physical separation or electrical isolation exists between these Class 1E divisions and non-Class 1E 5

equipnwnt.

COMMENTS AND NOTES None

~

~

Table 2.1.3.1. SUPPLEMENT NUMBER 5 TECIINICAL ISSUE

5. Physical Separation STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEP'I'ANCE CRITERIA

10. Each mechanical division of the RIIR 10. Inspections of the as-built RilR 10. Each mechanical division of the RilR System (Divisions A, B, C) is System will be performed. System is physically separated from physically separated from the other other mechanical divisions of RilR o

" System by structural and/or fire divisions.

barriers with the exception of primary containment.

COMMENTS AND NCfES NOTE: Any instances where this physical separation is not maintained should be clearly identified in the Acceptance Criteria and Design Description.

• As appropriate for each system.

o O

'~ ._ m,_ _

~

- t i

s l

x o e t r

A l s n I o o R t r c E n n T o i a

c n I r m o R /

o e i t

C d n

ht c e

E a i n S C s, d n N y e i a v d A l p i e e n

T s t r

e i

f P

i d r e E

• e d C s b s a

C mr n

a m A a c o l

A r

o o r

6 6

R S E E e s B S ht y Y a M L n o

lp U A i s

N N d d n e

• o T A m s

, i t

N ,

o m ip E S f r r c

M T r e l a

ht e s e

E S p a L E e m r D P T b o f o n g

P ,

l l

o r s i U S i l

o s

e N w l r

S s o t D r n O n t n e 1

I o o ht T it o c .

3 C c c r m n 1 e n o e i 2

E p s

i a d

/ t s d P n n y e e S I m a S d l

b N l u

a I .

c T 6 n Y i e

R r a

T s N s n e E y i i

t r

E a d n T l p e e L n o s B N i s

ht e i f

n l

A E d e o *, r d h t

r T M s o s a i c

n o C T n f

d e h

C I

n e r w A M l a d a r o

d n m o

A M a i v m f E a o T O m o r e e s

U n R I

o p t

s i S o D C or s y r o

S i l o E l S g t

a r N l o e

I t t Z o r a

t n n r L e o I G t n

t n c A D I o m C R S o c n y C m n E c r o o n I

t i

a A D n /

i a N s n D i

a d t

c e I

I I M N M a n

S e t le C A e E T 6

. D T

6 S

• Table 2.1.3.1. SUPPLEMENT NUMBER 6 (Continued)

COMMENTS AND NOTES RIIR example is as follows:

11. Main control room displays and 11. Inspections will be performed on the 11. Displays and controls exist or can ir controls provided for RIIR System are main control room displays and retrieved in the main control room as defined in Section 2.4.1. controls for the RilR System. defined in Section 2.4.1.

C o

W

-e,

Table 2.1.3.1. SUPPLEMENT NUMBER 7 TECIINICAL ISSUE

7. Instrumentation and Controls Remote Shutdown System STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA

7. Remote Shutdown System (RSS) 7. Inspections will be performed on the 7. Displays and controls

• exist on the 3 displays and controls

• provided for the RSS displays and controls

• for the RSS as defined in Section System are as defined in System.

Section .

• Delete any categories for which no entries are included in the Design Description.

1 l

)

i

Table 2.1.3.1. SUPPLEMENT NUMBER 7 (Continued)

COMMENTS AND NOTES r Only to be used for those systems with RSS interfaces. RilR entry is as follows:

12. RSS displays and controls provided 12. Inspections will be performed on the 12. Displays and controls exists on the for the RllR System are as defined in RSS displays and controls for the RSS as defined in Section 2.4.1.

Section 2.4.1. RIIR System.

C u

__._--_-_______._--.__-_--_-_----_---2.-_we---- , _ _ . , _ - - - . - - - - < - _ _ _

. . .- - - . - . . ~ , . - . .. . -. . .

c.c ,

4

i Table 2.13.1. SUPPLEMENT NUMBER 8 TECIINICAL ISSUE -  ;

'8. - Motor-Operated Valves (MOV)

~

. i STANDARDIZED ITAAC TABLE ENTRY i

' DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA .t

8. Motor-operated valves (MOV) 8. Tests of installed valves for opening, 8. Upon receipt of the actuation signal, designed in Section as closing or both opening and closing, each MOV opens, closes or both-having an active safety-related function will be conducted under opens and closes, depending on the open, dose, or both open and close* preoperational differential pressure, valve's safety functions. The following valves open and/or* close in

~

under differential pressure, fluid flow fluid flow,' and temperature and temperature conditions. conditions. the following time limits upon receipt of the actuation signal.

c

?

f

~ n,. s' .- m, e n < ~ ,

Table 2.1.3.1. SUPPLEMENT NUMBER 8 (Continued)

DESIGN COh1MITh1ENT INSPECTIONS, TFSTS, ANALYSFS ACCEPTANCE CRITERIA 8.

Valve *

• Time (sec) open close open close COMMENTS AND NOTES i

RilR example: ,

C a

13. 13.. I 3.

a. MOVs designated in Section a. Tests ofinstalled valves for a. Upon receipt of the actuating 2.4.1 as having an active safety opening, closing or both opening signal, each MOV opens, closes, function open, close, or both open and closing, will be conducted or both opens and closes, and close under differential under preopemtional differential depending upon the valve's safety'-

pressure, fluid flow, and pressure, fluid flow, and functions.

temperature conditions. temperature conditions.

• Modify to reflect specific system application.

• Table entries for key valves only; i.e., one or two most important valves in a system.

6

Table 2.1.3.I. SUPPLEMENT NUMBER 9 TECIINICAL ISSUE

9. Example of special case ITAAC.

STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA

12. A surge tank with a capacity of greater 12. Inspection and a volume calculation 12. The capacity of the surge tanks is than or equal to 16 m3 is provided for using as-built dimensions will be greater than or equal to 16 m 3 each RCW division. performed.

G COMMENTS AND NOTES This is an example of a special situation ITAAC that must be developed case-by-case.

Table 2.1.3.1. SUPPLEMENT NUMBER 10 TECllNICAL ISSUE

10. Pneumatic valve failure modes STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TFSTS, ANALYSES ACCEPTANCE CRITERIA i 1. The pneumatic-operated valves shown 11. Tests will be conducted on the as-built i 1. The pneumatic actuated valves listed in Figures 2.11.2a,2.11.2b, and valves by initiating loss of pneumatic below fail as desired when either

_ 2.11.2c fail as follows in the event that pressure and power to the actuating electric power to the valve actuating

~

cn either electric power to the valve solenoids. solenoid is lost or pneumatic pressure actuating solenoid is lost or pneumatic to the valve is lost: M UWP makeup pressure to the valve is lost: MUWP water valves fail open RCW water makeup valves tail open, RCW water temperature control valves f ail open, temperature control valves fail open, RCW heat exchanger bypass valves RCW heat exchanger bypass valves fail closed, and the safety-related/non-fail closed, and the safety-related/non- safety-related separation valves fail safety-related separation valves fait closed.

closed.

