ML17320A814

Forwards Response to Generic Ltr 83-28, Required Actions Based on Generic Implications of Salem ATWS Events. Vendor Document Control Sys Established & Program Will Be in Place by End of 1985

ML17320A814
Person / Time
Site:	Cook
Issue date:	11/04/1983
From:	ALEXICH M P INDIANA MICHIGAN POWER CO. (FORMERLY INDIANA & MICHIG
To:	EISENHUT D G Office of Nuclear Reactor Regulation
References
AEP:NRC:0838A, AEP:NRC:838A, GL-83-28, NUDOCS 8311110162
Download: ML17320A814 (80)

Text

p)~REGULATOINFORMATIONDISTRIBUTIONTEM(RIDS)AUTH~NAME,AUTHORAFFILIATIONALEXICH<M~REIndiana'5MichiganElectricCo,RECIP~NAMESRECIPIENTAFFIL'IATIONEISENHUT<D>G.DivisionofLicensing

SUBJECT:

ForwardsrTesPonse"toGenerfc,,Ltr8328r"RequfredActionsBasedonGenericImplicationsofSalemATNSEvents,."Vendordocumentcontrol>sysestablished8programwillbe;inplaceb)endof1985,DISTRISUTXONCODE:A001SCOPIESRECEIVED:LT'R.j'iENCLLSIZEA'J'ITLEcORSubmfttal:GeneralDistributfon-NOTES!ACCESSIONNBRt8311110162'OC~DATES83/11/00NOTARIZED:YESDOCKETFACIL:50315DonaldCCookNuclearPowerPlenty'UnftigIndiana80500031'5*50316DonaldC<CookNuclearPowerPl-antgUnft2gIndianaL05000316RECIPIENT=IDCODE/NAMENRRORBiBC01INTERNALOELD/HDS3NRR/DLDIRNRRETBEGIL'EOQ'COPIES,l"TTRENCL'701111RECIPIENTIDCODE/NAMENRR/DE/MTEBNRR/DL/DRABNRR/DSI/RABRGN3COPIESLTTRENCL1i.1"011EXTERNAL'CRSNRCPDRNTIS0902'61111LPDRNSIC-03-052211'TOTALNUMBEROFCOPIESREQUIREDSLTTR26ENCL24 g~lksc')Fp<)c)c4r-;nr,r'onef"c~nr"inI""~)I3'>><TAT,c,<')I>>.','v,".><~L',>i)~~)3940,"'i),f3~Pr'X)Lhd>4;,.jlAn.)>>c)"..il~tTf3kH:S4i,k".I,'~I).)At9m))inc.l0")~<n"casyf>up~~pc'),Juf<,nyct'I'c",ll)A3Jrn<!i$'ngt~3I'9to>1srDell>8~4)~J9rcine)c!6I8.rIT~)A.pJor~9ooflnr~~h<<ar~~ArnorbnI,'l.~'3,831X.].3APOITAT)J4~><1<<vL'<I))~)j"'4A,')I')3~rir)ren~~or.l0ocnremrv'i"),~)~r)iTU)~vlc'l,0wnprtoAliver>>woH"i'd%f8afJlgroan~.)p~~~~<ccpoa~~h~c~~~p~:T3<l"<~)8~vvn~v",."4r9i~l".<<T4~~f68tppnnr1bert~)<Lar~~nec)ncih~,"~.><~p6fnnrec)lfr~n6~pooq8bar)."rtc16$2opy~.fo~trvp.c'RP)>n:Rh,fc',',')~)3~fTJ:cf-kVI,13.9~P,.'3l'<l)JPLr)~~A:lffc>>ulled).iI~Tc:Ii)nor'Oucflaferc)tuaonvc):frf4'ruuc'A:3)fl)'c',3I()y'I>3I'-')r)JlJ"3HTTJT~~3Ic)Ilac).l"A"X<<c)a~IP,QIqOJJ')~'qTTJT>,3I<<IJl~<~~Ai,"i1fi),.')JHltH)T')Xg()XHQP~)~~ui)aiHHR'<AAXIcr)NRHNQ~8,)Q$013c)r INDIANA8MICHIGANELECTRICCOMPANYP.O.BOX16631COLUMBUS,OHIO43216November4,1983AEP:NRC:0838ADonaldC.CookNuclearPlantUnitNos.1and2DocketNos.50-315and50-316LicenseNos.DPR-58andDPR-74GENERICLETTER83-28REQUIREDACTIONSBASEDONGENERICIMPLICATIONSOFSALEMATWSEVENTSMr.DarrelG.Eisenhut,DirectorDivisionofLicensing,NRCU.S.NuclearRegulatoryCommissionWashington,D.C.20555

DearMr.Eisenhut:

ThisletterisinresponsetoGenericLetter83-28ofJuly8,1983whichrequiredactionsbasedongenericimplicationsoftheAntici-patedTransientWithoutScram(ATWS)incidentatSalem.Owingtothelevelofdetailassociatedwiththeseresponses,wehaveincludedthemasanattachmentratherthanin'hebodyoftheletteritself.Verytrulyyours,M..AlchiIgVicePresidentAttachmentcc:JohnE.DolanW.G.Smith,Jr.-BridgmanR.C.CallenG.CharnoffE.R.Swanson,NRCResidentInspector-Bridgman8311110162831104PDRADOCK05000315PPDRi STATEOFOHIOFRANKLINCOUNTYAEP:NRC:0838AMiltonP.Alexich,beingdulysworn,deposesandsaysthatheistheVicePresidentofLicenseeIndiana6MichiganElectricCompany,thathehasreadtheforegoingletterandtheAttachment(AEP:NRC:0838AResponsetoGenericLetter83-28,RequiredActionsBasedonGeneric,ImplicationsofSalemATWSEvents)andknowsthecontentsthereof;andthatsaidcontentsaretruetothebestofhisknowledgeandbelief.Milon.AlexiSubscribedandsworntobefore'ethisfourthdayofNovember,1983.g~~g,gem~NotaryPublicROBERTA.,DhgLDy~NOTARYpOOl.l.,pRpp)(@l;OOUNTY,'Hl0COMMISSIONF.'iPlRES@GUST'~1p Aj'IgI ATTACHMENTTOAEP:NRC:0838ARESPONSETOGenericLetter83-28REQUIREDACTIONSBASEDONGENERICIMPLICATIONSOFSALEMATWSEVENTS

(

1.POSTTRIPREVIEWProgramDescritionandProceduxePresently,attheD.C.CookPlant,administrativeproceduresrequireallshiftsupervisorstonotifythePlantManagementofareactortriporofanysignificantoperationalevents.PlantstartupiscoveredbyOperatingProcedureswhichrequirethatthePlantManager'sconcurrencebeobtainedpx'iortorestart.Inhisabsence,thisresponsibilityisassumedbytheAssistantPlantManager(operations)ortheAssistantPlantManager(maintenance).Thebasisfordeterminingthatarestartisacceptableisthatthecauseoftheunplannedtriphasbeendeterminedandcorrectedandthattheplantreacted"normally."Intheeventthatthecauseofthetx'ipcannotbedetermined,theShiftSupervisormustdeterminethatreactoroperationcanproceedsafely(i.e.,theprotectiveandtripsystemsarefullyfunctional).PlantManagerordesigneeapprovalisxequiredforallreactorrestarts.Wearepresentlydevelopingareactorpost-tripreviewprocedurewhichwillbeusedtoassessthereadinessoftheunittosafelyreturntopowex'.ThisprocedurewillembodymanyoftherecommendationsofINPO'sGoodPractice,OP-2llgPostTripReviewprocedure.ExtensiveuseofSignOffSheetsandplantstatusloggingisbeingbuiltinsothattheplanthistoryaroundthetimeoftripcanbedeterminedforfutureanalysis,trending,andbacktracking.AfirstdraftofthenewprocedurehasbeenreviewedbythePlantandAEPengineeringpersonnel.Commentsarepresentlybeingevaluated.ItisestimatedthattheseconddraftwillbeavailableforreviewbyJanuary1,1984,andtheapprovedprocedureissuedbyMarch30,1984.RestartCriteriaPresentrestartcriteriaarecoveredabove.Thepost-tripreviewprocedurewillincludecriteriaformakingthedecisiontorestart.Resnsibilit/AuthorityThepersonnelinvolvedwiththereviewandanalysisoftheeventsleadingtothetripandrestartaretheOperator,ShiftTechnicalAdvisor,ShiftSupervisor,SuperintendentofOperations,AssistantPlantManagers,andthePlantManager.

