ML17321A932
| ML17321A932 | |
| Person / Time | |
|---|---|
| Site: | Cook  |
| Issue date: | 10/17/1985 |
| From: | SCIENCE APPLICATIONS INTERNATIONAL CORP. (FORMERLY |
| To: | NRC |
| Shared Package | |
| ML17321A931 | List: |
| References | |
| CON-NRC-03-82-096, CON-NRC-3-82-96 GL-83-28, SAIC-85-1524-4, NUDOCS 8510310032 | |
| Download: ML17321A932 (15) | |
Text
SAIC-85/1524-4REVIEWOFLICENSEEANDAPPLICANTRESPONSESTONRCGENERICLETTER83-28(RequiredActionsBasedonGenericImplicationsofSalemATWSEvents),Item1.2"POST-TRIPREVIEW:DATAANDINFORMATIONCAPABILITIES"FORDONALDC.COOKNUCLEARPOWERPLANT,UNITS152(50-315,50-316)TechnicalEvaluationReportPreparedbyScienceApplicationsInternationalCorporation1710GoodridgeDriveMcLean,Virginia22102PreparedforU.S.NuclearRegulatoryCommissionWashington,D.C.20555ContractNo.NRC-03-82-0968510310032'51017~PDRADQCK05000315.PPDR FOREWORDThisreportcontainsthetechnicalevaluationoftheDonaldC.CookNuclearPowerPlant,Units152responsetoGenericLetter83-28(RequiredActionsBasedonGenericImplicationsofSalemATWSEvents),Item1.2"PostTripReview:DataandInformationCapabilities."Forthepurposesofthisevaluation,thereviewcriteria,presentedinpart2ofthisreport,weredividedintofives'eparatecategories.Theseare:1.Theparametersmonitoredbythesequenceofeventsandthetimehistoryrecorders,2.Theperformancecharacteristicsofthesequenceofeventsrecorders,3.Theperformancecharacteristicsofthetimehistoryrecorders,4.Thedataoutputformat,and5.Thelong-termdataretentioncapabilityforpost-tripreviewmaterial.AllavailableresponsestoGenericLetter83-28wereevaluated.Theplantforwhichthisreportisapplicablewasfoundtohaveadequatelyrespondedto,andmet,categories2and4.Thereportdescribesthespecificmethodsusedtodeterminethecate-gorizationoftheresponsestoGenericLetter83-28.Sincethisevaluationreportwasintendedtoapplytomorethanonenuclearpowerplantspecificsregardinghoweachplantmet(orfailedtomeet)thereviewcriteriaarenotpresented.Instead,.theevaluationpresentsacategorizationoftheresponsesaccordingtowhichcategoriesofreviewcriteriaaresatisfiedandwhicharenot.Theevaluationsarebasedonspecificcriteria(Section2)derivedfromtherequirementsasstatedinthegenericletter.
TABLEOFCONTENTSSectionPageIntroductfono~~~~~~~~~~~~~~~~~~~~~~~~11.Background.................~~~~~~~~~22.ReviewCriteria.............,,,33.Evaluation.................~~~~~~~~~84.Conclusions~~~~~~~~~~~~~~~~~~~~~~~~~95.References.................4.FOP/0~~potu+e~Pb<Pete~~10~I/
INTRODUCTIONSAIChasreviewedtheutility'sresponsetoGenericLetter83-28,item1.2"Post-TripReview:DataandInformationCapability."Theresponse(seereferences)containedsufficientinformationtodeterminethatthedataandinformationcapabilitiesattheseplantsareacceptableinthefollowingareas.~Thesequence-of-eventsrecorder(s)performancecharac-teristics.~Theoutputformatoftherecordeddata.However,thedataandinformationcapabilities,asdescribedinthesubmittal,eitherfailtomeetthereviewcriteriaorprovideinsufficientinformationtoallowdeterminationoftheadequacyofthedataandinformationcapabilitiesinthefollowingareas.~Theparametersmonitoredbyboththesequence-of-eventsandtimehistoryrecorders.~Thetimehistoryrecorder(s)performancecharacteris-tics.~Thelong-termdataretention,recordkeeping,capa-bility.