Table 2.1.3.1. SUPPLEMENT NUMBER 10 (Continued)

COMMENTS AND NOTES

~

This is an example only. This entry must be developed on a system-specific basis.

, C w

V

i y , e - t t * ,4 I .

s * '?.

e

, s n 'e v v e l l p a A

I a

v o v ht e R e ht E e ht o _

h b n T t s s r o I f o o p R o r , u C n c s g o a e s n E i t

er o i c d C e u s lc n _

N i r s s

, e p s d e n n _

A e r

p e d e o T ht l p

o i

t c

P a s e n E n i t

V s u o n o f C d e r C l y

C e e h c t s f e A a f i

c a

d n f a _

B d e a s b

1 1

R S ,

E g g E S n n ,

B Y i

n i s w M L e o o p l m l f

U A o c e d N

t N r o

d n s y

i u s T A f s

a s l f n o

N ,

e g r ,

S v n e e i it E d r M T l a in n u s

d n

S v e p u s o n E E o d e c L d r o P T e ht t e p e r

i t

P ,

l c l u a _

S l

a o u a n t c U

N t b d a i o

l s n r p S n r o e p O i o c i

t a p a I f ,

r 1

T o g n e e m e h b p c 3 C t s

s i

s l o t a

1

. E e o l i e r

d n

e r

2 P T l

c w p a o _

e S f l

b N I .

y r

a b a T Y s s

R e c

- T e n

N r

o e s -

E ,

r u a n e m t d

E T i e s o e a r e L N d e

v l t

s e p

i f

B i

t c y i A E t a c a n

, s m d o

n r T M g n e p d e t e

S m C T i s a o n d E e I e g n u n T b A M d n o a d A )

s i

v i e O l u .

E T M V h a

t c

n s

o w o N o U I O C s u lc l f D h s

S s D C (

s a f d_ d d N e S e E e 1 e n i u A l

p I

l v

Z N v 4 t a

a l s

L a I G l a n f n S m V 2 l e e e o a A D I S

v n r p r T x u

i C k R k o y o t N e c E c i s i d E e _

I e A D e t c

t e ht s e n v N h D h e f a o r o M o .

I C N C S s b p c b I

C A M a e

E 1 T . O h T i S b C T

_ o a

i

ABWR DESIGN CERTIFICATION CD31 GUIDELINES MEMORANDUS1 ATTACHMENT NUMBER 2.2 ELECTRICAL SYSTEMS

\

Contents -

l 2.2 CDM Treatment of Electrical System I

l I

119 u______-___-_--____ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _

2.2 CDM Treatment of Electrical Systems Electrical systems are not as amendable to a standardized approach as the fluid / hydraulic sy. stems.

The various electrical system entries in the ABWR CDM have been derived case-by-case through '

extensive GE/NRC interactions, consequently, detailed generic guidance for these systems is not meaningful and this attachment is limited to the broad guidelines in Table 2.2, L

120

. - T N

E M n i

A I k

k c c m e e

' e h h i

t c c A y n n l

l i o i o

S a t a

t a

u r r N I s u u O U ig i g

I I f f T  :

n . n n _

l o e o o i i l

b c c R t a

r a

ht e

h e

C u t

t S g C f f E i f A e o e e o D n A n t n n na o o r a o o C T N P N N P M I E

T n t n

e S o e s n ht Y i s

u o g S ip t

m n n f r r t

a c s d i b

o -

M c s e e r

i d

n a

i r

y r

D e d n

t r d

)

n c s o C D u M o m e i o e g e

N n r o D e r e t a t a d t a

I ig C u t

s l e n o c s e g y r g t T e r e

r o i f s y is d e

c N T D h f n

r o t e e t im E N s d o f d i s

M E M e r t e s s

t a s E i m i e

s T D u c e m n

e l

l e

A M C i g l e e i

op r a

s l

y ht E T y f s

t s

n s

a l

a R A n M s y h l u d _

E a a s o c C s n T g D s g i t i

h E u a R R n C n n a n w

(

n E

O T i v y s

n o i c

a i

E e m i d

F I a n o it c f m m I t e -

A h a i n r r e s t S s t

c e e t s e y a -

T D e c n f u t n

t y y ht s c o

C m n u s e e C

i l e f e f m t i f s h s E

t s r e

r e n c e o U t

i J y s f o t s a p s (

f o i t

B e s y t

r S n n g U l l R e r s o p o d o n S a u f .

i t e i r y t

a o m D s

. r o t a

it a d E o r e i

D e p c l

i .

T f t w l i l

e o u )

g e n f e l a n r a y r l b A d e m i

vr i d

f y

r h n

e o i i D i v D

)

e e w o m n u

t n t e n j i c d l

I o t s v e o e f o a h i u

D P r D y s O h

S ht b d a s N M w b N ( i A

C n

. i o

2 t a

2 E d c e U a n i f

l S i s

b S e s s a I p u a T o t a

l c

L c s n t A , o s s ic i

d C e m

n o

t c e c e m s

I n a t a i N a n

i t

a u f r l e w I r f e r n I

u m t -

m o C m e ig e i n t y

e i

t a

E t s

f n

t s y f e t s c T y o y K

e a S

y o S c S S L

~ _

Table 2.2. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

CORRFSPONDING TREATMENT TECIINICAL ISSUE CDM TREATMENT IN ITAAC

• Redundancy Discuss items that are redundant, triplicated or other backups. Address if applicable.

• Rating / Capacity Provide rating / capacity for those items that are being Address if applicable.

discussed.

Power sources Identify which item receives Class IE power and from which Address is applicable.

division. (If possible, this infomiation should be covered on the system figure rathe en in the text.)

k$

Discuss any attemative power sources and logic or switching mechanisms when power is lost.

• Special Features Grounding Discuss design features required for grounding. Address is applicable.

Breaker coordination . Discuss requirements for breaker coordination. Address is applicable.

Ilarmonic distribution analysis Discuss requirements for allowable harmonic distribution. Address is applicable.

e

9 Table 2.2. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

CORRESPONDING TREATMENT TECIINICAL ISSUE CDM TREATMENT IN ITAAC

- Physical separation and Discuss requirements for separation and independence and Address is applicable using the electrical independence note any exceptions. standardized entry given in Attachment 2.1.

• Interface requirements Provide interface requirements. (See Section 4.0 for handling None. ITAAC not required.

ofinterface requirements.)

i3 w

.., . . - . . .. - , _.. , ~ _ . .

. .fl%

t

. ABWR DESIGN CERTIFICATION 1

CDM GUIDELINES MEMORANDUM l l j

ATTACHMENT NUMBER 2.3 INSTRUMENTATION AND CONTROL SYSTEMS

. .s 1-2.3 Instrumentation and Control Systems  ;

2.';.1 Design Description Text 2.3.1.1 Checklist 2.3.2 CDM Design Description Figures and Diagrams  ;

2 2.3.2.1 Checklist ,

2.3.3 CDM Inspections, Tests, Analyses and Acceptance Criteria (ITAAC) Entries i

2.3.3.1 Checklist (n

'. )

)

)

l 124  !

. v. ..