Ir ualifications/TraininAllpositionsreferencedintheproceduremeetthequalificationrequirementsofTechnicalSpecification,Section6.3,FacilityStaffQualifications.TheShiftSupervisors,OperationsSuperintendent,andtheAssistantPlantManager(Operations)holdSROlicenses.DetailedqualificationsofalllicensedincumbentshavebeenpreviouslytransmittedtotheNRC.Wecanprovidethesedetailsifrequested.SourcesofInformationItem1.2(PostTripReview-DataandInformationCapability)providesdetailsoftheinformationavailabletooperatingpersonnel.ThenewPostTripReviewProcedurewillformalizethepracticeofrecordingdatarelatingtothetrip.Itisanticipatedthat,oncefinalized,thepost-tripreviewdatapackagewillberetainedforfuturereference.EventAnalsisThereisnoformalorwrittencriteriaforcomparingthe"tripasoccurred"versusthe"tripaswouldhavebeenpredicted"inaquantitativesense.However,thePlanthasinformationdetailedinSection1.2torelyoninthismatter.IndependentReviewThePlantManagerhasthefreedomtoaskforanindependentassessmentofanyunplannedtrip.Insuchcases,heisabletocallfortheadviceandassistanceoftheAmericanElectricPowerServiceCorporation.ThefirstpersonhewouldnormallycontactforsuchassistanceistheVicePresident,NuclearEngineering,althoughhewouldbefreetocontactanymemberoftheNuclearSafetyDesignReviewCommitteeoranymemberoftheServiceCorporationthathethoughtappropriatetosolvetheproblemathand.Ifcontactwithoutsidevendorswasrequired,thiswouldnormallybedoneafterappropriateconsultationbetweenthePlantManagerandAEPSC.Thereisnoformalwrittencriteriafortakingsuchanaction.ThePlantNuclearSafetyReviewCommitteewillreviewalleventspriortorestartifthecauseofthereactortripisnotpositivelyknownoriftheplantresponsedemonstratedanabnormalbehaviorthathasnotbeencorrected.Theexistingrestartprocedureensurestherecordingofbasicinformation.ThenewPostTripReviewP-ocedurewillextendthescopeandprovidemoredetailedguidanceastowhatdataneeds.tobesaved.

ll 1.2DataandInformationCapabilitThefollowingwriteupidentifiesthemonitoringsystemsinstalledinUnitl.IdenticalmonitorsareinstalledinUnit2andmonitorthesamedevicesexceptforthedifferencesbetweentheUnit1andUnit2turbines.A.Hathawa0erationsSequenceMonitor.1.2.1.1.Thesequencemonitorprovidesaprintedrecordoftheoperationofcertainselectedevents.Ithasthecapacitytomonitor192on-off.pointsandproducesalineitemoutputonaprinterlocatedinthecontrolroomwhenanyoneofthemonitoredpointsindicatesanabnormalcondition.1.2.1.2~Forty-fivepointsareusedtomonitoreventsrelatedtoreactortripinitiationorreactortripcircuitbreakerposition,6pointsmonitorcondensateorhotwellpumps,13pointsmonitorfeedwaterheaterextremehighlevelevents,6pointsmonitoronsitepowerdieselgenerators,22pointsmonitorthemainfeedwaterpumps,40pointsmonitorthemainturbine-generator,and8pointsmonitorthestep-upandauxiliarytransformersandmiscellaneousitems.1.2.1.3Theoperationssequencemonitorpermitsdiscriminationforcontactclosureswhichoccurmorethan2millisecondsapart.1.2.1.4~Acontactclosurewillresultinalineitemprintoutonadedicatedprinterlocatedinthecontrolroom.Thelineitemcontainsa3digitnumberforthedayoftheyear,a4digitnumberforthehourandminute,a2digitnumberforthesecond,a3digitnumberforthemilliseconds,an"A"indicatinganoffnormalcondition,a3digitnumbertoidentifytheindividualinputpoint,andapreprogrammedlegendofapproximately22charactersmaximumtoidentifytheeventtotheoperator.1.2.1.5.Theprinteroutputsheetsmayberetainedforfutureuse.1.2.1.6.Theoperationssequencemonitorispoweredfromabalanceofplant(nonclassIE)inverter.B.EsterlineAngusTurbineEventMonitor.1.2.1.1.Theturbineeventmonitorisadual-unitstripchartrecorder.Eachofthe2chartshas20on-offpoints.Thespeedofthecontinuouslymovingchartsischangedafteratripinitiationsothat24hoursofchartareadvancedthroughtherecorderin24seconds.Thechartspeedthenreturnstonormaluntilallinitiatingeventshavereturnedtonormalandatripinitiationeventrecurs.1.2.1.2~Twopoints,oneoneachchart,areusedtoindicateoperationofanytripinitiationevent.Thesepointsareusedtosynchronizethe2charts.Twopointsareusedtomonitorthe I14 TrainAandTrainBreactortripcircuitbreakers,2pointsmonitorelectricallockoutrelayswhichindicateanelectricalsystemleveltrip,and16pointsmonitorthepositionofturbineemergencyandpre-emergencyvalves(stopandinterceptorvalves).Theremainingpointsmonitorvariousturbinetripinitiatingevents.1.2.1.3.Thetimediscriminationbetweeneventsisapproximately20millisecondswhenthechartisinhighspeedoperation.1.2.1.4.Thedataisdisplayedon2stripcharts.Eachpointoperatesaheatpenwhichleavesacontinuoustraceonthethermallysensitizedchart.Thepenstraceaprintedlineonthecharttoindicateanormalcondition.Thepenmovesofftheprintedlinetoapositionapproximatelymidwaybetweentheprintedlinesfor2adjacentpointstoindicateanoffnormalcondition.1.2.15.Thechartsformapermanentrecordandmayberetainedforfuturereference.1.2.1.6.Thesolenoidswhichoperatethepointpositioningmechanismsarepoweredfromoneofthestationbatteries.Thechartdrivemechanismispoweredfromthebalanceofplant(nonclassXE)inverter.C.HathawaOscilloraph.1.2.1.1Theunitoscillographhas32galvanometers.Eachgalvanometerwillrecordoneanalogchannelor,ifproperlymodified,4on-offfunctions.Eightgalvanometershavebeenconvertedtoon-offfunctionsandtheremaininggalvanometersarereservedforelectricalanalogquantities.Theunit,hasaprefaultrecordingfeaturewhereallinputquantitiesarecontinuouslyrecordedonamagneticdisc.Undernormalconditions,thedataareerasedandcurrentrecordingswrittenovertheoldspaceafterapproximately100milliseconds.Ifoneofaspecificsetofeventsoccurs,thedataarerecordedonultra-violetsensitivephotographicpapersuchthattheinformationrecordedpriortotheeventisrecorded,followedbyadditionaldataresultingfromtheevent.Therecordingiscontinuedforafixedtimeperiodfollowingtheevent.Recordingchartspeedmaybeselectedtobeeither12"or3"persecond,theusualpracticebeingtorecordtheinitialportionoftheeventatthehigherchartspeedfollowedbyadditionalrecordingattheslowerchartspeed.1.2.1.2~SixpointsareusedtomonitortheAandBtrainreactortripcircuitbreakerpositions,undervoltagetripinitiation,andsafetyinjectionactuation;2pointsmonitorthestartofonsitepowerdieselgenerators;1pointmonitorsthetripof 1C!

thefeedwaterpumps;10pointsmonitorturbine-initiatedevents;7pointsmonitorgeneratorandexcitationevents;and4tracesareusedforreferencestoassistinidentificationoftracelocations.Theanalogtracesrecordgeneratorphasecurrents,phaseandgroundvoltages,andfieldcurrent.Thetimediscriminationbetweeneventsduringhigherchartspeedisbetterthan5milliseconds.betweeneventsandbetterthan10millisecondsduringslowerchartspeed.Thedisplayprovidedbythedevelopedphotographicpaperis'areproductionoftheamplitudeandwaveshapesoftheanalogelectricalquantities.Theon-offeventsareindicatedbyacontinuousstraightlinetraceforanormalconditionortheabsenceofthetraceatthatlocation,signifyinganoffnormalevent.Thephotographicpaperisdevelopedbyexposuretoultra-violetlight(fluorescentlightsareadequatesources),andnowetchemicalpiocessesarerequired.Thephotographicpaperrecordmayberetainedforfuturereferenceprovideditisnotcontinuouslyexposedtosunlightorfluorescentlights.Thesolenoidsfortheon-offeventdevicesarepoweredfromoneofthestationbatteries.Theremainingpowernecessarytooperatetheoscillographandaccessoryequipmentisthebalanceofplant(nonclassZE)inverter.

