ML17320B097
| ML17320B097 | |
| Person / Time | |
|---|---|
| Site: | Cook  |
| Issue date: | 06/04/1984 |
| From: | HERING R F INDIANA MICHIGAN POWER CO. (FORMERLY INDIANA & MICHIG |
| To: | DENTON H R Office of Nuclear Reactor Regulation |
| References | |
| AEP:NRC:0860P, AEP:NRC:860P, NUDOCS 8406080228 | |
| Download: ML17320B097 (18) | |
Text
REGULATORY FORMATION DISTRIBUTION
'SY+N(RIBS)ACCESSION NBR:8006080228.
DOC'ATE:84/06/00NOTARIZED; NO.DOCKETFACIL:50316-DonaldC'.Cook.Nuclear Powei<<PlantiUnit-2iIndiana805000316AUTH',NA)ATE>AUTHORAFFILIATIONHERINGiR';Fi
'Indiana."L MichiganElectric'Co,'RECIP
~NAMElRECIPIENT'PFIL?ATION...
DENTONrH,'R~OfficedofNuclearReactorRegulationiDirectorSUBJECT~O',Forwar ds;-nesul.ts ofExxonNuclear<<Co.review.
of.-safety.
.analyses;Util concurs-w/vendor, that"analyses-.,ip compl.iance w/NRCrequirements, for.developmegt.'8 application ofcomputercodes"usedin<<performing safety.analyses-.
).eDI'STRIBUTION tCODE;"A001'S,>COPlEg'ECEIJEDILTR,Q'IENCL, (SIZE'i."TITLE:OR'Submittal'j General'istr ibution-NOTES:'ECIP IENT'ID<<CODE/NAME<
NRR'RB1'BC'1INTERNALG:ELD/HDS3, NRR/OLDIR',/METB'REGFILE04~COPIES'TTR ENCL>v7<71',01111ii1RECIPIENT'O CODE/NAME NRR/DE/MTEB NRR/DL'/ORAB NRR/DSI/RAB RGN3."COPIESLTTRENCL<110111EXTERNAL:
ACRS'RC~-PDR<
NTIS096<<602'111LPDRNSIC03:0541111~)TOTALNUMBEROFCOPIESREQUIRED+
L'TTR25ENCL"23 T]83f)uhlFOAedg(81R),."YRL01Tu")INTR<
lL>nlTA;".>4 l)q,,yg,fu;))(ll~IR<TOLlp~~i>uh<~H:
JTPn,quObqqr)gnorll
~'~~in'~nrll1~UIIAIJIRAA Rul~gllAI~o">i~4oef=.ln6pirlor":l 8rncrhnICOTTAIJIBBED'fi"gI"l1~3~1aodae~iO>noidsfuneR ao)geekaGefouAtoeoittr);Pic<"il'"'>Ic'P,l)JllAle-<>~.Jl,)Al4Tor."~~R.H~A~"IR<'>>3~ALt.0I;)3'l.A,>l,NU>,
valet<+,t ponpiifq003 nrgvfuqmootonorL=1SI80M9fve1o)'lGefvuAnoxx:3toa9fueoaabzsw~oR.1)3f,~~~le'oeyfsnc ferliezobnevXwaauonoofigU,aeayfrno Psarf(lqq 8fnetnqofeveb sotetneggqiupe~
3HNXw.aecyfr>>n6 vgeksaqnimqotaeq nrbeauaebooltJ:)83HTJ:VQVI333R R3Il03,GIDOA:3003 MUITU.~IHTZI.>>
norPudta)eiO fsaeneA:fegfimoud HO:>)Tf1PBI103JDl43HTTJuIITN319I33Q 3NAvliIOODnI9$7t"IXQO~RHP 9ARVXJ~XQH~
HARXIBQXHHAQHrgP83IQOJJ3<$'3ATTJrIITRIAI'lI3343MAL~43QAQ dlIO3HIUSIO>>ill
- 831'),.IIKoc0h-aII INDIANA8NICHIGANELECTRICCOMPANYP.O.BOX16631COLUMBUS, OHIO43216June4,1984AEP:NRC:0860P DonaldC.CookNuclearPlantUnitNo.2DooketNo.50-316LicenseNo.DPR-74SAFETYANALYSESPERFORMED BYEXXONNUCLEARCOMPANYMr.HaroldR.Denton,DirectorOfficeofNuclearReactorRegulation U.S.NuclearRegulatory Commission Washington, D.C.20555
DearMr.Denton:
Duringanauditperformed fromApril3-5,1984atExxonNuclearCompany's facilityinRichland, theNRCidentified anumberofitemsofapparentnon-compliance withNRCrequirements forthedevelopment andapplication ofcomputercodesusedinperforming safetyanalysis.
