ML20210U369
| ML20210U369 | |
| Person / Time | |
|---|---|
| Site: | Millstone  |
| Issue date: | 09/16/1997 |
| From: | Czajkowski R, Neri A, Tom Ryan SARGENT & LUNDY, INC. |
| To: | |
| Shared Package | |
| ML20210U355 | List:
|
| References | |
| PI-MP3-02, PI-MP3-2, NUDOCS 9709190124 | |
| Download: ML20210U369 (27) | |
Text
_ _ _ _ _ _ _ - _ _ - _ _ _ _ _ _ - _ _ ____ _ _ _ _
((
PROJECT INSTRUCTION
- D ,#""' INSTRUCTION Pl MP3 02 REV. 4 Client: Northeast Utilities Station: Millstone Unit 3
Title:
REVIEW OF SYSTEM DESIGN FOR COMPLtANCE WITH THE DESIGN AND LICENSING BASIS i
h Safety Related _ Non Safety Related Reviewed By: Approved By:
System Lead Programmatic O&M Lead Accident QA Engineer Intemal Review Verification Team Lead Mitigation Committee Manager Lead Chairman l Date: N4A?
tN N.,,0 WE W N$~~ 6176 - NhiuA & & /L j AYLpC lsrL%kI' -
Descrihtion V l7 (ji 0(_)
'1 Rev. 4 Rnisd PI to:
Clarify the scope of rniew for non safety related instrumentation l
- Clarify the scope of the EQ/SQ & rniew l
Allow dniation from standard component rniew checklists l
Page 1 of 19 9709190124 970917 PDR P ADOCK 05000423 pon
d PROJECT >#' INSTRUCTION PI-MP3-02
- INSTRUCTION .- REV. 4 l i
1.0 PURPOSE
\.
This instruction establishes the requirements for the design review of systems j included in the scope of the Independent Corrective Action Verification Program (ICAVP). The purpose of the design review is to verify the system design as reflected on design output documents and design process documents is consistent with the plant's Design and Licensing Basis. Additionally, the design l' review will verify technical adequacy of design process documents. This review
- >rocess in conjunction with the modification review process (Pl MP3-03) operating, maintenance and testing review process (Pl-MP3-06) and plant configuration walkdowns (PI MP3-05) will verify that the current as modified system is capable of the functional requirements contained in the design and j licensing basis documentation.
2.0 REFERENCE 2.1 NRC Inspection Manual Procedure 93801, Safety System Functional inspection 2.2 NRC Inspection Manual, Chapter 2535, Design Verification Programs 2.3 10CFR50.2, Definlilons 2.4 NRC Confirmatory Order Establishing independent Correction Action Verification Program - Millstone Nuclear Power Station, Units 1, 2, and
- 3 2.5 NUMARC 90-12, Design Basis Program Guidelines 2.6 PI-MP3-06, Operations and Maintenance and Testing Procedures and Training Documentation Reviews
! 2.7 PI-MP3-07, Review of System Design for Compliance with the Design and Licensing Basis i 2.8 PI-MP3-09, Preparation and Approval of Checklists 2.9 PI-MP3-11, Discrepancy Report Submittal and Closure 2.10 PI-MP3-12, Project File Index Page 2 of 19
PROJECT INSTRUCTION PI-MP3-02 INSTRUCTION ,
REV. 4 l
2.11 CK-MP3-02 Series Checklists as follows:
CK-MP3 02-01 System Reference List CK-MP3-02-02 System Requirements List CK-MP3-02-03 Design Process Document Review Checklist CK-MP3-02-04.1 PalD Review Checklist CK-MP3-02 04.2 Logic Diagram Review Checklist CK-MP3 02 04.3 Electrical Schematic Review Checklist CK-MP3-02-05.1 Mechanical Component Review CK-MP3-02-05.2 Electrical Component Review CK-MP3-02-05.3 l&C Component Review CK-MP3-02-06 Topical Area Review Ngja: Checklists used in the performance of this Pl are not included as attachments to the Pl. Checklists are prepared and controlled as separate documents per PI-MP3-09.
3.0 DEFINITIONS 3.1 Accident Mitigation Systems Review Group (ARG)- The subgroup of the ICAVP Verification Team responsible for review of critical characteristics of accident mitigation systems to ensure those systems can perform their required safety functions.
3.2 Operations & Maintenance and Testing Review Group (ORG)- The subgroup of the ICAVP Verification Team responsible for the review of the operating, maintenance and testing procedures, and training materials for the systems within the scope of the ICAVP.
3.3 System Review Group (SRG)- The subgroup of the ICAVP Verification Team responsible for performing an in-depth review of the design of the systems in the scope of the ICAVP.
3.4 Configuration Review Group (CRG)- The subgroup of the SRG Verification Team respnsible for walkdowns to verify the current as-built conditions are in conformance with the design output documents.
O Page 3 of 19 .
I
PROJECT ""
INSTRUCTION PI-MP3-02 INSTRUCTION REV. 4 l 3.5 Design Bases The information which identifies the specific functions to be performed by a structure, system or component of a facility, and the specific values or ranges of values chosen for controlling parameters as reference bounds for design. These values may be (1) restraints derived from generally accepted ' state of the art' practices for achieving functional goals or (2) requirements derived from analysis of the effects of a postulated accident for which a structure, system or component must meet its functional goals (Reference 2.3).
l 3.6 Dealgn Output Documents Controlled plant documents such as i
specifications, drawings, vendor drawings, datasheets, lists and databases (Reference 2.5).