ThecomplementofprogramsfortheP250processcomputerincludestwoprogramswhicharerelevanttotheanalysisofreactortrips.ThesetwoprogramsarethePostTripReviewProgramandtheSequenceofEventsRecordingProgram.TheSequenceofEventsRecordingProgramrecordsthesequenceofoperationofanumberofmonitoredcontactstoahightimeresolution.Whenoneofthemonitored.contactschangesstate,aninterruptisinitiatedwhichcausestheP250toscaneachmonitoredcontactforanychangefromitspreviousstate.Theprogramstoressuchchangesandthecyclecountsincethefirstevent.Acycleianominallyl6.7millisecondsinlength.Duetoadead4imeof2millisecondsintheinterruptprocess,anautomaticrebidoftheprogramisprogrammedforthecyclefollowingeachinterruptbid.Thisisdonetoavoidlossofcontactchangesduringthedeadtime.TheSequenceofEventsRecordingProgramisterminatedwheneitherthecyclecountreaches3600or25contactchangeshavebeenrecorded.Whentheprogramisterminated,anoutputroutineiscalled.AllcollecteddataarefirstmovedtotheoutputprogrambufferstofreetheSequenc'eofEventsRecordingProgrambuffersforcontinuedmonitoring.Theoutputroutineprintsthetimeofthefirsteventinhours,minutes,andseconds.Followingthismessage,thealpha-numericaddress,a36-charactercontactdescription,andcyclecountfromthefirsteventareprintedforeachcontactchange.Thefirsteventwillalwayshaveacyclecountof'ero.TheP250addresslistindicatesthatthereisaninputtotheSequenceofEventsRecordingProgramforeachpotentialreactortrip.Znthecaseofreactorcoolantpumpunderfrequency,partialtripsarealsoincluded.Enaddition,thereactortripandreactortripbypasscircuitbreakers,maingeneratoroutputcircuitbreakers,andturbinestopvalvesaremonitored.Thetimediscriminationbetweeneventsisonecycleornominally2.0milliseconds.Theformatfordatadisplayisdiscussedaboveinthedescriptionoftheprogram..ThedataisoutputononeoftheP250typewriters.Theprinteroutput,sheetsmayberetainedforfuturereference.TheprimarypowersourcefortheP250computerisaninvertersuppliedbytheABbatteryand600voltbusllB.Zftheinvertershouldfail,theP250computerwouldbeswitchedbyanautomaticbustransfertothecontrolroompowerdistributioncircuit,CRP-3,whichissuppliedfromtheplantlightingtransformer.Thepowersourceisbalanceofplant(nonclassZE).

I ThePostTripReviewprogramperiodicallyrecordsanumberofpre-selectedinputs.Theseinputsarestoredonadiscinacircularbuffer,withnewersetsofdatareplacing-theoldersets.Whenatripoccurs,eitherautomatically(PostTrip)ormanually(TestTrip),thepre-tripdatabeingenteredintothecircularbufferare.frozenandthedataarethereafterstoredinapost-tripbuffer.Whenthisbufferisfilled,bothsetsofdata(preandpost)areprintedoutonthetypewriter.Theparametersmonitoredareanaloginnature.Theywouldnormallyincludesteamgeneratorfeedwaterflowandsteamflow,steam.generatornarrowrangeandwiderangelevel/pressurizerlevel,pressurizerlevelsetpoint,sourcerangedetectoroutput,intermediaterangedetectoroutput,powerrangedetectoroutput,first.stageturbinepressure,steamgeneratorpressure,pressurizerpressure,containmentpressure,unit,grosselectricaloutput,Taverage,deltaTpower,.overtemperaturedeltaTsetpoint,overpowerdeltaTsetpoint,widerangecoldlegtemperatures,pressurizersteamtemperatures,T-reference,auctioneereddeltaT,andauctioneeredTavg.Theseparametersremainasselectedbythecomputervendor,WestinghouseElectricCorporation.Eightoftheparametersinthepreviousparagrapharesampledat2-secondintervals,6secondsbeforeandafterthetrip.ThesearetotalNISpowerrangepower,turbinefirststagepressure,unitgrosselectricaloutput,andauctioneeredTaverage.Allparametersaresampledat8-secondintervalsfor2minutesbeforeand3minutesafterthetrip.Thesesamplingtimesremainassetbythecomputervendor.ThePostTripPrintprogramfirstoutputsastartmessageontheappropriatetypewriter.Itthenoutputsalineofheadingsforthevalueswhichwillbeprintedincolumnarform.Theheadingsconsistofthesix-characternameofthepoint.Thevaluesareprintedbelowtheir'names,startingwiththeoldestsetofdataonthefirstline,thenextoldestonthenextline,andsoonuntilthemostrecentpre-tripdataareprinted.Includedineachrowofdataisacolumnindicatingthetime.Whenallthepre-tripdataforthis.setofpointsareprinted,themessagePOSTTRIPDATA-TRIPTIMEXXXXisprinted.Allthepost-tripforthesepointsareprintedinthesameformatasdescribedabove.Afterallthepost-tripdataforthesepointsarefinished,theprogramstartsoverwithanothersetofdatainthesameformat:6characternames,pre-tripvalues,tripmessage,andpost-tripvalues.Whenallthepointshavebeenprinted,theprogramoutputsafinishedmessage,unblocksthecollectionprograms,andexits.

Fromtimetotimeotheranalogvaluesmaybesubstitutedfor~theidentifiedquantitiesto'implementinvestigationsofanomalousbehaviorofothersystemsorcomponents.ThediscussionofdataretentionandpowersourcefortheSequenceofEventsRecordingprogramalsoappliestothePostTripReviewprogram.

PklI 1.2'Inadditiontothedatacollectionpreviouslymentioned,theinformationcontainedonthefollowingstripchartrecorderswouldassistinresolvingorreconstructingtheeventssurroundingareactortrip.RCSWideRangeLoopTemperatureHotandColdLegRecorder(4)ReferenceTavgTemperature-AuctioneeredTavgTemperatureRecorderControlBankandInsertionLimits,RecorderNuclearInstrumentationRecorder(7)MainSteam,MainFeedwaterFlowandSteamGeneratorLevelRecorder(4)FeedpumpSuctionandDischargePressureRecorderMainTurbineVibrationRecorderkFeedPumpTurbineVibrationRecorderIMainSteamPressureRecorder(2)FirstStagePressureRecorder(2)PressurizerLevelRecorderPressurizerPressureRecorderComputerTrendingRecorder(2)Wide'RangeReactorCoolantPressureRecorderContainmentPressureRecorder(2)Theprecedingisnotalistin'gofallrecordersavailable,butisalistingofthoserelevanttoaunittrip.

