ML13247A078

WCAP-17746-NP, Rev. 0 Westinghouse Setpoint Methodology as Applied to the Wolf Creek Generating Station

ML13247A078
Person / Time
Site:	Wolf Creek
Issue date:	08/31/2013
From:	Tuley C R Westinghouse
To:	Office of Nuclear Reactor Regulation
References
ET 13-0023 WCAP-17746-NP, Rev 0
Download: ML13247A078 (54)

Text

Enclosure III to ET 13-0023WCAP-17746-NP, "Westinghouse Setpoint Methodology as Applied to the Wolf CreekGenerating Station" (Non-Proprietary)

(53 pages)

Westinghouse Non-Proprietary Class 3WCAP-17746-NP August 2013Revision 0Westinghouse Setpoint Methodology as Applied to theWolf Creek Generating StationWestinghouse WESTINGHOUSE NON-PROPRIETARY CLASS 3WCAP-17746-NP Revision 0Westinghouse Setpoint Methodology as Applied to the Wolf Creek Generating Station'¢,1I0goCharles R. Tuley*Setpoints and Uncertainty Analysis:;i 18724August 2013Reviewer:

Terrence P. Williams*

Setpoints and Uncertainty AnalysisApproved:

Kyler J. Gates, Acting Manager*Setpoints and Uncertainty AnalysisI, the undersigned, being a registered Professional

Engineer, certify that to thebest of my knowledge and belief the resultsherein do not jeopardize the protection oflife, health, property, and welfare of thepublic.Certified by: Ryan Paul RossmanLicense Number: 18724 State: KSExpiration Date: April 30, 2015* Electronically approved records are authenticated in the electronic document management systemWestinghouse Electric Company LLC1000 Westinghouse DriveCranberry

Township, PA 16066© 2013 Westinghouse Electric Company LLCAll Rights Reserved TABLE OF CONTENTSL IS T O F T A B L E S ..............................................................................................................................................

iiiL IST O F F IG U R E S ............................................................................................................................................

iv1.0 IN T R O D U C T IO N ..................................................................................................................................

12.0 COMBINATION OF UNCERTAINTY COMPONENTS

............................................................

32 .1 M eth od o lo gy .............................................................................................................................

32.2 Sensor A llow ances ...........................................................................................................

52.3 R ack A llow ances .............................................................................................................

92.4 Process A llow ances ...........................................................................................................

102 .5 D igital F unction s .....................................................................................................................

113.0 PROTECTION SYSTEM SETPOINT METHODOLOGY

..........................................................

123.1 Setpoint C alculations

.........................................................................................................

123.2 Setpoint Methodology Definitions

....................................................................................

134.0 WESTINGHOUSE CALIBRATION AND DRIFT EVALUATION PROCESS ........................

265.0 APPLICATION OF THE WESTINGHOUSE SETPOINT METHODOLOGY

.........................

345.1 Uncertainty Calculation Basic Assumptions

/ Premises

...................................................

345.2 Process Rack Operability Assessment Program and Criteria

..........................................

365.3 Application of Process Rack Operability Assessment to the Plant Technical S pecifi catio ns ..........................................................................................................................

375.4 Sensor/Transmitter Operability Assessment Program and Criteria

..................................

385.5 Application of the Sensor/Transmitter Operability Assessment

.......................................

39acWCAP- 17746-NP August 2013WCAP-17746-NP August 2013Revision 0i 6.07.0SU M M A RY O F IM PO RTA N T PO IN TS ........................................................................................

41REFEREN C ES .....................................................................................................................................

46WCAP- 17746-NPAugust 2013Revision 0ii LIST OF TABLESTable 3-1 AP M easurements Expressed in Flow Units ...............................................................................

24WCAP- 17746-NP August 2013WCAP- I 7746-NPAugust 2013Revision 0iii LIST OF FIGURESFigure 3-1 Westinghouse Setpoint Parameter Relationship Diagram (Increasing Function)

.................

23Figure 4-1 Westinghouse Calibration and Drift Data Evaluation Process Diagram ...............................

33WCAP- 17746-NP August 2013WCAP- I17746-NP August 2013Revision 0iv

1.0 INTRODUCTION

This document identifies the three basic instrument uncertainty algorithms for the; 1) reactor trip system(RTS) trip functions, engineered safety features actuation system (ESFAS) protection functions, 2)control system functions assumed as initial condition assumptions in the Westinghouse Revised ThermalDesign Procedure (RTDP) (Reference

1) and safety analyses, and 3) control board and computerindication of plant parameters utilized by the control room operators to confirm proper operation of thecontrol and protection instrumentation for the Wolf Creek Generating Station (WCGS). Thesealgorithms, when supported by appropriate plant procedures and equipment qualification, are believed toprovide total instrument loop uncertainties, termed Channel Statistical Allowance (CSA), at a two-sided 95 % probability and 95 % confidence level; as stated in U.S. Nuclear Regulatory Commission Regulatory Guide (RG) 1. 105, Revision 3, Regulatory

Position, C. I (Reference 2).]acThis document is divided into four principal sections.

Section 2.0 identifies the current, Westinghouse generalized algorithm (Eq. 2. 1) used as the basis to determine the overall instrument uncertainty for anRTS or ESFAS function.

This specific algorithm evolved from a Westinghouse paper presented at anInstrument Society of America/Electric Power Research Institute (ISA/EPRI) conference in June 1992(Reference 3). This approach is consistent with the American National Standards Institute (ANSI)/ISA

standard, ANSI/ISA-67.04.01-2006 (Reference 4). The basic uncertainty algorithm is the square root sumof the squares (SRSS) of the applicable uncertainty terns, which is endorsed by the standard.

Allappropriate and applicable uncertainties, as defined by a review of the plant baseline design inputdocumentation, have been included in each RTS or ESFAS function uncertainty calculation.

ISA-RP67.04.02-2010 (Reference

5) was considered, as a general guideline, but each uncertainty and itstreatment is based on Westinghouse methods which are consistent or conservative with respect to thisdocument.

The current version of NRC RG 1.105, Revision 3, endorses the 1994 version of ISA S67.04,Part I. Westinghouse has evaluated this NRC document and has determined that the uncertainty algorithms contained in Section 2.1 and the setpoint calculations contained in the WCGS specificcompanion

document, WCAP- 17602-P (Reference

6) are consistent with the guidance contained in RG1.105 Revision 3 and NRC Branch Technical Position (BTP) 7-12 Revision 5 (Reference 7). It isbelieved that the total channel uncertainty, CSA, represents a two-sided 95/95 value as requested inRG 1.105 Revision

3. Two variations of the protection function uncertainty algorithm are presented todemonstrate the Westinghouse treatment of uncertainties for control functions and parameter indication.

Section 3.0 of this report lists definitions of terms and associated acronyms used in the RTS or ESFASfunction, control and indication uncertainty calculations.

Appropriate references to industry standards have been provided where applicable.

Included in this section are detailed descriptions of the uncertainty terms for a typical RTS or ESFAS, control and indication function uncertainty calculations performed byWCAP- 17746-NP August 2013Revision 0

Westinghouse.

Function specific setpoint calculations specific to WCGS are contained in the companion document WCAP- 17602-P (Reference 6).Section 4.0 contains an overview of the Westinghouse evaluation process for calibration and drift data. Itdescribes the basic approach utilized

[]a.C This process has been in use for over 15 years in the evaluation of surveillance data.This process was last described to the NRC in a Westinghouse presentation in March 2007 (Reference 8).Section 5.0 provides a description of the Westinghouse recommendations for implementation of theWestinghouse Setpoint Methodology (WSM) in the WCGS Technical Specifications and the assessment of operability of sensor/transmitters and process racks.WCAP- 17746-NPAugust 2013Revision 02 2.0 COMBINATION OF UNCERTAINTY COMPONENTS This section describes the Westinghouse Setpoint Methodology for the combination of the uncertainty components utilized for protection, control and indication functions.

The methodology used in thedetermination of the overall CSA is noted in Section 2.1. All appropriate and applicable uncertainties, asdefined by a review of WCGS baseline design input documentation, are included in each protection, control or indication function CSA calculation.

2.1 Methodology

The methodology used to combine the uncertainty components for a channel is an appropriate combination of those groups that are statistically and functionally independent.