2.3 Instrumentation and Control 2.3.1 Design Descriptions (See Section 2.2) 2.3.1.1 Design Description Checklist Table 2.3.1.1 is a list of technical subjects which should be considered for CDM design description treatment. Which of these subjects is appropriate for any particular system is ajudgment to be made by the responsible system engineer using the graded approach noted above. To the extent practicable and depending on which subjects are addressed in any system entry, the design description text for that system should follow the sequence of subjects listed in Table 2.3.1.1.

Supplements to this table provide examples of wording that should be followed for all systems to the extent it is applicable.

l l

l l

j 125

. 8 C _

A _

G A)

NT1 i n

o I t

. I 3 a D I c )

N N3 I

2 y

r i

f i

C la A O Te P l E

t n u D S S Nb Qc C N E Ea  :

n &

O RM T o i

rte e I

i m y I t a s T i b

P O E(AS r u S e

d I

R CR i g

e

( e r

e e C T fn o

n o

n v S o o E C N N c D

n M e s y

o E r e e c

M d e t e

i t

a T n h a D t a f a c S ig s e f C l s i Y s e c e r

r e

r f f

i S e r u f a t o -

o l

a D ig r e i n f t y

s u q

M M f t n

t u

d e f e n o c D D y p t a T

I i c s i C C n l o

t u e e t

r m N a r o l r o s N E y e c

t n /t e s a p i e 1 I

n o u h E s y T M a n e C p s a ic I s r N T g n

r e i n s h s r

e o g

E A i f

e s y n o w s a

f n e s M E v a R e e i l i t a e m C i

R d k t E r T h o s c

n te C t n

A T s y r

m e u s . f y  !

s ic e E m r d f y d i s

R M e t

n e o lcn u

m f s

t e

a t

n e l a m s M D D t

T s y ) s n e o l e d C i e

R C s D o i

)

t y

s s n r i

, . S C

- s e O

l l

a D(

i t

c D s o t y m m h t s F n I f i t e u e i

e r n u C o o r f m t w ht S f o o f ( .

p a s- i y

s t T i w t n r e t r e m e n y n in s e o C d ip r d a i v

e f o m d t s

f E i v c n r g r m i n e i g a

t J

o s u a e t a n d t

a n s n B r e r i v e e n s l o

i dr U P D o D O t r d I a A e r c o S

w E

• f T T o A E. NR l s e

D BE E lp I

D AMB C 1 2 3 m

a N I EM x C

A LL U PP e

e PP N d 1

AUS i v

o 1 r p

3 e 2 l e E e n

- b a

l b U p o T a S o s n d s T S c e r n i

I s e s o c ht

, c a o a i L e f p d d m o m r e e s n t A a e r u

t a t a

i o s C n t

n P l e i t t i e l e s a n I r r c e N

I m

e l

o r

m e y y

- m e

i f

i m I t t t t

e t t s e s n s f e s s l C y o y a f a y l a p p

E S c S S s S c u T S

_S

Table 2.3.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

APPLICABLE CORRESPONDING

, SUPPLEMENT

• TREATMENT IN ITAAC l TECIINICAL ISSUE NUMBER CDM TREATMENT (See Table 2.3.3.1) l l - System modes and 4 Overview of modes of operation. Treat mode-by- System-specific material.

perfonnance mode. Include major performance parameters such Examples shown in Entry 2.

as control signals to actuating devices. Also include key logic / interlock features meriting CDM treatment.

Setpoints -

Do not include numerical setpoints valves in the None (Setpoint methodology

,__ CDM. covered by I&C DAC) t$

- Codes and Standards -

Do not identify codes and standards in the CDM. None

• Power supplies 5 As a minimum, identify which items receive Class item 3.

IE power and from which divisions. (This infonnation should be covered on the system figure or in the text.) If appropriate for CDM, identify power sources for non-safety-related I&C systems.

• Supplements to this Table provide examples of wording for these CDM entries.

p

~

. M . . :

s .

m 1 C

. t t

e m A y s )

s e

G A) s n I t

NT1 I I d

e i o n

)

D N33 t a i v

s i

o d N I 2 l e i t

a e r D r u

n O P Te l y E

u g

i t S Nb t e i i

f n E Ea f a n o m o C RM Te s r o r

c

( rte o f in S

N OAS E(

F( d e d e

C R 4 r r 5 6

O e e I

T T m w v o m e

m P te o e I

I p C i t

i t

R C

S e E ht D y

- n m

w o M f t

e d n o r E a a o f o

dt f T s d d t

t .

u n o

S f o e e h Y

t a te . s m s i t

S T s n

r a

)

d m o

o e a r

N o p im i

e u r t

o e p

M E i s e s

l y

t a

c m l

o m O D M i v y l o i n t r e r (

C l

T a n i l d

l l

a u s i

o e d

)

N A s i m c ht e s I

E h

c ics u i t

e e ht i

f e.

r e i (

g ht e i r

T i

R h h

y m n ht i t

n h t n

N T w p e i d f y n w e w e E o e t s l i i s d e s

M M t r a y i

u t

n e

d e

e c

i e l e M s D t

T D n t d

e f b d ir f a b d

A C t e n e

t a o h i u

q r

e d e C x d l s e E e m l

o n ic l e t n u s s R e p s o h u r o u e T i i t w o n i

h c ht ht iu q y a c g h s o m s i s

R e l

o n i e d d r e l a t t a t s n s o O b x i

c f i

d l

r b e y a i F r c e i

r o i

r t m r s l l g s t a

t c j c e o e e e n S e e a s h f h n n i T e a a l

e n dr C D r l

e M d T i T p p o

E w J

• f B ET o U s S LN BE R lp e

E E T A MH C 6 7 8 9 m

a A I EM x D

I LL PP U e

e D PPN d i

N AUS v o

A r C p e

s d l b

1 E r e

n a a 1

U v n )

s T 3 S o o n m s 2 S I

C

(

i t

a i o t u n

, r a

i ht le e r t a o o l a o L c a l y i b

n p o a t

a d t a A e e s l t n s T C d s i l

n

, n e a t n

I n l a a o s e N e c i c i m l o m p i r t I

e s t a m t r e I

d y c c t s n l p

C n h p l e o n o p E I e L I c u T S h

l Table 2.3.1.1. CANDIDATE SUBJECTS FOR TREATMENT IN CDM SYSTEM DESCRIPTIONS (Continued)

APPLICAllLE CORRESPONDING

, SUPPLEMENT

• TREATMENT IN ITAAC l TECllNICAL ISSUE NUMBER CDM TREATMENT (See Table 2.3.3.1)

• Equipment No discussions required. None (covered by I&C DAC)

Qualification

- Special Features 10 Describe any special features of the system that need Case-by-case. (Examples in j 1

to be addressed in the CDM. Item 7.) I C

e

• Supplements to this Table provide examples of wording for these CDM entries.

i I

NOTE The following supplements to Table 2.3.1.1 are examples only of design description entries for various subjects.

These examples should be used to the extent applicable but in many cases will require system-specific modification.

Furthermore, not all systems will require design description ;

entries for each of the technical subjects covered in Table 2.3.1.1 and its supplements.