0 2.EQUIPMENTCLASSIFICATIONANDVENDORINTERFACE2.1ReactorTriSystemComonentsFortherea'ctortripsystem,alistofcomponentsisenclosed(Attachment1).Includedinthislistarethesensorswhichmeasurethetripvariablesandthecircuitsuptoandincludingthereactortripbreakers.Thecomponentsdownstreamofthebreakers,suchastherodsthemselves,areexcluded.Wedonotcontrolsafety-relatedcomponentsinthemannerindicatedintheportionofthepositionstatedin2.1ofGenericLetter83-28thatstates,"...allcomponentswhosefunctionisrequiredtotripthereactorareidentifiedassafetyrelatedondocuments,proceduresg'ndinformationhandlingsystemsusedtocontrolsafety-relatedactivitiesincludingmaintenance,workorders,andpartsreplacement."Rather,ourmethodofcontrolisdescribedbelow,asisthehistoricalperspectiveofhowitevolved.Attheconceptualdesignstage,AEPSCissuedaseriesofNuclearSafeguard'DesignMemoswithintheCorporationtoconvey,amongotherthings,theprinciplesonwhichsafetyclassificationsweretobemade.Attheconstructionstage,theQualityControlManualfortheD.C.CookPlant(Rev;3of1971)stated:"Thoseitemsvitaltosafeshutdownandisolationofthereactor,orwhosefailuremightcauseorincreasetheseverityofalossofcoolantaccident,orresultinanuncontrolledreleaseofexcessiveamountsofradioactivityaredesignatedclassI.ClassIsystemsandcomponentsareessentialtotheprotectionofthehealthandsafetyofthepublic.Consequently,theyaredesigned,fabricated,'inspectedanderectedtotheapplicableprovisionsofrecognizedcodes,goodnuclearpracticeandtoqualitystandardsthatreflecttheirimportance."Thesedocumentsconstitutedtheoriginalbasisforequipmentclassificationwhich,tosomeextent,isusedtoday.However,presentCorporateProcedureshavemodifiedtheseclassificationstodefinesafety-relatedcomponentsasfollows:"SafetyRelated(NItems)arethose':Whichareassociatedwiththea)safeshutdown(hot)ofthereactor,orb)isolationofthereactor,orc)maintenanceoftheintegrityoftheReactorCoolantSystemPressureBoundary.OR2.Whosefailuremighta)causeorincreasetheseverity,ofadesignbasisaccidentasdescribedintheFSAR,orb)leadtoareleaseofradioactivityinexcessof10CFR100limits."

IhIJIP Electrical,civil,mechanical,andstructuralitemswithknownexceptions,arelistedassafetyrelatediftheyare:1.SeismicclassI,2.ElectricalclassIE,3.AssociatedwiththeEngineeringSafetyFeaturesActuationSystem,4.AssociatedwiththeReactorProtectionSystem,or5.'afety-relatedforotherreasons,suchasportionsoftheFireProtectionSystemandPost-TMIinstallations.Componentswhichmettheaboverequirements(withknownexceptions)wereclassifiedassafetyrelated(N-Items)andenteredintoacomputerizedlistcalledtheN-List.Acomponentisthesmallestunitwhichisseparatelyidentifiedinoriginalequipmentprocurementdocumentation.Inotherwords,ifamotorcontrolcenterwasbought,asaunit,eachsub-assemblywithinthatMCCwouldnotbeseparatelyenteredintheN-list.Structuralitemssuchasconcrete,rebar,buildingsteel,etc.werecoveredbyalineentryperitem.Electricalitemssuchasrelays,switches,conduits,fittings,andtrayswerealsocoveredbyasinglelineentryperitem.TheN-listisoneofthedocumentsutilizedtoidentifyequipmentasbeingsafetyrelated.However,itisnotallinclusiveandthereforenotthesolesourceofreference.Whenspecificdeterminationsmustbemade,otherdocumentssuchastheFSAR>TechnicalSpecifications,relatedcommunicationstotheNRC,flowdiagrams,isometrics,electricaloneline,andelementarydiagramsarealsoconsulted.ThecontroloftheN-list,includingupdateandmaintenanceresponsibilities,issetforthincorporatelevelGeneralProcedures.ZfanyonewithinAEPorthePlantisunsureoftheclassificationofacomponent,heisrequiredtocheckwiththeresponsibleAEPSCCognizantEngineer,Underthepresentsystemofworkcontrol,aJobOrderispreparedforallrepairandmodificationworkperformedattheplant.Attachment2isasampleJobOrder.DuringtheJobOrderpreparationprocess,thesafetyclassification(NorS)oftheequipment,aswellasproceduresrequiredtoperformthework,areindicatedontheJob~Orderform.Thepersonnelresponsiblefordesignatingthesafetyclassificationareexperiencedandknowledgeableintheuseofthereferencedocumentsdescribedabove.Thesamereferencedocuments,includingpurchaseordersandtheDCCSpecifications,areusedtoassurethatqualifiedreplacementpartsareutilizedwhenrequired.TheprincipalsupplyofcomponentswhosefunctionisrequiredtotripthereactorwasthroughWestinghouseElectricCorporation.WehavereceivedfromWestinghousealistofallchangesrecommendedfortheequipmenttheyhavesuppliedfortheD.C.CookNuclearPlant.Verificationbyformalwrittendocumentationhasnotbeenobtainedon IId 4alltheseitems;however,Attachment3liststhemodificationsandtheirdisposition,includingthereason(s)why.thechangewasnotincorporated.Attachment4describesthecontrolsthatapplytochangesaffectingtheD.C.CookNuclearPlant.Webelievethattheseattachmentsdemonstratethatourprogramiseffectiveinaccomplishingsafetyobjectives.Toallowustosystematicallytrackvendordocumentationforthelifetimeoftheplant,.wearesettingupaVendorDocumentControlSystem.Attachment5givesapreliminarydescription.Wecurrentlyanticipatehavingaprogramcompletedandinplace.bytheendof1985.Basedontheabove,itisourbeliefthatwecurrentlyhaveaneffectiveprogramtoassurethatallcomponentswhosefunctionisrequiredtotripthereactoraretreatedinamannerwhichisnotinimicaltopublichealthandsafetyand,althoughnotthesameastheNRCstatedposition,willaccomplishwhatwebelievetobetheintendedsafetyobjectiveoftheNRC.Wehavereviewedthetripcomponentslisttomakesurethat,exceptasnotedonAttachment1,eachitemisontheN-listand,thus,underthecontrolscitedabove.Wecannotatthistimesubmitastatementconfirmingthattheyconformtothepositionregardingequipmentclassificationbecause,asdescribedabove,wehaveadifferentprograminthisarea.DevelopmentoftheprogramcitedinEtem2.1ofGenericLetter83-28wouldconstituteamajorundertakingandwould,inalllikelihood,take'onsiderabletime.Zfforanyreason,theNRCshouldfindourresponsein<hisareatobeunacceptable,wewouldliketomeetwithyourstafftodiscussalternativeapproaches.

I 2.2EquimentClassificationandVendorInterface(ProramsforallSafet-RelatedComonents)ThissubjectisbeingreviewedindepthwithinAEPSCandtheD.C.CookNuclearPlant.Inviewoftheconsiderablescopeoftheprogramsinvolved,theamountofdetailedinformationnecessary,andtheinputfromINPOonvendorinterface,weanticipatethatwewillneeduntilMarch30,1984torespondtothissection.

