IR 05000219/2003006

From kanterella
Jump to navigation Jump to search
IR 05000219-03-006, on 05/19/2003 - 05/23/2003 and 06/02/2003 - 06/06/2003; Oyster Creek Generating Station; Engineering Team Inspection
ML031970789
Person / Time
Site: Oyster Creek
Issue date: 07/16/2003
From: Doerflein L
Division of Reactor Safety I
To: Skolds J
AmerGen Energy Co
References
-RFPFR IR-03-006
Download: ML031970789 (16)


Text

uly 16, 2003

SUBJECT:

OYSTER CREEK GENERATING STATION- NRC INSPECTION REPORT 50-219/03-006

Dear Mr. Skolds:

On June 6, 2003, the U. S. Nuclear Regulatory Commission (NRC) completed an engineering team inspection at your Oyster Creek reactor facility. The enclosed report presents the results of that inspection. The results of this inspection were discussed on June 6, 2003, with Mr. Ernie Harkness and other members of your staff.

This inspection examined activities conducted under your license as they relate to safety and compliance with the Commissions rules and regulations and with the conditions of your operating license. The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.

Based on the results of this inspection no findings of significance were identified.

In accordance with 10 CFR 2.790 of the NRC's "Rules of Practice," a copy of this letter and its enclosure will be available electronically for public inspection in the NRC Public Document Room or from the Publicly Available Records (PARS) component of NRCs document system (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room). We appreciate your cooperation.

Sincerely,

/RA/ by Joseph G. Schoppy for Lawrence T. Doerflein, Chief Systems Evaluation Branch Division of Reactor Safety Docket No. 50-219 License No. DPR-16 Enclosure: Inspection Report 50-219/03-006 w/Attachment: Supplemental Information

Mr. John

SUMMARY OF FINDINGS

IR 05000219/2003-006; 5/19/2003 - 5/23/2003 and 6/2/2003 - 6/6/2003; Oyster Creek

Generating Station; engineering team inspection.

The inspection was conducted by a team of region based inspectors during the period May 19, 2003, to June 6, 2003. No findings of significance were identified. The NRCs program for overseeing the safe operation of commercial nuclear power reactors is described in NUREG-1649, Reactor Oversight Process, Revision 3, dated July 2000.

NRC-Identified and Self-Revealing Findings

No findings of significance were identified

Licensee-Identified Violations

None.

ii

REPORT DETAILS

REACTOR SAFETY

Cornerstones: Initiating Events, Mitigating Systems, and Barrier Integrity

1R21 Safety System Design and Performance Capability (IP 71111.21)

a. Inspection Scope

The team reviewed the Oyster Creek design and performance capability of the isolation condenser (IC) system and selected interfacing and supporting systems. Using risk insights derived from the NRC Risk Informed Inspection Notebook for Oyster Creek Generation, the inspectors focused on the IC system capability to remove decay heat from the reactor coolant system in response to a postulated reactor trip and loss of the normal power conversion system. The likelihood of the initiating event of a plant transient is one in ten years. The team focused on components and procedures that would mitigate the consequences of a transient without the plant power conversion system. Systems interfacing with the IC during this accident sequence are: the AC motor-operated isolation valves, the DC motor-operated isolation valves, the shell-side vent lines, the control rod drive (CRD) pumps, IC make-up, and the diesel fire pumps.

The team also reviewed the core spray system in the alternate path of IC make-up alignment.

The inspectors reviewed the Oyster Creek Safety Analysis Report, technical specifications, and docketed correspondence in order to understand the IC licensing basis and design function. The inspectors confirmed the IC safety function is to remove decay heat and depressurize the reactor coolant system in the event the main condenser heat sink is unavailable, because the main condenser is part of the normal power conversion system. System operating procedures, including emergency operating procedures and surveillance procedures, were reviewed to ensure they supported the IC system licensing, design bases, and technical specification requirements. The review included applicable surveillance test results and focused on the ability of the IC system to remove core decay heat, depressurize the reactor, and provide inventory control.

