ML19084A029

Draft of TSTF-554, Revise Reactor Coolant Leakage Requirements.

ML19084A029
Person / Time
Site:	Technical Specifications Task Force
Issue date:	03/21/2019
From:	Office of Nuclear Reactor Regulation
To:
Honcharik M
References
TSTF-554, Rev 0, WOG-217, Rev 0
Download: ML19084A029 (64)

Text

DRAFT WOG-217, Rev. 0 TSTF-554, Rev. 0 Technical Specifications Task Force Improved Standard Technical Specifications Change Traveler Revise Reactor Coolant Leakage Requirements NUREGs Affected: 1430 1431 1432 1433 1434 2194 Classification: 1) Technical Change Recommended for CLIIP?: Yes Correction or Improvement: Improvement NRC Fee Status: Exemption Requested Changes Marked on ISTS Rev 4.0 See attached justification.

Revision History OG Revision 0 Revision Status: Active Revision Proposed by: TSTF Revision

Description:

Original Issue Owners Group Review Information Date Originated by OG: 17-Jan-19 Owners Group Comments Originally drafted in 2016 but placed on hold. Restarted in 2018.

Owners Group Resolution: Approved Date: 22-Feb-19 TSTF Review Information TSTF Received Date: 25-Feb-19 Date Distributed for Review 25-Feb-19 TSTF Comments:

(No Comments)

TSTF Resolution: Approved Date: 21-Mar-19 Affected Technical Specifications 1.1 Definitions Change

Description:

LEAKAGE definition LCO 3.4.13 Bases RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Action 3.4.13.A RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

New Action Action 3.4.13.A RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

Renamed B 21-Mar-19 Copyright(C) 2019, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT WOG-217, Rev. 0 TSTF-554, Rev. 0 Action 3.4.13.A Bases RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

New Action Action 3.4.13.A Bases RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

Renamed B Action 3.4.13.B RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

Renamed C Action 3.4.13.B Bases RCS Operational LEAKAGE NUREG(s)- 1430 1431 1432 Only Change

Description:

Renamed C LCO 3.4.4 Bases RCS Operational LEAKAGE NUREG(s)- 1433 Only Action 3.4.4.A RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed B Action 3.4.4.A RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

New Action Action 3.4.4.A Bases RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed B Action 3.4.4.A Bases RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

New Action Action 3.4.4.B RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed C Action 3.4.4.B Bases RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed C Action 3.4.4.C RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed D Action 3.4.4.C Bases RCS Operational LEAKAGE NUREG(s)- 1433 Only Change

Description:

Renamed D LCO 3.4.5 Bases RCS Operational LEAKAGE NUREG(s)- 1434 Only Action 3.4.5.A RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

New Action Action 3.4.5.A RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed B Action 3.4.5.A Bases RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

New Action Action 3.4.5.A Bases RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed B Action 3.4.5.B RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed C 21-Mar-19 Copyright(C) 2019, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT WOG-217, Rev. 0 TSTF-554, Rev. 0 Action 3.4.5.B Bases RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed C Action 3.4.5.C RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed D Action 3.4.5.C Bases RCS Operational LEAKAGE NUREG(s)- 1434 Only Change

Description:

Renamed D LCO 3.4.7 Bases RCS Operational LEAKAGE NUREG(s)- 2194 Only Action 3.4.7.A RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

Renamed B Action 3.4.7.A RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

New Action Action 3.4.7.A Bases RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

Renamed B Action 3.4.7.A Bases RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

New Action Action 3.4.7.B RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

Renamed C Action 3.4.7.B Bases RCS Operational LEAKAGE NUREG(s)- 2194 Only Change

Description:

Renamed C 21-Mar-19 Copyright(C) 2019, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT TSTF-554, Rev. 0

1.

SUMMARY

DESCRIPTION The Technical Specifications (TS) definition of "LEAKAGE" and the Reactor Coolant System (RCS) Operational Leakage TS are revised. The revision clarifies the requirements when pressure boundary leakage is detected and adds a Required Action when pressure boundary leakage is identified. The proposed change is applicable to the following Standard Technical Specifications (STS):

• NUREG-1430, "Standard Technical Specifications, Babcock & Wilcox Plants," Section 1.1, "Definitions", and TS 3.4.13, "RCS Operational LEAKAGE";

• NUREG-1431, "Standard Technical Specifications, Westinghouse Plants," Section 1.1, "Definitions", and TS 3.4.13, "RCS Operational LEAKAGE";

• NUREG-1432, "Standard Technical Specifications, Combustion Engineering Plants,"

Section 1.1, "Definitions", and TS 3.4.13, "RCS Operational LEAKAGE";

• NUREG-1433, "Standard Technical Specifications, General Electric BWR/4 Plants,"

Section 1.1, "Definitions", and TS 3.4.4, "RCS Operational LEAKAGE";

• NUREG-1434, "Standard Technical Specifications, General Electric BWR/6 Plants,"

Section 1.1, "Definitions", and TS 3.4.5, "RCS Operational LEAKAGE";

• NUREG-2194, "Standard Technical Specifications, Westinghouse Advanced Passive 1000 (AP1000) Plants," Section 1.1, "Definitions", and TS 3.4.7, "RCS Operational LEAKAGE".

2. DETAILED DESCRIPTION 2.1 Reactor Coolant System Design and Operation Components that contain or transport the coolant to or from the reactor core make up the RCS.

Component joints are made by welding, bolting, rolling, or pressure loading, and valves isolate connecting systems from the RCS. During plant life, the joint and valve interfaces can produce varying amounts of reactor coolant leakage by design, or through normal operational wear or mechanical deterioration.

Title 10 of the Code of Federal Regulations (10 CFR) Part 50, Appendix A, General Design Criteria (GDC) 14 requires that the reactor coolant pressure boundary be designed, fabricated, erected, and tested to ensure an extremely low probability of abnormal leakage, rapidly propagating failure, and gross rupture. GDC 30 requires means for detecting and, to the extent practical, identifying the source of reactor coolant leakage. The TS limit RCS operational leakage to amounts that do not compromise safety and ensure appropriate action is taken before the integrity of the RCS is impaired. Further, 10 CFR 50.55a, "Codes and Standards," requires the performance of inservice inspection and testing of nuclear power plant components to identify defects. These requirements minimize the probability of rapidly propagating failure attributable to material degradation and gross rupture of the RCS pressure boundary.

The safety significance of RCS leakage varies depending on its source, rate, and duration.

Therefore, detecting and monitoring reactor coolant leakage into the containment area is necessary. Separating the identified leakage from the unidentified leakage is necessary to provide quantitative information to the operators, allowing them to take corrective action to Page 1

DRAFT TSTF-554, Rev. 0 mitigate the leakage before it would become detrimental to the safety of the facility and the public.

A limited amount of leakage inside containment is expected as the RCS and other connected systems cannot be made 100% leak tight. Expected leakage from these systems is detected, located, and isolated from the containment atmosphere, if possible, to not interfere with unexpected RCS leakage detection.

2.2 Current Technical Specifications Requirements The current definition of pressure boundary leakage for Pressurized Water Reactors (PWRs) states:

LEAKAGE (except primary to secondary LEAKAGE) through a nonisolable fault in an RCS component body, pipe wall, or vessel wall."

The Boiling Water Reactor (BWR)/4 and BWR/6 STS definition is the same, except it does not include the parenthetical phrase "(except primary to secondary LEAKAGE)."

The AP1000 STS definition is the same, except it includes the parenthetical phrase "(except primary to secondary LEAKAGE and [passive residual heat removal heat exchanger] PRHR HX tube LEAKAGE)."

The "RCS Operational LEAKAGE" TS does not allow any amount of pressure boundary leakage. The Action for the existence of pressure boundary leakage is to be in Mode 3 in 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> for PWR plants and 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for BWR plants.

2.3 Reason for the Proposed Change The definition and application of pressure boundary leakage in the RCS Operational Leakage Technical Specifications are unclear and, in some cases, may be overly conservative or may force plant operators to take overly conservative, higher risk actions (e.g., commencing a plant shutdown).

• The industry and the NRC have discussed whether the term "nonisolable" means "could be isolated if desired," "attempted to be isolated and failed," or "must be isolated." Under any interpretation, the term constitutes an evaluation or action embedded in the definition.

• There is disagreement on what is required for isolation. The industry has historically held that isolation must be within the expected capabilities of the isolation device and some normal leakage past the isolation device is acceptable. This position is consistent with other uses of the term isolate in Standard Technical Specifications and in Section XI of the ASME Code. The NRC position has been that isolation must be complete with no leakage past the isolation device.

Page 2

DRAFT TSTF-554, Rev. 0 2.4 Description of the Proposed Change The proposed change addresses these issues by eliminating the term nonisolable from the definition and providing an additional TS Required Action to clarify when pressure boundary leakage requires plant operators to shut down the unit.

The proposed change does not alter the "RCS Leakage Detection Instrumentation" requirements in NUREG-1430, NUREG-1431, and NUREG-1432 TS 3.4.15, NUREG-1433 TS 3.4.6, NUREG-1434 TS 3.4.7, or NUREG-2194 TS 3.4.9.

Definitions The pressure boundary leakage definition is revised to delete the word "nonisolable." The sentence, "LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE," is moved from the TS Bases and added to the definition:

For the NUREG-1430, NUREG-1431, and NUREG-1432:

LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from pump seals or valve packing (except reactor coolant pump (RCP) seal water injection or leakoff), that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems; or not to be pressure boundary LEAKAGE; or

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator to the Secondary System (primary to secondary LEAKAGE);

b. Unidentified LEAKAGE All LEAKAGE (except RCP seal water injection or leakoff) that is not identified LEAKAGE; and

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE) through a nonisolable fault in an RCS component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

Page 3

DRAFT TSTF-554, Rev. 0 For NUREG-1433 and NUREG-1434:

LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE into the drywell, such as that from pump seals or valve packing that is captured and conducted to a sump or collecting tank;

2. LEAKAGE into the drywell atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE;

b. Unidentified LEAKAGE All LEAKAGE that is not identified LEAKAGE;

c. Total LEAKAGE Sum of the identified and unidentified LEAKAGE; and

d. Pressure Boundary LEAKAGE LEAKAGE through a nonisolable fault in a Reactor Coolant System (RCS) component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

For NUREG-2194:

LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from seals or valve packing, that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE;

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator (SG) to the Secondary System (primary to secondary LEAKAGE); or

4. RCS LEAKAGE through the passive residual heat removal heat exchanger (PRHR HX) to the In-containment Refueling Water Storage Tank (IRWST);

b. Unidentified LEAKAGE All LEAKAGE that is not identified LEAKAGE; Page 4

DRAFT TSTF-554, Rev. 0

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE and PRHR HX tube LEAKAGE) through a fault in an RCS component body, pipe wall, or vessel wall.

LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

Editorial corrections are made to the "leakage" definition punctuation to be consistent with TSTF-GG-05-01, "Writers Guide for Plant-Specific Improved Technical Specifications,"

Revision 1 (August 2010), Section 2.1.3, "Ordered List Format," paragraph c, which states, "Punctuate the last item in each listing level with a period, colon or semicolon as appropriate (that is, use a semicolon for all the list items except the last one, in which case, use a period)."

Actions A new Action is added to Babcock & Wilcox, Westinghouse, and Combustion Engineering STS TS 3.4.13, BWR/4 TS 3.4.4, BWR/6 TS 3.4.5, and AP1000 STS TS 3.4.7. The Action states:

CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

The new Condition A provides a clear action to follow if pressure boundary leakage exists.

In the Babcock & Wilcox, Combustion Engineering, Westinghouse, and AP1000 STS, existing Conditions A and B are renumbered B and C to reflect the new Condition A. The existing Condition C is revised to delete applicability to pressure boundary leakage since pressure boundary leakage is addressed by the new Condition A.

In BWR/4 TS 3.4.4 and BWR/6 TS 3.4.5, existing Conditions A, B, and C are renumbered to reflect the new Condition A. The existing Condition B is revised to delete applicability to pressure boundary leakage since pressure boundary leakage is addressed by the new Condition A.

If the flaw cannot be isolated under Required Action A.1 (i.e., due to lack of a device that can be closed, because of the inability to close an available device, or because the device cannot be Page 5

DRAFT TSTF-554, Rev. 0 accessed in the current plant conditions), the default action requiring a shutdown to Mode 3 is entered.

The proposed change does not affect the RCS LEAKAGE Surveillance Requirements.

Technical Specification Bases The proposed change is supported by changes to the STS Bases. In addition to changes to reflect the changes to the TS, the LCO Bases are revised to provide a more accurate description of the purpose of the RCS operational leakage limits. The regulation at Title 10 of the Code of Federal Regulations (10 CFR), Part 50.36, states, "A summary statement of the bases or reasons for such specifications, other than those covering administrative controls, shall also be included in the application, but shall not become part of the technical specifications." A licensee may make changes to the TS Bases without prior NRC staff review and approval in accordance with the Technical Specifications Bases Control Program. The proposed TS Bases changes are consistent with the proposed TS changes and provide the purpose for each requirement in the specification consistent with the Commission's Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors, dated July 2, 1993 (58 FR 39132). Therefore, the Bases changes are provided for information and approval of the Bases is not requested.

A model application is included in the proposed change as Enclosure 1. The model may be used by licensees desiring to adopt the traveler following NRC approval.

3. TECHNICAL EVALUATION The proposed change clarifies the TS requirements regarding pressure boundary leakage. The definition of "pressure boundary leakage" has existed in its current form since at least the mid-1970's. However, the term "nonisolable fault" is not defined in the Technical Specifications, the Standard Review Plan (NUREG-0800), Regulatory Guide 1.45, "Guidance on Monitoring and Responding to Reactor Coolant System Leakage," the 1998 version of the Boiler and Pressure Vessel Code, or NRC generic correspondence. A review of NRC internal historical documents discussing Technical Specifications did not identify any additional guidance on the meaning of "nonisolable fault" as it relates to pressure boundary leakage. Absent a definition or guidance, there have been differing interpretations of the requirements.

3.1 Revision of the Pressure Boundary Leakage and Other Leakage Definitions The proposed change eliminates the term "nonisolable" from the pressure boundary leakage definition. Removal of the term "nonisolable" from the definition results in any fault in an RCS component body, pipe wall, or vessel wall being considered pressure boundary leakage. This more restrictive change to the definition is offset by the addition of a new Action to follow when pressure boundary leakage exists.

The definition is revised to also add the following sentence, "Leakage past seals and gaskets is not pressure boundary LEAKAGE." This sentence appears multiple times in the Bases for the RCS Operational Leakage TS. As it clarifies the scope of the definition, it is more appropriately included in the definition. This relocation does not change the intent or application of the requirements.

Page 6

DRAFT TSTF-554, Rev. 0 The existing exclusion of pressure boundary leakage from identified leakage is deleted. The exclusion arbitrarily assigned pressure boundary leakage to unidentified leakage, when pressure boundary leakage is more likely to be identified leakage because the location must be known to identify the leakage as pressure boundary leakage. However, the change has no significant effect on plant operation as the Actions require immediate isolation of pressure boundary leakage or a plant shutdown.

Editorial corrections are made to the "leakage" definition punctuation to be consistent with TSTF-GG-05-01, "Writers Guide for Plant-Specific Improved Technical Specifications,"

Revision 1 (August 2010). As discussed in Section 2.1.3, "Ordered List Format," each item of a list should end with a semicolon except for the last item, and second-to-last line in each list level should end with a conjunction. Secondary level list entries should start with a lower case letter.

3.2 Addition of Condition A Condition A applies if pressure boundary leakage exists. Required Action A.1 requires initiation of action to isolate the affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve, with a Completion Time of "Immediately." The flaw is isolated from the reactor coolant pressure source to prevent further degradation of the flaw, which could result in additional leakage. If not (i.e., due to lack of a device that can be closed, because of the inability to close an available device, or because the device cannot be accessed in the current plant conditions), then the Required Action is not met and the default (shutdown) Condition applies.

Section 1.3, "Completion Times," of the TS states, "When 'Immediately' is used as a Completion Time, the Required Action should be pursued without delay and in a controlled manner."

Requiring an immediate Completion Time for this condition is considered appropriate given the importance of isolating RCS pressure boundary leakage.

The proposed Bases state that since most valves are not designed for zero leakage, some leakage is expected past the isolation device. This normal leakage is acceptable because once the pressure boundary flaw is isolated any further degradation would not have any significant effect on the RCS pressure boundary. The TS surveillance requirements will identify any degradation in the isolation device by changes in the identified or unidentified leakage. These surveillance requirements ensure that the device used to isolate the pressure boundary leak can reasonably perform its temporary isolation function to prevent further degradation of the RCS boundary until the pressure boundary leak is repaired. Normal leakage may be evaluated using engineering judgement, historical performance, or other means, and does not imply that a limit on normal leakage must be established.

3.3 Other Action Changes The addition of Condition A results in renumbering the existing Actions. The default Condition (i.e., "Required Action and associated Completion Time not met") is revised, as required, to be applicable should any Action not be met and to exclude pressure boundary leakage, which is addressed in Condition A. These changes are consistent with the other proposed changes.

Page 7

DRAFT TSTF-554, Rev. 0

4. REGULATORY EVALUATION Section IV, "The Commission Policy," of the "Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors" (58 Federal Register 39132), dated July 22, 1993, states in part:

The purpose of Technical Specifications is to impose those conditions or limitations upon reactor operation necessary to obviate the possibility of an abnormal situation or event giving rise to an immediate threat to the public health and safety by identifying those features that are of controlling importance to safety and establishing on them certain conditions of operation which cannot be changed without prior Commission approval.

[T]he Commission will also entertain requests to adopt portions of the improved STS, even if the licensee does not adopt all STS improvements.

The Commission encourages all licensees who submit Technical Specification related submittals based on this Policy Statement to emphasize human factors principles.

In accordance with this Policy Statement, improved STS have been developed and will be maintained for [BWR designs]. The Commission encourages licensees to use the improved STS as the basis for plant-specific Technical Specifications.

[I]t is the Commission intent that the wording and Bases of the improved STS be used to the extent practicable.

As described in the Commissions "Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors," recommendations were made by NRC and industry task groups for new STS that include greater emphasis on human factors principles in order to add clarity and understanding to the text of the STS, and provide improvements to the Bases of STS, which provides the purpose for each requirement in the specification.

Additionally, 10 CFR 50.36(b) requires:

Each license authorizing operation of a utilization facility will include technical specifications. The technical specifications will be derived from the analyses and evaluation included in the safety analysis report, and amendments thereto, submitted pursuant to [10 CFR] 50.34 ["Contents of applications; technical information"]. The Commission may include such additional technical specifications as the Commission finds appropriate.

The categories of items required to be in the TSs are provided in 10 CFR 50.36(c). As required by 10 CFR 50.36(c)(2)(i), the TSs will include LCOs, which are the lowest functional capability or performance levels of equipment required for safe operation of the facility. Per 10 CFR 50.36(c)(2)(i), when an LCO of a nuclear reactor is not met, the licensee shall shut down the reactor or follow any remedial action permitted by the TSs until the condition can be met.

Page 8

DRAFT TSTF-554, Rev. 0 Per 10 CFR 50.90, whenever a holder of a license desires to amend the license, application for an amendment must be filed with the Commission, fully describing the changes desired, and following as far as applicable, the form prescribed for original applications.

Per 10 CFR 50.92(a), in determining whether an amendment to a license will be issued to the applicant, the Commission will be guided by the considerations which govern the issuance of initial licenses to the extent applicable and appropriate.

The NRC staffs guidance for the review of TS is in Chapter 16, "Technical Specifications," of NUREG-0800, Revision 3, "Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants" (SRP), dated March 2010 (ADAMS Accession No. ML100351425). As described therein, as part of the regulatory standardization effort, the NRC staff has prepared STS for each of the light-water reactor nuclear designs.

In conclusion, based on the considerations discussed above, the proposed revision does not alter the current manner of operation and (1) there is reasonable assurance that the health and safety of the public will not be endangered by continued operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the approval of the proposed change will not be inimical to the common defense and security or to the health and safety of the public.