.l I l

l I

i 130

Table 2.3.1.1. SUPPLEMENT NUMBER 1 TECHNICAL ISSUE System name, scope, configuration and control interfaces.

EXAMPLES OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT Name The Reactor Protection System (RPS) is an instrumentation and control system and its purpose is to initiate reactor scram whenever RPS logic requirements for scram initiation are satisfied.

Control Interface As shown in Figure 2.2.7.a. the RPS interfaces with Neutron Monitoring System (NMS), .

Process Radiation Monitoring System (PRRM), Nuclear Boiler System (NBS), Control Rod Drive System (CRD), Rod Control and Information System (RCIS), Recirculation Flow Control System (RFCS), Suppression Pool Temperature Monitoring System (SPTM),

Essential Multiplexing System (EMS), and the Process Computer System. Figure 2.2.7.a also depicts the implementation of RPS logic within Safety System Logic and Control (SSLC).

Scope The RPS has four divisions. Figure 2.2.7.b shows the RPS divisional aspects and the signal flow paths from sensors to scram pilot valve solenoids. Equipment within an RPS division consists of sensors (transducers or switches), multiplexers, Digital Trip Modules (DTM),

Trip Logic Unit (TLU) Output Logic Unit (OLU), and Load Drivers (LD). The LDs are only in divisions U and III, 131 i

l Table 2.3.1.1. SUPPLEMENT NUMBER 1 (Continued)

C05151ENTS AND NOTES Typical reference to the Control Interface Diagram for safety related systems is shown above.

This is applicable to mechanical systems with safety-related I&C 132 j

I Table 2.3.1.1. SUPPLEMENT NUMBER 2 TECHNICAL ISSUE System Purpose EXAMPLES OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT The Reactor Protection System (RPS) is an instrumentation and control system and its purpose is to initiate reactor scram whenever RPS logic requirements for scram initiation are satisfied.

COMMENTS AND NOTES None e

133

i Table 2.3.1.1. SUPPLEMENT NUMBER 3 TECHNICAL, ISSUE Safety-related and non-safety-related.

EXAMPLES OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT The RPS is classified as a Class IE safety-related system.

The FDWC system is classified as non-safety-related.

COMMENTS AND NOTES The inclusion of" Class IE" invokes seismic qualification requirements implemented through I&C DAC, therefore a separate seismic classification statement is not necessary for I&C systems.

134

Table 2.3.1.1 SUPPLEMENT NUMBER 4 TECIINICAL ISSUE System modes and performance.

EXAMPLES OF WORDS TO IIE USED IN TIIE DESIGN DESCRIPTION TEXT The RPS consists of logic and circuitry for initiation of both automatic and manua! scrams.

The automatic scram function is comprised of four independent divisions of sensor instmment channels, hardware-/ software-based logic, and two independent divisions of actuating devices. Automatic scram is initiated whenever a scram condition is detected by two or more automatic divisions of RPS logic. For automatic scram, the sensor input -

signals to RPS originate either from RPS's own sensors or other systems' sensors. 'For determination of the existence of an automatic scram condition within each automatic scram channel of the RPS, the DTM of a given RTPS channel compares the monitored process variable with the stored set-point in its memory and issues a trip signal if the monitored process variable exceeds the set-point. The DTM then sends the trip signal to the TLU ofits own channel and the TLUs of the other three channels of RPS, where two-out-of-fou'r voting is performed (see Figure 2.2.7.b).

a. Turbine Stop Valves Closure at about 40% power levels (RPS)

b. Low Turbine Control Valves Oil Pressure (Fast Closure) at above 40% power levels (RPS]

[The above is not complete RPS example]

135 1

.c i

Table 2.3.1.1. SUPPLEMENT NUMBER 4 (Continued)

COMMENTS AND NOTES This material is an example of the level of detail for an important safety-related mode of operation. j Other descriptions many have considerably less detail.

The sequence of operation modes should be discussed in following order:

1. Automatic

2. Manual

3. Fail-safe

4. Other (for example, reset logic with safety significance such as the RPS reset logic to assure scram completion)

This is applicable to mechanical systems with safety-related I&C.

G 136

,f, .

p

.. i l

Table 2.3.1.1. SUPPLEMENT NUMBER 5 TECHNICAL ISSUE Power supplies.

EXA51PLES OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT i Safety-Related System - Standardized wording )

1 l

Each of the four RPS divisional logic and associated sensors is powered from its 1 respective divisional Class IE power supply.

r Non-Safety-Related (with " safety significance") Example j'

1 Each channel of the FDWC System is powered by separate non-Class IE uninterruptible power supplies..

CO5151ENTS AND NOTES 1

For I&C Systems, the preferred approach is to treat this issue in the text. Figure treatment is acceptable if it is more appropriate. The design description text of safety-related systems should address power to component, sensors, and control logic. Where the power to mechanical and I&C portion of a mechanical system division is the same respective power source, do not describe power source separately.

Non-safety-related systems do not have to identify power supply unless it is important to a safety significant function of the system.

I i

137 '

Table 2.3.1.1. SUPPLEh1ENT NUh1BER 6 TECHNICAL ISSUE Independence EXASIPLES OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT In the RPS, independence is provided between Class IE divisions and also between the Class IE divisions and non-Class IE equipment.

CONISIENTS AND NOTES Any exceptions to this statement should be identified in the Acceptance Criteria column of the corresponding ITAAC entry for independence.

Independence sentence above required for all safety-related I&C. Further explanation of exceptions, or how independence is accomplished, may be used as necessary for special cases.

This is applicable to mechanical systems with safety-related I&C.

l 138 i

Table 2.3.1.1. SUPPLEh1ENT NUS1BER 7 TECIINICAL ISSUE Location, layout EXANIPLES OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT These RPS controls and displays are provided in the main control room. RPS sensors are turbine control valve-oil pressure switches, turbine stop-valve position switches, and turbine first-stage pressure sensors. These sensors are located in the Turbine Building.

l CON 151ENTS AND NOTES Discussion oflocation for mechanical systems may need modification to include safety-related I&C (logic processors covered by SSLC).

I l

i l

4 139

. . . . . . _ _ . _ . _ _ _ . _ . . . _ _ _ _ . . - . . _ - - . . - ------J

Table 2.3.1 l. SUPPLEMENT NUMBER 8 -

TECIINICAL ISSUE Instrumentation and Controls A. Main Control Room EXAMPLES OF WORDS TO BE USED IN THE DESIGN DESCRIPTION TEXT

- Preferred example The LDS has the following displays and controls in the main control room:

1. Parameter displays for LDS plant sensors defined on Figure 2.4.3

2. LDS manual controls as described above (or defined on Figure if appropriate).

3. LDS divisional Trip Status COMMENTS AND NOTES Alarms should be added if (and only if) any are identified in the design description.

140 l

Table 2.3.1.1. SUPPLEMENT NUMBER 9 TECHNICAL ISSUE Instrumentation and Controls B. Remote Shutdown System EXAMPLES OF WORDS TO DE USED IN THE DESIGN DESCRIPTION TEXT RHR System components with display and control interfaces with the Remote Shutdown System (RSS) are shown on Figure 2.4.1.a and 2.4.1.b.

