ML17291A398

Proposed TS Table 3.6.3-1 Re Primary Containment Isolation Valve Requirements

ML17291A398
Person / Time
Site:	Columbia
Issue date:	09/18/1994
From:	WASHINGTON PUBLIC POWER SUPPLY SYSTEM
To:
Shared Package
ML17291A396	List: ML17291A394 ML17291A398
References
NUDOCS 9409280189
Download: ML17291A398 (9)

Text

CI VALVE FUNCTION AND NUMBER TABLE 3.6.3-1 Continued PRIMARY CONTAINMENT ISOLATION VALVES MAXIMUM ISOLATION TIME Seconds n I Pl Bl I hh Automatic Isolation Valves (Continued)

Equipment Drain-(Radioactive)

EOR-V-19~EDR-V-20 Floor Drain (Radioactive)

FOR-V-3 FDR-V-4 r4 15 D Fuel Pool Cooling/Suppression Pool Cleanup Q0<,,a>," xa FPC-V-149 FPC-V" 153(f),;pm FPC-V-154(f)

, H~FPC"V-156 Reactor Recirculation ttydraulic Control(e)(g)l ON;Ul>'o ttY-V-liA,B so~tlY-V-lBA,B llY-V-19A, B IlY-V-20A,B tlY"V"33A,B llY-V-34A,B ttY-V-35A,B tlY-V-36A,B O Traversing Incore Probe TIP-V-1,2;3,4,5 35 15 PRIMARY CONTAINMENT ISOLATION VALVFS VALVE FUNCTION AND NUMBER d.Other Containment Isolation Valves (Continued)

Radiation Honitoring P I-V-X72 f I I PI-V-X73e/I Transversing Incore Probe System TIP-V-6 TIP-V-7,8,9,10,11(e)

TABLE NOTATIONS*But greater than 3 seconds.OProvisions of Technical Specification 3.0.4 are not applicable.

VALV GROUP a HAXIHUH ISOLATION TINE Seconds N.A.N.A.(a)(b)(c)(d)(e)(f)(9)(h)(i)(j)(k)See Technical Specification 3.3.2 for the isolation signal(s)which operate each group.Valve leakage not included in sum of Type B and C tests.Hay be opened on an intermittent basis under administrative cont,rol.Not closed by SLC actuation signal.Not subject to Type C Leak Rate Test.Hydraulic leak test at 38.2 psig.Not subject to Type C test.Test per Technical Specification 4.4.3.2.2 Tested as part of Type A test.Hay be tested as part of Type A test.If so tested, Type C test results pay be excluded from sum of other Type B and C tests.Reflects closure times for containment isolation only.Ouring operational conditions 1, 2 8 3 the requirement for automatic isolation does not apply to RHR-V-8.Except that RHR-V-8 may be opened in operational conditions 2 8 3 provided control is returned to the control room, with the interlocks reestablished, and reactor pressure is less than 135 psig.The isolation logic associated with the reactor recirculation hydraulic control containment isolation valves need not meet single failure criteria for OPERABILITY for a period ending no later than Hay 15, 1995.

~~

Rgb~oil Prosare Roocta Low Lovol I neo hm nt H='=nee 12AX 12AY nee 13AY 12AX HYX 1-A N-V-1T, 18 19.28 Cir cuit normally ener gized Shown in De-Ener gized Condition 12AY HY V-3330 35@13AY~~

c[

Attachment SAFETY ASSESSMENT OF HYDRAULIC LINE FAILURE VS SAFETY ASSESSMENT OF POTENTIAL CORRECTIVE ACTIONS This analysis compares the increased risk from continued operation with the current containment isolation logic design (potential containment bypass path)with the increase in risk associated with possible corrective actions.The containment bypass scenario is presented in terms of containment'ailure probability coincident with core damage from a large LOCA while the corrective actions are presented in terms of increased core damage frequency.

The bypass scenario requires a LOCA and a sequence of equipment failures, the corrective actions involve somewhat more probable events such as loss of feedwater or turbine trip.n inment 8 ass cenario Lack of two completely independent, automatically actuated isolation valves on the Recirculation Flow Control Valve (FCV)hydraulic lines implies that during a demand for containment isolation these hydraulic lines could present a direct path from containment to the environment.