5. REFERENCES None.

Page 9

DRAFT TSTF-554, Rev. 0 Enclosure 1 Model Application

DRAFT TSTF-554, Rev. 0

[DATE] 10 CFR 50.90 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001 DOCKET NO.

PLANT NAME 50-[xxx]

SUBJECT:

Application to Revise Technical Specifications to Adopt TSTF-554, "Revise Reactor Coolant Leakage Requirements" Pursuant to 10 CFR 50.90, [LICENSEE] is submitting a request for an amendment to the Technical Specifications (TS) for [PLANT NAME, UNIT NOS.].

[LICENSEE] requests adoption of TSTF-554, "Revise Reactor Coolant Leakage Requirements,"

which is an approved change to the Standard Technical Specifications (STS), into the [PLANT NAME, UNIT NOS] Technical Specifications (TS). The proposed amendment revises the Technical Specification (TS) definition of "Leakage," clarifies the requirements when pressure boundary leakage is detected, and adds a Required Action when pressure boundary leakage is identified. The change is requested as part of the Consolidated Line Item Improvement Process (CLIIP).

The enclosure provides a description and assessment of the proposed changes. Attachment 1 provides the existing TS pages marked to show the proposed changes. Attachment 2 provides revised (clean) TS pages. Attachment 3 provides existing TS Bases pages marked to show the proposed changes for information only.

Approval of the proposed amendment is requested by [date]. Once approved, the amendment shall be implemented within [ ] days.

In accordance with 10 CFR 50.91, a copy of this application, with attachments, is being provided to the designated [STATE] Official.

[In accordance with 10 CFR 50.30(b), a license amendment request must be executed in a signed original under oath or affirmation. This can be accomplished by attaching a notarized affidavit confirming the signature authority of the signatory, or by including the following statement in the cover letter: "I declare under penalty of perjury that the foregoing is true and correct.

Executed on (date)." The alternative statement is pursuant to 28 USC 1746. It does not require notarization.]

If you should have any questions regarding this submittal, please contact [NAME, TELEPHONE NUMBER].

Page 1

DRAFT TSTF-554, Rev. 0 Sincerely,

[Name, Title]

Attachments: 1. Proposed Technical Specification Changes (Mark-Up)

2. Revised Technical Specification Pages

3. Proposed Technical Specification Bases Changes (Mark-Up) for Information Only

{Attachments 1 - 3 are not included in the model application and are to be provided by the licensee.}

cc: NRC Project Manager NRC Regional Office NRC Resident Inspector State Contact Page 2

DRAFT TSTF-554, Rev. 0 ENCLOSURE - DESCRIPTION AND ASSESSMENT

1.0 DESCRIPTION

[LICENSEE] requests adoption of TSTF-554, "Revise Reactor Coolant Leakage Requirements,"

which is an approved change to the Standard Technical Specifications (STS), into the [PLANT NAME, UNIT NOS] Technical Specifications (TS). The proposed amendment revises the Technical Specification (TS) definition of "Leakage" and the Reactor Coolant System (RCS)

Operational Leakage TS to clarify the requirements.

2.0 ASSESSMENT 2.1 Applicability of Safety Evaluation

[LICENSEE] has reviewed the safety evaluation for TSTF-554 provided to the Technical Specifications Task Force in a letter dated [DATE]. This review included a review of the NRC staffs evaluation, as well as the information provided in TSTF-554. [As described herein,]

[LICENSEE] has concluded that the justifications presented in TSTF-554 and the safety evaluation prepared by the NRC staff are applicable to [PLANT, UNIT NOS.] and justify this amendment for the incorporation of the changes into the [PLANT] TS.

2.2 Variations

[LICENSEE is not proposing any variations from the TS changes described in TSTF-554 or the applicable parts of the NRC staffs safety evaluation dated [DATE].] [LICENSEE is proposing the following variations from the TS changes described in TSTF-554 or the applicable parts of the NRC staffs safety evaluation: describe the variations.]

[The [PLANT] TS utilize different [numbering][and][titles] than the Standard Technical Specifications on which TSTF-554 was based. Specifically, [describe differences between the plant-specific TS numbering and/or titles and the TSTF-554 numbering and titles.] These differences are administrative and do not affect the applicability of TSTF-554 to the [PLANT]

TS.]

[The [PLANT] TS contain requirements that differ from the Standard Technical Specifications on which TSTF-554 was based but are encompassed in the TSTF-554 justification. [Describe differences and why TSTF-554 is still applicable.]

3.0 REGULATORY ANALYSIS

3.1 No Significant Hazards Consideration Analysis

[LICENSEE] requests adoption of TSTF-554, "Revise Reactor Coolant Leakage Requirements,"

that is an approved change to the Standard Technical Specifications (STS), into the [PLANT NAME, UNIT NOS] Technical Specifications (TS). The proposed amendment revises the Technical Specification (TS) definition of "Leakage," clarifies the requirements when pressure boundary leakage is detected, and adds a Required Action when pressure boundary leakage is identified.

Page 3

DRAFT TSTF-554, Rev. 0

[LICENSEE] has evaluated whether or not a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below:

1. Does the proposed amendment involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No The proposed amendment revises the TS definition of "Leakage," clarifies the requirements when pressure boundary leakage is detected, and adds a Required Action when pressure boundary leakage is identified.

The proposed change revises the definition of pressure boundary leakage. Pressure boundary leakage is a precursor to some accidents previously evaluated. The proposed change expands the definition of pressure boundary leakage by eliminating the qualification that pressure boundary leakage must be from a "nonisolable" flaw. A new TS Action is created which requires an isolation valve to be closed between the flaw and the Reactor Coolant System. This new action provides assurance that the flaw will not result in any accident previously evaluated.

Pressure boundary leakage, and the actions taken when pressure boundary leakage is detected, is not assumed in the mitigation of any accident previously evaluated. As a result, the consequences of any accident previously evaluated are unaffected.

Therefore, the proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed amendment create the possibility of a new or different kind of accident from any previously evaluated?

Response: No The proposed amendment revises the TS definition of "Leakage," clarifies the requirements when pressure boundary leakage is detected, and adds a Required Action when pressure boundary leakage is identified. The proposed change does not alter the design function or operation of the RCS. The proposed change does not alter the ability of the RCS to perform its design function. Since pressure boundary leakage is an evaluated accident, the proposed change does not create any new failure mechanisms, malfunctions, or accident initiators not considered in the design and licensing bases.

Therefore, the proposed change does not create the possibility of a new or different kind of accident from any previously evaluated.

3. Does the proposed amendment involve a significant reduction in a margin of safety?

Response: No Page 4

DRAFT TSTF-554, Rev. 0 The proposed amendment revises the TS definition of "Leakage," clarifies the requirements when pressure boundary leakage is detected, and adds a Required Action when pressure boundary leakage is identified. The proposed change does not affect the initial assumptions, margins, or controlling values used in any accident analysis. The amount of leakage allowed from the RCS is not increased. The proposed change does not affect any design basis or safety limit or any Limiting Condition for Operation.

Therefore, the proposed change does not involve a significant reduction in a margin of safety.

Based on the above, [LICENSEE] concludes that the proposed change presents no significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, a finding of "no significant hazards consideration" is justified.

3.2 Conclusion In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

4.0 ENVIRONMENTAL EVALUATION The proposed change would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, or would change an inspection or surveillance requirement. However, the proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9).

Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed change.

Page 5

DRAFT TSTF-554, Rev. 0 Technical Specifications Proposed Changes

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions EMERGENCY FEEDWATER The EFIC RESPONSE TIME shall be that time interval from INITIATION AND CONTROL when the monitored parameter exceeds its EFIC actuation (EFIC) RESPONSE TIME setpoint at the channel sensor until the emergency feedwater equipment is capable of performing its function (i.e., valves travel to their required positions, pumps discharge pressures reach their required values, etc.). Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured.

ENGINEERED SAFETY The ESF RESPONSE TIME shall be that time interval from FEATURE (ESF) RESPONSE when the monitored parameter exceeds its ESF actuation TIME setpoint at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions, pump discharge pressures reach their required values, etc.). Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from pump seals or valve packing (except RCP seal water injection or leakoff), that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems; or not to be pressure boundary LEAKAGE, or

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator to the Secondary System (primary to secondary LEAKAGE);.

b. Unidentified LEAKAGE All LEAKAGE (except RCP seal water injection or leakoff) that is not identified LEAKAGE;, and Babcock & Wilcox STS 1.1-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions LEAKAGE (continued)

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE) through a nonisolable fault in an RCS component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

MODE A MODE shall correspond to any one inclusive combination of core reactivity condition, power level, average reactor coolant temperature, and reactor vessel head closure bolt tensioning specified in Table 1.1-1 with fuel in the reactor vessel.

NUCLEAR HEAT FLUX HOT FQ(Z) shall be the maximum local linear power density in the CHANNEL FACTOR FQ(Z) core divided by the core average fuel rod linear power density, assuming nominal fuel pellet and fuel rod dimensions.

NUCLEAR ENTHALPY RISE FNH shall be the ratio of the integral of linear power along the HOT CHANNEL FACTOR FNH fuel rod on which minimum departure from nucleate boiling ratio occurs, to the average fuel rod power.

OPERABLE - OPERABILITY A system, subsystem, train, component, or device shall be OPERABLE or have OPERABILITY when it is capable of performing its specified safety function(s) and when all necessary attendant instrumentation, controls, normal or emergency electrical power, cooling and seal water, lubrication, and other auxiliary equipment that are required for the system, subsystem, train, component, or device to perform its specified safety function(s) are also capable of performing their related support function(s).

PHYSICS TESTS PHYSICS TESTS shall be those tests performed to measure the fundamental nuclear characteristics of the reactor core and related instrumentation.

These tests are:

a. Described in Chapter [14, Initial Test Program] of the FSAR,

b. Authorized under the provisions of 10 CFR 50.59, or

c. Otherwise approved by the Nuclear Regulatory Commission.

Babcock & Wilcox STS 1.1-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.13 RCS Operational LEAKAGE LCO 3.4.13 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE,

b. 1 gpm unidentified LEAKAGE,

c. 10 gpm identified LEAKAGE, and

d. 150 gallons per day primary to secondary LEAKAGE through any one steam generator (SG).