! 3.7 Design Procoes Documents - Documents such as calculations, analysis, evaluations or other documented engineering activities that substantiate the final design (Reference 2.5).
3.8 Current Licensing Basis (CLB) - The set of NRC requirements applicable to a specific plant, and a licensee's written commitments for assuring compliance with and operation within applicable NRC requirements and the plant specific design basis (including all modifications and additions to such commitments over the life of the license) that are docketed and are in effect. The CLB includes the NRC regulations contained in 10 CFR Pads 2,19, 20, 21, 30, 40, 50, 51, 55, 72, 73,100 and appendices thereto; orders; license conditions; exemptions, and Technical Specifications (TS). It also includes the plant-specific design basis information defined in 10 CFR 50.2 as documented in the most recent Final Safety Analysis Report (FSAR) as required by 10 CFR 50.71 and the licensee's commitments remaining in effect that were made in docketed licensing correspondence such as licensee responses to NRC bulletins, generic letters, and enforcement actions, as well as licensee commitments documented in NRC safety evaluations or licensee event reports.
(Reference 2.7) 3.9 Verifier The individual assigned to review engineering attributes within his area of responsibility.
O Page 4 of 19
PROJECT INSTRUCTION -
~v" " INSTRUCTION PI MP3-02 REV. 4 l 4.0 RESFONSIBILITIES 4.1 The Verification Team Manager shall be responsible for overall management of the Verification Team.
4.2 The SRG Lead shall be responsible for assigning the Lead Verifier for each system in the ICAVP scope and for overall coordination of the SRG effort.
4.3 The Lead Verifier shall be responsible for performing system reviews for the attributes within his area of expertise and for assigning verifiers with appropriate background for review of remaining attributes.
4.4 The Verifiers shall be responsible for performing reviews of engineering attributes within their area of expertise in accordance with this instruction.
, 5.0 PROCEDURE 5.1 General The Nuclear Regulatory Commission (NRC) Confirmatery Order referenced in Section 2.0 of this PI requires Northeast Utilities (NU) to implement the ICAVP. The Confirmatory order also defines the scope of the ICAVP. Item 2 of the scope of the ICAVP described on page 13 of the Confirmatory order requires the Licensee to verify the current as-modified plant conditions against design basis and licensing basis documentation. This procedure describes one aspect of the process needed to perform the verification described above. Specifically, this procedure will determine if the current system design as reflected on design output documents and design process documents is consistent with the system design basis and licensing basis documentation. This review is not intended to verify the design basis at @ted in the Licensing Basis Documentation is consistent with the Licensing Basis.
For example, a design basis consideration that may be describad in the FSAR is that the system is designated a Quality Class i system in accordance with RG1.26. This review will verify the design of the system was performed to Quality Class 1 standards. This review will not verify that the Quality Class 1 designation was applied correctly O per the guidelines of RG1.26. In other words, this procedure verifies the design basis requirement is properly incorporated in the design Page 5 of 19
PROJECT INSTRUCTION - " 7 ""
INSTRUCTION PI-MP3 02 REV. 4 l and does not verify the design basis is in conformance with the licensing basis. Verification of conformance between licensing bas!J, and design basis was performed by NRC prior to issuance of the operating license. Changes subsequently issued will be reviewed in detail as part of the modification review process (PI-MP3-03),
i The systems to be included in the scope of the ICAVP program will be defined by the Nuclear Regu'atory Commission. A meeting will be held with the NRC, NEAC and NU to finalize the boundaries of the selected systems and interfacing systems after the systems have been identified. In general, the systems boundary will be limited to the safety related portion of the selected systems and cedain non-safety related instrumentation which meet the screening criteria described in Attachment 6.4. S&L's review of the vertical slice systems will address interfaces as follows:
Mechanical Interfaces S&L will review the interfacing system calculations to the extent needed to verify that the functions required to support the vertical slice review system were addressed in the design of the interfacing system. We will review the interfacing systems drawings and procedures to the extent needed to verify the support functions are addressed.
technical verification of the adequacy of the interfacing systems calculations, procedures or drawings. For example, if a vertical slice system requires support of a cooling water system, we will verify the cooling water system's hydraulic analysis, operating procedure, PalD and piping drawings support the vertical slice system functional requirements, e
I&C Interfaces - l&C interfaces will be treated in a slightly different manner compared to mechanical interfaces section above. We will review input signals from interfacing systems through to its cignal source to verify that the functions required to support the system under review were addressed in the design of the interfacing system, We will review the output l&C signals for the system under review through to the input point of the interfacing system. The extent of these reviews is described in Attachment 6.3.
Electrical Interfaces - Electrical interfaces will be treated !n a Q
V slightly different manner. A detailed review of the electrical distribution system from the motor control center or switchgear, Page 6 of 19
PROJECT ""
INSTRUCTION PI MP3-02 INSTRUCTION .- REV. 4 l as app!! cable, to the load is included as part of the vertical slice
' system review. A load path review Mll be performed for the remaindM of the electrical distribution system (diesel generator to switengear or MCC). The extent of this review is described in ,
Attachnont 6.