TheExxonresponsetothisauditwassubmitted toyourMr.UldisPotapousonMay24,1984.Exxonhasalsoreviewedtheanalysesthattheymadeinsupportofourlicenseamendment application totheDonaldC.CookNuclearPlantUnitNo.2AppendixATechnical Specifications whichwasinitially submitted onMarch1,1984,reference AEP:NRC:0860.
Theresultsofthisreviewareincludedasanattachment.
Corporate QAandtechnical personnel havereviewedtheattachment anddiscussed itscontentswithExxonpersonnel.
Onthebasisoftheattachedletter,weconcurwithExxon'sconclusion thattheiranalyseswereincompliance withNRCrequirements.
Thisdocumenthasbeenpreparedfollowing corporate procedures whichincorporate areasonable setofcontrolstoensureitsaccuracyandcompleteness priortosignature bytheundersigned.
Verytrulyyours,~~R.F.Hering'g~iI+VicePresident 84php8p228 p4pgp~PDRADOCK050003i6Attachment cc:JohnE.DolanW.G.Smith,Jr.-BridgmanR.C.CallenG.CharnoffE.R.Swanson,NRCResidentInspector
-Bridgmanoo' fwIo~
'0K)$$Ã4NUCLEARCOMPANY,Inc.600-108hAvenueN.E.,C-00777,Bellevue.
Washington 98009.Y'eteohone (206!453-4300May31,1904ENC-AEP-0357 Hr.GeorgeJohn,Sr.EngineerIndianaEMichiganElectricCompanyc/oAmericanPowerElectricPowerServiceCorp.OneRiverside PlazaColumbus, Ohio43215
DearGeorge:
AsaresultofanauditonApril3-5,1984,theNRCidentified anumberofitemsofapparentnon-conformance withtheNRCrequirements regarding ExxonNuclear's development andapplication ofcomputercodesusedforsafetyanalyses.
Asyourequested duringourphoneconversation onMay29,1984,wehavereviewedthesafetyanalysesperformed byExxonNuclearfo..D.C.CookUnit2Cycle5inrespecttoeachoftheitemslistedintheauditreport.Ourconclusion isthattheanalysisisincompliance withtheNRCrequirements.
Theresultsofourreviewforeachoftheitemsofapparentnon-conformance aregivenintheAttachment tothisletter.Pleasecontactmeifyouhavefurtherquestions regarding thismatter,ContractAdministrator RAPIFAXPAGEATTN.Nof09i<<IS
'JCC:084:84~Findin:A.CriterionVofAppendix8toMCFRPart50states,inpart,"Activities affecting quality~..shallbeaccomplished inaccordance with...instructions, procedures, ordrawings..."Section5oftheExxonNuclearCompany(ENC)TopicalReportHo.XH-NF-IA(Rev.6)statesthatthequalityassurance programandassociated quality-related designandprocurement activities areprescribed bydocumented instruction, procedures, anddrawings, asappropriate, toassureadequatedefinition oftheinstruction forsatisfactory completion ofactivities.
Inaddition, Item4ofAppendixIcommitstocompliance withRegulatory Guide1.64andANSIN45.2.11-1974.Contrarytotheabove,ENCfailedtoprescribe adequatedefinition oftheinstruction forsatisfactory completion ofSafety-related computecodeactivitiesasfollows:I,Themaindocumentgovmingthedevelopment anduseofcomputercodesisÃN-NF-608, "GuideforUseandControlofComputerCodes'ithin ExxonNuclearCompanyforEngineering andDesignCalculations,"
whichidentifies "guidelines" tobeusedthathaveanoptionalconnotation versusmandatory.