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

BA. RCS operational BA.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> LEAKAGE not within within limits.

limits for reasons other than pressure boundary LEAKAGE or primary to secondary LEAKAGE.

CB. Required Action and CB.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A not AND met.

CB.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> OR Babcock & Wilcox STS 3.4.13-1 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 CONDITION REQUIRED ACTION COMPLETION TIME Pressure boundary LEAKAGE exists.

OR Primary to secondary LEAKAGE not within limit.

Babcock & Wilcox STS 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABLE Except for primary to secondary LEAKAGE, the safety analyses do not SAFETY address operational LEAKAGE. However, other operational LEAKAGE ANALYSES is related to the safety analyses for LOCA; the amount of leakage can affect the probability of such an event. The safety analysis for an event resulting in steam discharge to the atmosphere assumes that primary to secondary LEAKAGE from all steam generators (SGs) is [1 gallon per minute] or increases to [1 gallon per minute] as a result of accident induced conditions. The LCO requirement to limit primary to secondary LEAKAGE through any one SG to less than or equal to 150 gallons per day is significantly less than the conditions assumed in the safety analysis.

Primary to secondary LEAKAGE is a factor in the dose releases outside containment resulting from a steam line break (SLB) accident. To a lesser extent, other accidents or transients involve secondary steam release to the atmosphere, such as a steam generator tube rupture (SGTR). The leakage contaminates the secondary fluid.

The FSAR (Ref. 3) analysis for SGTR assumes the contaminated secondary fluid is only briefly released via safety valves and the majority is steamed to the condenser. The [1 gpm] primary to secondary LEAKAGE safety analysis assumption is relatively inconsequential.

The SLB is more limiting for site radiation releases. The safety analysis for the SLB accident assumes the entire [1 gpm] primary to secondary LEAKAGE is through the affected generator as an initial condition. The dose consequences resulting from the SLB accident are well within the limits defined in 10 CFR 100.

RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material deterioration. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

Babcock & Wilcox STS B 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES LCO (continued)

b. Unidentified LEAKAGE One gallon per minute (gpm) of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the containment air monitoring and containment sump level monitoring equipment can detect within a reasonable time period. Separating the sources of leakage (i.e., leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, and corrective action. Violation of this LCO could result in continued degradation of the RCPB, if the LEAKAGE is from the pressure boundary.

c. Identified LEAKAGE Up to 10 gpm of identified LEAKAGE is considered allowable because LEAKAGE is from known sources that do not interfere with detection of unidentified LEAKAGE and is well within the capability of the RCS makeup system. Identified LEAKAGE includes LEAKAGE to the containment from specifically known and located sources, but does not include pressure boundary LEAKAGE or controlled reactor coolant pump (RCP) seal leakoff (a normal function not considered LEAKAGE). Violation of this LCO could result in continued degradation of a component or system.

d. Primary to Secondary LEAKAGE Through Any One SG The limit of 150 gallons per day per SG is based on the operational LEAKAGE performance criterion in NEI 97-06, Steam Generator Program Guidelines (Ref. 4). The Steam Generator Program operational LEAKAGE performance criterion in NEI 97-06 states, "The RCS operational primary to secondary leakage through any one SG shall be limited to 150 gallons per day." The limit is based on operating experience with SG tube degradation mechanisms that result in tube leakage. The operational leakage rate criterion in conjunction with the implementation of the Steam Generator Program is an effective measure for minimizing the frequency of steam generator tube ruptures.

APPLICABILITY In MODES 1, 2, 3, and 4, the potential for RCPB LEAKAGE is greatest when the RCS is pressurized.

In MODES 5 and 6, LEAKAGE limits are not required because the reactor coolant pressure is far lower, resulting in lower stresses and reduced potentials for LEAKAGE.

Babcock & Wilcox STS B 3.4.13-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABILITY (continued)

LCO 3.4.14, "RCS Pressure Isolation Valve (PIV) Leakage," measures leakage through each individual PIV and can impact this LCO. Of the two PIVs in series in each isolated line, leakage measured through one PIV does not result in RCS LEAKAGE when the other is leaktight. If both valves leak and result in a loss of mass from the RCS, the loss must be included in the allowable identified LEAKAGE.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition C applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 If unidentified LEAKAGE or identified LEAKAGE are in excess of the LCO limits, the LEAKAGE must be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. This Completion Time allows time to verify leakage rates and either identify unidentified LEAKAGE or reduce LEAKAGE to within limits before the reactor must be shut down. This action is necessary to prevent further deterioration of the RCPB.

CB.1 and CB.2 If any pressure boundary LEAKAGE exists or primary to secondary LEAKAGE is not within limit, or any of the Required Actions and associated Completion Times cannot be met, if unidentified or identified LEAKAGE cannot be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />, the reactor must be brought to lower pressure conditions to reduce the severity of the LEAKAGE and its potential consequences. The reactor must be brought to MODE 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. This action reduces the LEAKAGE and also reduces the factors that tend to degrade the pressure boundary.

The Completion Times allowed are reasonable, based on operating experience, to reach the required conditions from full power conditions in Babcock & Wilcox STS B 3.4.13-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 an orderly manner and without challenging plant systems. In MODE 5, the pressure stresses acting on the RCPB are much lower and further deterioration is much less likely.

SURVEILLANCE SR 3.4.13.1 REQUIREMENTS Verifying RCS LEAKAGE within the LCO limits ensures that the integrity of the RCPB is maintained. Pressure boundary LEAKAGE would at first appear as unidentified LEAKAGE and can only be positively identified by inspection. Unidentified LEAKAGE and identified LEAKAGE are determined by performance of an RCS water inventory balance.

The RCS water inventory balance must be performed with the reactor at steady state operating conditions (stable temperature, power level, pressurizer and makeup tank levels, makeup and letdown, [and RCP seal Babcock & Wilcox STS B 3.4.13-5 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions ENGINEERED SAFETY The ESF RESPONSE TIME shall be that time interval from FEATURE (ESF) RESPONSE when the monitored parameter exceeds its actuation TIME setpoint at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions, pump discharge pressures reach their required values, etc.). Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured. In lieu of measurement, response time may be verified for selected components provided that the components and methodology for verification have been previously reviewed and approved by the NRC.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from pump seals or valve packing (except reactor coolant pump (RCP) seal water injection or leakoff), that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE; or

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator to the Secondary System (primary to secondary LEAKAGE);.

b. Unidentified LEAKAGE All LEAKAGE (except RCP seal water injection or leakoff) that is not identified LEAKAGE; and

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE) through a nonisolable fault in an RCS component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

Westinghouse STS 1.1-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.13 RCS LEAKAGE LCO 3.4.13 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE;

b. 1 gpm unidentified LEAKAGE;

c. 10 gpm identified LEAKAGE; and

d. 150 gallons per day primary to secondary LEAKAGE through any one steam generator (SG).

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

BA. RCS operational BA.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> LEAKAGE not within within limits.

limits for reasons other than pressure boundary LEAKAGE or primary to secondary LEAKAGE.

CB. Required Action and CB.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A not AND met.

CB.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> OR Westinghouse STS 3.4.13-1 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 CONDITION REQUIRED ACTION COMPLETION TIME Pressure boundary LEAKAGE exists.

OR Primary to secondary LEAKAGE not within limit.

Westinghouse STS 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABLE Except for primary to secondary LEAKAGE, the safety analyses do not SAFETY address operational LEAKAGE. However, other operational LEAKAGE ANALYSES is related to the safety analyses for LOCA; the amount of leakage can affect the probability of such an event. The safety analysis for an event resulting in steam discharge to the atmosphere assumes that primary to secondary LEAKAGE from all steam generators (SGs) is [1 gallon per minute] or increases to [1 gallon per minute] as a result of accident induced conditions. The LCO requirement to limit primary to secondary LEAKAGE through any one SG to less than or equal to 150 gallons per day is significantly less than the conditions assumed in the safety analysis.

Primary to secondary LEAKAGE is a factor in the dose releases outside containment resulting from a steam line break (SLB) accident. To a lesser extent, other accidents or transients involve secondary steam release to the atmosphere, such as a steam generator tube rupture (SGTR). The leakage contaminates the secondary fluid.

The FSAR (Ref. 3) analysis for SGTR assumes the contaminated secondary fluid is only briefly released via safety valves and the majority is steamed to the condenser. The [1 gpm] primary to secondary LEAKAGE safety analysis assumption is relatively inconsequential.

The SLB is more limiting for site radiation releases. The safety analysis for the SLB accident assumes the entire [1 gpm] primary to secondary LEAKAGE is through the affected generator as an initial condition. The dose consequences resulting from the SLB accident are well within the limits defined in 10 CFR 100 or the staff approved licensing basis (i.e., a small fraction of these limits).

The RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material deterioration. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

Westinghouse STS B 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES LCO (continued)

b. Unidentified LEAKAGE One gallon per minute (gpm) of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the containment air monitoring and containment sump level monitoring equipment can detect within a reasonable time period. Separating the sources of leakage (i.e., leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, and corrective action. Violation of this LCO could result in continued degradation of the RCPB, if the LEAKAGE is from the pressure boundary.

c. Identified LEAKAGE Up to 10 gpm of identified LEAKAGE is considered allowable because LEAKAGE is from known sources that do not interfere with detection of unidentified LEAKAGE and is well within the capability of the RCS Makeup System. Identified LEAKAGE includes LEAKAGE to the containment from specifically known and located sources, but does not include pressure boundary LEAKAGE or controlled reactor coolant pump (RCP) seal leakoff (a normal function not considered LEAKAGE). Violation of this LCO could result in continued degradation of a component or system.

d. Primary to Secondary LEAKAGE Through Any One SG The limit of 150 gallons per day per SG is based on the operational LEAKAGE performance criterion in NEI 97-06, Steam Generator Program Guidelines (Ref. 4). The Steam Generator Program operational LEAKAGE performance criterion in NEI 97-06 states, "The RCS operational primary to secondary leakage through any one SG shall be limited to 150 gallons per day." The limit is based on operating experience with SG tube degradation mechanisms that result in tube leakage. The operational leakage rate criterion in conjunction with the implementation of the Steam Generator Program is an effective measure for minimizing the frequency of steam generator tube ruptures.