I
! \
Goca the systems and boundaries have been identified, the following ,
tasks del be performed in order to determ!ne e the system's design is
- consistent with ths piant's design and licensing basis:
- a. Documen; Retrieval & Review
- b. Identification of System Requirements
- c. Technical Review of Design Process Documents
- d. Upper Tier Drawing Review
- e. Corar.'nont Review
- f. Topical Review
- g. Reconciliation of Design vs. Design & Licensing Basis
- h. Discrepancy Report Preparation and Closure
- 1. Final Report Preparation The detailed instructions for performing these tasks are provided in the subsections 5.2 through 5.11 below. References 2.1,2.2 and 2.4 were used to develop these instructions. Attachment 6.1 is a flow chart illustrating the system review process.
5.2 Document Retrieval & Review 5.2.1 Since there may be duplication between documents required by the various review groups, the following division of responsibility has been s.stsNished:
5.2.1.1 The SRG shall gather, as a minimum, the following licensing and design bases documents and system specific documents:
- a. Design & Licensing Basis Documents (Applicable Sections Only) a.1 NRC Regulations a.2 Technical Specifications a.3 Updated Safety Analysis Report a.4 NP.C Safety Evaluation Report a.5 MP3 Commitments to NRC included in Docketed O corr Pome ec-Page 7 of 19
PROJECT INSTRUCTION Pl-MP3-02 INSTRUCTION .,
REV. 4 l a.6 Design Basis Documentation Packege (DBDP)
- b. System Specific Documents b.1 Engineering Calculations (Mech, Elect, Struct,180 and Piping Analysis) b.2 Equipment Procurement Specifications b.3 Modification Packages l b.4 System Descriptions b.5 Equipment List b.6 Environmental and Seismic Qualification Reports b.7 Findings and corrective actions identified by NU during the implementation of their Configuration Management Plan (CMP) 5.2.1.2 The ORG Shall gather, as a minimum, the documents listed below-. 1
- a. Operating Procedures including Emergency Operating Procedures
- b. Maintenance Procedures
- c. Surveillance Test Procedures
- d. Vendor Manuals
- o. System Training Procedures
- f. Necessary Support and/or Related Procedures
- g. Operational Data Needed To Support Review of Design Process Documents 5.2.1.3 The CRG shall gather, as a minimum, the following system specific drawings'
- a. P&lDs
- b. Logic Drawings
- c. Electrical Schematics
- d. Piping Drawings
- o. _ Electrical Single Line Drawings
- f. Panel Wiring Drawings
- g. Cable Routing Drawings and Databases
- h. Pipe Support Drawings I. Structural Equipment Mounting Details J. General Arrangeneont/ Equipment Location Drawings
- k. Instrument Location Drawings
- 1. Zone Maps (Environment / Fire Protection, etc).
O Page 8 of ig
j ..
PROJECT ""
INSTRUCTION PI-MP302 INSTRUCTION .- REV. 4 l 5.2.2 Design and Licensing Basis documents are available in the S&L lCAVP Library. System specific documents shall be obtained from NU. Requests for documentation from NU shall be submitted in accordance with subsection 3.1 of PI-MP3 01.
5.2.3 Once the documents have been gathered, each gtoup shall complete the applicable section of the System Reference List (SRL). Checklist CK-MP3-02 01 and an Access Database shall be used to develop the SRL.
5.2.4 The Lead Verifier from the SRG, CRG and ORG shall be responsible for ensuring, the SRL is prepared per checklist CK-MP3-02-01.
5.2.5 Each member of the ORG, SRG and CRG assigned to review the system shall study the documentation to become as familiar as possible and achieve an in depth understanding of the system as it l relates to their area of expertise. Each member shall also review the findings and corrective actions that resulted from NU's CMP. S&L shall not duplicate findings identified by the NU CMP.
5.2.6 N the need for additional documents is identified during the review process, these documents shall be requested in accordance with subsection 5.2.2 of this Pl.
5.2.7 Updates to the SRL shall be made in the same manner as initial input.
5.2.8 The SRG Lead shall file a hardcopy of the completed SRL in accordance with PI MP3-12.
5.3 jdgntification of System Reoulroments 5.3.1 The SRG shall review the licensing and design basis documents to identify the functional, performance, and other design requirements for the system being reviewed.
5.3.2 The SRG Lead shall assign a Lead Verifier for each of the systems being reviewed. The Lead Verifier shall be from the related discipline -
(Mechanical for Mechanical System, Electrical for Electrical System, etc). The SRG Lead shall also assign verifiers from other disciplines as needed to support the system review process.
O Page 9 of 19
/
ta
(}.
PROJECT INSTRUCTION "~""}f"*"
INSTRUCTION PI-MP3-02 REV. 4 l 5.3.3 The Verifier (s) shall review the Licensing and Ocsign Basis Documents for the system being reviewed to identify design, performance and functional requirements. Each requirement shall be entered into the System Requirements List. Checklist (Checklist CK-MP3-02-02) shall be used to develop the System Requirements Checklist.
Note: The System Requirements Checklist shall be developed electronically using an Access Database. Checklist CK-MP3 02-02 provides the instructions for using the database.
5.3.4 The Verifier (s) shall as a minimum, perform a review of the following documents in order to develop the system requirements checklist:
- a. FSAR
- b. SER
- c. Technical Specifications
- d. Licensing Commitments contained in docketed correspondence (from NU's Licensing Commitment List)
- e. Design Criteria Documents (including NSSS Vendor documents)
- f. Design Basis Document Package (only those documents contained in the DBDP which are plant controlled documents or correspondence shall be considered valid for the purpose of defining system requirements).