Those uncertainties considered dependent are conservatively treated by arithmetic summation and then systematically combined with the independent terms.As noted previously, the basic methodology used is an SRSS. This basic approach, or others of a similarnature, has been used for Westinghouse uncertainty and setpoint calculations for over 30 years:protection function instrument uncertainty calculations

-June 1978 (Reference 9), statistical Departure from Nucleate Boiling calculations

-WCAP-8567-P-A (Reference

10) and AP1000 plant protection function uncertainties

-WCAP-1636 1-P (Reference 11). WCAP-8567 was approved by the NRC, notingacceptability of statistical techniques for the application requested, in April 1978 (Reference 10). WCAP-16361-P was approved by the NRC in August 2007 (Reference 12). Several standards, ISA 67.04.01(Reference

4) and American Nuclear Society (ANS) Standard 58.4 (Reference

13) approve the use ofprobabilistic and statistical techniques in determining safety-related setpoints.

The generalized relationship between the uncertainty components and the calculated uncertainty for anRTS or ESFAS protection channel is noted in Eq. 2. 1:CSAPMA2 +/-PEA2 + Silk+ (SMTE +SD) + (SMTE +SCA)2 +EA+BaCSApRoT +'I EA+BiasPROT SPE2 + STE2 +(RMTE+ RD)2 +(RMTE+ RCA)2 + RTE2Eq. 2.1AP1000 is a trademark or registered trademark of Westinghouse Electric Company LLC, its affiliates and/orsubsidiaries in the United States of America and may be registered in other countries throughout the world. Allrights reserved.

Unauthorized use is strictly prohibited.

Other names may be trademarks of their respective owners.WCAP-17746-NP August 20133 Revision 0

The generalized relationship between the uncertainty components and the calculated uncertainty for acontrol channel is noted in Eq. 2.2 (subscript IND denotes indication

-control board meter or plantprocess computer):

a,cEq. 2.2The generalized relationship between the uncertainty components and the calculated uncertainty for anindication channel is noted in Eq. 2.3 (subscript IND denotes indication

-control board meter or plantprocess computer):

axcEq. 2.3Where:CSAPMAPEASRASMTESDSCASPESTERMTERDRCARTE= Channel Statistical Allowance

= Process Measurement Accuracy= Primary Element Accuracy= Sensor Reference Accuracy-Sensor Measurement and Test Equipment Accuracy= Sensor Drift= Sensor Calibration Accuracy= Sensor Pressure Effects= Sensor Temperature Effects= Rack Measurement and Test Equipment Accuracy-Rack Drift= Rack Calibration Accuracy= Rack Temperature EffectsWCAP- 17746-NPAugust 2013Revision 04 EABIASCAREADOUTI= Environmental Allowance

-One directional, known magnitude allowance

= Controller Accuracy= Readout Device AccuracyapcEach of the previous terms is defined in Section 3.2, Setpoint Methodology Definitions.

The equations are based on the following:

1. Sensor and rack measurement and test equipment uncertainties are treated as dependent parameters with their respective drift and calibration accuracy terms.2. []a-' The term is arithmetically summed with the SRSS in the direction ofconservatism.

3. Bias terms are one directional with known magnitudes (which may result from several sources,e.g., drift or calibration data evaluations) and are also arithmetically summed with the SRSS.4.Consistent with RG 1.105 Rev. 3, Regulatory Position C. I (Reference 2), the CSA value from Eq. 2.1 isbelieved to be determined at a 95 % probability and at a 95 % confidence level (95/95) on a two-sided basis. The control function CSA value from Eq. 2.2 and the indication function CSA value from Eq. 2.3are believed to be detennined at a 95 % probability and at a 95 % confidence level (95/95) on a two-sided basis, consistent with the requirements of the Improved Thermal Design Procedure (ITDP) (Reference 10)and RTDP (Reference 1). Eq. 2.1, Eq. 2.2 and Eq. 2.3 were used as the basis for the WCGS setpointcalculations documented in WCAP- 17602-P (Reference 6).2.2 Sensor Allowances Seven parameters are considered to be sensor allowances:

SRA, SCA, SMTE, SD, STE, SPE and EA.Three of these parameters are considered to be independent, two-sided

(+/-), unverified (by WCGScalibration or drift determination processes),

vendor supplied terms (SRA, STE and SPE). Based ona,cWCAP- 17746-NP August 2013WCAP- I 7746-NPAugust 2013Revision 05 vendor supplied data, typically product data sheets and qualification

reports, these parameters are treatedas two-sided 95/95 values unless specified otherwise by the vendor. Three of the remaining parameters are considered dependent with at least one other term, are two-sided

(+/-), and are the result of the WCGScalibration and drift determination process (SCA, SMTE and SD). Through appropriate treatment ofWCGS data, these parameters are treated as two-sided 95/95 values. EA, as described later in thissection, is conservatively treated as a limit of error.SRA is the manufacturer's reference accuracy that is achievable by the device. This term is introduced toaddress repeatability and hysteresis effects when performing only a single pass calibration, i.e., one upand one down. If a verification of all three aspects of the sensor reference

accuracy, hysteresis, repeatability and linearity, as defined by ISA-5 1.1 (Reference 14, p. 61), is performed as part of thecalibration

process, the value of SRA can be set to zero. STE and SPE are considered to be independent due to the manner in which the instrumentation is checked; i.e., the instrumentation is calibrated and driftis determined under conditions in which pressure and temperature are assumed constant.

For example,assume a sensor is placed in some position in the containment during a refueling outage. Afterplacement, an instrument technician calibrates the sensor at ambient pressure and temperature conditions.

Sometime later with the plant shutdown, an instrument technician checks for sensor drift using the sametechnique as was previously used for calibrating the sensor. The conditions under which this driftdetermination is made are again ambient pressure and temperature.

The temperature and pressure shouldbe essentially the same at both measurements.

Thus, they should have no significant effect on the driftdetermination and are, therefore, independent of the drift term.SCA and SD are considered to be dependent with SMTE due to the manner in which the instrumentation is evaluated.

A transmitter is calibrated by providing a known process input (measured with a highaccuracy gauge) and evaluating the electrical output with a digital multimeter (DMM) or digital voltmeter (DVM). The gauge and DVM accuracies form the SMTE terms. The transmitter response is known, atbest, to within the accuracy of the measured input and measured output. Thus, the calibration accuracy(SCA) is functionally dependent with the measurement and test equipment (SMTE). Since the gauge andDVM are independent of each other (they operate on two different physical principles),

the two SMTEterms may be combined by SRSS prior to addition with the SCA term. Transmitter drift is determined using the same process used to perform a transmitter calibration.

That is, a known process input(measured with a high accuracy gauge) is provided and the subsequent electrical output is measured witha DMM or DVM. Thus, the drift value (SD) is functionally dependent with the measurement and testequipment (SMTE) and is treated in the same manner as SMTE and SCA.While the data is gathered in the same manner, SD is independent of SCA in that they are two different parameters.

SCA is the difference between the As Left value and the Desired value. SD is the difference between the As Found value of the current calibration and the As Left value of the previous calibration.

Itis assumed that a]a,cWCAP- 17746-NP August 20136 Revision 0

Transmitters are designed and subsequently verified through qualification

[]axc to be able to withstand adverse elevatedtemperatures from exposure to design basis events (DBE) due to mass and energy loss from a break in theprimary or secondary side piping. This is addressed in the uncertainty calculation by the inclusion of anEA temperature tern. Vendor specifications typically identify the transmitter response as a "+" term,indicating that the transmitter may respond in either the indicated higher than actual direction or indicated lower than actual direction when exposed to significantly elevated temperatures.

Because of thisidentification, this term may be interpreted by many to be a random variable.

]a'cThis suggests that on a plant specific basis, the more appropriate treatment of the EA temperature uncertainty term is as a limit of error, i.e., as a bias, and not as a random term.acTransmitters are designed and subsequently verified through qualification

testing, to be able to withstand exposure to high doses of radiation due to mass loss from a break in the primary side piping. This isaddressed in the uncertainty calculation by the inclusion of an EA radiation term. Vendor specifications WCAP- 17746-NPAugust 2013Revision 07 typically identify the device response as a "+" term, indicating that the transmitter may respond in eitherthe indicated higher than actual direction or indicated lower than actual direction when exposed tosignificant radiation.

Because of this identification, this term may be interpreted by many to be a randomvariable.