APPLICABILITY In MODES 1, 2, 3, and 4, the potential for RCPB LEAKAGE is greatest when the RCS is pressurized.

In MODES 5 and 6, LEAKAGE limits are not required because the reactor coolant pressure is far lower, resulting in lower stresses and reduced potentials for LEAKAGE.

Westinghouse STS B 3.4.13-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABILITY (continued)

LCO 3.4.14, "RCS Pressure Isolation Valve (PIV) Leakage," measures leakage through each individual PIV and can impact this LCO. Of the two PIVs in series in each isolated line, leakage measured through one PIV does not result in RCS LEAKAGE when the other is leak tight. If both valves leak and result in a loss of mass from the RCS, the loss must be included in the allowable identified LEAKAGE.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition C applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 Unidentified LEAKAGE or identified LEAKAGE in excess of the LCO limits must be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. This Completion Time allows time to verify leakage rates and either identify unidentified LEAKAGE or reduce LEAKAGE to within limits before the reactor must be shut down. This action is necessary to prevent further deterioration of the RCPB.

CB.1 and CB.2 If any pressure boundary LEAKAGE exists, or primary to secondary LEAKAGE is not within limit, or if any of the Required Actions and associated Completion Times cannot be met, unidentified or identified LEAKAGE cannot be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />, the reactor must be brought to lower pressure conditions to reduce the severity of the LEAKAGE and its potential consequences. It should be noted that LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

The reactor must be brought to MODE 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. This action reduces the LEAKAGE and also reduces the factors that tend to degrade the pressure boundary.

Westinghouse STS B 3.4.13-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

In MODE 5, the pressure stresses acting on the RCPB are much lower, and further deterioration is much less likely.

SURVEILLANCE SR 3.4.13.1 REQUIREMENTS Verifying RCS LEAKAGE to be within the LCO limits ensures the integrity of the RCPB is maintained. Pressure boundary LEAKAGE would at first appear as unidentified LEAKAGE and can only be positively identified by inspection. It should be noted that LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE. Unidentified LEAKAGE and identified LEAKAGE are determined by performance of an RCS water inventory balance.

BASES SURVEILLANCE REQUIREMENTS (continued)

The RCS water inventory balance must be met with the reactor at steady state operating conditions (stable temperature, power level, pressurizer and makeup tank levels, makeup and letdown, [and RCP seal injection and return flows]). The Surveillance is modified by two Notes. Note 1 states that this SR is not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after establishing steady state operation. The 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowance provides sufficient time to collect and process all necessary data after stable plant conditions are established.

Steady state operation is required to perform a proper inventory balance since calculations during maneuvering are not useful. For RCS operational LEAKAGE determination by water inventory balance, steady state is defined as stable RCS pressure, temperature, power level, pressurizer and makeup tank levels, makeup and letdown, and RCP seal injection and return flows.

An early warning of pressure boundary LEAKAGE or unidentified LEAKAGE is provided by the automatic systems that monitor the containment atmosphere radioactivity and the containment sump level. It should be noted that LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE. These leakage detection systems are specified in LCO 3.4.15, "RCS Leakage Detection Instrumentation."

Note 2 states that this SR is not applicable to primary to secondary LEAKAGE because LEAKAGE of 150 gallons per day cannot be measured accurately by an RCS water inventory balance.

[ The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Frequency is a reasonable interval to trend LEAKAGE and recognizes the importance of early leakage detection in the prevention of accidents.

Westinghouse STS B 3.4.13-5 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions

- AVERAGE shall be the average (weighted in proportion to the DISINTEGRATION ENERGY concentration of each radionuclide in the reactor coolant at the time of sampling) of the sum of the average beta and gamma energies per disintegration (in MeV) for isotopes, other than iodines, with half lives > [15] minutes, making up at least 95%

of the total noniodine activity in the coolant.

ENGINEERED SAFETY The ESF RESPONSE TIME shall be that time interval from FEATURE (ESF) RESPONSE when the monitored parameter exceeds its ESF actuation TIME setpoint at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions, pump discharge pressures reach their required values, etc.). Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured. In lieu of measurement, response time may be verified for selected components provided that the components and methodology for verification have been previously reviewed and approved by the NRC.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from pump seals or valve packing (except reactor coolant pump (RCP) seal water injection or leakoff), that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE; or

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator to the Secondary System (primary to secondary LEAKAGE),

b. Unidentified LEAKAGE All LEAKAGE (except RCP seal water injection or leakoff) that is not identified LEAKAGE, and Combustion Engineering STS 1.1-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions LEAKAGE (continued)

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE) through a nonisolable fault in an RCS component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

MODE A MODE shall correspond to any one inclusive combination of core reactivity condition, power level, average reactor coolant temperature, and reactor vessel head closure bolt tensioning specified in Table 1.1-1 with fuel in the reactor vessel.

OPERABLE - OPERABILITY A system, subsystem, train, component, or device shall be OPERABLE or have OPERABILITY when it is capable of performing its specified safety function(s) and when all necessary attendant instrumentation, controls, normal or emergency electrical power, cooling and seal water, lubrication, and other auxiliary equipment that are required for the system, subsystem, train, component, or device to perform its specified safety function(s) are also capable of performing their related support function(s).

PHYSICS TESTS PHYSICS TESTS shall be those tests performed to measure the fundamental nuclear characteristics of the reactor core and related instrumentation.

These tests are:

a. Described in Chapter [14, Initial Test Program] of the FSAR,

b. Authorized under the provisions of 10 CFR 50.59, or

c. Otherwise approved by the Nuclear Regulatory Commission.

PRESSURE AND The PTLR is the unit specific document that provides the TEMPERATURE LIMITS reactor vessel pressure and temperature limits, including REPORT (PTLR) heatup and cooldown rates, for the current reactor vessel fluence period. These pressure and temperature limits shall be determined for each fluence period in accordance with Specification 5.6.4.

RATED THERMAL POWER RTP shall be a total reactor core heat transfer rate to the (RTP) reactor coolant of [3410] MWt.

Combustion Engineering STS 1.1-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.13 RCS Operational LEAKAGE LCO 3.4.13 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE,

b. 1 gpm unidentified LEAKAGE,

c. 10 gpm identified LEAKAGE, and

d. 150 gallons per day primary to secondary LEAKAGE through any one steam generator (SG).

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

BA. RCS operational BA.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> LEAKAGE not within within limits.

limits for reasons other than pressure boundary LEAKAGE or primary to secondary LEAKAGE.

CB. Required Action and CB.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition A not AND met.

CB.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> OR Combustion Engineering STS 3.4.13-1 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.13 CONDITION REQUIRED ACTION COMPLETION TIME Pressure boundary LEAKAGE exists.

OR Primary to secondary LEAKAGE not within limit.

Combustion Engineering STS 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABLE Except for primary to secondary LEAKAGE, the safety analyses do not SAFETY address operational LEAKAGE. However, other operational LEAKAGE ANALYSES is related to the safety analyses for LOCA; the amount of leakage can affect the probability of such an event. The safety analysis for an event resulting in steam discharge to the atmosphere assumes that primary to secondary LEAKAGE from all steam generators (SGs) is [1 gallon per minute] or increases to [1 gallon per minute] as a result of accident induced conditions. The LCO requirement to limit primary to secondary LEAKAGE through any one SG to less than or equal to 150 gallons per day is significantly less than the conditions assumed in the safety analysis.

Primary to secondary LEAKAGE is a factor in the dose releases outside containment resulting from a steam line break (SLB) accident. To a lesser extent, other accidents or transients involve secondary steam release to the atmosphere, such as a steam generator tube rupture (SGTR). The leakage contaminates the secondary fluid.

The FSAR (Ref. 3) analysis for SGTR assumes the contaminated secondary fluid is only briefly released via safety valves and the majority is steamed to the condenser. The [1 gpm] primary to secondary LEAKAGE safety analysis assumption is relatively inconsequential.

The SLB is more limiting for site radiation releases. The safety analysis for the SLB accident assumes the entire [1 gpm] primary to secondary LEAKAGE is through the affected generator as an initial condition. The dose consequences resulting from the SLB accident are well within the limits defined in 10 CFR 50 or the staff approved licensing basis (i.e., a small fraction of these limits).

RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material deterioration. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

BASES LCO (continued)

b. Unidentified LEAKAGE Combustion Engineering STS B 3.4.13-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 One gallon per minute (gpm) of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the containment air monitoring and containment sump level monitoring equipment can detect within a reasonable time period. Separating the sources of leakage (i.e., leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, and corrective action. Violation of this LCO could result in continued degradation of the RCPB, if the LEAKAGE is from the pressure boundary.

c. Identified LEAKAGE Up to 10 gpm of identified LEAKAGE is considered allowable because LEAKAGE is from known sources that do not interfere with detection of unidentified LEAKAGE and is well within the capability of the RCS makeup system. Identified LEAKAGE includes LEAKAGE to the containment from specifically known and located sources, but does not include pressure boundary LEAKAGE or controlled reactor coolant pump (RCP) seal leakoff (a normal function not considered LEAKAGE). Violation of this LCO could result in continued degradation of a component or system.

LCO 3.4.14, "RCS Pressure Isolation Valve (PIV) Leakage,"

measures leakage through each individual PIV and can impact this LCO. Of the two PIVs in series in each isolated line, leakage measured through one PIV does not result in RCS LEAKAGE when the other is leaktight. If both valves leak and result in a loss of mass from the RCS, the loss must be included in the allowable identified LEAKAGE.

d. Primary to Secondary LEAKAGE Through Any One SG The limit of 150 gallons per day per SG is based on the operational LEAKAGE performance criterion in NEI 97-06, Steam Generator Program Guidelines (Ref. 4). The Steam Generator Program operational LEAKAGE performance criterion in NEI 97-06 states, "The RCS operational primary to secondary leakage through any one SG shall be limited to 150 gallons per day." The limit is based on operating experience with SG tube degradation mechanisms that result in tube leakage. The operational leakage rate criterion in conjunction with the implementation of the Steam Generator Program is an effective measure for minimizing the frequency of steam generator tube ruptures.

Combustion Engineering STS B 3.4.13-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.13 BASES APPLICABILITY In MODES 1, 2, 3, and 4, the potential for RCPB LEAKAGE is greatest when the RCS is pressurized.