The inspectors confirmed the IC system consists of two redundant heat exchangers, or ICs. The shell side of each IC is filled with water to a level that covers the tube bundles and provides a minimum inventory for boil-off. The shell side is vented to the atmosphere. The IC tubes are connected to the reactor vessel steam dome. During normal power operation, the tube inlet headers are steam filled, but the submerged tube bundles themselves are filled with reactor coolant water, called condensate, at normal pressure and temperature. The tube bundle outlet headers return to the reactor vessel via normally closed power operated condensate return valves, such that the IC tube bundles form a closed loop with the reactor coolant system. The system automatically initiates on a high reactor coolant system pressure or low reactor vessel level signal by opening the normally closed condensate return valves. Reactor coolant flows through the IC tube bundles by natural circulation. The ICs cool the reactor coolant (and remove decay heat) by boiling the shell side water inventory and venting the steam to the atmosphere. Operators can also manually initiate flow through the IC.

The inspectors reviewed design drawings to confirm the IC system configuration was consistent with the design assumptions for natural circulation. Plant walkdowns were completed to verify the IC configuration was in conformance with design documents. IC shell level indication was reviewed to ensure the configuration was consistent with calibration assumptions. The inspectors also walked down IC system equipment to ensure there were not significant indications of plant equipment problems, and to verify that minor equipment problems were being appropriately addressed in the Oyster Creek maintenance and corrective action program.

The inspectors reviewed IC shell side inventory thermal calculations to verify they correctly calculated the shell side water inventory necessary to provide for the decay heat levels assumed in the design basis. Calculation assumptions regarding IC shell water volume, temperature, level indication and decay heat load were reviewed and compared to monitored plant parameters to ensure the assumptions were technically justified. The inspectors compared the calculation conclusions to plant procedural guidance and acceptance criteria for IC level to verify the ICs capacity to absorb heat was being maintained as assumed in the calculations. Furthermore, the inspectors reviewed problems, identified by Oyster Creek personnel and entered into their corrective action program, regarding IC calculation and procedure issues. These issues were reviewed to determine the nature and extent of the problems and verify that the ICs remained capable of performing their safety function during design basis accident conditions.

The inspectors determined that portions of the condensate transfer, fire protection water, and core spray systems were credited in the design basis with refilling the IC shells to replenish water boiled off in removing decay heat and maintain the IC tubes covered. The nonsafety-related condensate transfer system was the preferred make-up path to the IC shells, providing flow from the condensate storage tank (CST). The inspectors reviewed plant historical data and pump and valve test data that demonstrated the condensate transfer system capability to provide adequate make-up.

Since the CST provides water to multiple systems, including the CRD make-up to the reactor coolant system after a reactor trip, calculations tabulating system users were reviewed to verify the CST volume provides adequate make-up to multiple sources as assumed in the design basis.

Hydraulic calculations were reviewed for the fire protection system make-up source.

The inspectors determined that the diesel driven fire pumps were credited as a back-up make-up source, providing fire water to the IC shells via either of two diesel driven fire pumps. The inspectors reviewed the hydraulic calculations to verify they were technically adequate, and that the fire protection system design matched the assumed configuration. Periodic valve and pump test procedures were reviewed to ensure they confirmed manual and automatic equipment functions could be completed as assumed in the calculations.

The inspectors further determined that the Oyster Creek licensing basis credited make-up to the IC from the torus via a core spray pump during certain natural external events, because the torus provides a water source protected from tornado and flooding effects.

The inspectors reviewed hydraulic and pipe stress calculations to verify they were technically correct, and that the core spray system design matched the plant configuration. The inspectors also reviewed the implementing plant operating procedures to ensure they were consistent with the licensing basis. Specifically, procedural controls were reviewed that prevented a core spray topping pump from automatically starting as assumed in the pipe stress calculations.

The inspectors determined that the installed IC make-up sources to each IC flow through an air operated valve that operators control remotely. The valve actuators were provided with air accumulators so the valves remain available on loss of normal control air. The inspectors reviewed calculations to verify the accumulators were sized to provide adequate air to operate the make-up valves during a loss of control air.

Additionally, the inspectors verified that the valves were accessible in the plant and could be manually operated by handwheel if required.

