Text

License Amendment Request, Adoption of Technical Specification Task Force (TSTF)-431, Revision 3 Change in Technical Specifications End States (BAW-2441)
	ML13085A282
Person / Time
Site:	Arkansas Nuclear
Issue date:	03/26/2013
From:	Jeremy G. Browning; Entergy Operations
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	1CAN031306
	Download: ML13085A282 (89)
	v • d • e

Entergy Operations, Inc.

1448 S.R. 333 Russellville, AR 72802 Tel 479-858-3110 Jeremy G. Browning Vice President - Operations Arkansas Nuclear One 1CAN031306 March 26, 2013 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, DC 20555

SUBJECT:

License Amendment Request Adoption of Technical Specification Task Force (TSTF)-431, Revision 3 "Change in Technical Specifications End States (BAW-2441)"

Arkansas Nuclear One, Unit 1 Docket No. 50-313 License No. DPR-51

Dear Sir or Madam:

In accordance with the provisions of Title 10 of the Code of Federal Regulations (10 CFR)

Section 50.90, Entergy Operations, Inc. (Entergy) is submitting a request for an amendment to Arkansas Nuclear One, Unit 1 (ANO-1) Technical Specifications (TS) to incorporate the NRC-approved TSTF-431, Revision 3, Change in Technical Specifications End States (BAW-2441).

This proposed amendment would modify the TS requirements for end states associated with the implementation of the approved Topical Report BAW-2441-A, Revision 2, Risk-Informed Justification for LCO End-State Changes, as well as Required Actions revised by a specific Note in TSTF-431, Revision 3. TS Actions End States modifications would permit, for some systems, entry into a hot shutdown (Mode 4) end state rather than a cold shutdown (Mode 5) end state that is the current TS requirement. provides a description and assessment of the proposed change, the requested confirmation of applicability, and plant-specific verifications. Attachment 2 summarizes the regulatory commitments made in this submittal. Attachment 3 provides markup pages of existing TS and TS Bases to show the proposed change. Attachment 4 provides revised (clean) TS pages.

Entergy requests approval of the proposed license amendment by April 1, 2014, with the amendment being implemented within 90 days of approval.

In accordance with 10 CFR 50.91(a)(1), Notice for public comment, the analysis about the issue of no significant hazards consideration (NSHC) using the standards in 10 CFR 50.92 is being provided to the Commission in accordance with the distribution requirements in 10 CFR 50.4.

1CAN031306 Page 2 of 2 In accordance with 10 CFR 50.91(b)(1), a copy of this application and the reasoned analysis about NSHC is being provided to the designated Arkansas state official.

If you have any questions or require additional information, please contact Stephenie Pyle at 479-858-4704.

I declare under penalty of perjury that the foregoing is true and correct.

Executed on March 26, 2013.

Sincerely, ORIGINAL SIGNED BY JEREMY G. BROWNING JGB/dbb Attachments:

1. Description and Assessment of the Proposed Changes

2. List of Regulatory Commitments

3. Proposed Technical Specification and Bases Changes (mark-up)

4. Revised (clean) Technical Specification Pages cc: Mr. Elmo E. Collins Regional Administrator U. S. Nuclear Regulatory Commission Region IV 1600 East Lamar Boulevard Arlington, TX 76011-4511 NRC Senior Resident Inspector Arkansas Nuclear One P. O. Box 310 London, AR 72847 U. S. Nuclear Regulatory Commission Attn: Mr. Kaly Kalyanam MS O-8B1 One White Flint North 11555 Rockville Pike Rockville, MD 20852 Mr. Bernard R. Bevill Arkansas Department of Health Radiation Control Section 4815 West Markham Street Slot #30 Little Rock, AR 72205

Attachment 1 to 1CAN031306 Description and Assessment of Proposed Changes to 1CAN031306 Page 1 of 6 DESCRIPTION AND ASSESSMENT OF THE PROPOSED CHANGES

1.0 DESCRIPTION

The proposed License Amendment Request (LAR) to adopt Risk Informed Technical Specification Task Force Initiative 1 regarding TSTF-431, Revision 3, Change in Technical Specifications End States (BAW-2441), (ADAMS Accession Number ML093570241), would modify the Technical Specifications (TS) requirements to permit the plant to be placed in the preferred end state of hot shutdown (Mode 4) rather than the current TS required cold shutdown (Mode 5) end state. An end state is a condition that the reactor must be placed in if the TS Required Action(s) cannot be met. The Federal Register notice published on December 6, 2010 (75 FR 75705-75706) (Reference 2), announced the availability of this TS improvement as part of the consolidated line item improvement process (CLIIP).

2.0 ASSESSMENT 2.1 Applicability of Published Safety Evaluation Entergy Operations, Inc. (Entergy) has reviewed the model safety evaluation (SE) referenced in the Federal Register Notice of Availability published on December 6, 2010 (75 FR 75705-75706) for the proposed changes as part of the consolidated line item improvement process (CLIIP)). Entergy has also reviewed the NRC SE, (ADAMS Accession Number ML062130286) for Topical Report BAW-2441, Revision 2, (ADAMS Accession Number ML040260016) as well as the supporting information provided to support TSTF-431, Revision 3. As described herein, Entergy has concluded that the technical basis presented in the TSTF proposal and the SE are applicable to Arkansas Nuclear One, Unit 1 (ANO-1) and justifies this amendment for the incorporation of the changes to the ANO-1 TS.

2.2 Optional Changes and Variations The proposed amendment is consistent with the Standard Technical Specifications (STS) changes described in TSTF-431, Revision 3, but Entergy proposes variations or deviations from TSTF-431, Revision 3, as identified and justified below.

Entergys review included verification of compliance with Section 11 of NUMARC 93-01, Industry Guidance for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants, Nuclear Management and Resource Council, Revision 3, July 2000, as well as the supporting TSTF-IG-07-01, "Implementation Guidance TSTF-431, Revision 1, Change in Technical Specifications End States (BAW-2441)", April 2007. Entergy fleet procedure EN-DC-203, Maintenance Rule Program, references NUMARC 93-01, as endorsed by Regulatory Guide (RG) 1.160, as the governing guidance for the Entergy Maintenance Rule program. ANO Operations directive COPD-024, Risk Assessment Guidelines, currently meets the majority of the implementation guidance presented in TSTF-IG-07-01; however, this directive will be further enhanced prior to implementation of this amendment, as committed to in Attachment 2 of this letter.

to 1CAN031306 Page 2 of 6 Differences are as follows.

1. Changes may have required the movement of information from one TS page to another.

This difference does not invalidate the applicability of TSTF-422 and the model SE to ANO-1.

2. STS 3.3.5 Required Action B.2.3 is equivalent to ANO-1 TS 3.3.5 Required Action B.3.

This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

3. STS 3.4.15 Required Action C.2 is equivalent to ANO-1 TS 3.3.5 Required Action D.2.

This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

4. STS 3.6.3 Action E is equivalent to ANO-1 TS 3.6.3 Action D. No other TSTF-431 related changes are affected. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

5. ANO-1 does not have a Containment Air Temperature specification (STS 3.6.5).

Therefore, no TSTF-431 related changes related to Containment Air Temperature are incorporated into the ANO-1 TSs. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

6. The Actions associated with ANO-1 TS 3.6.5, Reactor Building Spray and Cooling System, differs significantly from the STS 3.6.6 version because the ANO-1 licensing basis only requires one train of Reactor Building Spray and one train of Reactor Building Coolers in Modes 3 and 4. This difference was approved by the NRC in the ANO-1 conversion to STS in 2001 (based on NUREG 1430, Revision 1). With regard to TSTF-431, an end state of Mode 4 is permitted for three scenarios: 1) one Reactor Building Spray train inoperable,

2) one Reactor Building Cooling train inoperable, or 3) one Reactor Building Spray train AND one Reactor Building Cooling train inoperable. In effect, at least one Reactor Building Spray train AND one Reactor Building Cooling train must remain operable to apply the Mode 4 end state.

Unlike the STS, ANO-1 TS 3.6.5 Action E permits both Reactor Building Spray trains to be inoperable OR both Reactor Building Cooling trains to be inoperable when in Modes 3 or 4 for up to 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months prior to requiring exiting the Modes of Applicability (i.e., cooldown to Mode 5). Requiring entry into Mode 5 with both trains inoperable on either system remains consistent with the STS and TSTF-431. As long as at least one Reactor Building Spray train AND one Reactor Building Cooling train remains operable in Modes 3 and 4, no further action is required. Because of this unique difference between the ANO-1 licensing basis and the STS, no changes associated with TSTF-431 are applicable to ANO-1 and, therefore, no changes to TS 3.6.5 are proposed. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

7. ANO-1 does not have a Component Cooling Water (CCW) system or specification (STS 3.7.7). Therefore, no TSTF-431 changes related to CCW are incorporated into the ANO-1 TSs. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

to 1CAN031306 Page 3 of 6

8. The ANO-1 Ultimate Heat Sink (Emergency Cooling Pond) does not include cooling towers; therefore, TSTF-431 related changes (reference STS 3.7.9) are not applicable to ANO-1 TS 3.7.8. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

9. STS 3.8.1 Required Action G.2 is equivalent to ANO-1 TS 3.3.5 Required Action F.2. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

10. The markup and clean (revised) version of ANO-1 TS 3.8.4, DC Sources - Operating, pages are based on approval of changes to these pages related to adoption of TSTF-500, DC Electrical Rewrite (Entergy letter dated January 28, 2013) currently under review by the NRC. Should the changes reflected in Entergys January 28, 2013, letter not be approved, a revised version of this TS page will be forward to the NRC at the appropriate time. With respect to this unapproved version of these TS pages, a place-holder has been inserted in the footer (Amendment No. xxx) with the assumption that the January 28, 2013, Entergy amendment request will be approved.

In addition, STS 3.8.4 Required Action D.2 is equivalent to ANO-1 TS 3.3.5 Required Action B.2. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

11. ANO-1 TS 3.8.7, Inverters - Operating, Action B envelops conditions where Action A is not met or when two or more required inverters are inoperable. The STS does not contain the latter condition. In order to apply the TSTF-431 end state properly, Action B of ANO-1 TS 3.8.7 has been split into two separate actions, with the new Action B being equivalent to STS 3.8.7 Action B, and the TSTF-431 Mode 4 end state appropriately applied. New Action C envelops only the condition where two or more required inverters are inoperable and continues to require entry into Mode 5. These modifications retain the current ANO-1 TS allowances while permitting the adoption of TSTF-431 for conditions where only one required inverter is inoperable. This difference does not invalidate the applicability of TSTF-431 and the model SE to ANO-1.

3.0 REGULATORY ANALYSIS

3.1 No Significant Hazards Consideration Determination Entergy Operations, Inc. (Entergy) has evaluated the proposed changes to the TS using the criteria in 10 CFR 50.92 and has determined that the proposed changes do not involve a significant hazards consideration.