In MODES 5 and 6, LEAKAGE limits are not required because the reactor coolant pressure is far lower, resulting in lower stresses and reduced potentials for LEAKAGE.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition C applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 Unidentified LEAKAGE or identified LEAKAGE in excess of the LCO limits must be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. This Completion Time allows time to verify leakage rates and either identify unidentified LEAKAGE or reduce LEAKAGE to within limits before the reactor must be shut down. This action is necessary to prevent further deterioration of the RCPB.

CB.1 and CB.2 If any pressure boundary LEAKAGE exists or primary to secondary LEAKAGE is not within limit, or if any of the Required Actions and associated Completion Times cannot be met, unidentified or identified LEAKAGE cannot be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />, the reactor must be brought to lower pressure conditions to reduce the severity of the LEAKAGE and its potential consequences. The reactor must be brought to MODE 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and to MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. This action reduces the LEAKAGE and also reduces the factors that tend to degrade the pressure boundary.

The allowed Completion Times are reasonable, based on operating experience, to reach the required conditions from full power conditions in an orderly manner and without challenging plant systems. In MODE 5, the pressure stresses acting on the RCPB are much lower, and further deterioration is much less likely.

Combustion Engineering STS B 3.4.13-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions END OF CYCLE RECIRCULA- The EOC RPT SYSTEM RESPONSE TIME shall be that time TION PUMP TRIP (EOC RPT) interval from initial signal generation by [the associated turbine SYSTEM RESPONSE TIME stop valve limit switch or from when the turbine control valve hydraulic oil control oil pressure drops below the pressure switch setpoint] to complete suppression of the electric arc between the fully open contacts of the recirculation pump circuit breaker. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured, [except for the breaker arc suppression time, which is not measured but is validated to conform to the manufacturer's design value].

ISOLATION SYSTEM The ISOLATION SYSTEM RESPONSE TIME shall be that RESPONSE TIME time interval from when the monitored parameter exceeds its isolation initiation setpoint at the channel sensor until the isolation valves travel to their required positions. Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured. In lieu of measurement, response time may be verified for selected components provided that the components and methodology for verification have been previously reviewed and approved by the NRC.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE into the drywell, such as that from pump seals or valve packing that is captured and conducted to a sump or collecting tank;, or

2. LEAKAGE into the drywell atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE;,

b. Unidentified LEAKAGE All LEAKAGE into the drywell that is not identified LEAKAGE,

c. Total LEAKAGE Sum of the identified and unidentified LEAKAGE;, and General Electric BWR/4 STS 1.1-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1

d. Pressure Boundary LEAKAGE LEAKAGE through a nonisolable fault in a Reactor Coolant System (RCS) component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

General Electric BWR/4 STS 1.1-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.4 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.4 RCS Operational LEAKAGE LCO 3.4.4 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE,

b. 5 gpm unidentified LEAKAGE, [and]

c. [30] gpm total LEAKAGE averaged over the previous 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> period, and

[ d. 2 gpm increase in unidentified LEAKAGE within the previous

[4] hour period in MODE 1. ]

APPLICABILITY: MODES 1, 2, and 3.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

BA. Unidentified LEAKAGE BA.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> not within limit. within limits.

OR Total LEAKAGE not within limit.

General Electric BWR/4 STS 3.4.4-1 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.4 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME CB. Unidentified LEAKAGE CB.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> increase not within limit. within limits.

OR CB.2 Verify source of 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> unidentified LEAKAGE increase is not service sensitive type 304 or type 316 austenitic stainless steel.

DC. Required Action and DC.1 Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> associated Completion Time of Condition A AND or B not met.

DC.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> OR Pressure boundary LEAKAGE exists.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.4.1 Verify RCS unidentified and total LEAKAGE and [ 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> unidentified LEAKAGE increase are within limits.

OR In accordance with the Surveillance Frequency Control Program ]

General Electric BWR/4 STS 3.4.4-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.4 BASES APPLICABLE The allowable RCS operational LEAKAGE limits are based on the SAFETY predicted and experimentally observed behavior of pipe cracks. The ANALYSES normally expected background LEAKAGE due to equipment design and the detection capability of the instrumentation for determining system LEAKAGE were also considered. The evidence from experiments suggests that, for LEAKAGE even greater than the specified unidentified LEAKAGE limits, the probability is small that the imperfection or crack associated with such LEAKAGE would grow rapidly.

The unidentified LEAKAGE flow limit allows time for corrective action before the RCPB could be significantly compromised. The 5 gpm limit is a small fraction of the calculated flow from a critical crack in the primary system piping. Crack behavior from experimental programs (Refs. 2 and 3) shows that leakage rates of hundreds of gallons per minute will precede crack instability (Ref. 4).

The low limit on increase in unidentified LEAKAGE assumes a failure mechanism of intergranular stress corrosion cracking (IGSCC) that produces tight cracks. This flow increase limit is capable of providing an early warning of such deterioration.

No applicable safety analysis assumes the total LEAKAGE limit. The total LEAKAGE limit considers RCS inventory makeup capability and drywell floor sump capacity.

RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material degradation. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

b. Unidentified LEAKAGE The 5 gpm of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the containment air monitoring, drywell sump level monitoring, and containment air cooler condensate flow rate monitoring equipment can detect within a reasonable time period. Separating the sources of leakage (i.e.,

leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, General Electric BWR/4 STS B 3.4.4-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.4 and corrective action. Violation of this LCO could result in continued degradation of the RCPB.

BASES LCO (continued)

c. Total LEAKAGE The total LEAKAGE limit is based on a reasonable minimum detectable amount. The limit also accounts for LEAKAGE from known sources (identified LEAKAGE). Violation of this LCO indicates an unexpected amount of LEAKAGE and, therefore, could indicate new or additional degradation in an RCPB component or system.

d. Unidentified LEAKAGE Increase An unidentified LEAKAGE increase of > 2 gpm within the previous

[4] hour period indicates a potential flaw in the RCPB and must be quickly evaluated to determine the source and extent of the LEAKAGE. The increase is measured relative to the steady state value; temporary changes in LEAKAGE rate as a result of transient conditions (e.g., startup) are not considered. As such, the 2 gpm increase limit is only applicable in MODE 1 when operating pressures and temperatures are established. Violation of this LCO could result in continued degradation of the RCPB.

APPLICABILITY In MODES 1, 2, and 3, the RCS operational LEAKAGE LCO applies, because the potential for RCPB LEAKAGE is greatest when the reactor is pressurized.

In MODES 4 and 5, RCS operational LEAKAGE limits are not required since the reactor is not pressurized and stresses in the RCPB materials and potential for LEAKAGE are reduced.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition D applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 General Electric BWR/4 STS B 3.4.4-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.4 With RCS unidentified or total LEAKAGE greater than the limits, actions must be taken to reduce the leak. Because the LEAKAGE limits are conservatively below the LEAKAGE that would constitute a critical crack size, 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> is allowed to reduce the LEAKAGE rates before the reactor must be shut down. If an unidentified LEAKAGE has been identified and quantified, it may be reclassified and considered as identified LEAKAGE; however, the total LEAKAGE limit would remain unchanged.

BASES ACTIONS (continued)

CB.1 and CB.2 An unidentified LEAKAGE increase of > 2 gpm within a 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> period is an indication of a potential flaw in the RCPB and must be quickly evaluated. Although the increase does not necessarily violate the absolute unidentified LEAKAGE limit, certain susceptible components must be determined not to be the source of the LEAKAGE increase within the required Completion Time. For an unidentified LEAKAGE increase greater than required limits, an alternative to reducing LEAKAGE increase to within limits (i.e., reducing the LEAKAGE rate such that the current rate is less than the "2 gpm increase in the previous [4] hours" limit; either by isolating the source or other possible methods) is to evaluate service sensitive type 304 and type 316 austenitic stainless steel piping that is subject to high stress or that contains relatively stagnant or intermittent flow fluids and determine it is not the source of the increased LEAKAGE.

This type piping is very susceptible to IGSCC.

The 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time is reasonable to properly reduce the LEAKAGE increase or verify the source before the reactor must be shut down without unduly jeopardizing plant safety.

DC.1 and DC.2 If any Required Action and associated Completion Time of Condition A or B is not met or if pressure boundary LEAKAGE exists, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant safety systems.

SURVEILLANCE SR 3.4.4.1 REQUIREMENTS The RCS LEAKAGE is monitored by a variety of instruments designed to provide alarms when LEAKAGE is indicated and to quantify the various General Electric BWR/4 STS B 3.4.4-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions ISOLATION SYSTEM The ISOLATION SYSTEM RESPONSE TIME shall be that RESPONSE TIME time interval from when the monitored parameter exceeds its isolation initiation setpoint at the channel sensor until the isolation valves travel to their required positions. Times shall include diesel generator starting and sequence loading delays, where applicable. The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured. In lieu of measurement, response time may be verified for selected components provided that the components and methodology for verification have been previously reviewed and approved by the NRC.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE into the drywell such as that from pump seals or valve packing that is captured and conducted to a sump or collecting tank;, or

2. LEAKAGE into the drywell atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE;,

b. Unidentified LEAKAGE All LEAKAGE into the drywell that is not identified LEAKAGE,

c. Total LEAKAGE Sum of the identified and unidentified LEAKAGE;, and General Electric BWR/6 STS 1.1-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions LEAKAGE (continued)

d. Pressure Boundary LEAKAGE LEAKAGE through a nonisolable fault in a Reactor Coolant System (RCS) component body, pipe wall, or vessel wall. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

[ LINEAR HEAT GENERATION The LHGR shall be the heat generation rate per unit length of RATE (LHGR) fuel rod. It is the integral of the heat flux over the heat transfer area associated with the unit length. ]

LOGIC SYSTEM FUNCTIONAL A LOGIC SYSTEM FUNCTIONAL TEST shall be a test of all TEST logic components required for OPERABILITY of a logic circuit, from as close to the sensor as practicable up to, but not including, the actuated device, to verify OPERABILITY. The LOGIC SYSTEM FUNCTIONAL TEST may be performed by means of any series of sequential, overlapping, or total system steps so that the entire logic system is tested.