Situation:

The recirculation FCV hydraulic lines are designed for an internal pressure of 2200 psig and the system is designed and constructed to operate as a closed loop: Each of the two FCV Actuator Hydraulic Power Units, HY-HP-3A and-B is installed outside containment Supply to the actuators, installed inside containment, is maintained at 1800 psig so the"pre-accident" integrity of the piping is confirmed Isolation of the hydraulic supply lines is achieved with two series isolation valves isolation of each of the four sets of two series valves in line"A" is dependent upon Div"1" actuation isolation of each of the four sets of two series valves in line"B" is dependent upon Div"2" actuation valves are functionally tested each refueling Calculation of Conditional Containment Failure Probability:

o Initiating event: Large LOCA (3E-4/yr)o Probability that Large LOCA originates with Recirculation pump discharge piping=0.1 (based on estimate that recirculation pump discharge piping represents 10%of large in-containment piping)

Attachment SAFETY ASSESSMENT OF HYDRAULIC LINE FAILURE VS SAFETY ASSESSMENT OF POTENTIAL CORRECTIVE ACTIONS o Conditional failure probability of hydraulic piping inside containment given failure of recirculation piping=1.0 Note: Failure is assumed to result from movement of the pump discharge piping initiating a hydraulic line failure at the actuator-no credit is given for the ameliorating effects of the flexible hose connections between the valve actuators and the hydraulic lines inside containment.

There are actually no postulated breaks that would cause failure of the hydraulic lines.Probability that the hydraulic lines will fail outside containment is assumed to be 1.0 (a factor of 1E-2 could be justified for equivalent instrument line break accidents).

There are actually no postulated breaks that would cause failure of the hydraulic lines.Probability that one of the two actuation systems fails on demand=2": 8.3E-3 Note: calculated as follows: 1.27E-6/hr' 13,140 hrs between tests (18 mo test interval)*1/2 (finds average probability over the interval)'elay failure rate taken from NPRDS, NUREG/CR-2815 gives 1E-6 per hour.o Conditional probability of core damage given a Large LOCA=1E-4 The annual calculated frequency for this containment bypass scenario coincident with core damage from a large LOCA is 5E-11 per year (less than the Individual Plant Evaluation (IPE)truncation value of 1E-9/yr).Other LOCA core melt scenarios may be more frequent, but in other scenarios the conditional probability of hydraulic line failure will be lower because there will be less dependency between the initiating event and induced failure of the piping.Based on the missile hazards analysis performed for piping inside containment, the hydraulic lines are not a target of any LOCA originated missiles or jets and so will not fail inside containment as a result of the large LOCA.Additionally, the lines are small ((3/4"), releases through these lines will be much smaller than any considered previously for equipment qualification purposes.Therefore, a sequence of events involving core damage, rupture of the lines and failure of ECCS equipment caused by steam and radiation releases through the open hydraulic lines is not considered to be credible.

0 A hmn SAFETY ASSESSMENT OF HYDRAULIC LINE FAILURE VS SAFETY ASSESSMENT OF POTENTIAL CORRECTIVE ACTIONS Safe Assessment of orrective Actions Manual Shu d wn The WNP-2 IPE assumes 0.5 manual shutdowns per year.Based on this initiator frequency the total core damage frequency due to manual shutdown events is calculated to be 4.5E-8 per year.Based on a sensitivity study using the WNP-2 IPE model, an increase in manual shutdown frequency to 1.5 per year increases its total contribution to core damage frequency to 15.8E-8 per year.era ion with H draulic I la ion V lve I Isolation of the hydraulic lines (closure of the isolation valves)for the rest of this cycle can be used as a compensatory measure, however, this would result in loss of all recirculation flow control.As a result, the plant would be unable to respond to a relatively minor transient in the feedwater system.This means that a feedwater transient would initiate a plant SCRAM and has the potential for increasing risk.Feedwater transients are typically encountered about 3 times per year, and as a result, plant trips could be expected to increase from a current level of 4 per year to 7 per year.This assumes that the plant would be unable to respond to even a minor transient.

Based on a sensitivity study using the WNP-2 IPE model, even a single event increase resulting in a plant SCRAM will increase core damage frequency by approximately 3E-7 per year.onclu ion Manual shutdown and/or isolation of the hydraulic lines is not recommended.

The increase in risk from the potential corrective actions is greater than the risk of allowing plant operation in the current configuration.

0~~~