ENCResonseTheanalysesperformed insupportofCycle5operation ofO.C.CookUnit2wereincompliance withtheguidelines andrequirements ofXN-NF-608,
~hichisinterpreted asmandatory forENCdesignanalyses.
\RAPIFAXNO.F'AGE~OF(QATTN.
JCC:084:84
~F3ndin2,Thereisnoprocedure or"guideline" whichrequirescodeinputdatatobeindependently verified.
ENCResonseProcedures whicharerequiredfordesigncalulationsarecontained inXN-NF-P00,002, whichhasbeenineffectatENCforseveralyears.Thisdocumentidentifies anumberofacceptable methodsfcrassuringthatdesigncalculations havebeenperformed usingcorrecti~putandappropriate methods.Checkingofcalculations byasecondqual1fiec 1ndividual isoneoftheseacceptable alternatives, Theotherallowable methodsareindependent (audit)calculations anddesigntesting.AsapartofENC'sapprovedequalityAssurance program,comp)iance withXH-HF-P00,002 1smandatory.
'ghentheindependent checkingofcalculations isusedasthemeansofassur1nganalytical
- accuracy, verificat1on mayinvolveinternalchecks,comparison withexperimental data,comparison withresultsofotherfuelandNSSSsuppIiers,comparisonw1thpreviousperformancetestresults,orcomparison withresultsfromasimilaranalysis.
Theseoptionsare,allowedtoprovideflexibility 1ndetermining themosteffective methodofverification.
Secausetheemphas1sisplacedon'anoverallreviewoftheanalysisandtheresultsthereof,itisnotalwaysappropriate torequire1ndependent checkingofcomputercodeinput.NO,<<>aq'EgoF(3
.JCC:084:84 Theanalysesperformed insupportofCycle5operation ofD.C.CookUnit2conformtotherequirements ofXN-NF-P00,002.
Incomplying withthisprocedure, theENCtechnical staffperformed anddocumented
- detailed, independent oval.rchecks ofthecalculations supporting thelicenseamendment request.Inputparameters employedfortheO.C.CookUnit2lOCA/ECCS andplanttransient analysesarereportedinXH-NF-81-60, Revision1,"O.C.CookUnit2PrimayDesignParameters forECCSandPTSAnalysis,"
datedDecember1981.Thesedatawerereviewedandconfirmed byAmericanElectricPowerpriortothecycle4analyses.
Ninorchangestothedatatoreflectsteamgenerator pluggingweremadeforthecycle5calculations, Thesechangeshavebeenindependently reviewedastoappropriateness andaccuracybyENCtechnical staff.Reviewers notesappearintheappropriate calculational workbooks, NRCStaffauditorshadtheplanttransient analysisworkbookinhand'duringtheNRC'sApril3-5computercodeaudit;whetherareviewwasperformed bytheNRCauditorisnotknown.Nodiscrepancies werecitedconcerning theworkbook, RAPIFAxm.~tO7PASS,tQfATrM.
.~JCC:084:B4
~Findin:3..Neitherprocedures nor"guidelines "addressSection9,"Corrective Action,"ofANSIN45.2.11-1974 concerning actionstobetaken,ENC~ResenseCorrective actionrequirements forcomputercodedevelopment activities anddesigncalculations aredefinedinQualityAssurance procedure No.16pfXN-NF-1,whichcoversreviewandverification ofproductdesign.Beyondtheserequirements, however,ithasbeenfNC'spracticetoevaluatecorrective actionindependently foreachoccurrence toassurethattheuniquenatureofeachindividual problemistakenintoaccountindetermining thecorrectiveaction.Thedesignanalysesperformed byfxxonNuclearinsupportofCycle5operation ofD.C.CookUnit2areincompliance withXN-NF-1,whichincludesOAProcedure
- 16.