1'PI 3.POSTMAINTENANCETESTINGReactorTripSystemComonentsPost-MaintenanceTestingWehavereviewedourtestandmaintenanceproceduresandTechnicalSpecificationsandhavedeterminedthatpost-maintenanceoperabilitytestingofreactortripsystemcomponentsisrequiredtobeconductedpriortoreturningthesystemorcomponentstoservice.Thetestingdemonstratesthattheequipmentiscapableofperformingitsintendedsafetyfunction.Itshouldbenoted-thattherearecomponentssuchascontrolswitches,inverters,batteries,andcablepenetrationsthatareverifiedoperableaspartofasystemtestorbyverifyingoutputparameters.Post-maintenanceoperabilityverificationrequirementsforworknotcoveredbyaspecificprocedureisreviewedandestablishedaspartofthejoborderreviewprocess,theplantdesignchangeprocedure,andtheclearancepermitsystem.PlantinstructionsgoverningmaintenanceworkanddesignchangesarepresentlyundergoingreviewaspartofourRegulatoryPerformanceImprovementProgram.Thisreviewincludesspecificinstructionstoaddressbothpost-maintenancetestinganddesignchangeinstallationoperabilitytesting.RecommendedTestsWehavereceivedfromWestinghousetheirTechnicalBulletinNSD-TB-83-05whichlistsalltheirTechnicalBulletinsandDataLetterssenttomembersoftheWestinghouseOwner'sGroupasofJune20,1983.Wehavereviewedallthesebulletinsandforthosethatpertaintothetripsystem,wehaveassuredourselvesthattheinformationwasconveyedtocognizantengineersatAEPSCandtherelevantDepartmentatthePlant.Changesintestingandmaintenanceprocedurespromptedbythesebulletinshavebeeninitiated.ForvendorsotherthanWestinghouse,wehavestartedtosendoutlettersrequestingalistoftheirdocumentsthatpertaintoreactortripcomponentssothatwemayverifytheirincorporation.Conditionaltoourreceivingtheinformationfromourvendorsonatimelybasis,wewillattempttoverifythedispositionofallofthesemodificationnoticespriortoMarch30,1984.ExcessiveTechnicalSpecificationMandatedTestingIWeareawareoftheNRCTaskForceonPlantTechnicalSpecificationsSurveillanceRequirementsanditseffortstoenhancesafetyby.seekingoutoptimumpost.-maintenancetestingfrequencies.AEPSCisamemberoftheWestinghouseOwner'sGroup(WOG)whichhasanactivesubcommitteeonTechnicalSpecifications.

I OnSeptember16,Mr.J.J.Sheppard,thechairmanofWOG,wrotetoMr.J.Sniezek,Directorofthe.DEDROGRstaff,outliningtheOwner'sGrouppositiononthisissue.Wesupportthepositionandphilosophycontainedintheletter,particularlythecommentontoofrequentstartuptestingofdiesels.Wedonotintendatthistimetoseparatelysubmit:anapplicationforreducedtestingwithsupportingjustificationtodemonstratethatsafetyisdegradedratherthanenhanced.

0 3.2AllotherSafet-RelatedCpmonentsDuetothelargevolumeofactivityassociatedwiththisresponse,wearecurrentlyschedulingourresponseinthismattertobeissuedonMarch30,1984foritems3.2.1and3.2.2.Foritem3.2.3,ourresponseisthesameasthatpresentedunderitem3.1.3. 4.REACTORTRIPSYSTEMRELIABILITYIMPROVEMENTSVendor-RelatedModificationsAppendixAofWestinghouseTechnicalBulletinNSD-TB-83-05,datedJune20,1983,hasbeenreviewedbyAEPSCCognizantEngineers.ExceptforthosebulletinslistedinAttachment6,allthosechangesthatrelatetoourplanthavebeenorarebeingimplemented.PlantpersonnelareawareofthecontentsofbulletinslistedinAttachment6.AreviewofthePlantproceduresisunderwaytoensurethatnecessaryupdatesaremadel'hemodificationsrecommendedinNCD-Elec-18relatetocertainproblemsidentifiedinDB-50reactortripbreakerspriortodeliverytotheD.C.CookPlant.Correctionsweremadebythemanufacturer.TheWestinghouseOwner'sGroupsentusa.letter(83-242ofSeptember15,1983)askingforvisualconfirmationthatwehadapost-1972UVTAUnit.ThiswasdoneattheCookPlant.NoticeNCD-Elec-18doesnotapplytoourplant.WehaveverballybeeninformedbyWestinghousethatadditionalBulletins(suchas83-02Rev.1)willbesenttousintheverynearfuture.Whenwereceivethemwewillactonthem.

4.2PreventativeMaintenanceandSurveillanceProgramforReactor4.2.1PeriodicMaintenanceThecurrentmaintenanceprogram(exceptforfrequency)forthereactortripbreakersisincompliancewiththeWestinghouserecommendationscontainedinWestinghouseTechnicalBulletin83-02.Priortotheissuanceofthisbulletin,theprocedurewasincompliancewiththerecommendationsofBulletin74-02.Thecircuitbreakersareinspected,cleaned,andlubricatedduringeachrefuelingoutage.Criticalclearancesareverifiedtobewithintolerancebyuseofgo/no-gogauges.Instructionsforadjustmentsareincludedinthemaintenanceprocedure.4.2.2ParameterTrendingTheperformanceoftheundervoltagetripdevicewillbemonitoredduringscheduledinspectionsbyreducingtheappliedvoltagetotheundervoltagetripcoilandrecordingthetripvoltage.Atleastthreevaluesforeachcircuitbreakerwillbeobtained.Futurevalueswillbecomparedforindividualcircuitbreakerstomonitoranychanges.Comparisonswillalsobemadebetweencircuitbreakers.Criteriaforevaluatingchangesarebeingdevelopedandareexpectedtobeinplacebytheendof1984.

4.2.3and4.2.4LifecleTestingandperiodicRelacementLifecycletestingof.theshunttripattachment(STA)andtheundervoltagetripattachment(UVTA)ofthereactortripswitchgearisbeingconductedbyWestinghousefortheWestinghouseOwner'sGroup.Thisprogramisaimedtowardestablishingtheservicelifeofthesedevicesandsubstantiatingperiodictestrequirementswithpropermaintenance.1TheUVTAtestingfortheDB-50breakersiscompleteandweareexpectingareportbytheendofNovember1983.Thebalanceoftheprogramisscheduledforcompletioninthesecondquarterof1984.Anychangestopreventativeandcorrectivemaintenanceorreplacementintervalsindicatedbytheresultsofthetestswillbeconsideredforincorporationintoourexistingprocedures.

0 4.3.AutomaticActuationoftheShuntTriAttachmentforWestinhouseandBSWPlantsWeintendtomodifythereactortripsystemsothatincaseofanautomatictrip,boththeShuntTripAttachment(STA)andUnderVoltageTripAttachment(UVTA)willcause<hereactortripbreakerstoopen.TheWestinghouseOwner'sGroupaskedWestinghousetodesignthisautomaticactuationfeature.Adetailedgenericdesignpackagewasdevelopedandtr'ansmittedtoHr.EisenhutbyJ.J.Sheppard(Chairman,WOG)byletteronJune14,1983.TheNRCissuedaSafetyEvaluationReportonthegenericdesignonAugust10,1983(letterD.EisenhuttoJ~J.Sheppard).SeveralquestionswereraisedandadditionalinformationrequestedinthatReport.TheReportconcludedthatthegenericdesignwasacceptablebutpointedouttheplant-specificinformationrequired.WewillconsidertheSTAtobeasafety-relatedfunctionandstipulatethatthecircuitryusedtoimplementitmustbeclassIE.Westinghouse'isproceedingtoqualifytheSTAtoIEE323-74and344-75criteriaandtoconductseismictestsandissueacompletetestreport.Thepresentschedulecallsforcompletionoftheirworkinsevenmonths.OnreceivingafinalgenericdesignfromWestinghouse,wewillbestartingaplant-specificdesign.AdesignpackagewillbesubmittedtotheNRCforsafetyevaluation.Weareunabletogiveyouanimplementationschedulebeforereceiptof-thecompleteWestinghousedesignpackageandreport.

II 4~4~ImprovementsinMaintenanceandTestProceduresforBGWPlantsThisSectiondoesnotapplytotheD.C.CookPlant.