[ MAXIMUM FRACTION OF The MFLPD shall be the largest value of the fraction of limiting LIMITING POWER DENSITY power density in the core. The fraction of limiting power (MFLPD) density shall be the LHGR existing at a given location divided by the specified LHGR limit for that bundle type. ]

MINIMUM CRITICAL POWER The MCPR shall be the smallest critical power ratio (CPR) that RATIO (MCPR) exists in the core [for each class of fuel]. The CPR is that power in the assembly that is calculated by application of the appropriate correlation(s) to cause some point in the assembly to experience boiling transition, divided by the actual assembly operating power.

MODE A MODE shall correspond to any one inclusive combination of mode switch position, average reactor coolant temperature, and reactor vessel head closure bolt tensioning specified in Table 1.1-1 with fuel in the reactor vessel.

OPERABLE - OPERABILITY A system, subsystem, division, component, or device shall be OPERABLE or have OPERABILITY when it is capable of performing its specified safety function(s) and when all necessary attendant instrumentation, controls, normal or emergency electrical power, cooling and seal water, lubrication, and other auxiliary equipment that are required for the system, subsystem, division, component, or device to perform its specified safety function(s) are also capable of performing their related support function(s).

General Electric BWR/6 STS 1.1-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.5 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.5 RCS Operational LEAKAGE LCO 3.4.5 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE,

b. 5 gpm unidentified LEAKAGE, [and]

c. [30] gpm total LEAKAGE averaged over the previous 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> period, and

[ [d. 2 gpm increase in unidentified LEAKAGE within the previous

[4] hour period in MODE 1. ]

APPLICABILITY: MODES 1, 2, and 3.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

BA. Unidentified LEAKAGE BA.1 Reduce LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> not within limit. within limits.

OR Total LEAKAGE not within limit.

CB. Unidentified LEAKAGE CB.1 Reduced LEAKAGE to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> increase not within limit. within limit.

OR General Electric BWR/6 STS 3.4.5-1 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.5 CONDITION REQUIRED ACTION COMPLETION TIME CB.2 Verify source of 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> unidentified LEAKAGE increase is not service sensitive type 304 or type 316 austenitic stainless steel.

General Electric BWR/6 STS 3.4.5-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.5 BASES APPLIICABLE SAFETY ANALYSES (continued)

The unidentified LEAKAGE flow limit allows time for corrective action before the RCPB could be significantly compromised. The 5 gpm limit is a small fraction of the calculated flow from a critical crack in the primary system piping. Crack behavior from experimental programs (Refs. 4 and 5) shows leak rates of hundreds of gallons per minute will precede crack instability (Ref. 6).

The low limit on increase in unidentified LEAKAGE assumes a failure mechanism of intergranular stress corrosion cracking (IGSCC) that produces tight cracks. This flow increase limit is capable of providing an early warning of such deterioration.

No applicable safety analysis assumes the total LEAKAGE limit. The total LEAKAGE limit considers RCS inventory makeup capability and drywell floor sump capacity.

RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material degradation. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

b. Unidentified LEAKAGE Five gpm of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the drywell air monitoring, drywell sump level monitoring, and drywell air cooler condensate flow rate monitoring equipment can detect within a reasonable time period.

Separating the sources of leakage (i.e., leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, and corrective action. Violation of this LCO could result in continued degradation of the RCPB.

c. Total LEAKAGE The total LEAKAGE limit is based on a reasonable minimum detectable amount. The limit also accounts for LEAKAGE from known sources (identified LEAKAGE). Violation of this LCO indicates General Electric BWR/6 STS B 3.4.5-2 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.5 an unexpected amount of LEAKAGE and, therefore, could indicate new or additional degradation in an RCPB component or system.

BASES LCO (continued)

d. Unidentified LEAKAGE Increase An unidentified LEAKAGE increase of > 2 gpm within the previous 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> period indicates a potential flaw in the RCPB and must be quickly evaluated to determine the source and extent of the LEAKAGE. The increase is measured relative to the steady state value; temporary changes in LEAKAGE rate as a result of transient conditions (e.g., startup) are not considered. As such, the 2 gpm increase limit is only applicable in MODE 1 when operating pressures and temperatures are established. Violation of this LCO could result in continued degradation of the RCPB.

APPLICABILITY In MODES 1, 2, and 3, the RCS operational LEAKAGE LCO applies because the potential for RCPB LEAKAGE is greatest when the reactor is pressurized.

In MODES 4 and 5, RCS operational LEAKAGE limits are not required since the reactor is not pressurized and stresses in the RCPB materials and potential for LEAKAGE are reduced.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition D applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 With RCS unidentified or total LEAKAGE greater than the limits, actions must be taken to reduce the leak. Because the LEAKAGE limits are conservatively below the LEAKAGE that would constitute a critical crack size, 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> is allowed to reduce the LEAKAGE rates before the reactor must be shut down. If an unidentified LEAKAGE has been identified and quantified, it may be reclassified and considered as identified LEAKAGE.

However, the total LEAKAGE limit would remain unchanged.

General Electric BWR/6 STS B 3.4.5-3 Rev. 4.0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.5 CB.1 and CB.2 An unidentified LEAKAGE increase of > 2 gpm within a 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> period is an indication of a potential flaw in the RCPB and must be quickly evaluated. Although the increase does not necessarily violate the absolute unidentified LEAKAGE limit, certain susceptible components must be determined not to be the source of the LEAKAGE increase within the required Completion Time. For an unidentified LEAKAGE increase greater than required limits, an alternative to reducing LEAKAGE increase to within limits (i.e., reducing the leakage rate such that the current rate is less than the "2 gpm increase in the previous [4] hours" limit; either by isolating the source or other possible methods) is to evaluate RCS BASES ACTIONS (continued) type 304 and type 316 austenitic stainless steel piping that is subject to high stress or that contains relatively stagnant or intermittent flow fluids and determine it is not the source of the increased LEAKAGE. This type of piping is very susceptible to IGSCC.

The 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time is needed to properly reduce the LEAKAGE increase or verify the source before the reactor must be shut down.

DC.1 and DC.2 If any Required Action and associated Completion Time of Condition A or B is not met or if pressure boundary LEAKAGE exists, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE SR 3.4.5.1 REQUIREMENTS The RCS LEAKAGE is monitored by a variety of instruments designed to provide alarms when LEAKAGE is indicated and to quantify the various types of LEAKAGE. Leakage detection instrumentation is discussed in more detail in the Bases for LCO 3.4.7, "RCS Leakage Detection Instrumentation." Sump level and flow rate are typically monitored to determine actual LEAKAGE rates. However, any method may be used to quantify LEAKAGE within the guidelines of Reference 7. [ In conjunction with alarms and other administrative controls, an 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> Frequency for this Surveillance is appropriate for identifying changes in LEAKAGE and for tracking required trends (Ref. 8).

General Electric BWR/6 STS B 3.4.5-4 Rev. 4.0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions ENGINEERED SAFETY The ESF RESPONSE TIME shall be that time interval from FEATURE (ESF) RESPONSE when the monitored parameter exceeds its actuation setpoint TIME at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions). The response time may be measured by means of any series of sequential, overlapping, or total steps so that the entire response time is measured. In lieu of measurement, response time may be verified for selected components provided that the components and methodology for verification have been previously reviewed and approved by the NRC.

LEAKAGE LEAKAGE shall be:

a. Identified LEAKAGE

1. LEAKAGE, such as that from seals or valve packing, that is captured and conducted to collection systems or a sump or collecting tank;

2. LEAKAGE into the containment atmosphere from sources that are both specifically located and known either to not to interfere with the operation of leakage detection systems or not to be pressure boundary LEAKAGE;

3. Reactor Coolant System (RCS) LEAKAGE through a steam generator (SG) to the Secondary System (primary to secondary LEAKAGE); or

4. RCS LEAKAGE through the passive residual heat removal heat exchanger (PRHR HX) to the In containment Refueling Water Storage Tank (IRWST);

b. Unidentified LEAKAGE All LEAKAGE that is not identified LEAKAGE;.

AP1000 STS 1.1-3 Rev. 0

DRAFT TSTF-554, Rev. 0 Definitions 1.1 1.1 Definitions LEAKAGE (continued)

c. Pressure Boundary LEAKAGE LEAKAGE (except primary to secondary LEAKAGE and PRHR HX tube LEAKAGE) through a nonisolatable fault in an RCS component body, pipe wall, or vessel wall.

LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

MODE A MODE shall correspond to any one inclusive combination of core reactivity condition, power level, average reactor coolant temperature, and reactor vessel head closure bolt tensioning specified in Table 1.1-1 with fuel in the reactor vessel.

OPERABLE-OPERABILITY A system, subsystem, train, component, or device shall be OPERABLE or have OPERABILITY when it is capable of performing its specified safety function(s) and when all necessary attendant instrumentation, controls, normal or emergency electrical power, cooling and seal water, lubrication, and other auxiliary equipment that are required for the system, subsystem, train, component, or device to perform its specified safety function(s) are also capable of performing their related support function(s).

PHYSICS TESTS PHYSICS TESTS shall be those tests performed to measure the fundamental nuclear characteristics of the reactor core and related instrumentation. These tests are:

a. Described in Chapter 14, Initial Test Program, of the FSAR;

b. Authorized under the provisions of 10 CFR 50.59; or

c. Otherwise approved by the Nuclear Regulatory Commission.

PRESSURE AND The PTLR is the unit specific document that provides the TEMPERATURE LIMITS reactor vessel pressure and temperature limits, including REPORT (PTLR) heatup and cooldown rates, for the current reactor vessel fluence period. These pressure and temperature limits shall be determined for each fluence period in accordance with Specification 5.6.4.

AP1000 STS 1.1-4 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.7 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.7 RCS Operational LEAKAGE LCO 3.4.7 RCS operational LEAKAGE shall be limited to:

a. No pressure boundary LEAKAGE,

b. 0.5 gpm unidentified LEAKAGE,

c. 10 gpm identified LEAKAGE from the RCS,

d. 150 gallons per day primary to secondary LEAKAGE through any one Steam Generator (SG), and

e. 500 gallons per day primary to In-Containment Refueling Water Storage Tank (IRWST) LEAKAGE through the passive residual heat removal heat exchanger (PRHR HX).