.~JCC:08484~FindinThedefinitions contained inSections1.2.2,"UseCodes,"and"1.2,3,"SpecialCodes."ofXN-NF-608 arenotspecificwithrespecttotestingrequirements.
ENCResonseAllcomputercodesusedinENCdesignanalysesareverifiedundertherequirements ofSection3.1,l.cofXN-NF-608, asdescribed intheresponsetoFindingA.5,below.Alloftheanalysesperformed byExxonNuclearinsupportofQ.C.CookUnit2,Cycle5operation utilizedcomputercodeswhichwereverifiedinaccordance withXN-NF-608.
lII4RAPIFAXNG,(OVALPAGEqGP(gATTg,
.~JCC:084:84
~Findin:5.Section3.1.l.c,"TestCases,"ofXN-NF-608, doesnotrequire"thatatestprocedure beestablished priortoperforming verification testsnordoesitrequireusernotification ofanyoptionsthathavenotbeentested.ENCResonseSection3.1.1.ccurrently requiresthatalltestcasesforcodeverification executeeachmajorcodepathatleastonce.Thisrequirement assuresthattherearenosignificant optionswhichhavenotbeentested,Becausetheseprocedures requirethatallmajorpathsbeexercised duringthecodeverification process,arequirement thatpotential usersbeapprisedofanyoptionswhichhavenotbeentestedduringcodeverification wouldrarelybeexercised.
FortheD.C.CookUnit2Cycle5analysis, allofthemajorcodepathswereexercised andtheresultsdocumented duringtheverification ofthecodeversionswhichwereusedfortheanalysis.
RAPiPAXPAGE7I(gATTN-JCC:084:84~Findsn:e.Section3.1.1.e,"Miscellaneous Requirements,"
ofXN-NF-608, doesnotrequireidentification ofthecomputertypeusedinananalyris~ENCResonseDesigncalculations areprefacedwithaninformation blockwhichincludesthedate,thecodeversion,andthecomputerversionusedfortheanalysis.
Thisinformation blockisrequiredbyXN-NF-P00,002, whichisapartoftheEHCgualityAssurance Program.Allofthecalculations performed byENCinsupportofCycle6operation ofD.C.CookUnit2includeanidentification ofthecomputerusedintheanalysis.
JCC:084:84~Findin:7,Sectfons3.1.1.fand3.1.2.dofXM-NF-608 donotrequirethattheComputerCodeCouncildocumentthereasonsforanydisapproval votes.ENCResonseInthedevelopment andapprovalofcomputercodes,sufficfent coordination isscheduled thatdissenting votesarenotlikelytooccur.Ifacodecouncilmemberhasdifficulty
~ithsomeaspectofacomputercodewhichisunderevaluation, thedeveloper endeavors toresolvehisconcernpriortothecodecouncilvote.Nodissenting votes~ererecordedduringtherevfewofthecomputercodesusedintheanalysessupporting Cycle5operation ofO.C.CookUnit2..(opz.PAGEATTN.
XC68484~Findtn':8.Sections3.4and3.5ofXN-NF-608 donotspecifically requirereporting oferrorsinEPICSevaluation models.AnECCSevaluation modelthatis/remains acceptable tothestafffsonethatdoesnotcontainasignificantly knownerror.(Reference 10CFRPart50.46and10CFR50,AppendixK).~ENCResenseXN-NF-608 currently requiresthaterror'sinfCCSevaluation modelsbereportedinconformance with10CFRPart21.Noerrorshavebeendiscovered intheENCanalysessupporting O.C.CookUnit2.Intheeventthaterrorswhichadversely impacttheD;C.CookUnit2analysisweretobediscovered, theywouldbereportedasrequiredby10CFR50.46andAppendixKor10CFRPart21,asappropriate.
10~FindinB.ENCQualityAssurance Procedure XN-NF-P00,002, Revision13,Sectfon3.5,3.2,states,inpart,"Documentation providing asugaryofthebasisofthechecksandcomparisons performed shallbeindicated ontheengineering calculations sheet,...,plusthesignature anddateofthechecker."
Contrarytotheabove,nosu+narynoranysignature ordateofcheckerwasincludedinthebackupcalculation NO.E-T122-969-1.