Description of Amendment Request: The proposed amendment would modify the Arkansas Nuclear One, Unit 1 (ANO-1) Technical Specifications (TS) requirements to permit an end state of hot shutdown (Mode 4) rather than the current TS requirement of a cold shutdown (Mode 5) end state consistent with NRC-approved TSTF-431, Revision 3. The proposed amendment would include a Note in the applicable TS Required Actions, consistent with TSTF-431, Revision 3, which prohibits the use of LCO 3.0.4.a when entering the preferred end state.

to 1CAN031306 Page 4 of 6 Basis for no significant hazards consideration determination: As required by 10 CFR 50.91(a),

Entergy analysis of the issue of no significant hazards consideration is presented below:

1. Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No The proposed change allows a change to certain required end states when the Technical Specification (TS) Completion Times (CTs) for remaining in power operation are exceeded. Most of the requested TS changes are to permit an end state of hot shutdown (Mode 4) rather than an end state of cold shutdown (Mode 5) contained in the current TS. The request was limited to: (1) those end states where entry into the shutdown mode is for a short interval, (2) entry is initiated by inoperability of a single train of equipment or a restriction on a plant operational parameter, unless otherwise stated in the applicable TS, and (3) the primary purpose is to correct the initiating condition and return to power operation as soon as is practical. Risk insights from both the qualitative and quantitative risk assessments were used in specific TS assessments.

Such assessments are documented in Sections 4 and 5 of BAW-2441-A, Revision 2, Risk Informed Justification for LCO end-state Changes, for B&W Plants. The assessments provide an integrated discussion of deterministic and probabilistic issues, focusing on specific TSs, which are used to support the proposed TS end state and associated restrictions. The staff finds that the risk insights support the conclusions of the specific TS assessments. Therefore, the probability of an accident previously evaluated is not significantly increased, if at all. The consequences of an accident after adopting proposed TSTF-431, Revision 3, are no different than the consequences of an accident prior to its adoption. The addition of a requirement to assess and manage the risk introduced by this change will further minimize possible concerns.

Therefore, this change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No The proposed change does not involve a physical alteration of the plant (no new or different type of equipment will be installed). If risk is assessed and managed, allowing a change to certain required end states when the TS Completion Times for remaining in power operation are exceeded, i.e., entry into hot shutdown rather than cold shutdown to repair equipment, will not introduce new failure modes or effects and will not, in the absence of other unrelated failures, lead to an accident whose consequences exceed the consequences of accidents previously evaluated. The addition of a requirement to assess and manage the risk introduced by this change and the commitment by the licensee to adhere to the guidance in TSTF-IG-07-01, Implementation Guidance for TSTF-431, Revision 1, Changes in Technical Specifications end states, BAW-2441-A, will further minimize possible concerns.

Therefore, this change does not create the possibility of a new or different kind of accident from an accident previously evaluated.

to 1CAN031306 Page 5 of 6

3. Does the proposed change involve a significant reduction in a margin of safety?

Response: No The proposed change allows, for some systems, entry into hot shutdown rather than cold shutdown to repair equipment, if risk is assessed and managed. The B&WOGs risk assessment approach is comprehensive and follows staff guidance as documented in RGs 1.174 and 1.177. In addition, the analyses show that the criteria of the three-tiered approach for allowing TS changes are met. The risk impact of the proposed TS changes was assessed following the three-tiered approach recommended in RG 1.177. A risk assessment was performed to justify the proposed TS changes. The net change to the margin of safety is insignificant.

Therefore, this change does not involve a significant reduction in a margin of safety.

Based upon the reasoning presented above, Entergy concludes that the requested change involves no significant hazards consideration, as set forth in 10 CFR 50.92(c), Issuance of Amendment.

3.2 Verifications, Commitments, and Additional Information Needed As discussed in the notice of availability published in the Federal Register on December 6, 2010, for this TS improvement, plant-specific verifications were performed as follows:

Entergy commits to the regulatory commitments in Attachment 2. In addition, Entergy has proposed TS Bases consistent with Topical Report BAW-2441 and TSTF-431, which provide guidance and details on how to implement the new requirements. Implementation of TSTF-431 requires that risk be managed and assessed, and the licensees configuration risk management program is adequate to satisfy this requirement. The risk assessment need not be quantified, but may be a qualitative assessment of the vulnerability of systems and components when one or more systems are not able to perform their associated function. Finally, Entergy has a Bases Control Program consistent with Section 5.5 of the Standard Technical Specifications.

4.0 ENVIRONMENTAL CONSIDERATION

The amendment changes requirements with respect to the installation or use of a facility component located within the restricted area as defined in 10 CFR Part 20. The NRC staff has determined that the amendment adopting TSTF-431, Revision 3, involves no significant increase in the amounts and no significant change in the types of any effluents that may be released offsite, and that there is no significant increase in individual or cumulative occupational radiation exposure. The Commission has previously issued a proposed finding that TSTF-431, Revision 2, involves no significant hazards considerations, and there has been no public comment on the finding in Federal Register notice 72 FR 65615, dated November 21, 2007.

Accordingly, the amendment meets the eligibility criteria for categorical exclusion set forth in 10 CFR 51.22(c)(9). Pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the issuance of the amendment.

to 1CAN031306 Page 6 of 6

5.0 REFERENCES

1. TSTF-431, Revision 3, Change in Technical Specifications End States (BAW-2441),

dated December 22, 2009 (ADAMS Accession No. ML093570241).

2. Federal Register, [Vol. 75, No. 233, p. 75705-75706], Notice of Availability of the Models for Plant-Specific Adoption of Technical Specifications Task Force (TSTF) Traveler TSTF-431, Revision 3, Change in Technical Specifications End States (BAW-2441), December 6, 2010 (ADAMS Accession No. ML102310367).

3. BAW-2441, Revision 2, Risk Informed Justification for LCO End-State Changes,"

September 2006 (ADAMS Accession No. ML040260016).

4. NRC Model Safety Evaluation of TSTF-431, Revision 3 (ADAMS Accession No. ML102310365).

5. Final Safety Evaluation for BAW-2441, Revision 2, "Risk Informed Justification for LCO End-State Changes," August 25, 2006 (ADAMS Accession No. ML062130286).

Attachment 2 1CAN031306 List of Regulatory Commitments to 1CAN031306 Page 1 of 1 LIST OF REGULATORY COMMITMENTS The following table identifies those actions committed to by Entergy in this document. Any other statements in this submittal are provided for information purposes and are not considered to be regulatory commitments.

TYPE (Check one) SCHEDULED COMMITMENT COMPLETION ONE-TIME CONTINUING DATE ACTION COMPLIANCE Entergy will modify the Technical Upon Specification Bases for the revised implementation of specifications as adopted with the the approved TS applicable license amendment. amendment Entergy will follow the guidance established in Section 11 of NUMARC 93-01, Industry Guidance for Monitoring the Effectiveness Ongoing of Maintenance at Nuclear Power Plants, Nuclear Management and Resource Council, Revision 3, July 2000.

Upon implementation of the approved TS Entergy will follow the guidance established amendment, in TSTF-IG-07-01, Revision 1, when the TS Implementation Guidance for TSTF-431, Required Action Revision 3, Change in Technical End State Specifications End States, BAW-2441-A remains within the Applicability of the TS

Attachment 3 to 1CAN031306 Proposed Technical Specification and Bases Changes (mark-up)

ESAS Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Engineered Safeguards Actuation System (ESAS) Instrumentation LCO 3.3.5 Three ESAS analog instrument channels for each Parameter in Table 3.3.5-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

NOTE-----------------------------------------------------------

Separate Condition entry is allowed for each Parameter.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Parameters A.1 Place analog instrument 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months with one analog instrument channel in trip.

channel inoperable.

B. One or more Parameters B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months with more than one analog instrument channel AND inoperable.

B.2 --------------NOTE--------------

OR Only required for RCS Pressure - Low setpoint.

Required Action and ------------------------------------

associated Completion Time not met. Reduce RCS pressure 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months

< 1750 psig.

AND B.3 --------------NOTES------------

1. Only required for Reactor Building Pressure High setpoint and High High setpoint.

2. LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months ANO-1 3.3.5-1 Amendment No. 215,

ESAS Manual Initiation 3.3.6 3.3 INSTRUMENTATION 3.3.6 Engineered Safeguards Actuation System (ESAS) Manual Initiation LCO 3.3.6 Two manual initiation channels of each one of the ESAS Functions below shall be OPERABLE:

a. High Pressure Injection (channels 1 and 2);

b. Low Pressure Injection (channels 3 and 4);

c. Reactor Building (RB) Cooling (channels 5 and 6);

d. RB Spray (channels 7 and 8); and

e. Spray Additive (channels 9 and 10).

APPLICABILITY: MODES 1 and 2, MODES 3 and 4 when associated engineered safeguards equipment is required to be OPERABLE.

ACTIONS

NOTE-----------------------------------------------------------

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more ESAS A.1 Restore channel to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Functions with one channel OPERABLE status.

inoperable.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND B.2 --------------NOTE-------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months ANO-1 3.3.6-1 Amendment No. 215,

RCS Loops - MODE 4 3.4.6 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.6 RCS Loops - MODE 4 LCO 3.4.6 Two loops consisting of any combination of RCS loops and decay heat removal (DHR) loops shall be OPERABLE and one OPERABLE loop shall be in operation.

NOTE--------------------------------------------

All reactor coolant pumps (RCPs) and DHR pumps may be removed from operation for 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months provided:

a. No operations are permitted that would cause introduction into the RCS, coolant with boron concentration less than required to meet the SDM of LCO 3.1.1; and

b. Core outlet temperature is maintained at less than or equal to a temperature which is 10°F below saturation temperature.

APPLICABILITY: MODE 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required loop A.1 --------------NOTE----------------

inoperable. LCO 3.0.4.a is not applicable when entering Mode 4.

Initiate action to restore a Immediately second loop to OPERABLE status.

AND A.2 --------------NOTE----------------

Only required if DHR loop is OPERABLE.

Be in MODE 5. 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ANO-1 3.4.6-1 Amendment No. 215,

RCS Leakage Detection Instrumentation 3.4.15 CONDITION REQUIRED ACTION COMPLETION TIME B. Required reactor building B.1.1 Analyze grab samples of the Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months atmosphere radioactivity reactor building atmosphere.

monitor inoperable.

OR B.1.2 ----------------NOTE-------------

Not required until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishment of steady state operation at or near operating pressure.

Perform SR 3.4.13.1. Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months AND B.2 Restore required reactor 30 days building atmosphere radioactivity monitor to OPERABLE status.

NOTE---------------- C.1 Analyze grab samples of the Once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Only applicable when the reactor building atmosphere.

reactor building atmosphere gaseous radiation monitor is AND the only OPERABLE monitor.

C.2 Restore reactor building 7 days sump monitor to C. Reactor Building sump OPERABLE status.

monitor inoperable.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 --------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months E. Both required monitors E.1 Enter LCO 3.0.3. Immediately inoperable.

ANO-1 3.4.15-2 Amendment No. 215,246,

BWST 3.5.4 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) 3.5.4 Borated Water Storage Tank (BWST)

LCO 3.5.4 The BWST shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. BWST boron concentration A.1 Restore BWST to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months not within limits. OPERABLE status.

OR BWST water temperature not within limits.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A not AND met.

B.2 --------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months C. BWST water temperature C.1 Restore BWST to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months not within limits. OPERABLE status.

DB. BWST inoperable for DB.1 Restore BWST to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months reasons other than OPERABLE status.

Condition A or C.

EC. Required Action and EC.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition C or D AND not met.

EC.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months ANO-1 3.5.4-1 Amendment No. 215,

BWST 3.5.4 SR 3.5.4.1 is Moved to the Next TS Page in Clean Version SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.5.4.1 -------------------------------NOTE-------------------------------

Only required to be performed when ambient air temperature is < 40°F or > 110°F.

Verify BWST borated water temperature is 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 40°F and 110°F.

ANO-1 3.5.4-1 Amendment No. 215,

Reactor Building Air Locks 3.6.2 CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.2 Lock an OPERABLE door 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months closed in the affected air lock.