1.BackroundOnFebruary25,1984,bothofthescramcircuitbreakersatUnit1oftheSalemNuclearPowerPlantfailedtoopenuponanautomaticreactortripsignalfromthereactorprotectionsystem.Thisincidentoccurredduringtheplantstartupandthereactorwastrippedmanuallybytheoperator,.about30secondsaftertheinitiationoftheautomatictripsignal.Thefailureofthecircuitbreakershasbeendeterminedtoberelatedtothestickingoftheundervoltagetripattachment.Pri~rtothisincident;onFebruary22,1983;atUnit1oftheSalemNuclearPowerPlantanautomatictripsignalwasgeneratedbasedonsteamgeneratorlow-lowlevelduringplantstartup.Inthiscasethereactorwastrippedmanuallybytheoperatoralmostcoinci-dentallywiththeautomatictrip.Atthattime,becausetheutilitydidnothavearequirementforthesystematicevaluationofthereactortrip,noinvestigationwasperformedtodeterminewhetherthereactorwastrippedautomaticallyasexpectedormanually.Theutilities'rittenproceduresrequiredonlythatthecauseofthetripbedeterminedandidentifiedtheresponsiblepersonnelthatcouldauthorizearestartifthecauseofthetripisknown.Followingthesecondtripwhichclearlyindicatedtheproblemwiththetripbreakers,thequestionwasraisedonwhetherthecircuitbreakershadfunctionedproperlyduringtheearlierincident.Themostusefulsourceofinformationinthiscase,namelythesequenceofeventsprintoutwhichwouldhaveindicatedwhetherthereactorwastrippedautomaticallyormanuallyduringtheFebruary22incident,wasnotretainedaftertheincident.Thus,nojudgmentonthe,properfunctioningofthetripsystemduringtheearlierincidentcouldbemade.Followingtheseincidents;onFebruary28,1983;theNRCExecutive'.~wDirectorforOperations(EDO),directedthestafftoinvestigateandreportonthegenericimplicationsoftheseoccurrencesatUnit1oftheSalemNuclearPowerPlant.Theresultsofthestaff'sinquiryintothegenericimplicationsoftheSalemUnitincidentsisreportedinNUREG-1000,"GenericImplicationsofATWSEventsattheSalemNuclearPowerPlant."Basedontheresultsofthisstudy,asetofrequiredactionsweredevelopedandincludedinGenericLetter83-28whichwasissuedonJuly8,1983andsenttoalllicenseesofoperatingreactors,applicantsforoperatinglicense,andconstructionpermitholders.Therequiredactionsinthisgenericletterconsistoffourcategories.Theseare:(1)Post-TripReview,(2)Equipment ClassificationandVenderInterface,(3)PostMaintenanceTesting,and(4)ReactorTripSystemReliabilityImprovements.Thefirstrequiredactionofthegenericletter,Post-TripReview,isthesubjectofthisTERandconsistsofactionitem1.1"ProgramDescriptionandProcedure"andactionitem1.2"DataandInformationCapability."Inthenextsectionthereviewcriteriausedtoassesstheadequacyoftheutilities'esponsestotherequirementsofactionitem1.2willbediscussed.~2.ReviewCriteriaTheintentofthePostTripReviewrequirementsofGenericLetter83-28istoensurethatthelicenseehasadequateproceduresanddataandinformationsourcestounderstandthecause(s)andprogressionofareactortrip.Thisunderstandingshouldgobeyondasimpleidentificationofthecourseoftheevent.Itshouldincludethe'apabilitytodeterminetherootcauseofthereactortripandtodeterminewhethersafetylimitshavebeenexceededandifsotowhatextent.Sufficientinformationaboutthereactortripeventshouldbeavailablesothatadecisionontheacceptabilityofareactorrestartcanbemade.ThefollowingarethereviewcriteriadevelopedfortherequirementsofGenericLetter83-28,actionitem1.2:Theequipmentthatprovidesthedigitalsequenceofevents(SOE)recordandtheanalogtimehistoryrecordsofanunscheduledshutdownshouldpro-videareliablesourceofthenecessaryinformationtobeusedintheposttripreview.Eachplantvariablewhichisnecessarytodeterminethecause(s)andprogressionoftheevent(s)followingaplanttripshouldbemonitoredbyatleastonerecorder[suchasasequence-of-eventsrecorderoraplantprocesscomputerfordigitalparameters;andstripcharts,aplantprocesscomputeroranalogrecorderforanalog(timehistory)variables].Eachdeviceusedtorecordananalogordigitalplantvariableshouldbedescribedinsufficientdetailsothatadeterminationcanbemadeastowhetherthefollowingperformancecharacteristicsaremet:
~Eachsequence-of-eventsrecordershouldbecapableofdetectingandrecordingthesequenceofeventswithasufficienttimediscriminationcapabilitytoensurethatthetimeresponsesasso-ciatedwitheachmonitoredsafety-relatedsystemcanbeascer-tained,andthatadeterminationcanbemadeastowhetherthetimeresponseiswithinacceptablelimitsbasedonFSARChapter15AccidentAnalyses.TherecommendedguidelinefortheSOEtimediscriminationisapproximately100msec.IfcurrentSOErecordersdonothavethistimediscriminationcapabilitythelicenseeorapplicantshouldshowthatthecurrenttimediscrimi-nationcapabilityissufficientforanadequatereconstructionofthecourseofthereactortrip.Asaminimumthisshouldincludetheabilitytoadequatelyreconstructtheaccidentscenariospre-sentedinChapter15oftheplantFSAR.~Eachanalogtimehistorydatarecordershouldhaveasampleinter-valsmallenoughsothattheincidentcanbeaccuratelyreconstructedfollowingareactortrip.Asaminimum,thelicenseeorapplicantshouldbeabletoreconstructthecourseoftheaccidentsequencesevaluatedintheaccidentanalysisoftheplantFSAR(Chapter15).Therecommendedguidelineforthesampleintervalis10sec.Ifthetimehistoryequipmentdoesnotmeetthisguideline,thelicenseeorapplicantshouldshowthatthecurrenttimehistorycapabilityissufficienttoaccuratelyrecon-structtheaccidentsequencespresentedinChapter15oftheFSAR.~Tosupporttheposttripanalysisofthecauseofthetripandtheproperfunctioningofinvolvedsafetyrelatedequipment,eachanalogtimehistorydatarecordershouldbec'apableofupdatingandretaininginformationfromapproximatelyfiveminutespriortothetripuntilatleasttenminutesafterthetrip.Theinformationgatheredbythesequence-of-eventsandtimehistorydatacollectorsshouldbestoredinamannerthatwillallowforretrievalandanalysis.Thedatamayberetainedineitherhardcopy(computerprintout,stripchartoutput;etc.)orinanaccessiblememory(magneticdiscortape).Thisinformationshouldbepresentedinareadableandmeaningfulformat,taking intoconsiderationgoodhumanfactorspractices(suchasthoseoutlinedinNUREG-0700).~Allequipmentusedtorecordsequenceofeventsandtimehistoryinformat'ionshouldbepoweredfromareliableandnon-interruptiblepowersource.Thepowersourceusedneednotbesafetyrelated.Thesequenceofeventsandtimehistoryrecordingequipmentshouldmonitorsufficientdigitalandanalogparameters,respectively,toassurethatthecourseofthereactortripcanbereconstructed.Theparametersmonitoredshouldprovidesufficientinformationtodeterminetherootcauseofthereactortrip,theprogressionofthereactortrip,andtheresponseoftheplantparametersandsystemstothereactortrip.Specifically,allinputparametersassociatedwithreactortrips,safetyinjectionsandothersafety-relatedsystemsaswellasoutputparameterssufficienttorecordtheproperfunctioningofthesesystemsshouldberecordedforuseintheposttripreview.Theparametersdeemednecessary,asaminimum,toperformapost-tripreview(onethatwoulddetermineiftheplantremainedwithinitsdesignenvelope)arepresentedonTables1.2-'1and1.2-2.Iftheappli-cants'rlicensees'OErecordersandtimehistoryrecordersdonotmonitoralloftheparameterssuggestedinthesetablestheapplicantorlicenseeshouldshowthattheexistingsetofmonitoredparametersaresufficienttoestablishthattheplantremainedwithinthedesignenvelopefortheappro-priateaccidentconditions;suchasthoseanalyzedinChapter15oftheplantSafetyAnalysisReport.Informationgatheredduringtheposttripreviewisrequiredinputforfutureposttripreviews.Datafromallunscheduledshutdownsprovidesavaluablereferencesourceforthedeterminationoftheacceptabilityoftheplantvitalparameterandequipmentresponsetofutureunscheduledshut-downs.Itisthereforenecessarythatinformationgatheredduringallposttripreviewsbemaintainedinanaccessiblemannerforthelifeoftheplant.