Further,benchmark comparisons ofcalculated primaryandsystemperformances againstavailable datawererequested byNRC.Thiswassubmitted toNRConDecember16,1983.Thebackupcalculations weredatedDecember1,1983forthissubmfttal,
~EIIIThesubjectcalculation(E-T122-969-1) wasapreliminary benchmark calculation usingPTSPQR2topredictmeasuredphenomena associated withatuberuptureeventatthePrairieIslandnuclearplant.Asapreliminary
- analysis, E-T122-969-1 hadnotbeenreviewedforcmplfance withXN-NF<<P00,002.
Thisreviewwillbeperformed asrequfredpriortofssuanceofthereport.TheD.C.CookUnit2Cycle5analyseshavebeencheckedincompliance withXN-NF-P00,002.
RAPIPAXNQ'(O~+PAGE((Of/g
.~JCC;084:84 Findin~:C.Section1.2.7,"Software DevelopmentRecord,"(SDR)ofN-NF-608(Revision3),statesthattheSDRshallcontainsuchthingsas:listingsofthevariousversionsofthecode,sunearies ofmodifications, verification andqualification recordscompiledtodate,andapprovals madetodateforuseofthecode,andrecordsofthereviewbyanindependent partyofverification andqualification.
Contrarytotheabove,theSDRsfortheREFLEXandTOODEE-2computercodeswerenotcompletewithallversionsofthecodes,andcontained updatedSetSthatdidnOtidentifythepreparer, purpOSe,Orthattheyhadbeenindependently checked.ENCResonseBothREFLEXandTOODEE2weredeveloped priortotheadoptionofXN-NF-608 astheprocedure forcomputercodedevelopment andareincompliance withcomputercodequalityassurance procedures whichwereineffectatthetimeoftheirdevelopment, Theseprogramsprovideequivalent assurance tothatprovidedbycompliance withXN-NF-608.
Useofthesetwocodes,REFLEXandTDOOEE2,foranalysisofO.C.CookUnit2,Cycle5operation issupported bycodeverification andqualification incompliance withanearlierqualityassurance program,whichwasacceptable forcomputer.
codeapplications whenitwasappliedtoREFLEXand.TOODEEZ.
eaaiwxmICZ-waar/Z.%QATA4.
12tC'CCON84~Findin:0.CriterionXV11,"qua11tyAssurance Records,"
of10CFRPart50,AppendixB,statesthatsufficient recordsshallbemaintained tofurnishevidenceofactivities affecting qualityandthattherecordsshal1includeatleasttheresultsofreviewsandtestsandthattherecordsshallbeidentifiable andretrievable.
Contrarytotheabove,ENCfailedtoprovidethedocumentation ofverification andqualificat1onoftheREFLEXandTOODEE-2coaputercodes.Thecalculation notebooks, orcop1esthereof,thatdocumented theoriginalcalculations andtheirindependent checkingcouldnotberetrieved duringtheinspection.
ENCResonseTherecordsoftheverification andqualification of.thesetwocodeswerenotavailable duringtheauditbecausethecodecustodian wasnotavailable toretrievethem,Therecordshavebeensubsequently retrieved andareavailable forfutureaud1t.BothofthesecodeshavebeeninuseatENCformanyyears,andtherecordsarenotfullyincompliance withtheSoftwareDevelopment Recordprocedures inXN-NF-608, Theavailable recordsare,however,incompliance withtheprogramswhichwereineffectatthetimetheirrespective development programswerecompleted.
Theseprograaswerejudgedtobeincompliance with10CFR50,AppendixB.Althoughcompliance withÃN-NF-608 willnotbeatta1nedforsomet1me,<<1\ofthedevelopment, qualification, andverification recordsrequiredforSNcompliance arepresentintherecordspackage.Thedevelopment andqualification recordsforREFLEXandTOOOEE2covertheversionsofthesecodesusedfortheanalysisofCycle5operation ofD.C.CookUnit2.RAFiF'AXm/bPZ-FtAGEty9F.~g..ATTN.