AND B.3 ---------------NOTE--------------

Air lock doors in high radiation areas may be verified locked closed by administrative means.

Verify an OPERABLE door is Once per 31 days locked closed in the affected air lock.

C. One or more reactor C.1 Initiate action to evaluate Immediately building air locks overall reactor building inoperable for reasons leakage rate per LCO 3.6.1.

other than Condition A or B. AND C.2 Verify a door is closed in the 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months affected air lock.

AND C.3 Restore air lock to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months ANO-1 3.6.2-3 Amendment No. 215,

Reactor Building Isolation Valves 3.6.3 CONDITION REQUIRED ACTION COMPLETION TIME C. ------------NOTE---------------- C.1 Isolate the affected 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Only applicable to penetration flow path by use penetration flow paths with of at least one closed and only one reactor building de-activated automatic isolation valve and a valve, closed manual valve, closed system. or blind flange.

AND One or more penetration flow paths with one reactor C.2 --------------NOTES-------------

building isolation valve 1. Isolation devices in high inoperable. radiation areas may be verified by use of administrative means.

2. Isolation devices that are locked, sealed, or otherwise secured may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path is isolated.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months SR 3.6.3.1 is Moved to the Next TS Page in Clean Version SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.3.1 Verify each reactor building purge isolation valve is 31 days closed.

ANO-1 3.6.3-3 Amendment No. 215,

Reactor Building Pressure 3.6.4 3.6 REACTOR BUILDING SYSTEMS 3.6.4 Reactor Building Pressure LCO 3.6.4 Reactor building pressure shall be -1.0 psig and +3.0 psig.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Reactor building pressure A.1 Restore reactor building 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months not within limits. pressure to within limits.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.4.1 Verify reactor building pressure is -1.0 psig and 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months

+3.0 psig.

ANO-1 3.6.4-1 Amendment No. 215,

SWS 3.7.7 3.7 PLANT SYSTEMS 3.7.7 Service Water System (SWS)

LCO 3.7.7 Two SWS loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SWS loop A.1 --------------NOTES-------------

inoperable. 1. Enter applicable Conditions and Required Actions of LCO 3.8.1, "AC Sources

- Operating," for diesel generator made inoperable by SWS.

2. Enter Applicable Conditions and Required Actions of LCO 3.4.6, "RCS Loops

- MODE 4," for decay heat removal made inoperable by SWS.

Restore SWS loop to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months ANO-1 3.7.7-1 Amendment No. 215,

CREVS 3.7.9 3.7 PLANT SYSTEMS 3.7.9 Control Room Emergency Ventilation System (CREVS)

LCO 3.7.9 Two CREVS trains shall be OPERABLE.

NOTES-----------------------------------------

1. The control room envelope (CRE) boundary may be opened intermittently under administrative controls.

2. One CREVS train shall be capable of automatic actuation.

APPLICABILITY: MODES 1, 2, 3, 4, During movement of irradiated fuel assemblies.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CREVS train A.1 Restore CREVS train to 7 days inoperable for reasons OPERABLE status.

other than Condition B.

B. One or more CREVS B.1 Initiate action to implement Immediately trains inoperable due to mitigating actions.

inoperable CRE boundary in MODES 1, 2, 3, or 4. AND B.2 Verify mitigating actions 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ensure CRE occupant exposures to radiological, chemical, and smoke hazards will not exceed limits.

AND B.3 Restore control room 90 days boundary to OPERABLE status.

ACTION C MOVED TO NEXT PAGE ANO-1 3.7.9-1 Amendment No. 215,239,

CREVS 3.7.9 CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A or B AND not met in MODE 1, 2, 3, or 4. C.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months D. Required Action and D.1 Place OPERABLE CREVS Immediately associated Completion train in emergency Time of Condition A not recirculation mode.

met during movement of irradiated fuel assemblies. OR D.2 Suspend movement of Immediately irradiated fuel assemblies.

E. Two CREVS trains E.1 Suspend movement of Immediately inoperable during irradiated fuel assemblies.

movement of irradiated fuel assemblies.

OR One or more CREVS trains inoperable due to an inoperable CRE boundary during movement of irradiated fuel assemblies.

F. Two CREVS trains F.1 Enter LCO 3.0.3. Immediately inoperable in MODE 1, 2, 3, or 4 for reasons other than Condition B.

SURVEILLANCES MOVED TO NEXT PAGE ANO-1 3.7.9-2 Amendment No. 215,239,

CREVS 3.7.9 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.9.1 Operate each CREVS train for 15 minutes. 31 days SR 3.7.9.2 Perform required CREVS filter testing in accordance In accordance with the Ventilation Filter Testing Program (VFTP). with the VFTP SR 3.7.9.3 Verify the CREVS automatically isolates the Control 18 months Room and switches into a recirculation mode of operation on an actual or simulated actuation signal.

SR 3.7.9.4 Perform required CRE unfiltered air inleakage testing In accordance in accordance with the Control Room Envelope with the Control Habitability Program. Room Envelope Habitability Program.

ANO-1 3.7.9-3 Amendment No. 215,221,239,

CREACS 3.7.10 3.7 PLANT SYSTEMS 3.7.10 Control Room Emergency Air Conditioning System (CREACS)

LCO 3.7.10 Two CREACS trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4, During movement of irradiated fuel assemblies.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CREACS train A.1 Restore CREACS train to 30 days inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A not AND met in MODE 1, 2, 3, or 4.

B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months C. Required Action and C.1 Place OPERABLE CREACS Immediately associated Completion train in operation.

Time of Condition A not met during movement of OR irradiated fuel assemblies.

C.2 Suspend movement of Immediately irradiated fuel assemblies.

D. Two CREACS trains D.1 Suspend movement of Immediately inoperable during irradiated fuel assemblies.

movement of irradiated fuel assemblies.

E. Two CREACS trains E.1 Enter LCO 3.0.3. Immediately inoperable during MODE 1, 2, 3, or 4.

ANO-1 3.7.10-1 Amendment No. 215,

AC Sources - Operating 3.8.1 CONDITION REQUIRED ACTION COMPLETION TIME F. Required Action and F.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Associated Completion Time of Condition A, B, C, AND D, or E not met.

F.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months G. Three or more required G.1 Enter LCO 3.0.3. Immediately AC sources inoperable.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.1 Verify correct breaker alignment and indicated power 7 days availability for each required offsite circuit.

SR 3.8.1.2 ------------------------------NOTE--------------------------------

All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.

Verify each DG starts from standby conditions and, 31 days in 15 seconds achieves ready-to-load conditions.

SR 3.8.1.3 MOVED TO NEXT PAGE ANO-1 3.8.1-4 Amendment No. 215,

AC Sources - Operating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.3 ------------------------------NOTES------------------------------

1. DG loadings may include gradual loading as recommended by the manufacturer.

2. Momentary transients outside the load range do not invalidate this test.

3. This Surveillance shall be conducted on only one DG at a time.

4. This SR shall be preceded by and follow, without shutdown, a successful performance of SR 3.8.1.2.

Verify each DG is synchronized and loaded and 31 days operates for 60 minutes at a load 2475 kW and 2750 kW.

SR 3.8.1.4 Verify each day tank contains 160 gallons of fuel oil. 31 days SR 3.8.1.5 Check for and remove accumulated water from each 31 days day tank.

SR 3.8.1.6 Verify the fuel oil transfer system operates to transfer 31 days fuel oil from storage tanks to the day tank.

SR 3.8.1.7 ------------------------------NOTE--------------------------------

This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify automatic transfer of AC power sources to the 18 months selected offsite circuit and manual transfer to the alternate required offsite circuit.

SR 3.8.1.8 MOVED TO NEXT PAGE ANO-1 3.8.1-5 Amendment No. 215,

AC Sources - Operating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.8 ------------------------------NOTE--------------------------------

All DG starts may be preceded by an engine prelube period.

Verify on an actual or simulated loss of offsite power 18 months signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. achieves ready-to-load conditions in 15 seconds,

2. energizes permanently connected loads,

3. energizes auto-connected shutdown load through automatic load sequencing timers, and

4. supplies connected loads for 5 minutes.

SR 3.8.1.9 ------------------------------NOTE--------------------------------

All DG starts may be preceded by an engine prelube period.

Verify on an actual or simulated loss of offsite power 18 months signal in conjunction with an actual or simulated ESF actuation signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. achieves ready-to-load conditions in 15 seconds,

2. energizes permanently connected loads,

3. energizes auto-connected emergency loads through load sequencing timers, and

4. supplies connected loads for 5 minutes.

ANO-1 3.8.1-6 Amendment No. 215,

DC Sources - Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources - Operating LCO 3.8.4 Both DC electrical power subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One DC electrical power A.1 Restore DC electrical power 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months subsystem inoperable. subsystem to OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Associated Completion Time not met. AND B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months SURVEILLANCES MOVED TO NEXT PAGE ANO-1 3.8.4-1 Amendment No. 215,xxx,

DC Sources - Operating 3.8.4 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.4.1 Verify battery terminal voltage is greater than or equal 7 days to the minimum established float voltage.

SR 3.8.4.2 Verify each battery charger supplies 300 amps at 18 months greater than or equal to the minimum established float voltage for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

OR Verify each battery charger can recharge the battery to the fully charged state within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months while supplying the largest combined demands of the various continuous steady state loads, after a battery discharge to the bounding design basis event discharge state.

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.3 Verify battery capacity is adequate to supply, and 18 months maintain in OPERABLE status, the required emergency loads for the design duty cycle when subjected to a battery service test or a modified performance discharge test.

ANO-1 3.8.4-2 Amendment No. 215,xxx,

Inverters - Operating 3.8.7 CONDITION REQUIRED ACTION COMPLETION TIME B. Required Action and B.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months associated Completion Time not met. AND OR B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable Two or more of the four when entering Mode 4.

inverters required by LCO --------------------------------------

3.8.7.a and LCO 3.8.7.b inoperable. Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months C. Two or more of the four C.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months inverters required by LCO 3.8.7.a and AND LCO 3.8.7.b inoperable.

C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.7.1 Verify correct inverter voltage, frequency, and 7 days alignment to associated 120 VAC buses RS1, RS2, RS3, and RS4.

ANO-1 3.8.7-2 Amendment No. 215,230,

Distribution Systems - Operating 3.8.9 3.8 ELECTRICAL POWER SYSTEMS 3.8.9 Distribution Systems - Operating LCO 3.8.9 Two AC, DC, and 120 VAC electrical power distribution subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One or more AC electrical A.1 Restore AC electrical power 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months power distribution distribution subsystem(s) to subsystem(s) inoperable. OPERABLE status. AND 16 hours1.851852e-4 days 0.00444 hours 2.645503e-5 weeks 6.088e-6 months from discovery of failure to meet LCO B. One or more 120 VAC B.1 Restore 120 VAC electrical 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months electrical power power distribution distribution subsystem(s) subsystem(s) to OPERABLE AND (RS1, RS2, RS3, RS4) status.