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Pressure boundary A.1 Initiate action to isolate Immediately LEAKAGE exists. affected component, pipe, or vessel from the RCS by use of a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve.

AP1000 STS 3.4.7-1 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE 3.4.7 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME BA. RCS operational BA.1 Reduce LEAKAGE to within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> LEAKAGE not within limits.

limits for reasons other than pressure boundary LEAKAGE or primary to secondary LEAKAGE.

CB. Required Action and CB.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND OR CB.2 Be in MODE 5. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> Pressure boundary LEAKAGE exists.

OR Primary to secondary LEAKAGE not within limit.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.7.1 -------------------------------NOTES-------------------------------

1. Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after establishment of steady state operation.

2. Not applicable to primary to secondary LEAKAGE.

Verify RCS operational LEAKAGE is within limits by 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> performance of RCS water inventory balance.

AP1000 STS 3.4.7-2 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.7 BASES BACKGROUND (continued)

LCO 3.4.15, RCS Pressure Isolation Valve (PIV) Integrity, measures leakage through each individual PIV and can impact this LCO. Of the two PIVs in series in each isolated line, leakage measured through one PIV does not result in RCS LEAKAGE when the other is leak tight. If both valves leak and result in a loss of mass from the RCS, the loss must be included in the allowable identified LEAKAGE.

APPLICABLE Except for primary to secondary LEAKAGE, the safety analyses do not SAFETY address operational LEAKAGE. However, other operational LEAKAGE is ANALYSES related to the safety analyses for LOCA. The amount of LEAKAGE can affect the probability of such an event. The safety analysis for an event resulting in steam discharge to the atmosphere assumes a 300 gpd primary to secondary LEAKAGE as the initial condition.

Primary to secondary LEAKAGE is a factor in the dose releases outside containment resulting from a steam line break (SLB) accident. To a lesser extent, other accidents or transients involve secondary steam release to the atmosphere, such as a steam generator tube rupture (SGTR). The leak contaminates the secondary fluid.

The FSAR Chapter 15 (Ref. 3) analyses for the accidents involving secondary side releases assume 150 gpd primary to secondary LEAKAGE in each generator as an initial condition. The design basis radiological consequences resulting from a postulated SLB accident and SGTR are provided in Sections 15.1.5 and 15.6.3 of FSAR Chapter 15, respectively.

The RCS operational LEAKAGE satisfies Criterion 2 of 10 CFR 50.36(c)(2)(ii).

LCO RCS operational LEAKAGE shall be limited to:

a. Pressure Boundary LEAKAGE No pPressure boundary LEAKAGE is prohibited allowed, being indicative of material deterioration. LEAKAGE of this type is unacceptable as the leak itself could cause further RCPB deterioration, resulting in higher LEAKAGE. Violation of this LCO could result in continued degradation of the RCPB. LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

AP1000 STS B 3.4.7-2 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.7 BASES LCO (continued)

b. Unidentified LEAKAGE 0.5 gpm of unidentified LEAKAGE is allowed as a reasonable minimum detectable amount that the containment air F18 particulate radioactivity monitoring and containment sump level monitoring equipment, can detect within a reasonable time period. This leak rate supports leak before break (LBB) criteria. Separating the sources of leakage (i.e., leakage from an identified source versus leakage from an unidentified source) is necessary for prompt identification of potentially adverse conditions, assessment of the safety significance, and corrective action. Violation of this LCO could result in continued degradation of the RCPB, if the LEAKAGE is from the pressure boundary.

c. Identified LEAKAGE Up to 10 gpm of identified LEAKAGE is considered allowable because LEAKAGE is from known sources that do not interfere with detection of unidentified LEAKAGE and is well within the capability of the RCS Makeup System. Identified LEAKAGE includes LEAKAGE to the containment from specifically known and located sources, but does not include pressure boundary LEAKAGE.

Violation of this LCO could result in continued degradation of a component or system.

d. Primary to Secondary LEAKAGE through One SG The limit of 150 gallons per day per SG is based on the operational LEAKAGE performance criterion in NEI 97-06, Steam Generator Program Guidelines (Ref. 4). The Steam Generator Program operational LEAKAGE performance criterion in NEI 97-06 states, The RCS operational primary to secondary leakage through any one SG shall be limited to 150 gallons per day. The limit is based on operating experience with SG tube degradation mechanisms that result in tube leakage. The operational leakage rate criterion in conjunction with the implementation of the Steam Generator Program is an effective measure for minimizing the frequency of steam generator tube ruptures.

e. Primary to In-Containment Refueling Water Storage Tank (IRWST)

LEAKAGE through the Passive Residual Heat Removal Heat Exchanger (PRHR HX)

AP1000 STS B 3.4.7-3 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.7 The 500 gpd limit from the PRHR HX is based on the assumption that a single crack leaking this amount would not lead to a PRHR HX tube rupture under the stress condition of an RCS pressure increase event. If the leakage is through many cracks, and the cracks are BASES LCO (continued) very small, then the above assumption is conservative. This is conservative because the thickness of the PRHR HX tubes is approximately 60% greater than the thickness of the SG tubes.

Furthermore, a PRHR HX tube rupture would result in an isolable leak and would not lead to a direct release of radioactivity to the atmosphere.

APPLICABILITY In MODES 1, 2, 3, and 4, the potential for RCPB LEAKAGE is greatest when the RCS is pressurized.

In MODES 5 and 6, LEAKAGE limits are not required because the reactor coolant pressure is far lower, resulting in lower stresses and reduced potentials for LEAKAGE.

ACTIONS A.1 If pressure boundary LEAKAGE exists, the affected component, pipe, or vessel must be isolated from the RCS by a closed manual valve, closed and de-activated automatic valve, blind flange, or check valve. Normal LEAKAGE past the isolation device is acceptable as it will limit RCS LEAKAGE and prevent further deterioration. LEAKAGE past the isolation device is included in identified or unidentified LEAKAGE. If there is no available isolation device or if the flaw cannot be isolated from the RCS due to physical or operational reasons, then Condition C applies. The immediate Completion Time reflects the urgency with which the pressure boundary LEAKAGE must be isolated.

B.1 Unidentified LEAKAGE or identified LEAKAGE in excess of the LCO limits must be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. This Completion Time allows time to verify leakage rates and either identify unidentified LEAKAGE or reduce LEAKAGE to within limits before the reactor must be shut down. This action is necessary to prevent further deterioration of the RCPB.

AP1000 STS B 3.4.7-4 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.7 CB.1 and CB.2 If any pressure boundary LEAKAGE exists, or primary to secondary LEAKAGE is not within limits, or if any of the Required Actions and associated Completion Times cannot be met, unidentified or identified LEAKAGE cannot be reduced to within limits within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />, the reactor must be brought to lower pressure conditions to reduce the severity of the LEAKAGE and its potential consequences. It should be noted that LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE.

The reactor must be brought to MODE 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and to MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. This action reduces the LEAKAGE and also reduces the factors which tend to degrade the pressure boundary.

The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without ACTIONS challenging plant systems. In MODE 5, the pressure stresses acting on the RCPB are much lower, and further deterioration is much less likely.

BASES SURVEILLANCE SR 3.4.7.1 REQUIREMENTS Verifying RCS LEAKAGE within the LCO limits ensures the integrity of the RCPB is maintained. Pressure boundary LEAKAGE would at first appear as unidentified LEAKAGE and can only be positively identified by inspection.

Unidentified LEAKAGE and identified LEAKAGE are determined by performance of an RCS water inventory balance.

The RCS water inventory balance must be met with the reactor at steady state operating conditions. The Surveillance is modified by two Notes.

Note 1 states that this SR is not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after establishing steady state operation. The 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowance provides sufficient time to collect and process all necessary data after stable plant conditions are established.

Steady state operation is required to perform a proper inventory balance since calculations during maneuvering are not useful. For RCS operational LEAKAGE determination by inventory balance, steady state is defined as stable RCS pressure, temperature, power level, pressurizer level, and reactor coolant drain tank and in-containment refueling water storage tank (IRWST) levels.

AP1000 STS B 3.4.7-5 Rev. 0

DRAFT TSTF-554, Rev. 0 RCS Operational LEAKAGE B 3.4.7 RCS inventory monitoring via pressurizer level changes is valid in MODES 1, 2, 3, and 4 only when RCS conditions are stable, as described above. An early warning of pressure boundary LEAKAGE or unidentified LEAKAGE is provided by the automatic systems that monitor the containment atmosphere F18 particulate radioactivity and the containment sump level. It should be noted that LEAKAGE past seals and gaskets is not pressure boundary LEAKAGE. These LEAKAGE detection systems are specified in LCO 3.4.9, RCS LEAKAGE Detection Instrumentation.

Note 2 states that this SR is not applicable to primary to secondary LEAKAGE because LEAKAGE of 150 gallons per day cannot be measured accurately by an RCS water inventory balance.

The containment atmosphere F18 particulate radioactivity LEAKAGE measurement is valid only for plant power > 20% RTP.

The containment atmosphere F18 particulate radioactivity LEAKAGE measurement during MODE 1 is not valid while containment purge occurs or within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after the end of containment purge.

BASES SURVEILLANCE REQUIREMENTS (continued)

The containment sump level change method of detecting leaks during MODES 1, 2, 3, and 4 is not valid while containment purge occurs or within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after the end of containment purge.

The containment sump level change method of detecting leaks during MODES 1, 2, 3, and 4 is not valid during extremely cold outside ambient conditions when frost is forming in the interior of the containment vessel.

The 72-hour Frequency is a reasonable interval to trend LEAKAGE and recognizes the importance of early leakage detection in the prevention of accidents.

SR 3.4.7.2 This SR verifies that primary to secondary LEAKAGE is less or equal to 150 gallons per day through any one SG. Satisfying the primary to secondary LEAKAGE limit ensures that the operational LEAKAGE performance criterion in the Steam Generator Program is met. If this SR is not met, compliance with LCO 3.4.17, Steam Generator Tube Integrity, should be evaluated. The 150 gallons per day limit is measured at room temperature as described in Reference 5. The operational LEAKAGE rate limit applies to LEAKAGE through any one AP1000 STS B 3.4.7-6 Rev. 0