[]ax This suggests that on a plantspecific basis, the more appropriate treatment of the EA radiation uncertainty term for a pressurizer pressure transmitter is as a limit of error, i.e., as a bias, and not as a random term.However, WCGS has Rosemount transmitters installed that have been reported to exhibit a residualseismic effect (Reference 15). The vendor specifications identify the transmitter response as a "+" term,indicating that the seismic event may result in a residual effect in either the indicated higher than actualdirection or the indicated lower than actual direction.

Because of this identification, this term isinterpreted by some to be a random variable.

]a.C This suggests that on a plant specificbasis, the more appropriate treatment of the EA seismic uncertainty term is as a limit of error, i.e., as abias, and not as a random term. For the Westinghouse performed

control, protection and indication function uncertainty calculations, an EA seismic uncertainty term has been included when determined tobe appropriate.

acWCAP- 17746-NPAugust 2013Revision 08 2.3 Rack Allowances Five parameters are considered to be rack allowances:

RRA, RTE, RCA, RMTE and RD. RackReference Accuracy (RRA) is the manufacturer's reference accuracy that is achievable by the processrack instrument string. This term is introduced to address repeatability and hysteresis effects notaddressed by the performance of a single pass calibration, i.e., one up and one down.]a-' RTE isconsidered to be an independent, two-sided

(+/-), unverified (by plant calibration or drift determination processes),

vendor supplied parameter.

The process racks are located in an area with ambient temperature

control, making consistency with the rack evaluation temperature easy to achieve.

Based onWestinghouse process rack data, this parameter is treated as a 95/95 value.RCA and RD are considered to be two-sided

(+/-) terms dependent with RMTE. The functional dependence is due to the manner in which the process racks are evaluated.

In order to calibrate ordetermine drift for the process rack portion of a channel, a known input (in the form of a voltage, currentor resistance) is provided and the point at which the bistable changes state is measured.

The inputparameter is either measured by the use of a DMM or DVM (for a current or voltage signal) or is knownto some degree of precision by use of precision equipment, e.g., a precision decade box for a resistance input. For simple channels, only a DMM or DVM is necessary to measure the input and the bistable statechange is noted by a light or similar device. For more complicated

channels, multiple DVMs may beused or a DVM in conjunction with a decade box. The process rack response is known at best to withinthe accuracy of the measured input and indicated output. Thus the calibration accuracy (RCA) isfunctionally dependent with the measurement and test equipment (RMTE). In those instances wheremultiple pieces of measurement and test equipment are utilized, the uncertainties are combined via SRSSwhen appropriate.

The RCA term represents the total calibration uncertainty for the channels, which are calibrated as asingle string. Drift for the process racks is determined using the same process used to perform the rackcalibration, and in most cases utilizes the same measurement and test equipment.

Thus, the drift value(RD) is also functionally dependent with the measurement and test equipment (RMTE) and is treated inthe same manner as RMTE and RCA.While the data is gathered in the same manner, RD is independent of RCA in that they are different parameters.

RCA is the difference between the As Left value and the Desired value. RD is the difference between the As Found of the current calibration and the As Left values of the previous calibration.

TheRD term represents the drift for all process rack modules in an instrument string, regardless of the channelWCAP- 17746-NP August 20139 Revision 0

complexity.

For multiple instrument strings there may be multiple RD terms, e.g., Overtemperature AT.It is assumed that a]ac Based on the appropriate treatment of WCGS data, the RCA and RD parameters are treated as two-sided 95/95 values.a,c2.4 Process Allowances The PMA and PEA parameters are considered to be independent of both sensor and rack parameters.

ThePMA terms provide allowances for the non-instrument related effects; e.g., neutron flux distribution, calorimetric power uncertainty assumptions, temperature streaming in a pipe, process pressure effects orfluid density changes.

There may be more than one independent PMA uncertainty allowance for achannel, if warranted.

The PEA term typically accounts for uncertainties due to metering

devices, such aselbows, venturis, and orifice plates. In this application, PEA is limited by Westinghouse to RCS Flow(Cold Leg Elbow Taps) and Feedwater Flow for the WCGS RTS/ESFAS uncertainty calculations.

PEAWCAP- I17746-NP August 2013Revision 010 may also be used for the uncertainties associated with potential transformers for Undervoltage andUnderfrequency functions.

In these applications, the PEA term has been determined to be independent ofthe sensors and process racks. It should be noted that treatment as an independent parameter does notpreclude determination that a PMA or PEA term should be treated as a bias. If that is determined to beappropriate, Eq. 2.1 would be modified such that the affected term would be treated by arithmetic summation with appropriate determination and application of the sign of the uncertainty.

2.5 Digital Functions The treatment of digital functions varies to some extent due to the type of function.

For WCGS, digitalfunctions are limited to indication via the plant process computer.

pacWCAP- 17746-NPAugust 2013Revision 011 3.0 PROTECTION SYSTEM SETPOINT METHODOLOGY This section contains definitions of terms used in the instrument uncertainty calculations.

3.1 Setpoint Calculations The setpoint calculations for each RTS, ESFAS and control function are listed in Tables 3-1 through 3-30of WCAP-17602-P (Reference 6). Each table includes a listing of the applicable terms for the functionuncertainty and setpoint calculations:

• Model of sensor/transmitter

• Type of process rack* Listing of each uncertainty parameter, noting-" Value (% span) or applicability

" Notes applicable to the parameter

" Algorithm utilized* Algorithm with parameter values (% span) filled in" References for SCA, SD, RCA and RD" Safety Analysis Limit (engineering units)* Nominal Trip Setpoint (engineering units)* Instrument span (engineering units)* Total Allowance (TA) (% span)* CSA (% span)* Margin (% span)" Transmitter operability criteria* As Left Tolerances

(% span)* As Found Tolerances

(% span)" Process rack operability criteria* As Left Tolerances

(% span)* As Found Tolerances

(% span)Westinghouse reports TA, CSA and Margin values to one decimal place using the technique of:* Rounding down values < 0.05 % span," Rounding up values > 0.05 % span.This rounding process is based on the limiting accuracy of the least known parameter, typically calibration or drift.WCAP- 17746-NP August 201312 Revision 0

Parameters reported as:* "N/A" are not applicable, i.e., have no value, for that channel,* "0" are applicable but are included in other terms, e.g., normalized parameters,

• "0.0" are applicable with a value less than 0.04 % span.Table 3-1 provides the derivation of the translation of differential pressure span to % nominal flow and% flow span for flow functions.

3.2 Setpoint Methodology Definitions For the channel uncertainty algorithms noted in this report, the following definitions are provided, inalphabetical order:* Analog to Digital Convertor (A/D)An electronic circuit module that converts a continuously variable analog signal to a discretedigital signal via a prescriptive algorithm.

• As FoundThe condition in which a transmitter, process rack module, or process instrument loop is foundafter a period of operation.

• As Found Tolerance (AFT)The As Found limit identified in the plant surveillance procedures.

This defines a significant operability criterion for the instrument process rack and the transmitter.

It is a sufficient condition to satisfy an operability assessment for an instrument process rack. The AFT for theinstrument process rack is the same as (equals) the As Left Tolerance (ALT) or instrument process rack calibration

accuracy, i.e., AFT = ALT = RCA, see Figure 3-1. For process racks, theAFT is a two-sided parameter

(+/-) about the NTS. The AFT for transmitters is defined as thesensor drift magnitude identified in the uncertainty calculations.

For transmitters, the AFT is atwo-sided parameter

(+/-) about the calibration points, e.g., 0 %, 25 %, 50 %, 75 % and 100 % span(an absolute drift parameter),

or the AFT is a two-sided parameter

(+/-) about the calibration recorded As Left points (a relative drift parameter).

WCAP- 17746-NP August 201313 Revision 0

as* As LeftThe condition in which a transmitter, instrument process rack module, or process instrument loopis left after calibration or trip setpoint verification.

This condition is typically better than thecalibration accuracy for that piece of equipment.

• As Left Tolerance (ALT)The As Left limit identified in the plant calibration procedures.

This defines the initial operability criterion for the instrument process rack (see Figure 3-1) or the transmitter.

It is a necessary condition to satisfy an operability assessment for an instrument process rack or transmitter.