16 hours1.851852e-4 days 0.00444 hours 2.645503e-5 weeks 6.088e-6 months from inoperable.

discovery of failure to meet LCO C. One or more DC electrical C.1 Restore DC electrical power 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months power distribution distribution subsystem(s) to subsystem(s) inoperable. OPERABLE status. AND 16 hours1.851852e-4 days 0.00444 hours 2.645503e-5 weeks 6.088e-6 months from discovery of failure to meet LCO D. Required Action and D.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months associated Completion Time not met. AND D.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 45. 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months ANO-1 3.8.9-1 Amendment No. 215

ESAS Instrumentation B 3.3.5 ACTIONS (continued)

B.1, B.2, and B.3 Condition B applies when Required Action A.1 and its associated Completion Time are not met, or when one or more parameters have more than one analog instrument channel inoperable. If Condition B applies, the unit must be brought to a condition in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Additionally, for the RCS Pressure - Low parameter, the unit must be brought to < 1750 psig within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months , and for the RB Pressure - High and High High parameters, the unit must be brought to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 5). In MODE 4 the energy in the RCS is lower resulting in a lower risk of an event occurring which would require the ESAS instrumentation. The ESAS functions can be manually initiated if needed. In MODE 4, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.3 is modified by a second Note. Note 2 states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate.

LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

SURVEILLANCE REQUIREMENTS The ESAS Parameters listed in Table 3.3.5-1 are subject to CHANNEL CHECK, CHANNEL FUNCTIONAL TEST, and CHANNEL CALIBRATION.

SR 3.3.5.1 Performance of the CHANNEL CHECK every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months provides reasonable assurance for prompt identification of a gross failure of instrumentation. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the two instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. CHANNEL CHECK will detect gross channel failure; therefore, it is key in verifying that the instrumentation continues to operate properly between CHANNEL CALIBRATIONs.

Agreement criteria are determined by the unit staff, based on a combination of factors including channel instrument uncertainties. If a channel is outside the criteria, it may be an indication that the transmitter or the signal processing equipment has drifted outside its limit.

ANO-1 3.3.5-9 Amendment No. 215 Rev.

ESAS Instrumentation B 3.3.5 SURVEILLANCE REQUIREMENTS (continued)

SR 3.3.5.1 (continued)

The Frequency is based on operating experience that demonstrates channel failure is rare.

Since the probability of two random failures in redundant channels in any 12-hour period is extremely low, the CHANNEL CHECK minimizes the chance of loss of protective function due to failure of redundant channels. The CHANNEL CHECK supplements less formal, but potentially more frequent, checks of channel OPERABILITY during normal operational use of the displays associated with the LCO's required channels.

SR 3.3.5.2 A CHANNEL FUNCTIONAL TEST is performed on each required ESAS analog instrument channel to ensure the entire channel will perform the intended functions. Any setpoint adjustment shall be consistent with the assumptions of the setpoint calculations.

The Frequency of 31 days is based on unit operating experience, with regard to channel OPERABILITY and drift, which demonstrates that failure of more than one channel of a given function in any 31-day interval is a rare event. The RCS low pressure automatic bypass removal feature is verified during its CHANNEL FUNCTIONAL TEST.

SR 3.3.5.3 CHANNEL CALIBRATION is a complete check of the analog instrument channel, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy. CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift to ensure that the analog instrument channel remains OPERABLE between successive tests. CHANNEL CALIBRATION shall find that measurement errors and bistable setpoint errors are within the assumptions of the setpoint calculations. CHANNEL CALIBRATIONS must be performed consistent with the assumptions of the setpoint calculations.

This Frequency is justified by the assumption of at least an 18-month calibration interval to determine the magnitude of equipment drift in the setpoint calculations.

REFERENCES

1. SAR, Chapter 7.

2. SAR, Chapter 14 and Chapter 3A.

3. 10 CFR 50.36.

4. Instrument Loop Error Analysis and Setpoint Methodology Manual, Design Guide, IDG-001.

5. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 3.3.5-10 Amendment No. 215 Rev.

ESAS Manual Initiation B 3.3.6 ACTIONS A Note has been added to the ACTIONS indicating separate Condition entry is allowed for each ESAS manual initiation Function.

A.1 Condition A applies when one manual initiation channel of one or more ESAS Functions becomes inoperable. Required Action A.1 must be taken to restore the channel to OPERABLE status within the next 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . The Completion Time of 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months is based on unit operating experience and administrative controls, which provide alternative means of ESAS Function initiation via individual component controls. The 72-hour Completion Time is generally consistent with the allowed outage time for the safety systems actuated by ESAS.

B.1 and B.2 If Required Action A.1 and the associated Completion Time are not met, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required MODES from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 2). In MODE 4 the energy in the RCS is lower resulting in a lower risk of an event occurring which would require the ESAS instrumentation. The ESAS functions can be manually initiated via the individual component controls if needed. In MODE 4, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

ANO-1 3.3.6-3 Amendment No. 215 Rev.

ESAS Manual Initiation B 3.3.6 SURVEILLANCE REQUIREMENTS SR 3.3.6.1 This SR requires the performance of a CHANNEL FUNCTIONAL TEST of the ESAS manual initiation. This test verifies that the initiating circuitry is OPERABLE and will actuate the digital actuation logic channels. The 18-month Frequency is based on the need to perform this Surveillance under the conditions that apply during a unit outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. This Frequency is demonstrated to be sufficient, based on operating experience, which shows these components usually pass the Surveillance when performed on the 18-month Frequency.

REFERENCES

1. 10 CFR 50.36.

2. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 3.3.6-4 Amendment No. 215 Rev.

RCS Loops - MODE 4 B 3.4.6 ACTIONS A.1 If only one required RCS loop or DHR loop is OPERABLE and in operation, redundancy for heat removal is lost. Action must be initiated to restore a second loop to OPERABLE status.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 2). In MODE 4 the Steam Generators are available for heat removal via natural circulation. In MODE 4, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action A.1 is modified by a second Note. Note 2 states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate.

LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

The immediate Completion Time reflects the importance of maintaining the availability of two paths for heat removal.

A.2 If restoration is not accomplished and a DHR loop is OPERABLE, the unit must be brought to MODE 5 within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Bringing the unit to MODE 5 is a conservative action with regard to decay heat removal. With only one DHR loop OPERABLE, redundancy for decay heat removal is lost and, in the event of a loss of the remaining DHR loop, it would be safer to initiate that loss from MODE 5 rather than MODE 4. The Completion Time of 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is reasonable, based on operating experience, to reach MODE 5 in an orderly manner and without challenging unit systems.

This Required Action is modified by a Note which indicates that the unit must be placed in MODE 5 only if a DHR loop is OPERABLE. With no DHR loop OPERABLE, the unit is in a condition with only limited cooldown capabilities. Therefore, the actions are to be concentrated on restoration of a DHR loop, rather than a cooldown of extended duration.

ANO-1 3.4.6-3 Amendment No. 215 Rev.

RCS Loops - MODE 4 B 3.4.6 ACTIONS (continued)

B.1 and B.2 If no RCS or DHR loops are OPERABLE or a required loop is not in operation (no loop is required to be in operation provided the conditions of the Note in the LCO section are met), all operations involving introduction of coolant into the RCS with boron concentration less than required to meet the minimum SDM of LCO 3.1.1 must be suspended and action to restore one RCS or DHR loop to OPERABLE status and operation must be initiated. The required margin to criticality must not be reduced in this type of operation. Suspending the introduction of coolant into the RCS of coolant with boron concentration less than required to meet the minimum SDM of LCO 3.1.1 is required to assure continued safe operation. With coolant added without forced circulation, unmixed coolant could be introduced to the core, however coolant added with boron concentration meeting the minimum SDM maintains acceptable margin to subcritical operations.

The immediate Completion Times reflect the importance of maintaining operation for decay heat removal. The action to restore must continue until one loop is restored to operation.

SURVEILLANCE REQUIREMENTS SR 3.4.6.1 This Surveillance requires verification every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months of the required DHR or RCS loop in operation to ensure forced flow is providing decay heat removal. Verification includes flow rate, temperature, or pump status monitoring. The 12-hour interval has been shown by operating practice to be sufficient to regularly assess RCS loop status. In addition, control room indication and alarms will normally indicate loop status.

SR 3.4.6.2 Verification that each required pump is OPERABLE ensures that an RCS or DHR loop can be placed in operation if needed to maintain decay heat removal and reactor coolant circulation.

Verification is performed by verifying proper breaker alignment and power available to each required pump. Alternatively, verification that a pump is in operation also verifies proper breaker alignment and power availability. The Frequency of 7 days is considered reasonable in view of other administrative controls and has been shown to be acceptable by operating experience.

This SR is modified by a Note that states the SR is not required to be performed until 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after a required pump is not in operation.

REFERENCES

1. 10 CFR 50.36.

2. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 3.4.6-4 Amendment No. 215 Rev.

RCS Leakage Detection Instrumentation B 3.4.15 ACTIONS (continued)

B.1.1, B.1.2, and B.2 With the required gaseous or particulate reactor building atmosphere radioactivity monitoring instrumentation channel inoperable, alternative action is required. Either grab samples of the reactor building atmosphere must be taken and analyzed or water inventory balances, in accordance with SR 3.4.13.1, must be performed to provide alternate periodic information. With a sample obtained and analyzed or a water inventory balance performed every 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , the reactor may be operated for up to 30 days to allow restoration of at least one of the radioactivity monitors.

The 24-hour interval provides periodic information that is adequate to detect leakage. A Note is added allowing that SR 3.4.13.1 is not required to be performed until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishing steady state operation (stable temperature, power level, pressurizer and makeup tank levels, makeup and letdown, and RCP seal injection and return flows) at or near operating pressure.

The 12-hour allowance provides sufficient time to collect and process all necessary data after stable unit conditions are established. The 30-day Completion Time recognizes at least one other form of leak detection is available.

C.1 and C.2 With the reactor building sump monitor inoperable, the only means of detecting LEAKAGE is the required reactor building atmosphere radiation monitor. A Note clarifies that this Condition is applicable when the only OPERABLE monitor is the reactor building atmosphere gaseous radiation monitor. In addition, this configuration does not provide the required diverse means of leakage detection. Indirect methods of monitoring RCS leakage must be implemented. Grab samples of the reactor building atmosphere must be taken and analyzed to provide alternate periodic information. The 12-hour interval is sufficient to detect increasing RCS leakage. The Required Action provides 7 days to restore another RCS leakage monitor to OPERABLE status to regain the intended leakage detection diversity. The 7-day Completion Time ensures that the plant will not be operated in a degraded configuration for a lengthy time period.

D.1 and D.2 If the Required Action and associated Completion Time are not met, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months .

The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 5). In MODE 4 the RCS pressure is lower and the risk of significant RCS leakage is reduced. In MODE 4, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

ANO-1 B 3.4.15-4 Amendment No. 215 Rev. 22,24,44,

RCS Leakage Detection Instrumentation B 3.4.15 ACTIONS (continued)

D.1 and D.2 (continued)

Required Action D.2 is modified by a second Note. Note 2 states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate.

LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

E.1 With both required monitors inoperable, no indicated means of monitoring leakage are available, and immediate plant shutdown in accordance with LCO 3.0.3 is required.

SURVEILLANCE REQUIREMENTS SR 3.4.15.1 SR 3.4.15.1 requires the performance of a CHANNEL CHECK of the required reactor building atmosphere radioactivity monitor. The check gives reasonable confidence that each channel is operating properly. The Frequency of 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is based on instrument reliability and is reasonable for detecting off normal conditions.

SR 3.4.15.2 SR 3.4.15.2 requires the performance of a CHANNEL FUNCTIONAL TEST of the required reactor building atmosphere radioactivity monitor. The test ensures that the monitor can perform its function in the desired manner. The test verifies the alarm function and relative accuracy of the instrument string. The Frequency of 92 days considers instrument reliability, and operating experience has shown it proper for detecting degradation.