COM31ENTS AND NOTES The Remote Shutdown System has no alarms.

I 141

Table 2.3.1.1. SUPPLEMENT NUh1BER 10 TECIINICAL ISSUE Special Features.

EXAhlPLES OF WORDS TO BE USED IN TIIE DESIGN DESCRIPTION TEXT

1. The RPS ' logic seals in the scram signal, and permits reset of scram logic after a time delay of at least 10 seconds.

COhlhlENTS AND NOTES This type of spec"il issue must be treated on a case-by-case basis. In this example, the reset timer is required to assure completion of safety function. Resets are not normally in the CDM.

i l

l l

e 142

4 2.3.2 CDSI Design Description Figures and Diagrams (Refer to Section 2.2 for general guidance for CDM Figures.)

i 2.3.2.1 Figure / Diagram Checklist Table 2.3.2.1 is a checklist of items that needs to be considered when preparing figures for instrumentation and control systems and for safety-related mechanical systerns that include Control Interface Diagrams in the Design Description.

143 l

Table 2.3.2.1. CHECKLIST OF ITEMS TO BE CONSIDERED WHEN PREPARING I&C SYSTEM CDM DIAGRAMS ISSUE CORRECT TREATMENT Figure number and Identical to design description section number and system title.

system title.

Scope Include all equipment items addressed in the design description.

Numbering (multiple Use section number with lower case subscripts; e.g., figures 2.17.2a, figures) 2.17.2b.....

System boundary Show system boundaries by identifying interfacing systems. For I&C systems where inputs from multiple systems are identified, the

, systems should be clearly identified, and ITAAC will be identified only for the system that is subject of the DD section.

Power Supply It is preferred to address power supply in text for I&C systems. If addressed on the figure, modify the following RPS example to suit the figure: "Each of the four RPS divisionallogic and associated sensors is power from its respective divisional class IE power supply".

State any exception to power supply divisions.

Terms All component names to be consistent with what is used in Design Description.

System name to be consistent with CDM Table of Contents listing.

l 144 I

1

Table 2.3.2.1. CHECKLIST OF ITEMS TO BE CONSIDERED WHEN PREPARING I&C SYSTEM CDM DIAGRAMS (Continued)

ISSUE CORRECT TREATMENT

{

Plant Sensors Identify plant sensors that interface with the control logic. State the sensed parameter only; do not give trip condition such as high or low.

Sensed parameters should have identical name in text, on Figure, in Design Description ofinterfacing system, and ABWR SSAR. i Symbols All symbols to be as shown in the Legend.

Remote Shutdown Denote components that have status display and/or control interfaces System with Remote Shutdown System with a "R" on the figure.

Legend Do not define legend on figure. Add any symbols and abbreviations to CDM Appendix A for legend. Exceptions may be made if symbols or abbreviation used only on the one figure.

Notes Provide notes under a heading for " Notes" and number all notes (even if there is only one note).

i

)

L 145 l

-ll l;

i

2.3.3 CDM Inspection, Tests, Analyses and Acceptance Criteria (ITAAC)

(See 2A for generally applicable discussion.)

2.3.3.1 ITAAC Table Checklist The sequence in which subjects should be listed in the ITAAC tables must follow as closely as possible the design description sequence defined in Table 2.3.1.1. Table 2.3.3.1 is a list of the technical subjects which should be considered for ITAAC table entries. Maximum use should be made of the standardized ITAAC table entries provided in the supplements to Table 2.3.3.1. These standardized entries should be modified as needed for apphcation to a particular system but are intended to be replicated verbatim unless there are legitimate reasons for not doing so. The sequence in Table 2.3.3.1 is based on the order in which subjects are addressed in the design description (Table 2.3.1.1) and should be followed to the extent practicable and/or applicable.

I I

l l

146

l!l, j e

2 k t s s c n t n

) o e e e l r m m c e e e n

a tn lp lp n i p p n d n

u u 1

f o a S S r

r e e c n s

p ig o E b m m & o i t

e L u )

l p t s .

B s e i

r y s N

e C c c A d n s s m o A T t n a d e d e t e

C e m D m r n t

a s

y m C o g s A m l e f e A

l p t e

s

& r e

is e

r -

d e

p I y

T u y s

y p d t e

t a

I S b r e f l

e N r o ht a r T n o d e

j a s y S

I o /

d r n r I T n n e m i o t e

v s d f f L N w a e a K o n o s e s s s E o c r s e -

C h n d u l

p n E M s s

it a o d c m o

l T dr r i t a s a n i

C A u c

a o id x r o

F o ig i t

s e f E R w f n fi s e a e s L d o l

a i n v e

_ B T e c u t r

n g i g

l p m_

z i

_ A i dr y Q e s e d m T

_ b c 2 a _

C d _

a d i

d x C e m A e e d

n r h n A a e i s A t a w A t v e T f o c o

T s o S I 2 h I e c (

e s s e

( d f

ht .

r b e e e e. i v u 2 2 1

e n n n n 3 s o o o o r

t a a

, d n o U N N N P f e 2 a N 3

2 le ET b L N*

T a BER AME CEB i

- - - 2 -

L LM I

P P PU P UN AS d

e n t o e a i t

c l

e a n r

- ic f

a y i mr t

e s d f s o "

a n a f s

l r

E a - C e s e n p -

U p o c dr -

n i

d a S o m n S c s c e e r o

s a d n

I s i e s

, a o d e a e n f r p e S S t

m o e r t d -

u a m e a i t

t n P l e

d n

h n a I e m r

u l r t

s a m g o r

m y

- y m s e i t e t S e e t

s f

n t e t s d n o s f d y o y o y a n C S c C S S a S -

i f

m lll{flll' l l.

Table 2.3.3.1. ITAAC TABLE CllECKLIST (Continued)

APPLICAHLE SUPPLEMENT ISSUE NUMBER

• TREATMENT IN ITAAC TAllLE Power Supplies 3 Covered by independence check for safety-related systems. See Supplement 3 for non-safety-related system.

Independence 4 Use the standardized words shown on Supplement 4.

Location, Layout - None, unless there is a specific special case that should be addressed.

Instrumentation and Controls 5,6 Use the standardized words shown on Supplements 5 and 6.

Equipment Qualification - None. (Covered by I&C DAC.)

Special Features 7 Treat case-by-case. See Supplement 7 for an example.

• Supplements to this table provide standardize and/or recommended wording for these CDM entries.

NOTE The following supplements to Table 2.3.3.1 are examples only of ITAAC entries for various subjects and should, if possible, be used verbatim. However, they should by used only to the extent applicable and in many cases may require system-specific modifications. Funhermore, not all systems will require ITAAC entries for each of the technical subjects covered in Table 2.3.3.1. (Only provide ITAAC entries to the extent subjects as addressed in the design description l

l text.)

l l

l

.j l

149

. ~ .. .. __ ___ . _ _ . _ _ _ - - _ _ _ . ---- ._

F 4

.y - ,

1 Table 2.3.3.1. SUPPLEMENT NUMBER I 1 TECHNICAL ISSUE ,

1. Configuration ,

i STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TFSTS,' ANALYSFS ACCEPTANCE CRITERIA

1. ~ The equipment comprising the - 1. Inspections of the as-built system will 1. The as-built System  !