TheALT is defined as the appropriate calibration accuracy in the uncertainty calculations for thesensor or associated instrument process rack string. For process racks, the ALT is a two-sided parameter

(+/-) equal to the RCA about the NTS, see Figure 3-1. The ALT for transmitters isdefined as the two-sided

(+/-) sensor calibration accuracy magnitude indentified in the uncertainty calculations about the desired calibration points, e.g., 0 %, 25 %, 50 %, 75 % and 100 % span.axc* Bias* A parameter with a known consistent arithmetic sign, e.g., heatup effect on a level channelReference Leg.WCAP- 17746-NPAugust 2013Revision 014

• A parameter that is treated as a limit of error, e.g., transmitter heatup in a Steambreak elevated temperature environment.

• ChannelThe sensing and process equipment, i.e., transmitter to bistable, for one input to the voting logicof a protection function.

Westinghouse designs protection functions with voting logic made up ofmultiple

channels, e.g., 2 out of 4 Steam Generator Level -Low-Low channels for one steamgenerator must have their bistables in the tripped condition for a Reactor Trip to be initiated.

Forcontrol functions, a channel is the sensing and process equipment through the controller module.For indication functions, a channel is the sensing and process equipment through the indicator (control board or Plant Process Computer).

• Channel Statistical Allowance (CSA)The combination of the various channel uncertainties via SRSS, other statistical, or algebraic techniques.

It includes instrument (both sensor and process rack) uncertainties and non-instrument related effects, e.g., Process Measurement

Accuracy, see Eq.(s) 2.1, 2.2 and 2.3. Thisparameter is compared with the Total Allowance for determination of instrument channel margin,see Figure 3-1. For a protection function the uncertainties included in, and the conservatism of,the CSA algorithm results in a CSA magnitude that is believed to be determined on a two-sided 95 % probability

/ 95 % confidence level (95/95) basis.* Controller Accuracy (CA)Allowance for the accuracy of the controller rack module(s) that performs the comparison andcalculates the difference between the controlled parameter and the reference signal at the steadystate null point." Environmental Allowance (EA)The change in a process signal (transmitter or process rack output) due to adverse environmental conditions from a limiting design basis accident condition or seismic event. Typically this valueis determined from a conservative set of enveloping conditions and may represent the following:

WCAP- 17746-NP August 201315 Revision 0

• Temperature effects on a transmitter

• Radiation effects on a transmitter

• Seismic effects on a transmitter

• Temperature effects on a level transmitter reference leg* Temperature effects on signal cable, splice, terminal block or connector insulation

• Seismic effects on process racks* MarginThe calculated difference (in % instrument span) between Total Allowance (TA) and ChannelStatistical Allowance (CSA).Margin = TA -CSAMargin is defined to be a non-negative number i.e., Margin > 0 % span, see Figure 3-1.]ac" Nominal Trip Setpoint (NTS)The trip setpoint defined in the uncertainty calculation and reflected in the plant procedures.

Thisvalue is the nominal value to which the bistable is set (as accurately as reasonably achievable).

The NTS is based on engineering judgement (to arrive at a Margin > 0 % span), or a historical value, that has been demonstrated over time to result in adequate operational margin, see Figure3-1. Based on the requirements of 10 CFR 50.36(c)(1)(ii)(A),

Westinghouse defines the NTS asthe Limiting Safety System Setting (LSSS) for the RTS and ESFAS functions listed in the WCGSTechnical Specifications, i.e., Tables 3.3.1-1 and 3.3.2-1.* Normalization The process of establishing a relationship, or link, between a process parameter and an instrument channel.

This is in contrast with a calibration process.

A calibration process is performed withindependent known values, i.e., a bistable is calibrated to change state when a specific voltage isreached.

This voltage corresponds to a process parameter magnitude with the relationship established through the scaling process.

A normalization process typically involves an indirectmeasurement,

[ ]a.cWCAP- 17746-NP August 201316 Revision 0

ac" Primary Element Accuracy (PEA)Uncertainty due to the use of a metering device. In Westinghouse RTS/ESFAS calculations, thisparameter is used for a venturi, orifice or elbow. This is a calculated or measured accuracy forthe device. PEA may also be used for the uncertainties associated with potential transformers forUndervoltage and Underfrequency functions.

" Process Loop or Instrument Process LoopThe process equipment for a single channel of a protection, control or indication function.

" Process Measurement Accuracy (PMA)An allowance for non-instrument related effects which have a direct bearing on the accuracy ofan instrument channel's

reading, e.g., neutron flux distribution, calorimetric power uncertainty assumptions, temperature streaming (stratification) in a large diameter pipe, process pressureeffects or fluid density changes in a pipe or vessel." Process RacksThe modules downstream of the transmitter or sensing device, which condition a signal and actupon it prior to input to a voting logic system. For analog process systems, this includes all theequipment contained in the process equipment

cabinets, e.g., conversion (dropping)

resistor, looppower supply, rate function, function generator,

summator, control/protection

isolator, andbistable (protection function),

controller module (control function),

meter (control boardindication) or Analog to Digital (A/D) conversion module (process computer).

The go/no gosignal generated by the bistable is the output of the last module in the protection function processrack instrument loop and is the input to the voting logic.* Rack Calibration Accuracy (RCA)The two-sided

(+/-) calibration tolerance of the process racks as reflected in the plant calibration procedures.

The RCA is defined at multiple points across the calibration range of the channel,e.g., 0 %, 25 %, 50 %, 75 % and 100 % span for input modules, and specifically at the NTS forWCAP- 1 7746-NP August 201317 Revision 0

the bistable, see Figure 3-1. The RCA magnitude should be, and calibration procedure shouldconfirm, the reference accuracy of the instrument process racks. Recording andtrending of the As Left condition of the process racks (ALT = RCA) is necessary to assureconformance with the uncertainty calculation basic assumptions, i.e., random and two-sided.

For WCGS, the individual modules in a loop may be calibrated to a particular tolerance however,the process loop (as a string) is verified to be calibrated to a specific tolerance (RCA). The[]a.c This parameter is determined utilizing WCGS supplied information and the appropriate vendor specification document.

[]"' A periodic evaluation ofRCA should be performed consistent with the requirements of Section 5.1. Westinghouse performed an evaluation of RCA for a limited number of functions consistent with themethodology identified in Section 4.* Rack Drift (RD)The change in input-output relationship (As Found -As Left) over a period of time at reference conditions, e.g., at constant temperature.

[]a.c Recording and trending of the AsFound condition of the process racks (RD) is necessary to assure conformance with theuncertainty calculation basic assumptions.

This parameter is determined utilizing WCGS supplied information and the appropriate vendorspecification document.

A periodic evaluation of RD should be performed consistent with therequirements of Section 5.1. Westinghouse performed an evaluation of RD for a limited numberof functions consistent with the methodology identified in Section 4." Rack Measurement

& Test Equipment Accuracy (RMTE)The accuracy of the test equipment (typically a transmitter simulator, voltage or current powersupply, and DVM) used to calibrate a process loop in the racks. When the magnitude of RMTEmeets the requirements ofANSI/ISA-51.1-1979 (R1993) (Reference 14, p. 61) it may beconsidered an integral part of RCA or RD. Uncertainties due to M&TE that are 10 times moreaccurate than the device being calibrated are considered insignificant and may not be included inthe uncertainty calculations.

WCAP- 17746-NP August 201318 Revision 0

e Rack Reference Accuracy (RRA)Rack Reference Accuracy is the "accuracy rating" as defined in I SA-5 1.1-1979 (R1993)(Reference 14, page 12), specifically as applied to Note 2 and Note 3 for a process loop string.The magnitude is typically defined in manufacturer's specification data sheets. Inherent in thisdefinition is the verification of the following under a set of reference conditions; conformity (Reference 14, page 16), hysteresis (Reference 14, page 36) and repeatability (Reference 14, page49).axc* Rack Temperature Effects (RTE)Change in input-output relationship for the process rack module string due to a change in theambient environmental conditions (temperature, humidity),

and voltage and frequency from thereference calibration conditions.

It has been determined that temperature is the most significant, with the other parameters being second order effects.

For process instrumentation, a typical valueof [ ]a,c is used for RTE which, based on design testing, allows for an ambienttemperature deviation of + 50 'F.* RangeThe upper and lower limits of the operating region for a device, e.g., 0 to 1300 psig for a SteamLine Pressure transmitter.