SR 3.4.15.3 and SR 3.4.15.4 These SRs require the performance of a CHANNEL CALIBRATION for each of the required RCS leakage detection instrumentation channels. The calibration verifies the accuracy of the instrument string, including the instruments located inside the reactor building. The Frequency of 18 months is a typical refueling cycle and considers channel reliability. Additionally, operating experience has shown this Frequency is acceptable.

ANO-1 B 3.4.15-5 Amendment No. 215 Rev. 22,24,44,

RCS Leakage Detection Instrumentation B 3.4.15 REFERENCES

1. SAR, Section 1.4, GDC 30.

2. Regulatory Guide 1.45, Revision 0, Reactor Coolant Pressure Boundary Leakage Detection Systems, May 1973.

3. SAR, Section 4.2.3.8.

4. 10 CFR 50.36.

5. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.4.15-6 Amendment No. 215 Rev. 22,24,44,

BWST B 3.5.4 APPLICABLE SAFETY ANALYSES (continued)

The 40 °F lower limit on the temperature of the solution in the BWST was established to ensure that the solution will not freeze. The 110 °F upper limit on the temperature of the BWST contents is consistent with the maximum water temperature assumed in the safety analysis.

These parameter values are considered to be nominal values. Additional allowances for instrument uncertainty are not required to be included in the implementing procedures.

In MODE 1, the BWST satisfies Criterion 3 of 10 CFR 50.36 (Ref. 3). In MODES 2, 3 and 4, the BWST satisfies Criterion 4 of 10 CFR 50.36.

LCO The BWST exists to ensure that an adequate supply of borated water is available to cool and depressurize the reactor building in the event of a DBA; to cool and cover the core in the event of a LOCA, thereby ensuring the reactor remains adequately shutdown following a DBA; and to ensure an adequate level exists in the reactor building sump to support ECCS and reactor building spray pump operation in the recirculation mode. To be considered OPERABLE, the BWST must meet the limits for water volume, boron concentration, and temperature established in the SRs.

APPLICABILITY In MODES 1, 2, 3, and 4, the BWST OPERABILITY requirements are dictated by the ECCS and Reactor Building Spray System OPERABILITY requirements. Since both the ECCS and Reactor Building Spray System must be OPERABLE in MODES 1, 2, 3, and 4, the BWST must be OPERABLE to support their operation.

Core cooling requirements in MODE 5 are addressed by LCO 3.4.7, "RCS Loops - MODE 5, Loops Filled," and LCO 3.4.8, "RCS Loops - MODE 5, Loops Not Filled," respectively. MODE 6 core cooling requirements are addressed by LCO 3.9.4, "Decay Heat Removal (DHR) and Coolant Circulation - High Water Level," and LCO 3.9.5, "Decay Heat Removal (DHR) and Coolant Circulation - Low Water Level."

ACTIONS A.1 With either the BWST boron concentration or borated water temperature not within limits, the condition must be corrected within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months . In this condition, neither the ECCS nor the Reactor Building Spray System may be able to perform its design functions. Therefore, prompt action must be taken to restore the tank to OPERABLE status or to place the unit in a MODE in which overall plant risk is minimizedthese systems are not required. The 8- hour limit to restore the temperature or boron concentration to within limits was developed considering the time required to change boron concentration or temperature and assuming that the contents of the tank are still available for injection.

ANO-1 B 3.5.4-3 Amendment No. 215 Rev. 1,

BWST B 3.5.4 ACTIONS (continued)

B.1 and B.2 If the BWST boron concentration is not restored to within limits within the associated Completion Time, the plant must be brought to MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and MODE 4 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems. Reference 4 demonstrated that it is acceptable to remain in MODE 4 in this condition because the boron concentration limit is based on MODE 1 events and there is additional SHUTDOWN MARGIN available for events initiated in MODE 4.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

C.1 With BWST water temperature not within limits, it must be returned to within limits within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months . If the temperature is not within limits, the ECCS and Containment Spray systems may not be able to perform their respective design functions; therefore, prompt action must be taken to restore the tank to OPERABLE status. The allowed Completion Time of 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months to restore the BWST water temperature to within limits was developed considering the time required to change water temperature and that the contents of the tank are still available for injection.

DB.1 With the BWST inoperable for reasons other than Condition A or C (e.g., water volume), the BWST must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . In this condition, neither the ECCS nor the Reactor Building Spray System can perform its design functions. Therefore, prompt action must be taken to restore the BWST to OPERABLE status or to place the unit in a MODE in which the BWST is not required. The allowed Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months to restore the BWST to OPERABLE status is based on this condition simultaneously affecting multiple redundant trains.

EC.1 and EC.2 If the Required Actions and associated Completion Times of Conditions C or D are not met, the unit must be brought to a MODE in which the LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 5 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

ANO-1 B 3.5.4-4 Amendment No. 215 Rev.

BWST B 3.5.4 SURVEILLANCE REQUIREMENTS SR 3.5.4.1 Verification every 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months that the BWST water temperature is within the specified temperature band ensures that the fluid will not freeze and that the fluid temperature will not be hotter than assumed in the safety analysis. These parameter values are considered to be nominal values and do not contain an allowance for instrument uncertainty. No additional allowances for instrument uncertainty are required to be included in the implementing procedures. The 24-hour Frequency is sufficient to identify a temperature change that would approach either temperature limit.

The SR is modified by a Note that requires the Surveillance to be performed only when ambient air temperatures are outside the operating temperature limits of the BWST. With ambient temperatures within this band, the BWST temperature should not exceed the limits.

SR 3.5.4.2 Verification every 7 days that the BWST level is 38.4 feet and 42 feet ensures that a sufficient initial supply is available for injection and to support continued ECCS pump operation on recirculation. These levels correspond to volumes of approximately 375,096 gallons and 405,090 gallons, respectively. These parameter values do not contain an allowance for instrument uncertainty. Additional allowances for instrument uncertainty are included in the implementing procedures. Since the BWST level is normally stable, a 7-day Frequency has been shown to be appropriate through operating experience.

SR 3.5.4.3 Verification every 7 days that the boron concentration of the BWST fluid is 2270 ppm and 2670 ppm ensures that the reactor will remain adequately shutdown following a LOCA. These parameter values do not contain an allowance for instrument uncertainty. Additional allowances for instrument uncertainty are included in the implementing procedures. Since the BWST level is normally stable, a 7-day sampling Frequency is appropriate and has been shown to be acceptable through operating experience.

REFERENCES

1. SAR, Section 6.1.

2. Letter from A. C. Thadani (NRC) to P. S. Walsh (BWOG) dated March 9, 1993.

3. 10 CFR 50.36.

4. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.5.4-5 Amendment No. 215 Rev. 1,

Reactor Building Air Locks B 3.6.2 ACTIONS (continued)

D.1 and D.2 If the Required Actions and associated Completion Times are not met, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 5). The release of stored energy to the Reactor Building in the event of an accident in MODE 4 is substantially less than the energy release assumed due to an accident at power. Therefore, the challenge to containment air locks is substantially reduced. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an event is also reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action D.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

SURVEILLANCE REQUIREMENTS SR 3.6.2.1 Maintaining the reactor building air locks OPERABLE requires compliance with the leakage rate test requirements of the Reactor Building Leakage Rate Testing Program. This SR reflects the leakage rate testing requirements with regard to air lock leakage (Type B leakage tests). The acceptance criteria were established during initial air lock and reactor building OPERABILITY testing. The periodic testing requirements verify that the air lock leakage does not exceed the allowed fraction of the overall reactor building leakage rate. The Frequency is required by the Reactor Building Leakage Rate Testing Program.

The SR has been modified by two Notes. Note 1 states that an inoperable air lock door does not invalidate the previous successful performance of the overall air lock leakage test. This is considered reasonable, since either air lock door is capable of providing a fission product barrier in the event of a DBA. Note 2 has been added to this SR requiring the results to be evaluated against the acceptance criteria which is applicable to SR 3.6.1.1. This ensures that air lock leakage is properly accounted for in determining the combined Type B and C reactor building leakage rate.

ANO-1 B 3.6.2-5 Amendment No. 215 Rev.

Reactor Building Air Locks B 3.6.2 SURVEILLANCE REQUIREMENTS (continued)

SR 3.6.2.2 The air lock interlock is designed to prevent simultaneous opening of both doors in a single air lock. Since both the inner and outer doors of an air lock are designed to withstand the maximum expected post accident reactor building pressure, closure of either door will support the reactor building OPERABILITY. Thus, the door interlock feature supports the reactor building OPERABILITY while the air lock is being used for personnel transit in and out of the reactor building. Periodic testing of this interlock demonstrates that the interlock will function as designed and that simultaneous opening of the inner and outer doors will not inadvertently occur. Due to the purely mechanical nature of this interlock, and given that the interlock mechanism is not normally challenged when the reactor building air lock door is used for entry and exit (procedures require strict adherence to single door opening), this test is only required to be performed every 18 months. The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a unit outage, and the potential for loss of reactor building OPERABILITY if the Surveillance were performed with the reactor at power.

The 18 month Frequency for the interlock is justified based on generic operating experience.

The 18 month Frequency is based on engineering judgment and is considered adequate given that the interlock is not expected to be challenged during use of the airlock.

REFERENCES

1. 10 CFR 50, Appendix J, Option B.

2. SAR, Chapter 14.

3. SAR, Chapter 5.

4. 10 CFR 50.36.

5. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.6.2-6 Amendment No. 215 Rev.

Reactor Building Isolation Valves B 3.6.3 ACTIONS (continued)

B.1 (continued)

Condition B is modified by a Note indicating this Condition is only applicable to penetration flow paths with two reactor building isolation valves. Condition A of this LCO addresses the condition of one reactor building isolation valve inoperable in this type of penetration flow path.

C.1 and C.2 With one or more penetration flow paths with one reactor building isolation valve inoperable, the inoperable valve must be restored to OPERABLE status or the affected penetration flow path must be isolated. The method of isolation must include the use of at least one isolation barrier that cannot be adversely affected by a single active failure. Isolation barriers that meet this criterion are a closed and de-activated automatic valve, a closed manual valve, and a blind flange. A check valve may not be used to isolate the affected penetration. Required Action C.1 must be completed within the 72-hour Completion Time. The specified time period is reasonable, considering the relative structural integrity of the closed system (hence, reliability) to act as a penetration isolation boundary and the relative importance of supporting reactor building OPERABILITY during MODES 1, 2, 3, and 4. In the event the affected penetration is isolated in accordance with Required Action C.1, the affected penetration flow path must be verified to be isolated on a periodic basis. This periodic verification is necessary to assure that reactor building penetrations requiring isolation following an accident are isolated. The Completion Time of once per 31 days for verifying that each affected penetration flow path is isolated is appropriate considering the fact that the valves are operated under administrative controls and the probability of their misalignment is low.

Condition C is modified by a Note indicating that this Condition is only applicable to those penetration flow paths with only one reactor building isolation valve and a closed system. This Note is necessary since this Condition is written to specifically address those penetration flow paths in a closed system.

Required Action C.2 is modified by two Notes. Note 1 applies to valves and blind flanges located in high radiation areas and allows these devices to be verified by use of administrative means. Allowing verification by administrative means is considered acceptable since access to these areas is typically restricted. Note 2 applies to isolation devices that are locked, sealed, or otherwise secured in position and allows these devices to be verified closed by use of administrative means. Allowing verification by administrative means is considered acceptable, since the function of locking, sealing, or securing components is to ensure that these devices are not inadvertently repositioned. Therefore, the probability of misalignment of these devices, once verified to be in the proper position, is small.