System is defined in Section be conducted. conforms wirls the description in - . -;

Section G

o COMMENTS AND NOTES

- This entry is intended to be'a general verification that the system described in the design description is in place in the as-huilt plant.

Particularly critical system characteristics may well justify a separate ITAAC table entry.

, I e.

._m

')

9.

Table 2.3.3.1. SUPPLEMENT NUMBER 2a TECIINICAL ISSUE 2a. System Modes and Performance - Automatic Mode Logic Test l

l STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEL"rANCE CRITERIA

2. RPS logic uses four independent 2. Tests will be conducted using 2. The RPS LDs change their states to

{ sensor instrument channels of each simulated input signals for each interrupt electrical power to scram process variable described in Section process variable to cause trip solenoids. RPS back-up scram relays u 1

~

2.2.7 for its automatic scram function. conditions in two, three, and four close and RCIS relays close to provide instrument channels of the same signals to RCIS. )

process variable.

COMMENTS AND. NOTES

- This is an example only. These logic-based entries must be developed on a system-specific basis.

- This ITAAC example applies to mechanical systems with safety-related I&C.

I l

t

Table 2.3.3.1 SUPPLEMENT NUMBER 2b ,

d TECHNICAL' ISSUE t

2b. System Modes and Performance - Manual Controls STANDARDIZED ITAAC TABLE ENTRY .

DFSIGN COMMITMENT INSPECTIONS, TFSTS, ANALYSES ACCEPTANCE CRITERIA

3. For manual scram initiation two 3. Tests will be conducted by depressing 3. When manual scram push-button A is ,

manual scram push-buttons of the the A scram push-button, the B scram depressed Division 11 AC power to A RPS must be simultaneously push-button, and both. scram solenoids is interrupted. When -

u-

" scram push-button B is depressed .

depressed.

Division 111 AC power to B scram solenoids is interrupted. When both' A  ;

& B scram push-buttons are depressed reactor scram occurs. RPS back-up i scram relays close to energize the solenoids of scram air header dump -

? ..

L valves and RCIS relays close to s

i provide signals to RCIS. -

j.

i j..

Table 2.3.3.1. SUPPLEh1ENT NUMBER 2b (Continued)

COMMENTS AND NOTES 1

This is an example only. These logic-based entries must be developed on a system-specific basis.

This ITAAC example applies to mechanical systems with safety-related I&C.

G w

4 Table 23.3.1. SUPPLEMENT NUMBER 2c TECHNICAL' ISSUE 2c. System Modes and Performance - Fail-Safe -

STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA .

4. RPS design is fail-safe in the event of '4. Tests will be conducted by 4. Upon loss of electrical power to one loss of electrical power to one division disconnecting electrical power to one division of RPS logic, the LDs of that >.

of RPS logic. division of RPS logic at a time. division change their state to intenupt

.T electrical power to scram soleno.ds.

i ,

COMMENTS AND NOTES

- This is'an example only. These logic-based' entries must be developed on a system-specilie basis.

e e

O n  %

Table 2.3 3.1. SUPPLEMENT NUMBER 2d TECIINICAL ISSUE 2d. System Modes and Performance - Other STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSTECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA 5.- Each MSIV can be subjected to a 5. Tests will be conducted by actuating 5. When the test switch is activated. the panial closure from the main control each MSIV test switch. MSIV panially closes and then room. reopens automatically.

3 COMMENTS AND NOTFS This is an example only. These logic-based entries must be developed on a system-specific basis.

Table 2.3.3.1. SUPPLEMENT NUMBER 2e TECIINICAL ISSUE 2e. System Modes and Performance - Non-Safety-Related I&C System - Safety Significant Functions STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TFSTS, ANALYSES ACCEI"I'ANCE CRITERIA

8. The FDWC System monitors reactor 8. Using simulated RPV water level 8. When a high RPV water level setpoint waterlevel signals and,if a high RPV signals, testing will be performed on is reached, trip signals are issued to water level setpoint is reached, issues the FDWC System. Turbine Control System and trip signals to the Turbine Control Condensate, Feedwater and System and to the CFCAE System. Condensate Air Extraction System.

If a low RPV water level setpoint is In the event that a low RPV water level reached, the FDWC System issues trip setpoint is reached, trip signal is issued  ;

l signals to the RFC System. to the RFC System. ,

1 COMMENTS AND NOTES I

l This is an example only. These logic-based entries must be developed on a system-specific basis. i O

w ; ... . . . . .. . , . . . . . . . , , .. . . . . . , , . . . , , . . . . . . . . . . . - . . . , . .

_. m

o-Table 2.3.3.1. SUPPLEMENT NUMBER 2f TECifNICAL ISSUE 2f. System Modes and Performance - Non-Safety-Related I&C System - Normal Control Function STANDARDIZED ITAAC TABLE. ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEL"I'ANCE CRITERIA d

10. The FDWC system controls the flow 10. A test will be performed by 10. The signal to increase feedwater flow of feedwater into the RPV. simulating a decreasing reactor level occurs.

signal.

COMMENTS AND NOTES

- This is an example"only. These logic-based entries must be developed on a system-specific basis.

i 4

9

_______-_.___:____.______2_____.___.__________u_.___

_ _ _ . _ . - ______E. 1 m 2 4- J

_ < _ m - __ -- -___.__ _ . _ _ $E

..y s .

I Table 233.1. SUPPLEMENT NUMBER 3 I TECEINICAL ISSUE

3. Power Supplies

STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSFS ACCEPTANCE CRITERIA

5. The FDWC System digital controllers 5. ~ Tests will be performed by providing 5. Tie test signal exists in only one are powered by separate non-Class IE a test signal in only one non-Class 1E digital control channel at a tine.

uninterruptib!e power supplies. - uninterruptible power supply at a E time.

COMMENTS AND NOTES q

' Power supplies for safety-related systems are covered by the independence ITAAC (See supplement number 4). Power supply ITAAC is used for non-safety-related system only when power supply is judged to be safety-significant and included in the Design Description.-

.----lA-..s. .. .

$. _l_ _ __ _ _ _ _ _ _ _ _ _ _ . _ _ _ , _ _ _ _ _ _ _ _ _ _ _ _

n Table 2.3.3.1. SUPPLEMENT NUMBER 4 TECIINICAL ISSUE

4. Independence STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA

7. Each of the four LDS divisional logic 7. 7.

channels and associated seasons is

a. Tests will be performed on the LDS a. The test signal exists only in the powered from its respective divisional G by providing a test signal to only Class 1E division under test in the Class IE power supply. In the LDS, one Class IE division at a time. LDS.

independence is provided between Class IE divisions, and between Class b. Inspection of the as-installed Class b. In the LDS, physical separation or iE divisions and non-Class iE IE divisions in the LDS will be electrical isolation exists between equipment. performed. Class !E divisions. Physical separation or electrical isolation exists between these Class ! E divisions and non-Class iE equipnent.