This is not necessarily the calibrated span of the device, although quiteoften the two are close. For further information see ANSI/ISA-51.1-1979 (R1993) (Reference 14)." Readout Device Accuracy (READOUT)

• The measurement accuracy of a special test, high accuracy, local gauge, digital voltmeter, ormultimeter on its most accurate, applicable range for the parameter measured.

• 1/22 the smallest increment of an indicator, e.g., control board meter, i.e., readability.

• Safety Analysis Limit (SAL)The parameter value identified in the plant safety analysis or other plant operating limit at whicha reactor trip or actuation function is assumed to be initiated.

The SAL is defined in Chapter 15of the WCGS Updated Safety Analysis Report. Actual SAL values are determined, or confirmed, WCAP- 17746-NP August 201319 Revision 0

by review of the plant safety analyses.

The SAL is the starting point for determination of theacceptability of the CSA, see Figure 3-1." Sensor Calibration Accuracy (SCA)The two-sided

(+) calibration tolerance for a sensor or transmitter as defined in the plantcalibration procedures to be equivalent to the vendor specified reference accuracy.

The SCA isdefined at multiple points across the calibration range of the channel, e.g., 0 %, 25 %, 50 %, 75 %and 100 % span. This parameter is determined utilizing WCGS supplied data with the transmitter model/range code information and the appropriate vendor specification document listed inSection 3.1 of WCAP- 17602-P (Reference 6). []a.C Westinghouse performed an evaluation of SCA for a limited number of functions consistent with the methodology identified in Section 4. A periodic evaluation of SCA should beperformed consistent with the requirements of Section 5.1. The SCA magnitude should be, andthe calibration procedure should confirm, the reference accuracy of the device. Based onWestinghouse recommendations for Resistance Temperature Detector (RTD) cross-calibration, this accuracy is typically

[ ]apc for the Hot and Cold Leg RTDs." Sensor Drift (SD)The change in input-output relationship (As Found -As Left) over a period of time at reference calibration conditions, e.g., at constant temperature.

This parameter is determined utilizing WCGS supplied data with the transmitter model/range code information and the appropriate vendor specification document listed in Section 3.1 of WCAP- 17602-P (Reference 6).Westinghouse performed an evaluation of SD for a limited number of functions consistent withthe methodology identified in Section 4. []a" A periodic evaluation of SD should be performed consistent with the requirements of Section 5.1.* Sensor Measurement

& Test Equipment Accuracy (SMTE)The accuracy of the test equipment (typically a high accuracy local readout gauge and DigitalMultimeter (DMM) used to calibrate a sensor or transmitter in the field or in a calibration laboratory.

When the magnitude of SMTE meets the requirements of ANSI/ISA-51.1-1979 (R1993) (Reference 14, p. 61) it may be considered an integral part of SCA. Uncertainties due toM&TE that are 10 times more accurate than the device being calibrated are considered insignificant and may not be included in the uncertainty calculations.

WCAP- 17746-NP August 201320 Revision 0

0 Sensor Pressure Effects (SPE)* The change in input-output relationship due to a change in the static head pressure from thecalibration conditions for a Ap transmitter (level or flow).* The accuracy to which a correction factor is introduced for the difference between calibration and operating conditions for a Ap transmitter (level or flow).This parameter is calculated utilizing the transmitter model/range code information and theappropriate vendor specification document listed in Section 3.1 of WCAP- 17602-P (Reference 6).* Sensor Reference Accuracy (SRA)As applied to a sensor or transmitter, the reference accuracy is the "accuracy rating" as defined inISA-51.1-1979 (R1993) (Reference 14, page 12), specifically as applied to Note 2 and Note 3.The magnitude is typically defined in manufacturer's specification data sheets. Inherent in thisdefinition is the verification of the following under a set of reference conditions; conformity (Reference 14, page 16), hysteresis (Reference 14, page 36) and repeatability (Reference 14, page49). This parameter is determined utilizing the transmitter model/range code information and theappropriate vendor specification document listed in Section 3.1 of WCAP- 17602-P (Reference 6).* Sensor Temperature Effects (STE)The change in input-output relationship due to a change in the ambient environmental conditions (temperature, humidity),

and voltage and frequency from the reference calibration conditions.

Ithas been determined that temperature is the most significant, with the other parameters beingsecond order effects.

This term is typically limited to the effect due to temperature swings thatoccur at less than 130 'F. This parameter is calculated utilizing the transmitter model/range codeinformation and the appropriate vendor specification document listed in Section 3.1 of WCAP-17602-P (Reference

6) [ ]a.c* SpanThe region for which a device is calibrated and verified to be operable, e.g., for a Steam LinePressure transmitter, 1300 psi.* Square Root Sum of the Squares (SRSS)C= (a )2 + (b )2 + (c)2As approved for use in setpoint calculations by ANSI/ISA-67.04.01-2006 (Reference 4).WCAP- 17746-NP August 201321 Revision 0

0 Total Allowance (TA)The absolute value of the difference (in % instrument span) between the SAL and the NTS.TA= ISAL-NTSI An example of the calculation of TA is:Pressurizer Pressure

-Low (Safety Ijection)

SALNTSTA1745.3 psig-1860.0 psig1-114.7 psi = 114.7 psiThe instrument span = 2500 -1700 psig = 800 psi, therefore, TA = (114.7 psi)*(100%span) 14.3 % span(800 psi)TrendThe evaluation of [ on a periodic basisutilizing As Left and As Found plant data for SCA, SD, RCA and RD for each control, protection and indication function to verify that the statistically based assumptions of the uncertainty calculations are satisfied.

WCAP- 17746-NPAugust 2013Revision 022 Safety LimitSALTACSA1' tTMar~iiI-+ALT = +AFT+RCAI NTS (LSSS)--L~-RA ,%LT = -A FTFigure 3-1 Westinghouse Setpoint Parameter Relationship Diagram (Increasing Function)

WCAP- 17746-NPAugust 2013Revision 023 Table 3-1AP Measurements Expressed in Flow UnitsThe AP accuracy expressed as percent of span of the transmitter applies throughout the measured span,i.e., +/- 1.5 % of 100 inches AP = + 1.5 inches anywhere in the span. Because F2 = f(AP) the same cannotbe said for flow accuracies.

When it is more convenient to express the accuracy of a transmitter in flowterns, the following method is used:(FN)2=APNWhere: N =Nominal Flow2FNa FN = aAPNThus,a A PN2FNEq. 3-1.1Error at a point (not in percent) is:aFN_ aAPN OAAPNFN 2(FN/)22APNEq. 3-1.2andAPN -(FN) 2A Pma. (Fma )2Eq. 3-1.3Where: max = maximum flow and the transmitter AP error is:DAPN (100) percent error in Full Scale AP (% & FS AP)A PmaxEq. 3-1.4WCAP- 17746-NP August 201324 Revision 0

Table 3-1 (continued)

AP Measurements Expressed in Flow UnitsTherefore, A Pmax [% OFS AP ]aFN -2 100 PcFS/P FmaFN 2APna[ FN (2~)(1 00) 1FLF maxIEq. 3-1.5Error in flow units is:O)FN = FN r"-'2 O0LFN IEq. 3-1.6Error in percent nominal flow is:FN (JOO)=F %cFSAP ]Fmax 2FN L 2 J[ FN IEq. 3-1.7Error in percent full span is:aFN(0) FN_ 1OFSAP ][Fm., (100)F max L Fmax IL (2AO)(100 FNEq. 3-1.8FOEFS AP1FFmzx1 2 LFNIEquation 3-1.8 is typically used to express errors in percent full span in Westinghouse uncertainty calculations.

WCAP- 17746-NPAugust 2013Revision 025 4.0 WESTINGHOUSE CALIBRATION AND DRIFT EVALUATION PROCESSa,cWCAP-17746-NP August 2013Revision 026 acWCAP- 17746-NP August 201327 Revision 0

a,cWCAP- 17746-NP August 201328 Revision 0

acWCAP- 17746-NP August 201329 Revision 0

a,cWCAP- 17746-NPAugust 2013Revision 030 a,cWCAP- 17746-NPAugust 2013Revision 031 a,cWCAP- 17746-NP August 201332 Revision 0

a,cFigure 4-1 Westinghouse Calibration and Drift Data Evaluation Process DiagramWCAP- 17746-NPAugust 2013Revision 033 5.0 APPLICATION OF THE WESTINGHOUSE SETPOINTMETHODOLOGY 5.1 Uncertainty Calculation Basic Assumptions

/ PremisesThe equations noted in Section 2 are based on the following premises:

1. The instrument technicians make reasonable attempts to achieve the NTS as an As Leftcondition at the start of each process rack's surveillance

interval, i.e., the calibration error isdriven towards 0.0 % span.2. The process rack calibration accuracy (As Left values) will be evaluated

[]a,, When combined with previous As Left values, the trendcharacteristics of that instrument channel can be determined.