D.1 and D.2 If the Required Actions and associated Completion Times are not met, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

ANO-1 B 3.6.3-6 Amendment No. 215 Rev. 28,39,

Reactor Building Isolation Valves B 3.6.3 ACTIONS (continued)

D.1 and D.2 Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 7). The release of stored energy to the Reactor Building in the event of an accident in MODE 4 is substantially less than the energy release assumed due to an accident at power. Therefore, the challenge to containment isolation valves is substantially reduced. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an event is also reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action D.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

SURVEILLANCE REQUIREMENTS SR 3.6.3.1 Each 24-inch reactor building purge isolation valve in the purge system supply and exhaust is required to be verified closed at 31 day intervals. This Surveillance is designed to ensure that a gross breach of the reactor building is not caused by an inadvertent opening of a reactor building purge valve. Detailed analysis of the purge valves failed to conclusively demonstrate their ability to close during a LOCA in time to limit offsite doses. Therefore, these valves are required to be in the closed position during MODES 1, 2, 3, and 4. A reactor building purge valve that is closed must have motive power to the valve operator removed. This can be accomplished by removing the valve handswitch key. The Frequency is consistent with other reactor building isolation valves discussed in SR 3.6.3.2.

SR 3.6.3.2 This SR requires verification that each reactor building isolation manual valve and blind flange located outside the reactor building and not locked, sealed, or otherwise secured, and required to be closed during accident conditions is closed. The SR helps to ensure that post accident leakage of radioactive fluids or gases outside the reactor building boundary is within design limits. This SR does not require any testing or valve manipulation. Rather, it involves verification, through a system walkdown, that those reactor building isolation valves outside the reactor building and capable of being mispositioned are in the correct position. Since verification of valve position for the reactor building isolation valves outside the reactor building is relatively easy, the 31-day Frequency was chosen to provide added assurance of the correct positions.

ANO-1 B 3.6.3-7 Amendment No. 215 Rev. 28,39,

Reactor Building Isolation Valves B 3.6.3 SURVEILLANCE REQUIREMENTS (continued)

SR 3.6.3.5 Automatic reactor building isolation valves close on a reactor building isolation signal to prevent leakage of radioactive material from the reactor building following a DBA. This SR ensures that each automatic reactor building isolation valve will actuate to its isolation position on a reactor building isolation signal. This SR is not required for valves that are locked, sealed, or otherwise secured in position under administrative controls. The 18-month Frequency is based on the need to perform this Surveillance under the conditions that apply during a unit outage and on the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown that these components usually pass this Surveillance when performed at the 18-month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

REFERENCES

1. SAR, Chapter 5.

2. SAR, Chapter 14.

3. 10 CFR 50.36.

4. SAR, Table 5-1.

5. Generic Letter 91-08, Removal of Component Lists from Technical Specifications.

6. Condition Report CR-ANO-1-2010-2515.

7. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.6.3-9 Amendment No. 215 Rev. 28,39,

Reactor Building Pressure B 3.6.4 LCO Maintaining the reactor building pressure less than or equal to the LCO upper pressure limit ensures that, in the event of a DBA, the resultant peak reactor building accident pressure will remain below the reactor building design pressure.

Additionally, keeping the reactor building pressure within the limits maintains the initial conditions assumed for the ECCS analyses.

APPLICABILITY In MODES 1, 2, 3 and 4, the reactor building OPERABILITY for the limiting Design Basis Accidents is based on full power operation. Although reduced power in the lower MODES would not require the same level of accident mitigation performance, there are no accident analyses for reduced performance in the lower MODES. Since maintaining reactor building pressure within design basis limits is essential to ensure that the peak reactor building pressure from an accident does not exceed the reactor building design pressure, the LCO is applicable in MODES 1, 2, 3, and 4.

In MODES 5 and 6, the probability and consequences of events are reduced due to the pressure and temperature limitations of these MODES. Therefore, maintaining the reactor building pressure within the limits of the LCO is not required in MODES 5 and 6.

ACTIONS A.1 When the reactor building pressure is not within the limits of the LCO, the reactor building pressure must be restored to within these limits within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The Required Action is necessary to return operation to within the bounds of the reactor building analysis. The 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Completion Time is consistent with the ACTIONS of LCO 3.6.1, "Reactor Building," which requires that the reactor building be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

B.1 and B.2 If the Required Actions and associated Completion Times are not met, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

ANO-1 B 3.6.4-2 Amendment No. 215 Rev.

Reactor Building Pressure B 3.6.4 ACTIONS (continued)

B.1 and B.2 (continued)

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 5). The release of stored energy to the Reactor Building in the event of an accident in MODE 4 is substantially less than the energy release assumed due to an accident at power. Therefore, the challenge to the containment systems due to an increase in containment pressure is substantially reduced. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an event is also reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

SURVEILLANCE REQUIREMENTS SR 3.6.4.1 Verifying that the reactor building pressure is within limits ensures that operation remains within the limits assumed in the ECCS and the reactor building analyses. The 12-hour Frequency of this SR was developed after taking into consideration operating experience related to trending of the reactor building pressure variations during the applicable MODES. Furthermore, the 12-hour Frequency is considered adequate in view of other indications available in the control room to alert the operator to an abnormal reactor building pressure condition.

REFERENCES

1. SAR, Chapter 14.

2. SAR, Chapter 5.

3. 10 CFR 50, Appendix K.

4. 10 CFR 50.36.

5. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.6.4-3 Amendment No. 215 Rev.

SWS B 3.7.7 ACTIONS A.1 If one SWS loop is inoperable, action must be taken to restore OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . In this Condition, the remaining OPERABLE SWS loop is adequate to perform the heat removal function. However, the overall reliability is reduced because a single failure in the OPERABLE SWS loop could result in loss of SWS function. Required Action A.1 is modified by two Notes. The first Note indicates that the applicable Conditions and Required Actions of LCO 3.8.1, "AC Sources - Operating," should be entered if an inoperable SWS loop results in an inoperable DG. The second Note indicates that the applicable Conditions and Required Actions of LCO 3.4.6, "RCS Loops - MODE 4," should be entered if an inoperable SWS loop results in an inoperable DHR loop. The 72 hour8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Completion Time is based on the redundant capabilities afforded by the OPERABLE loop, and the low probability of a DBA occurring during this period.

B.1 and B.2 If the Required Action and associated Completion Time are not met, the unit must be placed in a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months .

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 6). The stored energy in the RCS that must be removed by the SWS in the event of an accident in MODE 4 is substantially less than the energy assumed due to an accident at power. Therefore, the heat loads on the SWS are substantially reduced. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an event is also reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

ANO-1 B 3.7.7-3 Amendment No. 215 Rev. 41,46,

SWS B 3.

7.7 REFERENCES

1. SAR, Section 9.3.

2. SAR, Section 6.2.

3. SAR, Section 6.3.

4. SAR, Section 9.5.

5. 10 CFR 50.36.

6. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.7.7-5 Amendment No. 215 Rev. 41,46,

CREVS B 3.7.9 ACTIONS (continued)

C.1 and C.2 In MODE 1, 2, 3, or 4 if the inoperable CREVS train or the CRE boundary cannot be restored to OPERABLE status within the required Completion Time, the unit must be placed in a MODE in whichthat minimizes accident overall plant risk is minimized. To achieve this status, the unit must be placed in at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 7). The control room is isolated and the CREVS is utilized in the event of an accident, such as a loss of coolant accident, to reduce or eliminate the ingress of radioactive material released during the event into the control room. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an accident is reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action C.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

D.1 and D.2 During movement of irradiated fuel assemblies, if the Required Action and associated Completion Time of Condition A are not met, the OPERABLE CREVS train must immediately be placed in the emergency recirculation mode. This action ensures that no failures preventing automatic actuation will occur, and that any active failure will be readily detected.

An alternative to Required Action D.1 is to immediately suspend movement of irradiated fuel assemblies since this is an activity that could release radioactivity that might require isolation of the CRE. This places the unit in a condition that minimizes the accident risk. This does not preclude movement of fuel to a safe position.

ANO-1 B 3.7.9-4 Amendment No. 215 Rev. 1,34,

CREVS B 3.7.9 SURVEILLANCE REQUIREMENTS (continued)

SR 3.7.9.4 This SR verifies the OPERABILITY of the CRE boundary by testing for unfiltered air inleakage past the CRE boundary and into the CRE. The details of the testing are specified in the Control Room Envelope Habitability Program.

The CRE is considered habitable when the radiological dose to CRE occupants calculated in the licensing basis analyses of DBA consequences is no more than 5 rem TEDE and the CRE occupants are protected from hazardous chemicals and smoke. This SR verifies that the unfiltered air inleakage into the CRE is no greater than the flow rate assumed in the licensing basis analyses of DBA consequences. When unfiltered air inleakage is greater than the assumed flow rate, Condition B must be entered. Required Action B.3 allows time to restore the CRE boundary to OPERABLE status provided mitigating actions can ensure that the CRE remains within the licensing basis habitability limits for the occupants following an accident.

Compensatory measures are discussed in Regulatory Guide 1.196, Section C.2.7.3, (Ref. 3) which endorses, with exceptions, NEI 99-03, Section 8.4 and Appendix F (Ref. 4). These compensatory measures may also be used as mitigating actions as required by Required Action B.2. Temporary analytical methods may also be used as compensatory measures to restore OPERABILITY (Ref. 5). Options for restoring the CRE boundary to OPERABLE status include changing the licensing basis DBA consequence analysis, repairing the CRE boundary, or a combination of these actions. Depending upon the nature of the problem and the corrective action, a full scope inleakage test may not be necessary to establish that the CRE boundary has been restored to OPERABLE status.

REFERENCES

1. SAR, Section 9.7.

2. SAR, Chapter 14.

3. Regulatory Guide 1.196.

4. NEI 99-03, "Control Room Habitability Assessment," June 2001.

5. Letter from Eric J. Leeds (NRC) to James W. Davis (NEI) dated January 30, 2004, "NEI Draft White Paper, Use of Generic Letter 91-18 Process and Alternative Source Terms in the Context of Control Room Habitability." (ADAMS Accession No. ML040300694)

6. Standard Review Plan, Section 6.4, "Control Room Habitability System," Rev. 2, July 1981.

7. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.7.9-6 Amendment No. 215 Rev. 3,4,34,

CREACS B 3.7.10 LCO Two independent and redundant trains of the CREACS are required to be OPERABLE to ensure that at least one is available, assuming a single failure disables the other train. Total system failure could result in the control room temperature exceeding limits in the event of an accident.

For a CREACS train to be considered OPERABLE, the individual components that are necessary to maintain control room temperature must be OPERABLE. These components include the cooling coils, condensing units, and associated temperature control instrumentation.

In addition, the CREACS must be capable of maintaining air circulation.

APPLICABILITY In MODES 1, 2, 3, and 4, and during movement of irradiated fuel assemblies, the CREACS must be OPERABLE to ensure that the control room temperature will not exceed habitability and equipment OPERABILITY requirements following isolation of the control room.

ACTIONS A.1 With one CREACS train inoperable, action must be taken to restore OPERABLE status within 30 days. In this Condition, the remaining OPERABLE CREACS train is adequate to maintain the control room temperature within limits. However, the overall reliability is reduced because a failure in the OPERABLE CREACS train could result in a loss of CREACS function. The 30-day Completion Time is based on the low probability of an event occurring requiring control room isolation, the consideration that the remaining train can provide the required capabilities, and alternate nonsafety related cooling means that are available.