Table1.2-1.PWRParameterListSOERecorderTimeHistoryRecorderParameterSinalx(1)xx(1)xx(1)xx(2)(1)x(1)x(1)x(1)x(1)x(3)xx(1)x(1)x(1)x(3)ReactorTripSafetyinjectionContainmentIsolationTurbineTripControlRodPositionNeutronFlux,PowerContainmentPressureContainmentRadiationContainmentSumpLevelPrimarySystemPressurePrimarySystemTemperaturePressurizerLevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/ValveStatusMSIVPositionSteamGeneratorPressureSteamGeneratorLevelFeedwaterFlowSteamFlowAuxiliaryFeedwaterSystem;Flow,Pump/ValueStatusACandDCSystemStatus(BusVoltage)DieselGeneratorStatus(Start/Stop,On/Off)PORVPosition(1):Tripparameters(2):ParametermaybemonitoredbyeitheranSOEortimehistoryrecorder.(3):Acceptablerecorderopionsare:(a)systemflowrecordedonanSOErecorder,(b)systemflowrecordedonatimehistoryrecorder,or(c)equipmentstatusrecordedonanSOErecorder.
Table1.2-2.BMRParameterListSOERecorderTimeHistoryRecorderParameter/Sinalxxxxxx(1).x(1}(2)x(1)(2)x(1)x(1)xx(1}X(3)x(1)x(1)(3)(4)ReactorTripSafetyIn)ectionContainmentIsolationTurbineTripControlRodPositionNeutronFlux,PowerHainSteamRadiationContainment(DryMell)RadiationOrywellPressure(ContainmentPressure)-SuppressionPoolTemperaturePrimarySystemPressurePrimarySystemLevelMSIVPositionTurbineStopValve/ControlValvePositionTurbineBypassValvePositionFeedwaterFlowSteamFlowRecirculation;Flow,PumpStatusScramOischargeLevelCondenserVacuumACandOCSystemStatus(BusVoltage)SafetyInjection;Flow,Pump/ValveStatusDieselGeneratorStatus(On/Off,Start/Stop)(1):Tripparameters.(2):ParametermayberecordedbyeitheranSOEortimehistoryrecorder.(3):Acceptablerecorderoptionsare:(a)systemflowrecordedonanSOErecorder.(b)systemflowrecordedonatimehistoryrecorder,or(c)equipmentstatusrecordedonanSOErecorder.(4):Includesrecordingofparametersforallapplicablesystemsfromthefollowing:HPCI,LPCI,LPCS.IC.RCIC.
3.EvaluationTheparametersidentifiedinpart2ofthisreportasapartofthereviewcriteriaarethosedeemednecessarytoperformanadequatepost-tripreview.Therecordingoftheseparametersonequipmentthatmeetstheguidelinesofthereviewcriteriawillresultinasourceofinfor'mationthatcanbeusedtodeterminethecauseofthereactortripandtheplantresponsetothetrip,includingtheresponsesofimportantplantsystems.Theparametersidentifiedinthissubmittalasbeingrecordedbythesequenceofeventsandtimehistoryrecordersdonotcorrespondtotheparametersspecifiedinpart2ofthisreport.Thereviewcriteriarequirethattheequipmentbeingusedtorecordthesequenceofeventsandtimehistorydatarequiredforapost-tripreviewmeetcertainPerformancecharacteristics.Thesecharacteristicsareintendedtoensurethat,iftheproperparametersarerecorded,therecord-ingequipmentwillpr'ovideanadequatesourceofinformationforaneffec-tivepost-tripreview.Theinformationprovidedinthissubmittaldoesnotindicatethatthetimehistoryequipmentusedwouldmeettheintentoftheperformancecriteriaoutlinedinpart2ofthisreport.InformationsuppliedinthesubmittaldoesindicatethattheSOEequipmentmeetstheperformancecriteriaspecifiedinpart2ofthisreport.Thedataandinformationrecordedforuseinthepast-tripreviewshouldbeoutputinaformatthatallowsforeaseofidentificationanduseofthedatatomeetthereviewcriterionthatcallsforinformationinareadableandmeaningfulformat.Theinformationcontainedinthissubmittalindicatesthatthiscriterionismet.Thedataandinformationusedduri'ngapost-tripreviewshouldberetainedaspartoftheplantfiles.Thisinformationcouldproveusefulduringfuturepost-tripreviews.Therefore,onecriterionisthatinfor-mationusedduringapost-tripreviewbemaintainedinanaccessiblemannerforthelifeoftheplant.Theinformationcontainedwithinthissubmittaldoesnotindicatethatthiscriterionwillbemet.