The review of the FSAR for functional, performance and design requirements shall focus on the following system specific and area topics as a minimum,
- s. Applicable Regulatory Guides
- b. Conformance to the Standard Review Plan
- c. TMI Action Items
- d. Design of Structures, Components, Equipment and Systems (Chapter 3).
- e. Engineered Safety Features (Chapter 6).
- f. l&C (Chapter 7)
- g. Electrical Power (Chapter 8)
- h. System Design (Chapter 4,5,9 or 10 as applicable).
(q)
, 1.
J.
Accident Analysis (Chapter 15)
Human Factors Engineering (Chapter 18)
Page 10 of 19
9 PROJECT INSTRUCTION
" ~ " p " "'
INSTRUCTION PI-MP3-02 REV. 4 l
- k. Fire Protection This review shall define functional, performance and design !
requirements related to the following system specific topics:
- a. Mechanical Design
- b. Electrical Design
- c. l&C Design
- d. Structural Design
- e. Piping Design (including identification of postulated break locations.)
- f. Equipment Qualification (limited to seismic and environmental qualification of system componenM, does not include verification of seismic response spectra or environmental parameters.)
The review shall also define requirements for the vertical slice systems related to the following topical areas:
- a. Hazards including pipe whip, jet impingement, missiles and flooding.
(V9 b. Station Blackout
- c. Appendix R Safe Shutdown Analysis.
5.3.5 The ORG shall identify and enter operating, maintenance and testing requirements into the System Requirements Checklist per PI-MP3-06.
The ARG shall enter critical characteristics required for accident mitigation identified per PI-MP3-07 into the system requirement checklist. Entries shall be per this procedure.
5.3.6 Each entry into the system reouirements list shall be independently reviewed by a verifier form the same group and discipline. The Verifier (s) performing the independent review shall review each entry for accuracy with the source document. Review shall be performed in accordance with CK-MP3-02-02, 5.3.7 The independent Verifier (s) and/or the Verifier (s) who initially prepared the Ovstems requirements checklist shall initiate a DR for any conflicting requirement identified during the review of the Design and Licensing Basis documentation. The DR shall be processed in accordance with Sectio.' 5.10 of this procedure.
Pege 11 of 19
)
PROJECT INSTRUCTION * } " " "'
/ INSTRUCTION PI-MP3-02 REV. 4 l 5.3.8 The SRG or ORG Lead, as Applicable, will review each entry into the Systems Requirements Cnecklist for completeness. This review shall be performed per Checklist CK-MP3-02-02. The SRG Lead shall distribute the checklist to the project file in accordance with PI MP3-12.
I 5.4 Technical Review of Deslan Process Documents 5.4.1 The SRG shall perform a detailed review of applicable design process documents to verify technical adequacy and that the conclusions of the calculations support the system requirements.
5.4.2 Applicable design process documents shall include:
- a. Mechanical calculations (hydraulic calculations, component sizing calculations, design pressure and temperature calculations, NPSH cale uletions, etc.
- b. Electrical calculations (had calculations, voltage drop, etc.)
- c. l&C calculations (setpoi it calculations)
- d. Structura' calculations (esquipment mounting, pipe supports, cable tray supports, conduit supports, etc.)
- e. Piping Analysis
- f. EQ/SQ Reports (includes verification of the correctness of inputs used in the vendors qualification report. Line by line review of vendors calculations are not included. If qualification was by someone other than vendor, a detailed review will be performed)
The review of interfacing system calculations to the extent described in Section 5.1 of this Project Instruction shall be included in the scope of this section.
5.4.3 Checklist CK-MP3-02-03 shall be used to document the design process document review. The soplicable subject specific checklists from PI-MP3-03 shall also be used in conjunction with CK-MP3-02-03.
5.4.4 The Verifier (s) shall review the adequacy of the following attributes:
p a. Numerical Accuracy - The numerical aspects and mathematical Q operations shall be error free. The number of significant figures Page 12 of 19
o PROJECT INSTRUCTION PI-MP3-02 INSTRUCTION .- REV. 4 l shall be conslotent with the input data, assumptions and design !
methodology. Transposed or transferred numbers are correct. '
- b. Modeling Accuracy - Analytical models shall be consistent with the degree of accuracy of the input data, assumptions and design methodology,
- c. Assumptions and Engineering Judgment - Assumptions and engineering judgment shall be consistent with the design approach and methodology.
- d. Design inputs - Design inputs shall be based on the latest controlled design documents.
- e. Methodology - The method shall be appropriate for the purpose and scope of the calculation.
Ngjg: During the review of design process documents, operational data, where available, shall be used to confirm calculation assumptions and/or conclusions.
5.4.5 The Verifier (s) shall note any comments .dentified during the review on the Design Process Document Review C hecklist (CK-MP3-02-03).
5.4.6 The Verifier (s) shall evaluate the comments to determine if they affect the conclusion of the Design Process Document. The evaluation shall be documented on the Design Process Document Review Checklist (CK-MP3-02-03).
5.4.7 The Verifier (s) shall indicate on the checklist coversheet (CK-MP3 03) whether the conclusions are acceptable with comments or unacceptable, and shall sign and date the coversheet.
5.4.8 For acceptable with comments or unacceptable dispositions, the Verifier shall generate a Discrepancy Report per subsection 5.10 of this Pl. The Verifier (s) shall also evaluate the unacceptable disposition for impact on other documents that may use the conclusion as input. The Verifier (s) shall consult other SRG members while evaluating the impact.