B.1 and B.2 In MODE 1, 2, 3, or 4, if the Required Action and associated Completion Time of Condition A are not met, the unit must be placed in a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 3). The control room is isolated in the event of an accident, such as a loss of coolant accident, to reduce or eliminate the ingress of radioactive material released during the event into the control room. However, control room ambient temperatures may increase as a result of operating in this manner. The CREATCS mitigates this temperature rise. Because of the reduction in RCS pressure and temperature in MODE 4, the likelihood of an accident is also reduced. In addition, there are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

ANO-1 B 3.7.10-2 Amendment No. 215,218 Rev. 1,

CREACS B 3.7.10 ACTIONS (continued)

B.1 and B.2 (continued)

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

C.1 and C.2 During movement of irradiated fuel, if the Required Action and associated Completion Time of Condition A are not met, the OPERABLE CREACS train must be placed in operation immediately. This action ensures that any active failure will be readily detected.

An alternative to Required Action C.1 is to immediately suspend activities that could release radioactivity that might require the isolation of the control room. This places the unit in a condition that minimizes accident risk. This does not preclude the movement of fuel to a safe position.

D.1 During movement of irradiated fuel assemblies, with two CREACS trains inoperable, action must be taken to immediately suspend activities that could release radioactivity that might require isolation of the control room. This places the unit in a condition that minimizes accident risk. This does not preclude the movement of fuel to a safe position.

E.1 If both CREACS trains are inoperable in MODE 1, 2, 3, or 4, a loss of safety function has occurred, and LCO 3.0.3 must be entered immediately.

SURVEILLANCE REQUIREMENTS SR 3.7.10.1 and SR 3.7.10.2 These SRs, in conjunction with periodic preventative maintenance activities, provide verification that the CREACS will maintain the control room temperature within acceptable bounds.

SR 3.7.10.1 is performed on a staggered basis with one train being tested every two weeks.

The Frequencies (31 days and 18 months) are appropriate as periodic preventative maintenance activities are routinely performed and significant degradation of the CREACS is not expected over these time periods.

ANO-1 B 3.7.10-3 Amendment No. 215 Rev.

CREACS B 3.7.10 REFERENCES

1. SAR, Section 9.7.

2. 10 CFR 50.36.

3. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.7.10-4 Amendment No. 215 Rev.

AC Sources - Operating B 3.8.1 ACTIONS (continued)

E.1 With Train A and Train B DGs inoperable, there are no remaining standby AC sources. Thus, with an assumed loss of offsite electrical power, insufficient standby AC sources are available to power the minimum required ES functions. Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a very short time could be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid instability, which could result in a total loss of AC power).

Since any inadvertent generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.

With both DGs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

F.1 and F.2 If the inoperable AC electrical power sources cannot be restored to OPERABLE status within the required Completion Time, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging plant systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 9). There are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. In particular, in MODE 4 the turbine-driven emergency feedwater pump[s] are available following a loss of AC sources to provide RCS cooling via the steam generators utilizing natural circulation. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action F.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

G.1 Condition G corresponds to a level of degradation in which all redundancy in the AC electrical power supplies has been lost. At this severely degraded level, any further losses in the AC electrical power system will cause a loss of function. Therefore, no additional time is justified for continued operation. The unit is required by LCO 3.0.3 to commence a controlled shutdown.

ANO-1 B 3.8.1-11 Amendment No. 215 Rev. 6,22,

AC Sources - Operating B 3.

8.1 REFERENCES

1. SAR, Section 1.4, GDC 17.

2. SAR, Chapter 8.

3. Regulatory Guide 1.9, Selection, Design, and Qualification of Diesel Generator Units Used as Standby (Onsite) Electric Power Systems at Nuclear Power Plants, Rev. 3, July 1993.

4. SAR, Section 1.4, GDC 18.

5. SAR, Chapter 14.

6. 10 CFR 50.36.

7. Generic Letter 84-15, Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability, July 2, 1984 (0CNA078423).

8. Regulatory Guide 1.137, Rev. 1, October 1979.

9. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.8.1-17 Amendment No. 215 Rev. 10,22,

DC Sources - Operating B 3.8.4 ACTIONS A.1 Condition A represents one subsystem with a loss of ability to completely respond to an event, and a potential loss of ability to remain energized during normal operation. It is therefore imperative that the operator's attention focus on stabilizing the unit, minimizing the potential for complete loss of DC power to the affected subsystem. The 8-hour limit is consistent with the allowed time for an inoperable DC distribution subsystem.

If one of the required DC electrical power subsystems is inoperable (e.g., inoperable battery, inoperable battery chargers, or inoperable battery chargers and associated inoperable battery),

the remaining DC electrical power subsystem has the capacity to support a safe shutdown and to mitigate an accident condition. Since a subsequent worst-case single failure could, however, result in the loss of the minimum necessary electrical subsystems to mitigate a worse case accident, continued steady-state power operation should not exceed 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months . The 8-hour Completion Time reflects a reasonable time to assess unit status as a function of the inoperable DC electrical power subsystem and, if the DC electrical power subsystem is not restored to OPERABLE status, to prepare to effect an orderly and safe unit shutdown.

B.1 and B.2 If the inoperable DC electrical power subsystem cannot be restored to OPERABLE status within the required Completion Time, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 11). There are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. For example, in MODE 4 the turbine driven emergency feedwater pump[s] are available to provide RCS cooling via the steam generators utilizing natural circulation. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

ANO-1 B 3.8.4-4 Amendment No. 215 Rev.

DC Sources - Operating B 3.

8.4 REFERENCES

1. SAR, Section 1.4, GDC 17.

2. Regulatory Guide 1.6, Independence Between Redundant Standby (Onsite) Power Sources and Between Their Distribution Systems, March, 1971.

3. IEEE-308-1971, Criteria for Class 1E Power Systems for Nuclear Power Generating Stations.

4. SAR, Chapter 8.

5. IEEE-485-1993, June 1983.

6. SAR, Chapter 14.

7. 10 CFR 50.36.

8. IEEE-450-1995, Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-Acid Batteries for Stationary Applications.

9. Regulatory Guide 1.32, Criteria for Power Systems for Nuclear Power Plants, March 2004.

10. Regulatory Guide 1.129, Maintenance, Testing, and Replacement of Vented Lead-Acid Storage Batteries for Nuclear Power Plants, February 2007.

11. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.8.4-7 Amendment No. 215 Rev.

Inverters - Operating B 3.8.7 ACTIONS (continued)

Required Action A.1 allows 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to fix the inoperable inverter and return it to service. The 24-hour limit takes into consideration the time required to repair an inverter, the availability of a swing inverter, and the additional risk to which the unit is exposed because of the inverter inoperability. This must be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems such a shutdown might entail. When the 120 VAC bus is powered from its alternate AC source, it is relying upon interruptible AC electrical power sources (offsite and onsite). The uninterruptible inverter source to the 120 VAC buses is the preferred source for powering instrumentation trip setpoint devices.

B.1 and B.2 If the Required Actions and associated Completion Time are not met or if any two inverters required by LCO 3.8.7.a and LCO 3.8.7.b are inoperable, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging plant systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 4). There are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. For example, in MODE 4 the turbine driven emergency feedwater pump is available to provide RCS cooling via the steam generators utilizing natural circulation. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action B.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

C.1 and C.2 If any two inverters required by LCO 3.8.7.a and LCO 3.8.7.b are inoperable, the unit must be brought to a MODE in which the LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to MODE 5 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging plant systems.

ANO-1 B 3.8.7-3 Amendment No. 215 Rev. 13,16,

Inverters - Operating B 3.8.7 SURVEILLANCE REQUIREMENTS SR 3.8.7.1 This Surveillance verifies that the inverters are functioning properly with all required circuit breakers closed and 120 VAC buses energized from the inverter. The verification of proper voltage and frequency output ensures that the required power is readily available for the instrumentation connected to the 120 VAC buses. The 7-day Frequency takes into account the redundant capability of the inverters and other indications available in the control room that alert the operator to inverter malfunctions.

REFERENCES

1. SAR, Chapter 8.

2. SAR, Chapter 14.

3. 10 CFR 50.36.

4. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.8.7-4 Amendment No. 215 Rev. 13,16,

Distribution Systems - Operating B 3.8.9 ACTIONS (continued)

C.1 (continued)

The second Completion Time for Required Action C.1 establishes a limit on the maximum time allowed for any combination of required distribution subsystems to be inoperable during any single contiguous occurrence of failing to meet the LCO. If Condition C is entered while, for instance, an AC bus is inoperable and subsequently returned OPERABLE, the LCO may already have been not met for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months . This could lead to a total of 16 hours1.851852e-4 days 0.00444 hours 2.645503e-5 weeks 6.088e-6 months , since initial failure of the LCO, to restore the DC distribution system. At this time, an AC train could again become inoperable and DC distribution restored OPERABLE. This could continue indefinitely.

This Completion Time allows for an exception to the normal "time zero" for beginning the allowed outage time "clock." This will result in establishing the "time zero" at the time the LCO was initially not met, instead of the time Condition C was entered. The 16-hour Completion Time is an acceptable limitation on this potential to fail to meet the LCO indefinitely.

D.1 and D.2 If the inoperable distribution subsystem cannot be restored to OPERABLE status within the required Completion Time, the unit must be brought to a MODE in which overall plant risk is minimizedthe LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to MODE 45 within 1236 hours0.0143 days 0.343 hours 0.00204 weeks 4.70298e-4 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging plant systems.

Remaining within the Applicability of the LCO is acceptable because the plant risk in MODE 4 is similar to or lower than MODE 5 (Ref. 3). There are more accident mitigation systems available and there is more redundancy and diversity in core heat removal mechanisms in MODE 4 than in MODE 5. For example, in MODE 4 the turbine driven emergency feedwater pump are available to provide RCS cooling via the steam generators utilizing natural circulation. However, voluntary entry into MODE 5 may be made as it is also an acceptable low-risk state.

Required Action D.2 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 4. This Note prohibits the use of LCO 3.0.4.a to enter MODE 4 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 4, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

E.1 Condition E corresponds to a level of degradation in the electrical distribution system that causes a required safety function to be lost. Therefore, no additional time is justified for continued operation. LCO 3.0.3 must be entered immediately to commence a controlled shutdown.

ANO-1 B 3.8.9-6 Amendment No. 215 Rev. 1,16,

Distribution Systems - Operating B 3.8.9 SURVEILLANCE REQUIREMENTS SR 3.8.9.1 This Surveillance verifies that the required AC, DC, and 120 VAC bus electrical power distribution systems are functioning properly, with the correct circuit breaker alignment. The correct breaker alignment ensures the appropriate separation and independence of the electrical divisions is maintained. The 7-day Frequency takes into account the redundant capability of the AC, DC, and 120 VAC bus electrical power distribution subsystems, and other indications available in the control room that alert the operator to subsystem malfunctions.

REFERENCES

1. SAR, Chapter 14.

2. 10 CFR 50.36.

3. BAW-2441-A, Revision 2, Risk Informed Justification for LCO End-State Changes, September 2006.

ANO-1 B 3.8.9-7 Amendment No. 215 Rev. 1,16,

Attachment 4 to 1CAN031306 Revised (clean) Technical Specification Pages

ESAS Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Engineered Safeguards Actuation System (ESAS) Instrumentation LCO 3.3.5 Three ESAS analog instrument channels for each Parameter in Table 3.3.5-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

NOTE------------------------------------------------------------

Separate Condition entry is allowed for each Parameter.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Parameters A.1 Place analog instrument 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months with one analog instrument channel in trip.

channel inoperable.

B. One or more Parameters B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months with more than one analog instrument channel AND inoperable.