4.ConclusionTheinformationsuppliedinresponsetoGenericLetter83-28indicatesthatthecurrentpost-tripreviewdataandinformationcapabilitiesareadeauateinthefollowingareas:1.Therecordeddataisoutputinareadableandmeaningfulformat.2.Thesequenceofeventsrecordersmeettheminimumperformancecharacteristics.TheinformationsuppliedinresponsetoGenericLetter83-28doesnotindicatethatthepost-tripreviewdataandinformationcapabilitiesareadequateinthefollowingareas:l.8asedupontheinformationcontainedinthesubmittal,alloftheparametersspecifiedinpart2ofthisreportthatshouldberecordedforuseinapost-tripreviewarenotrecorded.2.Timehistoryrecorders,asdescribedinthesubmittal,donotmeettheminimumperformancecharacteristics.3.Thedataretentionprocedures,asdescribedinthesubmittal,maynotensurethattheinformationrecordedforthepost-tripreviewismaintainedinanaccessiblemannerforthelifeoftheplant.Itispossiblethatthecurrentdataandinformationcapabilitiesatthisnuclearpowerplantareadequatetomeettheintentofthesereviewcriteria,butwerenotcompletelydescribed.Underthesecircumstances,thelicenseeshouldprovideanupdated,morecomplete,descriptiontoshowinmoredetailthedataandinformationcapabilitiesatthisnuclearpowerplant.Iftheinformationprovidedaccuratelyrepresentsallcurrentdataandinformationcapabilities,thenthelicenseeshouldshowthatthedataandinformationcapabilitiesmeettheintentofthecriteriainpart2ofthisreport,ordetailfuturemodificationsthatwouldenablethelicenseetomeettheintentoftheevaluationcriteria.
REFERENCESNRCGenericLetter83-28."Lettertoalllicenseesofoperatingreactors,applicantsforoperatinglicense,andholdersofconstructionpermitsregardingRequiredActionsBasedonGenericImplicationsofSalemASSEvents."July8,1983.NUREG-1000,GenericImplicationsofATMSEventsattheSalemNuclearPowerPlant,April1983.LetterfromM.P.Alexich,IndianaandMichiganElectricCompany,toD.G.Eisenhut,NRC,ofNovember4,1983,AccessionNumber8311110162inresponsetoGenericLetter83-28ofJuly8,1983,withattachment.10 D.C.Cook1.Parametersrecorded:UnsatisfactorySeeattachedtablefordiscrepancies.2.SOErecordersperformancecharacteristics:SatisfactoryHathawayOperationsSequenceMonitor;2mstimediscriminationpoweredfromabalanceofplant(non1E)inverterEsterlineAngusTurbineEventMonitor:20mstimediscriminationpoweredfromabalanceofplant(non1E)inverterHathawayOscillograph:5-10mstimediscriminationpoweredfromabal-anceofplant(non1E)inverterSequenceofEventsRecorder:(plantcomputer)16.7msectimediscriminationpowered.throughaninvertersuppliedbyABbatteryand'600voltbusllB.3.Timehistoryrecordersperformancecharacteristics:Unsatisfactory-Plantprocesscomputer:Allparametersarerecordedat8secintervalsfor2minutesbeforeand3minutesafterthetrip;someat2secintervalsfor6secpre-andpost-tripStripcharts:minimalinformationprovided4.Dataoutputformat:SatisfactorySOE:Hathawayequipmentisstripcharttypeseparatechartsforeacheventwithon/offindicationvs.timeSOErecorder:outputincludestime,descriptorandsensorID,Analog:outputincludestime,parametername,ptIDandparametervalue5.Dataretentioncapability:UnsatisfactoryDataisretainedbutforanunspecifiedperiod.
IV\DesirablePWRParametersforPost-TripReview(circledparametersarenotrecorded)SOERecorderTimeHistoryRecorderParameterSinal(1)xQx(1)xQx(1)xx2(1)Qx(1)x(1)x(1)x(1)x3QxQx(1)x(1)x(1)x3QxQxQxReactorTripSafetyIn)ectionContainmentIsolationTurbineTripControlRodPositionNeutronFlux,PowerContainmentPressureContainmentRadiationContainmentSumpLevelPrimarySystemPressurePrimarySystemTemperaturePressurizerLevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/ValveStatusMSIVPositionSteamGeneratorPressureSteamGeneratorLevelFeedwaterFlowSteamFlowAuxiliaryFeedwaterSystem;Flow,Pump/ValueStatusACandDCSystemStatus(BusVoltage)DieselGeneratorStatus(Start/Stop.On/Off)PORVPosition(1):Tripparameters(2):ParametermaybemonitoredbyeitheranSOEortimehistoryrecorder.(3):Acceptablerecorderoptionsare:(a)systemflowrecordedonanSOErecorder,(b)systemflowrecordedonatimehistoryrecorder.or(c)equipmentstatusrecordedonanSOErecorder.