Note: Calculation results are typically used as input in other O documents. If a Discrepancy is identified which affects the result of Page 13 of 19
1
. 4 PROJECT INSTRUCTION PI-MP3-02 '
INSTRUCTION .,
REV. 4 l
the calculation, it is important to define where those results were used and evaluate those documents for impact. The review should be done prior to generating a Discrepancy Report so that the Discrepancy Report describes the full extent of the condition.
5.4.9 The Lead Verifier shall verify the checklists have been properly completed, Indicate his concurrence with signature and date, and shall compile and file the design process document review checklists prepared by the Verifier (s) to the project file in accordance with PI-MP3-12.
5.5 Uooer Tier Document Review 5.5.1 The SRG shall perform a functional review of the upper tier drawings as one of the steps necessary to vcrify the system is capable of performing required functions as described in the design and licensing basis. This review includes the vertical slice system drawings as well as interfacing system drawings to the extent described in Section 5.1. The SRG shall also perform a technical review of the drawings to verify conformance to design calculations and classification criteria.
5.5.2 The Verifier (s) shall utilize drawing review checklists CK-MP3-02-4.1,
-4.2, -4.3 for the review of the P&lDs, logic diagrams and electrical drawings (i.e. schematics, single lines and instrument loop diagrams), respectively. These checklists define the attributes to be reviewed. In general, review attributes will ir.;lude flow paths, interlocks, automatic actuations, permissi' es, redundancy and separation, safety classification, compone.it sizes, pressure class, overpressure protection, adequacy of inter,being system tie-ins, etc.
The review is not intended to identify drafting or style errors.
5.5.3 The Verifier (s) shall note any comments on the applicable checklists (CK-MP3-02-4.1, -4.2, -4.3).
5.5.4 Upon completion of the review, the Verifier (s) shall sign and date the coversheet of the applicable checklists.
5.5.5 The Verifier (s) shall generate a Discrepancy Report per Subsection 5.10 of this Pl for any discrepancies not previously identified by tha p NU CMP.
V Page 14 of 19
PROJECT INSTRUCTION
" - y "" INSTRUCTION PI-MP3-02 '
REV. 4 l 5.5.6 The Leed Verifier shall verify the checklists have been properly 1 completed, indicate his concurrence with signature and date, and shall compile and file all drawing .eview checklists prepared by the Verifier (s) in the project file per PI-MP3-12.
5.6 Component Review 5.6.1 The SRG shall perform a detailed revicw of system components. This l review shall verify the design data included in the design and licensing l basis, the vendor drawings, the procurement specifications, equipment list and calculations are consistent.
5.6.2 The scope of this review shall include all major mechanical, electrical and l&C components.
5.6.3 Detailed component checklists are included in the CK-MP3-02 05 series checklists. These checklists verify attributes such as classification, design conditions, operating conditions, functional requirements, applicable codes and standards, performance requirements, and qualification requirements, etc.
5.6.4 The Verifier (s) shall complete individual Component Review Checklists ICK-MP302 05 series) for each component within the scope of review. The Verifier may use the forms included in the checklist or may create his own form provided all technical attributes included in the checi st are addressed. Discrepancies noted shall be indicated in the appropriate blocks on the checklists.
5.6.5 Upon completion of the review, the Verifier (s) shall sign and date the checklists.
5.6.6 The Verifier (s) shall generate a Discrepancy Report in accordance with Subsection 5.8 of this PI for any discrepancies not previously iden'ified by the NU CMP.
5.6.7 The Lead Verifier shall verify the checklists have been properly completed, indicate his concurrence with signature and date, and shall file all completed checklists in the project file per PI-MP3-12.
5.7 Toolcal Area Reviews O 5.7.4 The Sao sh ii ne<<orm e review er 18e reiiewieo ienicei rees:
Page 15 of 19
l .. --
I PROJECT INSTRUCTION
', " "' INSTRUCTION PI-MP3 REV. 4 l
! i i
- a. Hazards including pipe whip, Jet impingement, missiles and '
l flooding l
! b. Station Blackout l
- c. Appendix R Safe Shutdown Analysis l 5.7.2 The Verifier shall document the review of topical areas using i
checklist CK-MP3-02-06. This review shall verify the following:
l
) a. That the pipe whip and jet impingement effects of postulated j breaks in the vertical slice system have been analyzed, f
- b. That potential missiles from the vertical slice system have been i
evaluated.
- c. That the flooding analysis considers the vertical slice system's contribution to area flood levels.
iO
- d. The vertical slica system components, if credit for operation was j_ taken in the station blackout coping assessment, are capable of performing the required functions.
j e. The vertical slice system has been adequately addressed in the-i Appendix R Analysis if credit for systera operation was taken in the safe shutdown analysir. This includes a routing check of i the vertical slice system's cabling required for the safe shutdown analysis,
{
i i f. In addition, one fire zone will be selected which includes one j vertical slice system's cabling required for the safe shutdown l analysis. All associated circuits in common enclosures with the vertical slice system's cabling will be reviewed to confirm that jl these associated circuits meet the Fire Protection Evaluation Report Section 6.3.1.3. Step 1 statement " Safety-related and j nonsafety-related circuits are routed in their own separate raceways and properly applied protective devices are included in all Millstone 3 power and control circuits; thus, this failure mode would not surface."
- O i
)
i Page 16 of 19
PROJECT ""
INSTRUCTION PI-MP3-02.