[]a.C of the calibration process and, thus, confirm theWSM uncertainty calculation assumption.

The ability to calibrate is the first step in establishing the operability condition of the instrument channel.

When a "leave alone zone" concept isincorporated into the calibration

process, it is incumbent upon the WCGS staff to verify throughthe calibration trend evaluation process that a calibration bias is not introduced.

3. The process rack drift will be evaluated

]a,, Process rack drift isdefined as the arithmetic difference between current As Found and previous As Left values. Therecording of the first pass values in the increasing and decreasing span directions across theinstrument span, when compared to the As Left values at the same points, determines theinstrument drift. When combined with previous drift data for that instrument

channel, the trendcharacteristics of drift for that channel can be determined.

The instrument channelcharacteristics establish the performance of that channel.

[]a.c The magnitude of drift for an instrument channel isthe second indication of the operability condition of the channel.4. The process racks, including the bistables for analog racks, are verified/functionally tested in astring or loop process.

Indication (control board meters or process computer) is also calibrated as an instrument string with the process racks.5. The instrument technicians make reasonable attempts to achieve a small calibration error as anAs Left condition at the start of each transmitter's surveillance

interval, i.e., the calibration erroris driven towards 0.0 % span.6. The transmitter calibration accuracy (As Left values) will be evaluated

[]a.c When combined with previous As Left values, the trend characteristics of thatWCAP- 17746-NP August 201334 Revision 0

device can be determined.

[]a1c of the calibration process and, thus, confirm the WSMuncertainty calculation assumption.

The ability to calibrate is the first step in establishing theoperability condition of the device. When a "leave alone zone" concept is incorporated into thecalibration

process, it is incumbent upon the WCGS staff to verify through the calibration trendevaluation process that a calibration bias is not introduced.

7. The transmitter drift will be evaluated

[]apc Transmitter drift is definedas the arithmetic difference between current As Found and previous As Left values. Therecording of the first pass values in the increasing and decreasing span directions across theinstrument span, when compared to the As Left values at the same points, determines thetransmitter drift. When combined with previous drift data for that device, the trendcharacteristics of drift for that device can be determined.

The transmitter characteristics establish the performance of that transmitter.

I]a c The magnitude of drift for a transmitter is thesecond indication of the operability condition of the device.It should be noted for (1) and (5) above that it is not necessary for the instrument technician torecalibrate a device or channel if the As Found condition is not exactly at the nominal condition, but iswithin the two-sided

(+) ALT. As noted above, the uncertainty calculations assume that the ALT(conservative and non-conservative direction) is satisfied on a reasonable, statistical basis, not that thenominal condition is satisfied exactly.

The evaluations above assume that the SCA, SD, RCA and RDparameter values are satisfied on at least a two-sided

(+) 95 % probability

/ 95 % confidence level basis.Therefore, it is necessary for WCNOC to periodically re-verify the continued validity of theseassumptions.

Westinghouse recommends that this verification be performed

[]a-C This prevents the institution of non-conservative biases due to a procedural (or unwritten cultural) basis without the WCGS staff's knowledge and appropriate treatment.

In summary, a sensor/transmitter or process rack channel is considered to be "calibrated" when the two-sided (+/-) ALT is satisfied.

An instrument technician may determine to recalibrate if near the extremes ofthe ALT, but it is not required.

Recalibration is explicitly required any time the As Found condition ofthe device or channel is outside of the ALT. A device or channel may not be left outside the ALTwithout declaring the device or channel "inoperable" and appropriate action taken. Thus, an ALT maybe considered as an outer limit for the purposes of calibration and instrument uncertainty calculations.

]ac Thus,WCAP- 17746-NP August 201335 Revision 0

Westinghouse has concluded, that for operable process racks, AFT = ALT = RCA. With respect tosensor/transmitters, the AFT equals the vendor specification data and subsequently on the WCNOCperiodic evaluation of SD data (As Found -As Left).The above results in the WSM's reliance on the NTS, and not the Limiting Trip Setpoint (LTSP) asdefined in ISA-67.04.01-2006 (Reference

4) or the Limiting Setpoint (LSP) as defined in RIS 2006-17(Reference 25). Specific to RIS 2006-17, the LSP is noted as: "... the limiting setting for the channeltrip setpoint (TSP) considering all credible instrument errors associated with the instrument channel.The LSP is the limiting value to which the channel must be reset at the conclusion of periodic testing toensure the safey limit (SL) will not be exceeded if a design basis event occurs be/bre the next periodicsurveillance or calibration."

As noted previously, with respect to the WSM, operability of the processracks is defined as the ability to be calibrated about the NTS (+ALT about the NTS) and subsequent surveillance should find the channel within the AFT = ALT about the NTS. On those rare occasions thatthe channel is found outside of the AFT = ALT, operability requirements would be initially satisfied viarecalibration, or reset, about the NTS. Operability defined as conservative with respect to a zero marginLSP is a concept that is insufficient for the WSM, and is inconsistent with its basic assumption of theAFT ALT = RCA definition.

In order to have confidence (statistical or otherwise) of appropriate operation of the process racks, it is necessary that the process racks operate within the two-sided

(-)limits defined about the NTS. This is particularly true for protection functions that have historical NTSvalues that generate large margins.

From a WSM perspective, systematic allowance of large driftmagnitudes in excess of equipment design -either by large magnitude RD or RMTE terms or utilization of an LSP, generates a false sense of security which is inappropriate for future operation consideration, and which erodes the concept of performance based specifications and limits.5.2 Process Rack Operability Assessment Program and CriteriaThe parameter of most interest as an indication of process rack operability is relative drift (As Found -As Left) found to be within RD, where RD is the two-sided

(+/-) 95/95 drift value assumed for thatchannel.

However, this would require the instrument technician to record and have available in the fieldboth the current As Found and the previous As Left condition data to perform a calculation in the field.WCNOC does not require that the previous As Left condition be ascertained prior to performance of asurveillance test and surveillance procedures are not set up for independent verification of calculations inthe field.An alternative for the process racks is the Westinghouse method for use of a fixed magnitude, two-sided

(+/-) AFT about the NTS. It would be reasonable for this AFT to be RMTE + RD, where RD is the actualstatistically determined 95/95 drift value and RMTE is defined in the plant procedures.

However,comparison of this value with the RCA tolerance utilized in the Westinghouse uncertainty calculations would yield a value where the AFT is less than the RCA tolerance (ALT).]acWCAP- 17746-NP August 201336 Revision 0

II]a.C Therefore, a more reasonable approach for the plant staff to follow was determined.

An AFT criterion based on an absolute magnitude that is the same as the RCA criterion, i.e., the allowed deviation from the NTS on an absolute indication basis is plus or minus (+/-) the RCA tolerance (ALT). A channel found inside the RCA tolerance (ALT) onan indicated basis is considered to be operable.

A channel found outside the RCA tolerance (ALT) isevaluated and recalibrated.

The channel must be returned to within the ALT for the channel to beconsidered operable.

This criterion is incorporated into plant, function specific calibration and driftprocedures as the defined ALT about the NTS. [],c A channel found toexceed this criterion multiple times should trigger a more comprehensive evaluation of the operability ofthe channel.

Thus, more elaborate evaluation and monitoring may be included, as necessary, if the drift isfound to be excessive or the channel is difficult to calibrate.

5.3 Application of Process Rack Operability Assessment to the Plant Technical Specifications The drift operability criteria described for the process racks in Section 5.2 are based on a statistical evaluation of the performance of the installed hardware.