The team reviewed the ICs automatic initiation logic (elementary diagrams) to verify that the initiation signal was generated, based on a one-out-of-two twice logic using four sets of instruments, by a persistent (>1.5 seconds) reactor pressure above 1060 psig or reactor pressure vessel (RPV) water level below the low-low set point of 86 inches above the top-of-fuel. The team also reviewed the control circuitry for the normally-closed IC outlet isolation valves (DC motor operated) to verify that the valves could be opened or closed by the automatic initiation signal or by manual actions. In addition, the team reviewed the pipe rupture protection logic to verify that when a high flow of greater than 300% normal flow was detected for more than 27 seconds, as sensed by two inlet (steam) and two outlet (condensate) flow switches for each condenser, all isolation valves would be closed. The team also reviewed the instrument and time delay relay calibration records to verify that the required set point accuracy was maintained.

The inspectors reviewed a temporary modification implemented in May 2002 to replace a section of a degraded multi-conductor underground control cable for the diesel fire pumps. The team reviewed the diesel fire pump wiring diagrams to verify that a failure of this control cable could only affect the remote start capability and status indications in the control room for Fire Pump 1-1 and that the other diesel fire pump would not be affected.

The inspectors further reviewed hydraulic calculations applicable to the CRD system make-up function to the reactor coolant system. The team verified the CRD pump design had adequate margin to provide the required flow through the system, and that sufficient minimum pump flow protection was provided. Test results were also reviewed that indicated valves in the flow path can be manually operated at the make-up flows consistent with the design basis.

The design and testing of the automatic ICs start circuitry was reviewed to verify the tests were being completed in accordance with technical specification requirements, and that sensing instruments that provided initiation signals were calibrated within the accuracy assumed in the design basis. The inspectors further reviewed the high energy line break protection circuitry that automatically isolates the ICs on indications of a pipe rupture. The inspectors review focused on the setpoint time delays to verify that they ensured the system would isolate as required, but would not cause spurious isolations during normal IC system initiation.

The inspectors reviewed a sample of permanent modifications, repairs, and replacements to the selected systems to assure these activities maintained the design basis of the systems. In addition, the inspectors reviewed preventive and corrective maintenance activities were performed as scheduled using controlled procedures. The inspectors evaluated a sample of surveillance and post maintenance test results to verify system capability was verified and design basis maintained. The inspectors reviewed selected reports of nondestructive examination of system components, where degradation would result in an increase in risk to core damage, to verify compliance with the American Society for Mechanical Engineers Boiler and Pressure Vessel Code, Section XI.

b. Findings

No findings of significance were identified.

4OA2 Identification and Resolution of Problems

a. Inspection Scope

The inspectors reviewed a sample of corrective action reports associated with the IC system, condensate transfer, CRD and fire protection system, as identified in the Documents Reviewed section, to verify that AmerGen was identifying issues at an appropriate threshold, entering them in the corrective action program, and taking appropriate corrective actions. Also, the inspectors evaluated corrective actions to confirm that repairs and/or modifications to components had no adverse impact on the system design basis.

b. Findings

No findings of significance were identified.

4OA6 Meetings, including Exit

On June 6, 2003, the inspection team presented the inspection results to Mr. E.

Harkness and other members of AmerGen management. AmerGen management acknowledged the findings presented. The inspectors confirmed that proprietary information was not provided or examined during the inspection.

SUPPLEMENTAL INFORMATION

KEY POINTS OF CONTACT

Licensee Personnel

E. Harkness Site Vice President

M. Newcomer Acting Manager Engineering

T. Quintenz Mgr Mechanical Structural Design

P. Bloss Mgr Electrical, I & C, NSSS

T. Powel Mgr Balance of Plant

D. Garnes Mgr. Electrical, I & C Design

New Jersey State Representative

R. Pinney NJ Department of Environmental Protection

NRC Personnel

S. Dennis Acting Senior Resident Inspector

R. Summers Senior Resident Inspector

LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED

Opened and Closed

None

Closed

None LIST OF ACRONYMS AC Alternating Current AmerGen AmerGen Energy Company, LLC CRD Control Rod Drive CST Condensate Storage Tank DC Direct Current IC Isolation Condenser NRC Nuclear Regulatory Commission RPV Reactor Pressure Vessel

LIST OF DOCUMENTS REVIEWED