INSTRUCTION .- REV.4 l 5.7.3 Upon completion of the review, the Verifier (s) shall sign and date the applicable portion of the checklists.
5.7.4 The Verifier (s) shall guarate a Discrepancy Report in accordance with subsection 5.10 on this PI for any discrepancies not previously identified by the NU CMP.
5.7.5 The Lead Verifier 'l verify the checklist has been properly completed, indicate bis concurrence with signature and date, and shall file all completed checklists in the project file per PI-MP3-12, 5.8 Reconciliation of Desian vs. Desian and Licensina Basis 5.8.1 The SRG will r'omplete the verification of the system design versus the design and licensing basis documentation. The verification shall
{; be completed by dispositioning each requirement on the System Requirements Checklist (Checklist CK-MP3-02-02).
5.8.2 Where applicable, the Verifier (s) shall identify on the System Requirements Checklist, the design process documents which verify the restraints imposed by the system requirement are not exceeded The Verifier (s) shall either indicate the design process document either supports the requirement or describe any danciencies.
5.8.3 The Verifier (s) shall identify on the System Requirements Checklist, the design output documents related to the system requirement. The Verifier shall indicate whether the technical requirements contained in the design output documents are consistent with the system requirements or shall identify the discrepancy.
5.8.4 The Verifier (s) shall complete the dispositions in the System Requirements Checklist, using the Access Database in accordance with CK-MP3-02-02, 5.8.5 Dispositions to the system requirements shall be independently reviewed by a Verifier from the same group and discipline. The independent review shall be in accordance with CK-MP3-02-02, 5.8.6 The Verifier (s) shall generate a Discrepancy Report in accordance with Subsection 5.10 of this PI for any discrepancies not previously O identified in Subsection 5.4,5.5, and 5.6 of this procedure.
Page 17 of 19
7.
i .
i PROJECT A "" INSTRUCTION PI-MP3-02 INSTRUCTION REV. 4 l
- 5.8.7 The SRG Lead shall review the dispositions in the system require-i monts checklist (CK-MP3-02-02) for comple'eness and technical l accuracy. The SRG Lead shall notify the ARG Lead that either all
! critical characteristics for accident mitigation systems have been j satisfied or he shall identify which are not.
} 5.8.8 The Lead Verifier shall file a hardcopy of the compt ..sd checklist in
, the project file per PI-MP3-12.
- 5.9 SRG Suooort for ORG Procedure Review Process
- 5.9.1 During the implementation of the Procedure Review Process.
l described in PI-MP3-06, the ORG will highlight all performance l parameters including operating ranges and/or limitations described in the procedures. These parameters will be submitted to the SRG for verification via checklist CK-MP3-06-10. The ORG may also -
identify operating modes which are not explicitly identified in the system requirements checklist. The ORG will submit these modes to the SRG for review via checklist CK-MP3-06-10 to verify the design and analysis support operation in this mode.
5.9.2 The SRG Lead Verifier or assigned Verifier shall review these parameters to ensure they are correct. The Verifier shall complete the CK-MP3-06-10 checklist by ideatifying the basis for the parameter, if correct, and/or preparation of a DR per Section 5.10 of this procedure for incorrect parameters. Once all parameters have been reviewed the Verifier shall sign and date checklist CK-MP3-06-10 and shall retum the completed checklist to the ORG.
5.9.3 The SRG will review any operating modes submitted by the ORG per checklist CK-MP3-06-10. The SRG Verifier shall review the mode to ensure it is within the system's design basis. The SRG Verifier shall enter his conclusions on checklist CK-MP3-06-10, sign and -
date the checklist and retum it to the ORG. If the evaluated mode is outside the system's design basis, the SRG Verifier shall prepare a DR per Section 5.10 of this procedure.
5.10 Discrecancy Reoort Preoaration and Closure 5.10.1 Discrepancy Reports for discrepant conditions identified during the system review process shall be prepared and processed in O accordance with PI-MP3-11. Discrepancy reports shall not be initiated Page 18 of 19
~ . _ . _ - . .
l
'. a. "
PROJECT g INSTRUCTION PI-MP3-02 INSTRUCTION REV.4 l
) for findings already identified by NU during imp lementation of the 4
CMP.
4 5.10.2 Review of NU dispositions for the Discrepancy Reports generated 4
during the review cycle shall be in accordance with PI-MP3-11.
5.11 Final Reoort 3 5.11.1 The Lead Verifier shall draft a final report summarizing the results of
! the system review.
5.11.2 The report format shall be determine d by the Verification Team Manager.
5.11.3 The report shall be reviewed and approved by the VT Lead, VT Manager and IRC prior to external distribution.
s 7 6.0 ATTACHMENTS i
L) 6.1 lCAVP Process Flowchart, ' System Review" (1 page) 6.2 Scope of Electrical Support System Review (3 pages) l 6.3 Scope of l&C Interfacing Signal Review (3 pages) 6.4 Scope of I&C non-safety related component review (2 pages) i O
1 Page 19 of 19
Identify Systims in ICAVP I scope PI MP3 02, REV,2 lCAVP PROCESS FLOWCHART .