Table 2.3.3.1. SUPPLEMENT NUMBER 4 (Continued)

COMMENTS AND NOTES Any instances where this independence is not maintained should be clearly identified in the Acceptance Criteria and Design Description.

This ITAAC example applies to mechanical systems with safety-related I&C.

S' 4 '

Table 23.3.1. SUPPLEMENT NUMBER 5 l

TECilNICAL ISSUE 1

5. Instmmentation and Controls 1

Main Control Room l I

STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSFS ACCEPTANCE CRITERIA

13. Main control room alarms,* displays 13. Inspections will be pertermed on the 13. Alanns,* displays and controls exist

~~

cs and controls provided for the main control room alaans,' displays or can be retrieved in the main control System are as defined in Section and controls for the System. room as defined in Section I

COMMENTS AND NOTES

• Delete any categeies for which no entries are included in the Design Description.

. _ = . . - _ _ _ _ _ - _

. W -

e s b a n m a o c o r r o l t

s o

r i t x n .

e o 3 _

s c 4 l

o i n 2 r a t

n n o m i o >

c e t c

ht e -

d n n S ,

a i n

s d i y e d u a v e -

lp i e n s r i f

i t e e D r d -

)

d e 8 u

i n

t n

o e C( ht 5 n R o d n

E d e a -

B s m y M r o a U f r

lp N e p d i

s .

S T e D N b m L E o l

l o e M i w

r ht E s l

o r L n t r o -

P o n f P i t o s U c c l o

S e n r p t s

i a n n m o

1 I c 3

3 2 8.

e lb a -

T m e

t s

y d S n S 3 a

s D 4 y L a 2 l

p h e n s s t i

o w

i r t -

d o c

o f e l

l m d S o o e n f

s o

r di i a v d i

s dr o r

e n

y t

n p i f

r o s e t

c l d n o s e i n t r

a S a n e D M o c

r a

L e

h 8 T

Ew

~

Table 2.3.3.1. SUPPLEMENT NUMBER 6 TECIINICAL ISSUE

6. Instrumentation and Controls Remote Shutdown System STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ' ACCEPTANCE CRITERIA-

14. Remote Shutdown System (RSS) 14. Inspections will be performed on the 14. Displays and controls

• exist on the y displays and/or controls

• provided for RSS displays and controls

• for the RSS as defined in Section the System are as defined in- System.

Section - .

COMMENTS AND NOTES Only to be used for those systems with RSS interfaces.

% 4

• Delete any categories for which no entries are included in the Design Description.-

l l

i l Table 2.3.3.1. SUPPLEMENT NUMilER 6 (Continued)

The IIPCF entry is as follows:

7. RSS displays and controls provided 7. Inspections will be performed on the 7. Displays and controls exist on the RSS for the llPFC System are as defined in RSS displays and controls for the as defined in Section 2A.2.

Section 2.4.2. IIPCF Systent

}

+n -

n a

Table 2.3.3.1. SUPPLEMENT NUMBER 7 TECIINICAL ISSUE

7. Special Features STANDARDIZED ITAAC TABLE ENTRY DESIGN COMMITMENT INSPECTIONS, TESTS, ANALYSES ACCEPTANCE CRITERIA

7. Tests will be performed by simulating 7. There is no foss of FDWC System ]

7. Digital controllers used for the FDWC System are redundant. failure of each operating I~DWC output upon loss of any one digital y 8. Digital controllers used for the FDWC

8. Tests will be performed by simulating 8. There is no loss of FDWC System System have diagnostic capabilities that identify and isolate failure of level levelinput signal failures to the output upon loss of any one level input FDWC System digital controllers. signal.

input signals. l l

COMMENTS AND NOTES

- These are examples of special features for non-safety-related system that were judged to warrant CDM treatarnt due to safety I

significance of this system.

l l

a.--_ - _ - _ . - - - -- - ._ u -- _ --_ - - - -_ _-- ._- _ .- ._.-.-_---

. - . . .-.-.. . - . .~ .

1

.ABWR DESIGN CERTIFICATION CDM GUIDELINES ME510RANDU51 i 1

ATTACHMENT NUMBER 2.3 t

t .

> STRUCTURES AND BUILDINGS _  !

k b

CONTENTS 2.4' Structures and Buildings {

?

s

')

.q 1

4:  ;

i 166' d

2

i l

1 '

2.4 Structures and Buildings Each of the ABWR structures and buildings has unique characteristics which make development of general guidelines of limited value. The attached Tables 2.4a and 2.4b for the Reactor Building and Turbine Building (R/B and T/B) summarize the basic approach for these two buildings -- one  ;

I of which is an important Seismi, ..egory I structure and one of which is a non-safety-related, )

non-Seismic Category I structure containing no safety-related equipment. Specific R/B and T/B '

CDM material has been developed on the basis of these tables. The summary tables and the CDM ,

entries for the R/B and T/B should be used as guidance for denloping CDM material for other ABWR structures and buildings.

The overall approach to ABWR structures is summarized on Table 2.4c.

1 4

i l

l l

y

- -1 l

167 i

Table 2Aa. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT DESIGN TECIINICAL ISSUE DFSCRIPTION ITAAC BASIS A. Overview Building name, scope, type. Yes Yes (Configuration) Follows mechanical system pattern. DD configuration references the figures.

B. Arrangement-Related Issues General Arrangement: Yes (part of A) Yes (part of A) -

g

'* Yes(part of A) No Dimensions for information only.

- Overall building dimensions

- General equipment layout Yes(part of A) Yes (part of A) -

- Detailed equipment layout No No Detail design; depends on as-built, as-procured equipment.' ,

- Dimensions of stmetural items (walls, No No Some special case exceptions -- dimensions with tolerances not known at time of design etc.)

certification l

O

w Table 2.4a. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECIINICAL ISSUE DESCRIPTION ITAAC BASIS B. Arrangement-Related Issues (Cont.)

Divisional Boundaries:

- Overall Yes (part of A) Yes (part of A) -

- Intemal flood; doors and sills i es (part of A) Yes (part of A) -

- Intemalikxxl; drains No No Cover under CDM drain system entry.

S

- Intemal flood analysis Yes Yes Confirm worst case thxxl event. Prepare Flmi Evaluation report.

hour fire barrier in place Yes (part of A) Yes (part of A) -

Extemal Flooding:

- Wall thickness, penetrations Yes Yes -

-- Seals / water stops No No -

. = _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _

Y

- Table 2.4a. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECIINICAL ISSUE DESCRIPTION ITAAC BASIS B. Arrangement-Related Issues (Cont.)

Pipe Break Protection

- Pipe whip No No Detail design dependent. Covered by piping DAC.

- Jet impingement No No G

o No Not covered in building arrangement.

- Subcompartment pressurization Yes Internal Missile Protection No No No missiles anticipated. Walls are back-up protection and are covered by Item A.

External Missile Protection No No Covered by stmetural capability evaluation report - See C.

Secondary Contained Boundary Yes (part of A) Yes (part of A) -

L rw- r -

d Table 2.4a. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECEINICAL ISSUE DESCRIPTION ITA AC BASIS B. Arrangement-Related Issues (Cont.)

Radiation Protection

- Clean / controlled zone definitions No No Covered by radiation DAC.