These criteriapacSections 5.1 and 5.2 are consistent with the recommendations of the Westinghouse paper presented at theJune 1994, ISA/EPRI conference in Orlando, FL (Reference 26). In addition, the plant operability assessment processes described in Sections 5.2 and 5.3 are consistent with the basic intent ofISA-67.04.01 (Reference 4). Therefore, the ALT and AFT magnitudes are "performance based" and aredetermined by adding (subtracting) the calibration accuracy (RCA = ALT = AFT) of the device testedduring the Channel Operational Test to the NTS.An example of the ALT and AFT calculations for the WCGS 7300 process racks is:WCAP- 17746-NP August 201337 Revision 0

Pressurizer Pressure

-Low (Safetv Itjection)

ALT/AFT Determination NTS = 1860 psigSPAN 800 psiRCA = [ ]aALT = NTS + RCA+)ALT = axc(-) ALT =AFT = NTS + RCA(+) AFT = axc(-) AFT =5.4 Sensor/Transmitter Operability Assessment Program and CriteriaThe parameter of most interest for indication of transmitter operability is relative drift (As Found -As Left) found to be within SD, where SD is the two-sided

(+/-) 95/95 drift value assumed for that device.However, this would require the instrument technician to record and have available in the field both thecurrent As Found and the previous As Left condition data to perform calculations in the field. WCNOCdoes not require that the previous As Left condition be ascertained prior to performance of a surveillance test and surveillance procedures are not set up for independent verification of calculations in the field.An alternative for the transmitters is the very common method of use of a fixed magnitude, two-sided

(+)AFT about each of the nominal calibration points, e.g., 0 %, 25 %, 50 %, 75 % and 100 % span. Basedon the As Found condition, operability of the device is determined as follows.1. A transmitter found inside the SCA tolerance (ALT) about all calibration points, on an indicated basis, is considered to be operable and may be recalibrated.

2. A transmitter found outside the SCA tolerance (ALT) about one or more calibration point(s) butwithin the SD (AFT) at all of the calibration points is considered operable and must be recalibrated.

3. A transmitter found outside the SD (AFT) at three or more calibration point(s) is considered inoperable.

A condition report should be initiated and the device must be recalibrated to demonstrate a return to an operable condition.

pacWCAP- 17746-NP August 201338 Revision 0

In all cases, for the device to be considered

operable, the transmitter must be returned to within the ALTabout all desired calibration points. This criterion is incorporated into WCGS, function specificcalibration and drift procedures as the defined ALT about the desired calibration points. At a later date,once the As Found data is compiled, the relative drift (As Found -As Left) can be calculated andcompared against the SD value. This comparison can then be utilized to ensure consistency with theassumptions of the uncertainty calculations, see Assumption

7. A transmitter found to exceed thiscriterion multiple times should trigger a more comprehensive evaluation of the operability of the device.Thus, more elaborate evaluation and monitoring may be included, as necessary, if the drift is found to beexcessive or the transmitter is difficult to calibrate.

5.5 Application of the Sensor/Transmitter Operability Assessment The drift operability criteria described for transmitters in Section 5.4 are based on a statistical evaluation of the performance of the installed hardware.

Thus, these criteria

[pacUtilizing the approach of Section 5.4, ALT and AFT values for the transmitter would be defined at themultiple calibration points. An example is provided as follows.WCAP- 17746-NPAugust 2013Revision 039 Pressurizer Pressure

-Low (Safeo, Injection)

ALT/AFT Determination SPAN = 800 psi / 16 mA / 4 VoltsUpper Range Limit (URL) = 3000 psi a,cCalibration Points = 0 %, 25 %, 50 %, 75 %, 100 % spanCalibration zero = 1700 psigCalibration Points = 1700, 1900, 2100, 2300, 2500 psigALT = Calibration Point + SCAaxc a,c0 % span: (+) ALT =(-) ALT =25 % span: (+) ALT = (-) ALT =50 % span: (+) ALT = (-) ALT =75 % span: (+) ALT = (-) ALT =100 % span: (+)ALT= (-) ALT =Equivalents, in mA or Volts, to the above ALT values would be found in the calibration procedure.

AFT = Calibration Point + Vendor Specification axc axc0 % span: (+) AFT = (-) AFT =25 % span: (+) AFT = (-) AFT =50 % span: (+) AFT = (-) AFT =75 % span: (+) AFT = (-) AFT =100 % span: (+) AFT = (-) AFT =Equivalents, in mA or Volts, to the above AFT values would be found in the surveillance procedure.

WCAP- 17746-NP August 201340 Revision 0

6.0 SUMMARY OF IMPORTANT POINTSNoted below is a summary of important points or assumptions with regards to the Westinghouse SetpointMethodology.

1. The basic algorithm is an SRSS, accounting for M&TE dependency with the calibration or driftparameter.

2. Protection function uncertainty calculations are based on a single channel.3. []a.c4. Westinghouse instrument uncertainties are two-sided.

5. []a,c6. []a,c7. PMA terms provide allowances for the non-instrument related effects.8. PEA term accounts for uncertainties due to metering

devices, such as elbows, venturis, andorifice plates. In WCGS RTS/ESFAS uncertainty calculations, these are limited in application toflow measurements, e.g., RCS Flow (Cold Leg Elbow Taps) and Feedwater Flow.9. The PEA term may be used for potential transformer characteristics for Undervoltage andUnderfrequency applications.

10. The WCGS protection function CSA value is believed to be a two-sided 95 % probability at a95 % confidence level (95/95) result.11. The WCGS control function CSA value is believed to be a two-sided 95 % probability at a 95 %confidence level (95/95) result.12. [pac13. Westinghouse reports CSA values to one decimal place using the technique of rounding downvalues less than 0.05 % span androunding up values greater than or equal to 0.05 % span.14. For the process racks, AFT = ALT = RCA, i.e., the AFT is a two-sided parameter

(+/-) about theNTS.WCAP- 17746-NPAugust 2013Revision 041

15. For transmitters, the AFT is a two-sided parameter

(+/-) about the calibration points (absolute drift), or the AFT is a two-sided parameter

(+/-) about the calibration recorded As Left points(relative drift).16. For process racks, the ALT is a two-sided parameter

(+) equal to the RCA about the NTS.17. For transmitters, the ALT is defined as the two-sided

(-) SCA magnitude about the desiredcalibration points.18. Margin is defined to be a non-negative number.19. Westinghouse defines the NTS as the LSSS for the RTS and ESFAS functions listed in theWCGS Technical Specifications.

20. RCA is the random, two-sided

(+/-) calibration tolerance of the process racks as reflected in theWCGS calibration procedures.

21. RCA is defined at multiple points across the calibration range of the channel, and specifically atthe NTS for the bistable.

22. The RCA magnitude is, and the WCGS calibration procedure

confirms, the reference accuracy ofthe instrument process racks..23. Recording and trending of the As Left condition of the process racks (ALT = RCA) is necessary to assure conformance with the uncertainty calculation basic assumptions.

24. It is assumed that individual modules in a loop are calibrated to a particular tolerance and that theprocess loop (as a string) is verified to be calibrated to the RCA. []a.c25. Recording and trending of the As Found condition of the process racks (RD) is necessary toassure conformance with the uncertainty calculation basic assumptions.

26. Actual SAL values are determined, or confirmed, by review of the safety analyses for WCGS.27. The SAL is the starting point for determination of the acceptability of the CSA.28. The two-sided

(+) calibration tolerance for a sensor or transmitter (ALT) is defined in the WCGScalibration procedures.

29. The SCA is defined at multiple points across the calibration range of the channel.30. The SCA magnitude is, and the WCGS calibration procedure

confirms, the reference accuracy ofthe device.31. Recording and trending of the As Left condition of the sensor or transmitter (SCA) is necessary toassure conformance with the uncertainty calculation basic assumptions.

32. Recording and trending of the As Found condition of the sensor or transmitter (SD) is necessary to assure conformance with the uncertainty calculation basic assumptions.

WCAP- 17746-NP August 201342 Revision 0

33. [34.35. [36. []ac]a.c]a~c]a.c37. [38. [ac]a,c39. Westinghouse will not pool data from multiple sites or different vendor hardware.

40. [I]a~c41. []ac42. [43.]a.c]a~c44. []a,c45. The WCGS instrument technicians make reasonable attempts to achieve the NTS as an As Leftcondition at the start of each process rack's surveillance

interval, i.e., the calibration error isdriven towards 0.0 % span.WCAP- 17746-NPAugust 2013Revision 043

46. The process rack calibration accuracy (As Left values) will be evaluated

[a~c47. The ability to calibrate is the first step in establishing the operability condition of the instrument channel.48. When a "leave alone zone" concept is incorporated into the calibration

process, it is incumbent upon the plant staff to verify through the calibration trend evaluation process that a calibration bias is not introduced.