NC ATTACHMENT 6.1 g- SYSTEM REVIEW U
Define / Review System Boundaries NRC/NEAC/NU/SRG 4
Gather Design & Licensing Basis Documents & Design Outcut Documents SRG,CRG,ORG j 4
Prepare System Reference W
SRG,CRG,ORG Distribute v
I
/
Define System Design &
System Reference f Licensing Basis / Prepare f cemens Ust for Use System Requirement Ust :
( N CgQ-M4F347 SRG SRG \
l N si Q v v v y
U Submit Des /Uc, Perform Functional v
Perform Detailed i
Perform Componen Basis Ust to R'eview Perform Topical Area R h or ORG for Use Calc Review
' P&lD/ Logics / Electrical Review CMency Nc &
(M/ Ell / Piping Analysis Diagrams SRG & EQ/SQ Rept)
SRG SRG SRG aWSm 0 SRG 4 0 v v
Disposition System 'N Requirements Ust x cmmann or N SRG cm.c : ,N
= chnw.n.ec. /
ta nto /
/
/NN !
/ Were '. s s
/ discrepancies .:-No-
- 1. '/
'Ns identified?/
x Yes v
Process Discrepancy Reports (PI-MP3-11) ,
i
(
k/ j Prepare Review Report
- $nesiNUE#"'#] SRG !
! PI-MP3-02, R:v,3
- .. Attachment 6.2 i Page 1 of 3 Scope of Electrical Support System Review This verification will consist of identifying the buses that feed all the components j (including in jirect 180 signal input components [See Attachment 6.3]) used in -
l the systems under review and determine the ' load-time' profile for these
- components. The ' path' from these buses are to be identified up to the electrical onsite source (i.e, diesel-generator, battery & charger, inverter, etc.)
4 This is explained in Pages 2 and 3 of this Attachment. The loading time profile on sech bus for the components of the system under review shall be verified for
- the calculations that use this information as input. The bus voltage will also be
! identified from the voltage drop calculations to verify that the correct bus voltage
! was used to determine voltage drop to the components of the system under l review,
! Once the loads are verified, the load ct.rrying components in the ' path" will be checked for design sizing based on the total operating load of the bus as shown in the bus loading calculations. Loading for components of systems not under review will be accepted (without verification) as shown in the bus loading calculations as input. Coordination of protective devices (relays, breakers, fuses, etc.) for the " paths' required to supply the components of the systems i under review will be verified to confirm acceptable coordination and that the
- j. required bus operating loading is addressed.
The onsite source load-time profile will be checked to determine that the source i input is properly included for the components of the systems under review
[ (including transient loading) . The overall source sizing will also be checked l against total loading of the source, however, verification of other systems i
loading will not be done but simply accepted as input. In addition, the battery i charger (or inverter) and its continuous loading profile will be similarly checked to confirm the size, that the " path' is complete to the diesel generator, and load
- profile matches or envelopes the diesel-generator loading input from the charger j (inverter),
i j If the system under review has components credited for Appendix R/ Safe
! shutdown use, verify that the electrical support system components (equipment i and cabling) in the " path" to the onsite source are not affected by fires in the fire zones which are identified as needing the components of the system under j review for safe shutdown during the postulated fire.
When all of the systems under review have been identified, along with most of j the components that are fed from MCCs, two MCCs with non4uplicate load
. components will be selected for review of all design sizing and coordination for i all loads on these two MCCs. The load input from other systems not under l review will not be verified, but the design of the MCC w ll be verified based on the component input.
i 1
0 O O
AC SYSTEM SUPPORT '
- u. v. swcR ,
c Doc $)oc %)oc lI RLY lIRLY lIRLY PART OF MECH. SYSTEM REVIEW > - - -
FOR MECH. SYSTEM.
ww Al'I'l ICAlli l i 18.1 IlisillG 111 O' MIS S/R &m D.G. -MLCll. SYSIEM i OADir4G ACCollNilis 1 sti 0170llt11)ltJG (101 f t 11 & SY';ll M) ' '
-OPERATif4G VOl TAGI rat 4GI LOilll' :.1/lflG u I'l(Olt CIIVL ,1 li tt1G e a n *Itlsit4Allort a s.t.-
APP lt itJLillDLu -
0)" FATH (OVERLOAD. FAUI I, III C. I Ot!!I' L.V. SWGR _
PROTECTION)
- SAFE SilulDOWri ItJCl uDED e I v -SAFE SiluiDowt1 SUPPORI If4Clistil o
- CABI E SI2illG (IRAYJIRESIOP,AMD.)
-v01 i DROP (POWLit & COttilt01) -# r -APP. R At4ALYSIS litCillOLD I OR MECH SYSTEM
-PROIECIIVL Sillif4GS S/R M -ALL REIAIED SYSTEM COMI'Of1LtJIS f ile !
- OPERAlltJG VO! (AGl RAriGL " FROM SAME SOURCE (DIVISION)
~
COMP 0 tift 11 1 O r w
CONT h>
S/h ;y y a LOAD S/R E ist2 &
" w g C.V. DISTR Ohp J
- 1) ~5F C.