Personnel Access Yes (part of A) Yes(part of A)

Security Provisions Not discussed in public documents 2

Embedment Depth Yes Yes C. Structural Design Issues No (Seismic No CDM is not calling out codes and standards.

Applicable Codes and Standards Category I only)-

Site Parameters and Seismic Input No No Covered by CDM Section 5 Site Parameters.

Compliance assessment to be provided by COL applicant.

. -. . . = - . . - . . . . . , . . . .

.p

. cas F

Table 2.4a. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued) ,

DESIGN L TECIINICAL ISSUE DESCRIPTION ITAAC HASIS i C. Structural Design Issues (Cont.)

~ Ability of As-Built Structure to Yes (State design Yes Covered by structural analysis report item.

Withstand Design Basis Load bases).

Combinations -z Construction Processes 1 No. No  :

. d - Rebar }

No - No l Not CDM issues. Subject to verification by ' >

-- Excavation / Backfill QA/QC.  :

Concrete properties No No )

f P

- Others No - No .}

D. .

.SpecialTopics - -

3 No - No' Covered under Fire Protection 2.15.6.-

Fire Detection and Alarm Features 5

e

..- + _ - . - - - - _ - . _ _ _ . - _ - - - = - , - - - , , -

- a ~ , ,r~s,e a <

Table 2.4a. - ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued)

DFSIGN TECIINICAL ISSUE DESCRIPTION ITAAC BASIS D. Special Topics (ConL)

Fire Suppression Features No No Covered under Fire Protection 2.15.6.

Combustible Loading No No COL Action Item. Equipment and licensee dependent.

CRD/SLCS Separation Yes (part of A) Yes (pan of A) CRD and SLC system entries also will address this item.

3 Secondarf Containment Leakage and No No Covered by SGTS 2.14.4.

Leakage Control Fire Dampers and Other Smoke Control No No Covered by IIVAC Systems 2.15.5.

Features No No Design details.

EQ Zones l

Table 2Aa. ABWR REACTOR BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECIINICAL ISSUE DESCRIPTION ITAAC llASIS D. Special Topics (Cont.)

Load Drop Considerations No No ent is not a building design basis event.

Procedural requirements covered in Cranes and lloists 2.153.

PRA Yes Yes Items to added it they are:

a. CDM G

^ b. Not covered by the above. >

i S

e a

h

- 4 e

w _ .A A ____. _______ ______ _ ____._m_.__

m-Table 2Ab. ABWR TURBINE BUILDING. PROPOSED CDM TQATMENT l DESIGN TECIINICAL ISSUE DESCRIPTION ITAAC BASIS A. Overview Building name, scope, type, Yes Yes (Configuration) Follows general CDM pattern. Use text (not i

configuration figure) as basis for the configuration check.

l (Arrangement is turbine vendor dependent.)

l B. Arrangement-Related Issues General Arrangement Yes Yes (part of A) -

]

- Overall building dimensions No No Dimensions not important to safety. Firm dimensions to be established via detail design.

- General equipment layout No No l Not required for non-safety-related power j gener tion equipment.

- Detailed equipment layout No No

- Dimensions of stmeturalitems(walls, No No Detailed design information.

etc.)

1. -2 Table 2.4b. ABWR TURBINE BUILDING. PROPOSED CDM TREATMENT (Continued)

DFSIGN TECHNICAL ISSUE DESCRIPTION ITAAC BASIS B. _ Arrangement-Related l!ssues (Cont.)

Divisions Fires, Internal Floods No No Issues not retevant to Turbine Building.

Condenser Pit Flooding No No Protection provided by features in the Circulating Water System 2.10.23.

Flooding into Service and Control Yes Yes (part of A) Related to flood protection of Control Building. '

h Building -

External Flooding: No No No flooding protection required.

Pipe Break Protection - )

- Pipe whip ). Issues not applicable to Turbine Building.:

(Steam tunnel covered under Reactor Building

- Jet impingement } No No 2.15.10.) -

- Subcompartment pressurization ).

• O

___=_=_____________m

-4 s

Table 2.4b. ABWR TURBINE BUILDING. PROPOSED CDM TREATMENT (Continued)

DFSIGN TECHNICAL ISSUE DESCRIPTION ITAAC BASIS B. Arrangement-Related Issues (Cont.)

Internal Missiles No No Issue not applicable to Turbine Building.

Radiation Protection No No Covered by radiation DAC.

Personnel and Equipment Access No No Not CDM material.

Security Provisions - Not discussed in public documents -

! d C. Structural Design Issues Codes and Standards No (Identify Non- No Codes and Standards not identified in CDM.

Seismic Category I)

Site Parameters No No Covered by CDM Section 5 - Site Parameters.

Stmetural Capability

- Design basis ' No No Not a Seismic Category I structure.

Table 2Ab. ABWR TURBINE BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECIINICA L ISSITE DESCRIPTION ITAAC BASIS C. Structural Design issues (Cont.)

Structural Capabil.ty (Cont.)

- Collapse issues Yes Yes

-- Earthquake

- Tornado design No No Not a Seismic Category I structure. CDM treatment not required.

3 No No Not a Seismic Category I structure. CDM

- Rain / snow treatment not required.

D. SpecialTopics Na No Not a CDM issue.

Construction Processes No No Covered (as necessary) by Fire Protection Fire Detection and Alarms 2.15.6.

f

R s

Table 2.4b. ABWR TURBINE BUILDING. PROPOSED CDM TREATMENT (Continued)

DESIGN TECHNICAL ISSUE DESCRIPTION ITAAC BASIS l

D. Special Topics (Cont.) J j

! )

Fire Suppression Features No No Covered (as necessary) by Fire Protection j l

i 2.15.6. 1 i

i' Combustible Loading No No COL Action Item.

Load Drop Considerations No No Not an issue for the Turbine Building.

G C

Fire Dampers and Smoke Control No No Covered (as necessary) by the ilVAC System .;

Features 2,15.5.

i EQ Zones No No Not a CDM issue.

4 No No Covered in Turbine System 2.10.7. --I Turbine Axis of Rotation

Table 2.4c. ABWR DESIGN CERTIFICATION -

SUMMARY

OF CDM TREATMENT FOR BUILDINGS BUILDING CDM APPROACII BASIS Reactor Address features of safety significance and general Important Seismic Category I Structure.

arrangement.

Control Address features of safety significance and general Important Seismic Category 1 Structure.

arrangement.

Turbine Limited coverage. Address only items with safety Non-seismic Category 1. Few areas of safety significance.

significance. No figures.

E Service Limited coverage. Simple configuration. No figures. Non-seismic Category 1. Need to address location of TSC and OSC. No other items of safety significance.

Radwaste Limited coverage. Include the radwaste tunnel. No Partially seismic Category I but no items of safety figures. significance.

8 l 8

_ _ - - - _ _ - - _ - _ _ - - _ _ - _ _ _ _ - _ _ _ _ _ . - .- . _ _ _ _ _ _____ _ - . _ - - _ _ _ - . _ _ _ _ _ _ - _ - - - _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _- _ _ _ _ _