4.5SstemFunctionalTesting4.5.1..STAandUVTATestingThereactortripbreakersarecurrentlytestedon-line,byoperationoftheundervoltagetripdevice.Thepresentarrangementoffourcircuitbreakers,twotripandtwobypass,permitson-linetestingofthebreakers.WecurientlytesttheUVTApriortoeverystart-upandonceeverythreemonthsduringunitoperation.Theshunttripisindependentlytestedpriortoeachstart-up.Nofailures.havebeenencountered.4.5.2.Oncethemodificationtoenable'utomaticactuationoftheshunttripattachmentismade,wewilltestboththeUVTAand-theSTAwhiletheunitisinoperation.On-lineTestingSinceweperfoxmon-linetesting,thissectiondoesnotapply,toourplant.4.$.3.FrequencyofOn-lineTestingOurpositionisasfollows:ThereactortripcircuitbreakersattheD.C.CookPlantareinstalledinacleananddxylocationandarenotsubjecttoanydeleteriousenvironmentalinfluences.Thepresentmaintenanceprogramrequiresthatthecircuitbreakersbeservicedateveryrefuelingoutage.Atthistimethemechanicalfeaturesofthecircuitbreakersareinspectedandadjustedasnecessarytomaintainthecriticalclearancesdeterminedbythemanufacturertobenecessaryforreliableoperation.Thecircuitbreakeranditscompartmentarecleanedandlubricationisappliedasrecommendedbythemanufacturer.Themaincontactresistanceis'erifiedtobeacceptablebytest.Thecircuit,breakersaretheninstalledinthemetalcladenclosures.Priortoreturningthecircuitbreakertoservice,anelectricalfunctionaltestisperformedwhichteststheelectricalclosing,electricalshunttripandtheundervoltagetrip.ZncompliancewiththeTechnicalSpecifications,theundervoltagetripofeachcircuitbreakerhasbeentestedonlineatthree-monthintervals.Therehavebeennofailuresofthereactortripcircuitbreakerstotripduringtestsorinactualopexation.Thishistoryofexcellentperformancehasbeenmaintainedforover7yearsforoneunitand4yearsfortheother.Thepresent r' surveillanceand'maintenanceprogramhasbeenadequate,resultinginnofailures.Thepresent'maintenanceschedulepermitsinspectionsandadjustmentstothecircuitbreakersatintervalswhicharemorefrequentthannecessary,consideringthecleanenvironmentandlightelectrica'1'ervicerequiredofthecircuitbreakers.Thetestingatthree-monthintervalshasprovidedthenecessaryexercisetoensurefreedomofmotionofthecircuitbreakersanditsattachmentswhentheyarecalledontooperatetoperformtheirsafetyfunction.Assumingamaximumtestintervalofonehourforeachon-linesurveillancetestforeachcircuitbreaker,thereactorprotectionsystemisdependentononesafetytrainfortrippingfortwohourseverythreemonths.Increasedon-linetestingfrequencywillresultingreatertimedependencyononetrainfortrippingwithoutincreasingtheassurancethatthereliabilityofthecircuitbreakershasbeenimproved.TheWestinghouseOwner'sGroupiscarryingouttestsonthesebreakers.Weexpecttoreceivetheir.resultsinFebruary1984.Ifthereareanychangeswefeelweneedtomakeasaresultofthetests,wewillcommunicatetoyoubyMarch30,1984.

0I)1J ATTACHMENT1toAEP:NRC:0838AREACTORTRIPSYSTEMCOMPONENTSINSTRUMENTSSteamGeneratorLevelSteamPressurePressurizerPressureContainmentPressureBLP-110120130140ill121131141112122132142MPP-210220230240211221231241212222232242PPP-300301302NPP-1511'52153NPS-1'53ReactorCoolantTemeratureNTP-110Turbine1stStagePressure120MPC-253*130254*140TurbineControlFluidPressure111LPS-90*1219]*13192*141MainFeedWaterFlowReactorCoolantSystem'10FFC-210220230240211221231241MainSteamMFC-110120130140ill121'131141FlowFlowNFP-210220230240211221231241212222232242220230240211221231241NuclearFluxMonitorsN-3132353641PressurizerLevel42NLP-15143152441'53CONTROLSWITCHES101-RTA101-RTB6-SIA16-SIA26-SIB16-SIB25-PSIA5-PSIB5-SSIA.5-SSIBRELAYS96-DDF96-1AUF96-1BUF96-1CUF96-lDUF96X-AUFB96X-BUFB96X-AUFA96X-BUFA96X-CUFB96X-DUFB96X-CUFA96X-CUFB RELAYSATTACHMENT1gCont'd)MISCELLANEOUS27-AUV27-BUV27MUV27-DUV27-lAUV27-1BUV27-1CUV27-DUV62-27X-AUVB62-27X-BUVB62-27X-AUVA62-27X-BUVA62-27X-CUVB62-27X-DUVB62-27X"CUVA62-27X-DUVA96-AUF96-BUF96-CUF4KV-BUSlAP.T.4KVBUS1BP.T.4KVBUS1CP.T.4KVBUS1DP-T.ACB52-1B9AUX.ACB52-1C2AUX.ACB52<<1D9AUX.ACB52-lA4AUX.33-SVS-133-SVS-233-SVS-333-SVS"4SW.*SW.*SW.*SW.**NonN-gradecomponentRationalefortheuseofnonN-gradecomponentsintheReactorTripSystem:SomedeviceswhichprovidecontactclosurestotheReactorProtectionSystemarenotincludedonthe"N"list.These,devicesarelocatedinareaswhichdonotmeettherequirementsforsafety-gradestructuressuchastheturbinebuildingorareconnectedtoequipmentwhichhasnoothersafetyfunctionsuchasthereactorcoolantpumpcircuitbreakersandtheirsourceelectricalbusses.Thetripfunctionsprovidedbythesecontactsareusedtodevelopanticipatorytrips.Thebuspotentialtransformersusedastransducersforthefourreactorcoolantpumpmotorsourceelectricalbussesareconnectedtonon-safetygradebusses.ThepotentialtransformerscannotbesafetygradeorclassIEiftheirenclosureisnotalsoclassIE.Thesepotentialtransformersprovidethevoltagetotheundervoltageandunderfrequencyrelayswhichprovideananticipatorytripofthereactoronlowreactorcoolantflow.Thesebuspotentialtransformersareidentifiedas"4kvBUSlAPT"forthelAbus.Similardesignationsareusedforbusses1B,1C,lD<2A~2B>2C,and2D.Thereactorcoolantpumpcircuitbreakerpositionswitchesarelocatedincircuitbreakersinnon-safetybusses.Thesecircuitbreakerpositionswitchesprovideaninputtothe:logictodevelopananticipatorytripofthereactorontripofreactorcoolantpumps.Theseswit'chesareidentifiedas"ACB-52-1B9auxsw."forcircuitbreaker1B9.Similaridentificationisusedforcircuitbreakers1C2,1D9,lA4,2B9,2C2,2D9,and2A4.

I"I11' ATTACHMENT1(Cont'd)Twosetsofdevicesonthemainturbineprovideinputcontactstothereactorprotectionlogicsystem.Theturbinehydx'aulictripsystempressuxeissensedbypressureswitcheslocatedinthe<urbinefzontstandard.Alossofpressureindicatesthatthetuxbinehasbeentripped.ThesedevicesareidentifiedasLPS-90,LPS-91,andLPS-92.Twosetsoflimitswitchesoneachturbinemainstopvalvealsopz'ovideinputcontactstothereactorprotectionlogicsystemtoindicateclosureofthemainstopvalves.Closureofallfourmainstopvalvesisaredundantindicationofturbinetrip.Thetripsystempressureswitchesandthemainstopvalvelimitswitchesarelocatedonthemainturbinewhichisnotasafety-relateddevice.Thedevicesdevelopanticipatorytrips.Theseswitchesareidentifiedas"33-SVS-1","33-SVS-2","33-SVS-4."Twopressuretransducers,MPC-253andMPC-254,arelocatedadjacenttothemainturbineandareusedtosensetheturbinefizststagepressureasameasureofturbineload.Thesetransducersarenotlistedonthe"N"listbecause<heyareturbine-mounteddevices.ExclusionofalloftheaboveitemsfromtheN-listdoesnotconstituteanunreviewedsafetyquestionasdefinedin10CPR50.59,nordoesitcreateasubstantialhazard.tothehealthandsafetyofthepublic.