H-g S/R ~ MISC PNL L__.____ _ - _ _ ____ _ __._
o . . . . .
o O
~~
CONTROL DC SYSTEM SUPPORT ,
AC _ ,
~
DAT CiiRG _
N
=
. I
~
M. V. SWGR
" r PART OF MECH SYSTEM REVIEW < ELEC SYSTEM SUPPORT REVIEW FOR MECH SYSTEM Al'l'ilCAljll 1.lClIlSlf1G REQ'MENIS ' O "
I EQUIPMEl1I RAllNGS I -MECH SYSTEM CONTROL LOADING APP. R INCLUDED ACCOUNTED FOR SAI E SittJfDOWil INCLUDED (INCLUDING TIMING /REPETII10N)
L V. SWGR CAuf E SIZING (INCLUDING IRAY. # -DISTR. VOLT DROP TO BUS /SWGR I IRf S10P. DUC T. AMBIENI) -
-PROTECTIVE SETTINGS COORDINATION volIAGI I)Rol' (CK1) FOR PATH l'ROlt CilVL StillNGS jCONI (OVERLOAD. FAULT. El EC. EOulP v01 l ACl: RAllCL. - > PROTECil0N) r e e COMI'Olli !1I E.O. . --
-SAFE SilUIDOWN SUPPORI INCLjUDED FOR MECH SYSTEM o @
S/R -APP. R ANALYSIS INCLUDED FOR C{Sd 4 PANEL.- -
}
SOL MECH SYSTEM
-ALL RELATED SYSTEM COMPONENTS Cf" RLY, CONTACT FED FROM SAME SOURCE (DIVISION) f SOL
PI-MP3-02 Rev. 3 4 .. Attachment 6.3 Page1of2 Scone ofInstrumentation and Control Interface System Review There are three categories ofinterfacing I&C signals which will be included in the review. Thcse include:
- 1. Indirect input signals
- 2. Direct input signals
- 3. Output signals Indirect Inputs Indirect I&C input signals are those signals which originate in another system and input into the system under review by first passing through another system (i.e. RPS). Indirect input signals will be treated as though they are a part of the system boundary, as follows:
. Review includes 100% review as described in this PI for the vertical slice system, except that only dissimilar channels of each process variable will be reviewed.
- Review also inchides walkdown of all channels for one (1) selected process variable per PI-MP3-05.
- The other system the indirect signal passes through will be treated as a black box. Review will p only include a document review of the signal path as it appears on logic diagrams, and
() schematics. This review will verify signal parameters, divisional source, setpoint, range and accuracy. Setpoint and loop accuracy calculations will be reviewed for technical adequacy for the affected instrumentation. Wiring diagrams will not be reviewed for the Reactor Protection (Solid State Protection) panels / cabinets.
Direct Inouts Direct I&C input signals are those signals which originate in another system and input directly into the system under review without passing through another system. For direct I&C input signals, the review includes the interfacing system instrument signal paths to their signal source to verify that the functions required to support the vertical slice review were addressed in the design of the interfacing system. The review includes the signal path as it appears on interfacing system P& ids, logic diagrams, and schematics. This review will verify signal parameters, divisional source, setpoint, range and accuracy. Setpoint and loop accuracy calculations will be resiewed for technical adequacy for the affected instrumentation.
Output Sinnals Output signals are those signals which originate in the vertical slice system and output to the interfacing system. This review includes the I&C output signals from the vertical slice system through to the input point (usually up to the control relay; or in the case of an analog signal, up to p and including the signal isolator) of the interfacing system. The review includes the signal path as V it appears on interfacing system P& ids, logic diagrams, and schematics. This review will verify
PI MP3-02 Rev. 3 i Attachment 6.3 Page 2 of 2 O calculations will be reviewed for technical adequacy for the affected instrume If the interfacing system I&C signal inputs or outputs are covered by the vertical slice review of another system included in the review then the review of the affected instrumentation will not be duplicated.
l l
O O
. - . - . . ~ - - - - - - . . _ . - - - . . - - . - . . . . - - - - - - - -.~. - .-. -
L- .
l PI MP3-02, Revi 4 Attachment 6.4 Page 1 of 2
!O NONSAFETY-RELATED COMPONENT SCREENING Nonsafety-related components will be screened for special requirements. The special requirements criteria are identified as follows:
f i - 1. Specified by Emergency Operating Procedures 2, Required by the Technical Specifications
! 3. Used for in-service Testing -
! 4. Required for Safe Shutdown
! 5. Identified as Appendix R Related j 6. Used for Post Accident Monitoring.-
i-l The screening method will use Northeast Utilities' PMMS database for the nonsafety-i related components of the Millstone Unit 3 systems under review. Unless a nonsafety-1 related component is required to meet one of the above selection criteria, the component will be treated as a boundary component requiring only limited review, Checklists will not j be performed for process connected components for local indication such as temperature
- sensors and indicators and pressure gages, not installed but identified components, i -
components in the signal path from the signal isolator to the computer or annunciator.
l The computer input list will be checked to ensure the signal has a related computer input.
The annunciator at the local panels and in the main control room will receive a nameplate
- engraving drawing check compared to the physical plant.
1 I
j ..
i J
4 4
1O i
4
,,-,w..,- , - - - - - - . - , m-+-.-, . , -.--c. ~ . ,---- -,
. . . - . . - - . _ . - . - - - - . - . _ . - _ . - _ - - . . . ~ . - . - . . - . . - .
A a PI-MP3 02, Rev. 4 l g Attachment 6.4 -
- Page 2 of 2 l&C BOUNDARIES M~ SVETY4 ELATED
- NONSVETY RELATED i -
J f
I NOISOLATOR PROCESS REQUIRED
- 1
) )
(
1 i
4
(
X X 1 /
ISOLATOR (TYPICAL) 4 y< No ch6ck of components j / /\ unless special N --------
C requrements exist
+- +
O l4 x COMPUTER INPUTS
~ ~~~~~~~~ ~
NO ISOLATOR j REQUIRED 4
?
t J
d 1
J N
!O
_ _ .