B.2 --------------NOTE--------------

OR Only required for RCS Pressure - Low setpoint.

Required Action and ------------------------------------

associated Completion Time not met. Reduce RCS pressure 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months

< 1750 psig.

AND B.3 --------------NOTES------------

1. Only required for Reactor Building Pressure High setpoint and High High setpoint.

2. LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ANO-1 3.3.5-1 Amendment No. 215,

ESAS Manual Initiation 3.3.6 3.3 INSTRUMENTATION 3.3.6 Engineered Safeguards Actuation System (ESAS) Manual Initiation LCO 3.3.6 Two manual initiation channels of each one of the ESAS Functions below shall be OPERABLE:

a. High Pressure Injection (channels 1 and 2);

b. Low Pressure Injection (channels 3 and 4);

c. Reactor Building (RB) Cooling (channels 5 and 6);

d. RB Spray (channels 7 and 8); and

e. Spray Additive (channels 9 and 10).

APPLICABILITY: MODES 1 and 2, MODES 3 and 4 when associated engineered safeguards equipment is required to be OPERABLE.

ACTIONS

NOTE-----------------------------------------------------------

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more ESAS A.1 Restore channel to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Functions with one channel OPERABLE status.

inoperable.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND B.2 --------------NOTE-------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ANO-1 3.3.6-1 Amendment No. 215,

RCS Loops - MODE 4 3.4.6 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.6 RCS Loops - MODE 4 LCO 3.4.6 Two loops consisting of any combination of RCS loops and decay heat removal (DHR) loops shall be OPERABLE and one OPERABLE loop shall be in operation.

NOTE---------------------------------------------

All reactor coolant pumps (RCPs) and DHR pumps may be removed from operation for 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months provided:

a. No operations are permitted that would cause introduction into the RCS, coolant with boron concentration less than required to meet the SDM of LCO 3.1.1; and

b. Core outlet temperature is maintained at less than or equal to a temperature which is 10°F below saturation temperature.

APPLICABILITY: MODE 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required loop A.1 --------------NOTE----------------

inoperable. LCO 3.0.4.a is not applicable when entering Mode 4.

Initiate action to restore a Immediately second loop to OPERABLE status.

ANO-1 3.4.6-1 Amendment No. 215,

RCS Leakage Detection Instrumentation 3.4.15 CONDITION REQUIRED ACTION COMPLETION TIME B. Required reactor building B.1.1 Analyze grab samples of the Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months atmosphere radioactivity reactor building atmosphere.

monitor inoperable.

OR B.1.2 ----------------NOTE-------------

Not required until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishment of steady state operation at or near operating pressure.

Perform SR 3.4.13.1. Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months AND B.2 Restore required reactor 30 days building atmosphere radioactivity monitor to OPERABLE status.

NOTE---------------- C.1 Analyze grab samples of the Once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Only applicable when the reactor building atmosphere.

reactor building atmosphere gaseous radiation monitor is AND the only OPERABLE monitor.

C.2 Restore reactor building 7 days sump monitor to OPERABLE C. Reactor Building sump status.

monitor inoperable.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 --------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months E. Both required monitors E.1 Enter LCO 3.0.3. Immediately inoperable.

ANO-1 3.4.15-2 Amendment No. 215,246,

BWST 3.5.4 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) 3.5.4 Borated Water Storage Tank (BWST)

LCO 3.5.4 The BWST shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. BWST boron concentration A.1 Restore BWST to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months not within limits. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A not AND met.

B.2 --------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months C. BWST water temperature C.1 Restore BWST to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months not within limits. OPERABLE status.

D. BWST inoperable for D.1 Restore BWST to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months reasons other than OPERABLE status.

Condition A or C.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition C or D AND not met.

E.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months ANO-1 3.5.4-1 Amendment No. 215,

BWST 3.5.4 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.5.4.1 -------------------------------NOTE-------------------------------

Only required to be performed when ambient air temperature is < 40°F or > 110°F.

Verify BWST borated water temperature is 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 40°F and 110°F.

SR 3.5.4.2 Verify BWST borated water level is 7 days 38.4 feet and 42 feet.

SR 3.5.4.3 Verify BWST boron concentration is 7 days 2270 ppm and 2670 ppm.

ANO-1 3.5.4-2 Amendment No. 215,

Reactor Building Air Locks 3.6.2 CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.2 Lock an OPERABLE door 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months closed in the affected air lock.

AND B.3 ---------------NOTE--------------

Air lock doors in high radiation areas may be verified locked closed by administrative means.

Verify an OPERABLE door is Once per 31 days locked closed in the affected air lock.

C. One or more reactor C.1 Initiate action to evaluate Immediately building air locks overall reactor building inoperable for reasons leakage rate per LCO 3.6.1.

other than Condition A or B. AND C.2 Verify a door is closed in the 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months affected air lock.

AND C.3 Restore air lock to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ANO-1 3.6.2-3 Amendment No. 215,

Reactor Building Isolation Valves 3.6.3 CONDITION REQUIRED ACTION COMPLETION TIME C. ------------NOTE---------------- C.1 Isolate the affected 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Only applicable to penetration flow path by use penetration flow paths with of at least one closed and only one reactor building de-activated automatic isolation valve and a valve, closed manual valve, closed system. or blind flange.

AND One or more penetration flow paths with one reactor C.2 --------------NOTES-------------

building isolation valve 1. Isolation devices in high inoperable. radiation areas may be verified by use of administrative means.

2. Isolation devices that are locked, sealed, or otherwise secured may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path is isolated.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ANO-1 3.6.3-3 Amendment No. 215,

Reactor Building Isolation Valves 3.6.3 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.3.1 Verify each reactor building purge isolation valve is 31 days closed.

SR 3.6.3.2 -------------------------------NOTE-----------------------------

Valves and blind flanges in high radiation areas may be verified by use of administrative means.

31 days Verify each reactor building isolation manual valve and blind flange that is located outside the reactor building and not locked, sealed, or otherwise secured, and is required to be closed during accident conditions is closed, except for reactor building isolation valves that are open under administrative controls.

SR 3.6.3.3 -------------------------------NOTE-----------------------------

Valves and blind flanges in high radiation areas may be verified by use of administrative means.

Prior to entering Verify each reactor building isolation manual valve MODE 4 from and blind flange that is located inside the reactor MODE 5 if not building and not locked, sealed, or otherwise performed within secured, and required to be closed during accident the previous conditions is closed, except for reactor building 92 days isolation valves that are open under administrative controls.

SR 3.6.3.4 Verify the isolation time of each automatic power In accordance with operated reactor building isolation valve is within the Inservice limits. Testing Program SR 3.6.3.5 Verify each automatic reactor building isolation 18 months valve that is not locked, sealed, or otherwise secured in position, actuates to the isolation position on an actual or simulated actuation signal.

ANO-1 3.6.3-4 Amendment No. 215,

SWS 3.7.7 3.7 PLANT SYSTEMS 3.7.7 Service Water System (SWS)

LCO 3.7.7 Two SWS loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SWS loop A.1 --------------NOTES-------------

inoperable. 1. Enter applicable Conditions and Required Actions of LCO 3.8.1, "AC Sources

- Operating," for diesel generator made inoperable by SWS.

2. Enter Applicable Conditions and Required Actions of LCO 3.4.6, "RCS Loops

- MODE 4," for decay heat removal made inoperable by SWS.

Restore SWS loop to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ANO-1 3.7.7-1 Amendment No. 215,

CREVS 3.7.9 3.7 PLANT SYSTEMS 3.7.9 Control Room Emergency Ventilation System (CREVS)

LCO 3.7.9 Two CREVS trains shall be OPERABLE.

NOTES-----------------------------------------

1. The control room envelope (CRE) boundary may be opened intermittently under administrative controls.

2. One CREVS train shall be capable of automatic actuation.

APPLICABILITY: MODES 1, 2, 3, 4, During movement of irradiated fuel assemblies.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CREVS train A.1 Restore CREVS train to 7 days inoperable for reasons OPERABLE status.

other than Condition B.

B. One or more CREVS B.1 Initiate action to implement Immediately trains inoperable due to mitigating actions.

inoperable CRE boundary in MODES 1, 2, 3, or 4. AND B.2 Verify mitigating actions 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ensure CRE occupant exposures to radiological, chemical, and smoke hazards will not exceed limits.

AND B.3 Restore control room 90 days boundary to OPERABLE status.

ANO-1 3.7.9-1 Amendment No. 215,239,

CREVS 3.7.9 CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A or B AND not met in MODE 1, 2, 3, or 4. C.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months D. Required Action and D.1 Place OPERABLE CREVS Immediately associated Completion train in emergency Time of Condition A not recirculation mode.

met during movement of irradiated fuel assemblies. OR D.2 Suspend movement of Immediately irradiated fuel assemblies.

E. Two CREVS trains E.1 Suspend movement of Immediately inoperable during irradiated fuel assemblies.

movement of irradiated fuel assemblies.

OR One or more CREVS trains inoperable due to an inoperable CRE boundary during movement of irradiated fuel assemblies.

F. Two CREVS trains F.1 Enter LCO 3.0.3. Immediately inoperable in MODE 1, 2, 3, or 4 for reasons other than Condition B.

ANO-1 3.7.9-2 Amendment No. 215,239,

CREVS 3.7.9 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.9.1 Operate each CREVS train for 15 minutes. 31 days SR 3.7.9.2 Perform required CREVS filter testing in accordance In accordance with the Ventilation Filter Testing Program (VFTP). with the VFTP SR 3.7.9.3 Verify the CREVS automatically isolates the Control 18 months Room and switches into a recirculation mode of operation on an actual or simulated actuation signal.

SR 3.7.9.4 Perform required CRE unfiltered air inleakage testing In accordance in accordance with the Control Room Envelope with the Control Habitability Program. Room Envelope Habitability Program.

ANO-1 3.7.9-3 Amendment No. 215,221,239,

CREACS 3.7.10 3.7 PLANT SYSTEMS 3.7.10 Control Room Emergency Air Conditioning System (CREACS)

LCO 3.7.10 Two CREACS trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4, During movement of irradiated fuel assemblies.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CREACS train A.1 Restore CREACS train to 30 days inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A not AND met in MODE 1, 2, 3, or 4.

B.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months C. Required Action and C.1 Place OPERABLE CREACS Immediately associated Completion train in operation.

Time of Condition A not met during movement of OR irradiated fuel assemblies.

C.2 Suspend movement of Immediately irradiated fuel assemblies.

D. Two CREACS trains D.1 Suspend movement of Immediately inoperable during irradiated fuel assemblies.

movement of irradiated fuel assemblies.

E. Two CREACS trains E.1 Enter LCO 3.0.3. Immediately inoperable during MODE 1, 2, 3, or 4.

ANO-1 3.7.10-1 Amendment No. 215,

AC Sources - Operating 3.8.1 CONDITION REQUIRED ACTION COMPLETION TIME F. Required Action and F.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Associated Completion Time of Condition A, B, C, AND D, or E not met.

F.2 ---------------NOTE---------------

LCO 3.0.4.a is not applicable when entering Mode 4.

Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months G. Three or more required G.1 Enter LCO 3.0.3. Immediately AC sources inoperable.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.1 Verify correct breaker alignment and indicated power 7 days availability for each required offsite circuit.

SR 3.8.1.2 ------------------------------NOTE--------------------------------

All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.

Verify each DG starts from standby conditions and, 31 days in 15 seconds achieves ready-to-load conditions.

ANO-1 3.8.1-4 Amendment No. 215,