'II~INI\ ATTACHMENT1(Cont'd)MISCELLANEOUSReactorTripSwitchgearSolidStateProtectionSystem-Input,Output,LogicCabinetsReactorProtectionChannel1,Cabinets1-4II2I5-8II3I'>>11II4"1213ReactorProtectionAux<abinetsAuxCabinetsRPSX-AandRPSX-BControlPanel-FLXIIPR2II-SISII-SGIISARCable-Item53064II3073II3074II-3075II3076II3077II3111If3112tl3119tl3120II3121II3122II3123I13124II3125II0871II0872ElectricalInstrumentPenetrationEP-08tlEP-10IIEP-llElectricalInstrumentandControlPenetrationEP-12ZnverterandDistributionCabinetCRZDI.IICRIDIZIICRZDZIIIICRIDIV250VDCPlantBatteries

,Pp"r.4l'

,rtl@rojssLsjo+4g~g4>>DONALrjj'j'CPO~+PLAAN+sPI%%WA+jPLPL~K~PjLPdtPP4~'iLjjjpp">"-',.'e'Sv..gtej.OQl@eejrkAOO.Qj4@.~y@Wr~'!,Kpsjpil*rpjrwgg~yjljrLP'3~oqsj~,Asjjrrj'g:.rIrjsgeoLirpjssdgmps~gpPAp~~~%4N&kk'~rjrej@g%WXMkiI5W,,mW~.jojgpj's'LLs4YNÃjj%ts'rrJQ)r,"jjjBH'">.'-d'~'CCA'SSIICATIOgfNi~e.'N~P"PQ~QORf5LTOjBWPERF(PQEDfBg~-@N-'%'N'M5NPijL,Ž~=.LommLtjssj'so~,s:.;.",c~':i-seroiDettsm)"*+oo4'iHsossosoe~sm4s'mw-crees<<.sodeUSe4rspvvkmeosooOI~spvsassmo~r~poopr'rr4Arooss44"m.ses4mw'eeesosesosssp'e'Jooege,"-Sr',,'-'AP'Aak'i444&5'eS'j'"4jjj@pegOrpmjjer.'SVSglgjPe'jSKgj&S,4l74ASPrLO'iNiimBer@g4f%rjsejjr'e":<<"'@<<'Eg&DiaamlRef3?@NVFLZ&54,~SP~NAM",R%%5'%4N~~%,M'Ciaranee~~%9.'~'@F~WNk~g."~@<%,-qf'~+".$3fPro'cediiie'jRe"uiiedRWliP:Mni:."=@ziY4L'~~'NN&PAWP~~~'-~~'~P'~mh>>WId'r'Grind=-'Burns.!MV~"'"..w8%Pi'.;~~AA~~'."gjs.s:.':.gLjprs%":".'rjb!'i'rs-"o"'.'%s4iNsprx~issÃi."MMrxAikj.'."LrNfiÃps&Lrr.rs>'MKs'jr.oorr"'e'.spp'ee""".m'RzLLo'rMrpr0~NL~'!@..'roppAspA',Given>toN$7RPS'>Co'nditioqARep'ort~~sDa'taHistci'"~,'>'gq~P3++3%JN'&ATE"'>"'>Pm&WMQWW'lg~yf' C~(Y'II

-30>>ATTACHMENT3toAEP:NRC:0838ALISTANDDISPOSITIONOFWESTINGHOUSERECOMMENDEDCHANGESAFFECTINGREACTORTRIPSYSTEMSBulletin75-17122975.DispositionLooseterminalaonnectionsforpowersupplyinverters.ThisappliedtoWestinghouseInvertersanddoesnotapplytoD.C.Cookplantsincesolidstateinvertersareused.77-10072177.ARrelayswithlatchattachment.Allrelayswereinspectedandthosehavingtheaffecteddatecodeswerepurgedfromtheinstalledsystemarfromstock.Nofurtheractionisrequiredatthistime.79-02041779.OvercurrenttripdevicesonDBcircuitbreakers.NotapplicabletothesafetysystemsofD.C.Cookplant.Noactionrequired.82-03-Rl121482.ARrelayswithARMLAattachments.Wehavetherelaysandhavequalifiedthemseismically.Nofurtheractionisrequiredatthis.time.83-02032483.Reactortripbreakermaintenance.Recommendedactionhasbeenincorporatedinplantmaintenanceprocedureforreactortripcircuitbreakers.83-03032483.Reactortripcircuitbreakertesting.Testprocedureshavealreadyincorporatedseparatetestforundervoltageandshunt,tripdevices.

ICl'I'8 ATTACHMENT3(Cont'd)NSZDLetterDissition63-02061063.Tutorialinformationonnoisecouplingintoinstrumentcircuits.Nospecificactionidentified.Noactionrequiredatthistime.68-14051568.Tutorialinformationonlead/laginstrumentsystems.Nospecificactionidentified.Noaction;requiredatthistime.68-25073168.Misuseofvitalinstrumentbus.Generalinformationandprecautions.Nospecificactionidentified.Noactionrequiredatthistime.68-26073168.Misuseofvitalinstrumentbus.Generalinformationandprecautions.Nospecificactionidentified.Noactionrequiredatthistime.68-26080768.Unauthorizedfieldmodifications.Appliedtoturnkeyinstallations.Doesnotapply.toD.C.CookPlant.Nofurtheractionrequired.70-18091870.AmphenolTriaxCabledefects.NoAmphenoltriaxcableisusedatD.C.CookPlant.Nofurtheractionisrequired.72-80080272.Znvertertests.DoesnotapplytoD.C.CookPlantsinceWestinghouseinvertersarenotused.

~lp1 ATTACHMENT3(Cont'd)INSTRUMENTATION6CONTROLTechnicalDataLetterNo.Disposition69-4UnitsReferencedinletter(M/63SandM/635DR)arenotatourfacility.Ourunitsare63R,63U,63U-Dor63U-E,F.70-21DropTimeTestProcedure12THP4030STP.387isinaccordancewithletter.71-17SULetterimpactsinitialstartupandwouldnotaffectoperatingplant.TechnicalBulletinDissition73-6TheCoolantflowproceduresTHP6030IMP.099(U<<l)andTHP6030IMP.199(U-2)areproperlyscaledforthebistableinputs.Secondarysteamflowhasasquarerootextractorbeforethebistableinput.73-19Connectionsinvolvetheoperatingcoilandwouldnothamperareactortrip.73-20Plantpresentlyexercisesthesepotsduringcalibration.75-6ReviewofWestinghouse-suppliedamplifiersindicatesnonearethesuspectmodels.Ref.AEP/AMPWNESInstrumentationmanualindicatesallamplifiersareFoxboroModel66BC-O.77-11PlantproceduresTHP4030STP.045(U-1)andTHP4030STP.145(U-2)utilizetheprocedurereferenceinthisTechBulletin.78-281-12Wouldnotinhibitatrip.NoFoxboro92B'sarebeingusedatourplant.

IIJ ATTACHMENT34Cont'd)DataLetterDisposition80-03022980.AmphenolInstrumentconnectors.Rexoliteinsulatedconnectors.Wewillinitiateanewattempt'toobtainconnectorswiththerecommendedinsulation.AttemptstoobtaintheseconnectorsfromAmphenolwereunsuccessfulinthepast.81-02062481.instrumentinvertertransformerredesign.DoesnotapplytoD.C.CookPlantsinceWestinghouseinvertersarenotused.82-07041382-instrumentinverters.AppliestoWestinghouseinverters.Notapplicabletosolidstateinverters.

ar ATTACHMENT3(Cont'd)TheremainingitemslistedbelowweredeteminednottoimpacttheReactorTripFunction:TechnicalBulletins:73-173-773-1573-1674-474-874-1474>>14SupplA75-175-380-280-380-480>>780-1080-1175-575-5SupplA75-07-Rl75-875-075-1275-1375-14-Rl75-1575-1881-181-281-381-4-Rl81-781-876-176-376-476-676-776-876-976-11-Rl76-13,76-1481-081-1081-1382-182-282-476-1577-377-477-577-677-777-877-977-1277-1482-582-682-783-183-478-1-Rl78-378-4-Rl79-379-479-679-779-879-980-1NSIDDataLetters59-361-362-463-163-463-564-264-467-468-168-268-468-568-7-Rl68-8-Rl68-1168-1268-1468-1578-478-578-678-778-878-978-10-Rl78-1178-1279-379-579-679-780-180-2-Rl68-1968-2768-2968-3168-32-R268-3368-3668>>3779-369-769-969-1069-1169-12-R369-1469-15-R269-1669-1969-2080-5-Rl80-680-980-1081-182-182-282-382-4-Rl82-582-682-882-982-1069-21-Rl69-2369-2469-2970-270-370-6-R370-870-970-1270-1570-1670-1770-2070-2270-2571-171-3SU82-1282-1371-471-85U71-9SU71-1271-1471-1571-1671-2071-21-Rl72-172-3SU72-472-5R172-6SU72-772-9SU72-12SU73-3.SU73-373-974-174-474-775-275-675-776-276-376-577-2-Rl77-477-677-778-178-278-3 r44