49.]a,c50. The recording of the first pass values in the increasing and decreasing span directions across theinstrument span, when compared to the As Left values at the same points, determines theinstrument drift. The magnitude of drift for an instrument channel/rack is the second indication of the operability condition of the instrument channel/rack.

51. The process racks, including the bistables, computer and control board indication areverified/functionally tested in a string or loop process.52. The WCGS instrument technicians make reasonable attempts to achieve a small calibration erroras an As Left condition at the start of each transmitter's surveillance

interval, i.e., the calibration error is driven towards 0.0 % span.53. The transmitter calibration accuracy (As Left values) will be evaluated

]a,c54. The ability to calibrate is the first step in establishing the operability condition of the device.55. The transmitter drift will be evaluated

[a.c56. The transmitter characteristics establish the performance of that transmitter.

The magnitude ofdrift for a transmitter is the second indication of the operability condition of the device.57. The operability evaluations assume that the SCA, SD, RCA and RD parameter values aresatisfied on at least a two-sided

(+/-) 95 % probability

/ 95 % confidence level basis. Therefore, itis necessary to periodically re-verify the continued validity of these assumptions.

Westinghouse recommends verification

[ ]a.c58. The Westinghouse Setpoint Methodology relies on the NTS as the initial condition for processrack operability evaluations.

WCAP- 17746-NP August 201344 Revision 0

59. ax60. Process rack ALT and AFT magnitudes are "performance based" and are determined by addingand subtracting the calibration accuracy (RCA = ALT = AFT) of the device tested during theChannel Calibration or Analog Channel Operational Test to the NTS.61. Indication (control board meter or process computer)

ALT and AFT magnitudes are"performance based" and are determined by adding and subtracting the calibration accuracy(ALT = AFT) of the device tested during the surveillance test to the desired value.62. Westinghouse has defined a three step transmitter operability evaluation process based on drift.a. If found inside the SCA tolerance (ALT) about all calibration points -the transmitter isconsidered to be operable and may be recalibrated.

b. If found outside the SCA tolerance (ALT) about one or more calibration point(s) but withinthe SD (AFT) at all of the calibration points -the transmitter is considered operable and must.be recalibrated.

c. If found outside the SD (AFT) at three or more calibration point(s)

-the transmitter isconsidered inoperable.

A condition report should be initiated and the device must berecalibrated to demonstrate a return to an operable condition.

In all cases, for the device to be considered

operable, the transmitter must be returned to withinthe ALT about all desired calibration points.63. Westinghouse has defined a three step indication (control board meter or process computer) operability evaluation process based on drift.d. If found inside the calibration tolerance (ALT) about all calibration points -the indication isconsidered to be operable and may be recalibrated.

e. If found outside the calibration tolerance (ALT) about one or two calibration point(s)

-theindication is considered operable and must be recalibrated.

f. If found outside the calibration tolerance (AFT) at three or more calibration point(s)

-theindication is considered inoperable.

A condition report should be initiated and the indication must be recalibrated to demonstrate a return to an operable condition.

In all cases, for the indication to be considered

operable, the indication must be returned to within theALT about all desired calibration points.WCAP- 17746-NP August 201345 Revision 0

7.0 REFERENCES

1. WCAP- 11397-P-A Revision 0, "Revised Thermal Design Procedure,"

Westinghouse ElectricCompany LLC, April 1989.2. Regulatory Guide 1.105, Revision 3, "Setpoints for Safety-Related Instrumentation,"

NuclearRegulatory Commission, December 1999.3. Tuley, C. R., Williams, T. P., "The Significance of Verifying the SAMA PMC 20.1-1973 Defined Reference Accuracy for the Westinghouse Setpoint Methodology,"

Instrumentation, Controls and Automation in the Power Industry, Vol. 35, Proceedings of the Thirty-Fifth PowerInstrumentation Symposium (2nd Annual ISA/EPRI Joint Controls and Automation Conference),

Kansas City, Mo., June 1992, p. 497.4. ANSI/ISA-67.04.01-2006, "Setpoints for Nuclear Safety-Related Instrumentation,"

International Society of Automation, May 2006.5. ISA-RP67.04.02-20 10, "Methodologies for the Determination of Setpoints for NuclearSafety-Related Instrumentation,"

International Society of Automation, December 2010.6. WCAP-17602-P Revision 0, "Westinghouse Setpoint Calculations for the Wolf CreekGenerating Station Control, Protection and Indication Systems,"

Westinghouse ElectricCompany LLC, August 2013.7. Branch Technical Position 7-12, Revision 5 "Guidance on Establishing and Maintaining Instrument Setpoints,"

Nuclear Regulatory Commission, March 2007.8. Westinghouse letter LTR-NRC-07-14, "Westinghouse Presentation to the NRC, 'Westinghouse Transmitter and Process Rack Surveillance Extension Program,"'

Westinghouse ElectricCompany LLC, March 2007.9. Westinghouse letter NS-TMA-1835, "American Electric Power Project, Donald C. Cook Unit 2(Docket 50-316),

Westinghouse Reactor Protection System/Engineered Safety FeaturesActuation System Setpoint Methodology,"

Westinghouse Electric Company LLC, June 1978.10. WCAP-8567-P-A, "Improved Thermal Design Procedure,"

Westinghouse Electric CompanyLLC, July 1975.11. WCAP-1636 1-P Revision 0, "Westinghouse Setpoint Methodology for Protection Systems -AP1000,"

Westinghouse Electric Company LLC, May 2006.12. NRC letter "Safety Evaluation by the Office of New Reactors, Westinghouse Electric Company,WCAP-16361-P Revision 0, (Technical Report 28) Westinghouse Setpoint Methodology forProtection Systems -AP1000,"

Nuclear Regulatory Commission, August 2007.13. ANSI/ANS Standard 58.4-1979, "Criteria for Technical Specifications for Nuclear PowerStations,"

American Nuclear Society, January 1979.14. ANSI/ISA-51.1-1979 (R1993),

"Process Instrumentation Terminology,"

International Society ofAutomation, Reaffirmed May 1995.15. Rosemount Reference Manual, 00809-0100-4631, Rev. BA, "Rosemount 1154 Series HAlphaline Nuclear Pressure Transmitter,"

Rosemount Nuclear Instruments, Inc., April2007.

WCAP-17746-NP August 201346 Revision 0

16.I]a,c17. Walpole, R. E. and Myers, R. H., "Probability and Statistics for Engineers and Scientists,"

7th Edition,Macmillan Publishing

Company, New York, NY, 2002.18. Law, A. M. and Kelton, W. D., "Simulation Modeling and Analysis,"

2nd Edition, McGraw-Hill, New York, NY, 1991.19. ASTM E 178-80, Reapproved 1989, "Standard Practice for Dealing with OutlyingObservations,"

American Society for Testing and Materials, July 1989.20. Regulatory Guide 5.36, "Recommended Practice for Dealing with Outlying Observations,"

Nuclear Regulatory Commission, June 1974.21. ASTM E 178-02, "Standard Practice for Dealing with Outlying Observations,"

AmericanSociety for Testing and Materials, July 2002.22. []a,c23. Generic Letter 91-04, "Changes in Technical Specification Surveillance Intervals to Accommodate a 24-Month Fuel Cycle," Nuclear Regulatory Commission, April 1991.24. Microsoft Office Excel" 2007 (12.0.6557.5000)

SP2 MSO (12.0.6554.5001),

© 2006Microsoft Corporation.

25. NRC Regulatory Issue Summary 2006-17, "NRC Staff Position on the Requirements of 10 CFR50.36, 'Technical Specifications,'

Regarding Limiting Safety System Settings During PeriodicTesting and Calibration of Instrument Channels,"

Nuclear Regulatory Commission, August 2006.26. Tuley, C. R., Williams, T. P., "The Allowable Value in the Westinghouse Setpoint Methodology

-Fact or Fiction?"

presented at the Thirty-Seventh Power Instrumentation Symposium (4thAnnual ISA/EPRI Joint Controls and Automation Conference),

Orlando, FL, June 1994.Microsoft and Excel are either registered trademarks or trademarks of Microsoft Corporation in the United Statesand/or other countries WCAP- 17746-NPAugust 2013Revision 047