.~-35-ATTACHMENT4toAEP:NRC:0838ACONTROLOFDESIGNCHANGESDONALDCCOOKNUCLEARPLANTChangestosafety-relatedequipment,systems,and/orstructures(engineeringdesignchanges)arecontrolledbyaCorporatelevelprocedure.Thisprocedureissupplementedbylowertierorganizationalunitspecificproceduresifnecessary.Thevehicle-forinitiating,reviewing,approving,designing,and-implementinganengineeringdesignistheRequestForChange(RFC).RFCsmaybeinitiatedeitherbytheCookPlantstafforAEPSC.RFCs,regardlessoflocationoforigin,areassignedtoaLeadEngineerinthecognizantAEPSCengineeringox'esignsection.TheLeadEngineerisresponsibleforthedevelopmentoftheproposedchangeandthe-coordinationofinterdisciplinaryreview,scoping,andcosting.Once-theconceptualdesignforanRFChasbeencompleted,theRFC-isreviewedandapprovedbytheLeadEngineer'ssupervisor,androutedtotheAEPSCNuclearSafetyaLicensingSection(NSaL)forreview.NSGLreviewstheRFCforsafetyimplications,highlightsanysafetyissuesandsafety-relatedfeatures,andassuresthattheproposedchangewillnotcreateasignificanthazardtothehealthandsafetyofthepublicanddoesnotconstituteanunreviewedsafetyquestionasdefinedin10<FR50.59.UponcompletionofNSaL'sreview,theRFCisforwardedtotheCookPlant,PlantNuclearSafetyReviewCommittee(PNSRC).ThePNSRCreviewstheRFCforsafetyimplications,desirability,necessity,andalsoconsiderstheopex'abilityandmaintainabilityofthechange(fromasafetystandpoint)duringbothinstallationandsubsequentservice.OncethePNSRCacceptstheRFC,itisroutedtothePlantManagerforhisreviewandacceptance.ThePlantManagerthenroutestheRFCbacktoAEPSCforsubmittaltotheChangeControlBoard(CCB).TheCCBreviewstheRFCtoassurethatproperconsiderationhasbeengiventotheimpactthattheproposedchangemayhaveonplantsafety,testprograms,procedures,costs,schedules,andcurrentplantstatus.TheCCBdeterminesthattheproposedchangegivesproperconsiderationtogoodengineering,design,construction,andoperatingpracticesfornuclearplants,andthattheproposedchangemeetstherequirementsofapplicablecodes,standards,andguidelines.AfterCCBapproval,acopyoftheRFCisforwardedtotheAEPSCNuclearSafetyDesignReviewCommitteeforoff-lineindependentreview.TheNSDRCismandatedbytheCookPlantTechnicalSpecificationstoindependentlyreviewthesafetyevaluationperformedbyNSaLforchangestoequipmentorsystemscompletedundertheprovisionof10CFR,50.59toverifythatthechangedidnotconstituteanunreviewedsafetyquestion.

0~~~(6 TheoriginalRFCguponCCBapprovalgisreturned'to'theLeadEngineerforinitiationofthe"interactive"engineeringdesignprocess.Thisresultsinthegenerationofthedetaileddesignrequiredtoimplementthechange.Inparallelwiththisprocess,engineeringdocumentsimpactedbythechangearerevised.Thisactivityiscompletedwhenalldesigndocumentsnecessarytoimplementthechangehavebeenissued.Priortoonsiteimplementationofachange,achecklist(RFCInstallationAuthorization)mustbecompletedandsubmittedforapprovalbyplantmanagement.Thislistidentifies:flanyprecautionsandlimitations,theindividualresponsibleforcoordinatingtheimplementationofthechange,thesupervisorresponsiblefortheimplementation,anytestingrequiredbytypeandscope,anyinstructionsand/orproceduresrequiringrevision,andwhowillperformtheactualphysicalimplementation.Uponcompletionofthechange(s),adetailedRFCFinalSummaryReportmustbepreparedandanRFCReleaseandReviewForminitiated.TheRFCFinalSummaryReportisusedtoensurethatallitemsidentifiedontheRFCInstallationAuthorizationhavebeencompletedandthedrawingsusedduringtheoperationoftheplanthavebeenrevisedtoreflectthechange.TheRFCReleaseandReviewFormisusedtoprocesstheRFCtocloseoutandtosecuresignaturesnecessarytodeclarethechangeoperableandavailableforunrestricteduse.Thisdescriptionhighlightsthechangecontrolprocess.Theattachedflowchartprovidesfurtherdetails.

II0cCyIU

tieC'~II ATTACHMENT5toAEP:NRC:0838AVENDORDOCUMENTCONTROL'SYSTEM(VDCS)WeareintheprocessofsettingupacomputerizedVendorDocument<ontrolSystem.AlltechnicalinformationreceivedfortheD.C.CookNuclearPlantwillbeprocessedthroughthissystemregardlessofwhether-thevendorsenttheinformationtotheplantortotheCorporateoffice.ItiscurrentlyenvisionedthattheVDCSwilloperateinthefollowingmanner:Acentralgroupwillprovidealog-inprocedurewhichwillallowforsystematicstorageand-retrievalofdocumentsbyselectedfields.AnydocumentthatdoesnotpertaintoCookwillterminatehere.ApplicabledocumentswillbesenttotheCognizantEngineerfor'isposition.Wheremorethanonedisciplineisinvolved,aresponsecoordinatorwillbenamedwiththeresponsibilityofensuringthatproperactionistakenandthecomputerrecordsupdated.Transmittalsbetween,theCentralgroup,theEngineeringDivisionsoftheAEPServiceCorporation,andthePlantwillbetrackedbytravelerforms.AnyplantordesignchangeinitiatedbyavendordocumentwillbereferencedbyitsPlantModification(PM)orRequestForChange(RFC)number.ExistingPlantandCorporateProcedurestakeoverforthecontrolofchanges.Periodically,allvendorsontheVendorDocumentControlSystemwillbeformallycontactedandrequestedtofurnishalistofalltechnicaldocumentssenttoAEPortheCookPlant.Thislistwillbecompared'othecomputerlist.AnydocumentsmissingfromtheVDCSwillbeobtainedfromthevendorandprocessedinthenormalmanner.TheCorporateProcedureisbeingdraftedandthecentralgroupandcomputersupportpersonnelhavebeenidentified.Theimplementationdetailshaveyettobeworkedout.INPOisworkingontheproblemfromthe'genericstandpointofwhatdocumentsaretobecontrolledandhowtogarnervendorsupport.Sincethisresponseisinpartdependentoninputfromanoutsideorganization,i.e.,INPO,itisnotyetpossibletodevelopanimplementationschedule.WeanticipatethatwewillbeabletoprovidethatimplementationscheduleonMarch30,1984.

'0tt'4'El>rN't ATTACHMENT6TOAEP:NRC:0838AREACTORTRIPSYSTEMRELIABILITYWESTINGHOUSEBULLETINSBEINGIMPLEMENTED'ELEVANTPLANTPROCEDURESBEINGREVIEWEDFORUPDATENumber79-0480-0380-580-0780-873-2074-377-380>>880-6BulletinorDataLetterDBDBBDDDDescriptionSolidStateProtectionSystemP-4PermissiveTestNuclearInstrumentationConnectors-AmphenolDelta-FluxInstrumentationCalibrationFoxboroTransmitterJunctionBoxSourceRangeDetectorMulti-TurnPotentiometersFoxboroTransmitters-CalibrationSolidStateProtectionSystem-ExtenderBoardsBartonTransmitterPotentiometerOxideDepositBeingaddressedbyRequestForChange(RFC)12-2512 VPcSq