WM 16-0008, Wolf Creek Generating Station, Redacted Version of Revision 29 to Updated Safety Analysis Report, Chapter 18.0 - Response to NUREG-0737 Clarification of TMI Action Plan Requirements
| ML16204A011 | |
| Person / Time | |
|---|---|
| Site: | Wolf Creek  |
| Issue date: | 05/31/2016 |
| From: | Wolf Creek |
| To: | Office of Nuclear Reactor Regulation |
| Shared Package | |
| ML16203A351 | List:
|
| References | |
| WM 16-0008 | |
| Download: ML16204A011 (250) | |
Text
WOLF CREEK TABLE OF CONTENTS
CHAPTER 18.0
RESPONSE TO NUREG-0737 CLARIFICATION OF TMI ACTION PLAN REQUIREMENTS
Section Page
18.0 RESPONSE TO NUREG-0737, "CLARIFICATION OF 18.0-1 TMI ACTION PLAN REQUIREMENTS" 18.0.1 COMPLIANCE WITH REVISED REGULATIONS 10.0-1 10CFR50 AND 10CFR52 (NRC 2008-0122) RIN 3150-A I10, "ENHANCEMENTS TO EMERGENCY PREPAREDNESS REGULATIONS" [EFFECTIVE 12/23/2011] AFFECTING RESPONSE TO NUREG-0737
18.1 OPERATIONAL SAFETY 18.1-1
18.1.1 SHIFT TECHNICAL ADVISOR (I.A.1.1) 18.1-1
18.1.2 SHIFT SUPERVISOR'S ADMINISTRATIVE 18.1-5
DUTIES (I.A.1.2)
18.1.3 SHIFT MANNING (I.A.1.3) 18.1-7
18.1.4 IMMEDIATE UPGRADING OF REACTOR OPERATOR 18.1-10
AND SENIOR REACTOR OPERATOR TRAINING
AND QUALIFICATIONS (I.A.2.1)
18.1.5 ADMINISTRATION OF TRAINING PROGRAMS 18.1-12
(I.A.2.3)
18.1.6 REVISE SCOPE AND CRITERIA FOR 18.1-13
LICENSING EXAMINATIONS (I.A.3.1)
18.1.7 EVALUATION OF ORGANIZATION AND 18.1-14
MANAGEMENT (I.B.1.2)
18.1.8 GUIDANCE FOR EVALUATION AND 18.1-17
DEVELOPMENT OF PROCEDURES FOR
TRANSIENTS AND ACCIDENTS (I.C.1)
18.1.9 SHIFT RELIEF AND TURNOVER PROCEDURE 18.1-22
(I.C.2)
18.1.10 SHIFT SUPERVISOR'S RESPONSIBILITIES 18.1-24
(I.C.3)
18.1.11 CONTROL ROOM ACCESS (I.C.4) 18.1-24
18.1.12 PROCEDURES FOR FEEDBACK OF OPERATING 18.1-26
EXPERIENCE TO PLANT STAFF (I.C.5)
18.1.13 VERIFY CORRECT PERFORMANCE OF 18.1-28
OPERATING ACTIVITIES (I.C.6)
18.0-i Rev. 29 WOLF CREEK TABLE OF CONTENTS (Continued)
Section Page
18.1.14 NSSS VENDOR REVIEW OF PROCEDURES 18.1-30
(I.C.7)
18.1.15 PILOT MONITORING OF SELECTED EMERGENCY 18.1-31
PROCEDURES FOR NEAR-TERM OPERATING
LICENSE APPLICANTS (I.C.8)
18.1.16 CONTROL ROOM DESIGN REVIEW (I.D.1) 18.1-32
18.1.17 PLANT SAFETY PARAMETER DISPLAY SYSTEM 18.1-36
(I.D.2)
18.1.18 SPECIAL LOW POWER TESTING AND 18.1-39
TRAINING (I.G.1)
18.2 SITING AND DESIGN 18.2-1
18.2.1 POSTACCIDENT REACTOR COOLANT SYSTEM 18.2-1
VENTING (II.B.1)
18.2.2 DESIGN REVIEW OF THE PLANT SHIELDING 18.2-6
(II.B.2)
18.2.3 POSTACCIDENT SAMPLING SYSTEM (II.B.3) 18.2-19
18.2.4 TRAINING FOR MITIGATING CORE DAMAGE 18.2-25
(II.B.4)
18.2.5 PERFORMANCE TESTING OF BOILING-WATER 18.2-27
REACTOR AND PRESSURIZED-WATER REACTOR
RELIEF AND SAFETY VALVES (II.D.1)
18.2.6 DIRECT INDICATION OF RELIEF AND SAFETY 18.2-30
VALVE POSITION (II.D.3)
18.2.7 AUXILIARY FEEDWATER SYSTEM 18.2-32
EVALUATION (II.E.1.1)
18.2.8 AUXILIARY FEEDWATER AUTOMATIC 18.2-33
INITIATION AND FLOW INDICATION
(II.E.1.2)
18.2.9 EMERGENCY POWER SUPPLY FOR PRESSURIZER 18.2-36
HEATERS (II.E.3.1)
18.0-ii Rev. 29 WOLF CREEK TABLE OF CONTENTS (Continued)
Section Page
18.2.10 DEDICATED HYDROGEN PENETRATIONS 18.2-39
(II.E.4.1)
18.2.11 CONTAINMENT ISOLATION DEPENDABILITY 18.2-40
(II.E.4.2)
18.2.12 ACCIDENT MONITORING INSTRUMENTATION 18.2-44
(II.F.1)
18.2.13 INSTRUMENTATION FOR DETECTION OF 18.2-59
INADEQUATE CORE COOLING (II.F.2)
18.2.14 EMERGENCY POWER FOR PRESSURIZER 18.2-92
EQUIPMENT (II.G.1)
18.2.15 REQUEST BY NRC INSPECTION AND 18.2-94
ENFORCEMENT BULLETINS (II.K.1)
18.2.16 ORDERS ON FACILITIES WITH BABCOCK 18.2-95
AND WILCOX NUCLEAR STEAM SUPPLIER
SYSTEMS (II.K.2-SERIES)
18.2.17 RECOMMENDATIONS FROM THE BULLETINS 18.2-97
AND ORDERS TASK FORCE (II.K.3-SERIES)
18.2.18 REFERENCES 18.2-113
18.3 EMERGENCY PREPARATION AND RADIATION 18.3-1 PROTECTION
18.3.1 UPGRADE EMERGENCY PREPAREDNESS (III.A.1.1) 18.3-1
18.3.2 UPGRADE EMERGENCY SUPPORT FACILITIES 18.3-1
(III.A.1.2)
18.3.3 IMPROVING LICENSEE EMERGENCY 18.3-7
PREPAREDNESS-LONG TERM (III.A.2)
18.3.4 INTEGRITY OF SYSTEMS OUTSIDE OF 18.3-10
CONTAINMENT (III.D.1.1)
18.3.5 IMPROVED INPLANT IODINE INSTRUMENTATION 18.3-12
UNDER ACCIDENT CONDITIONS (III.D.3.3)
18.3.6 CONTROL ROOM HABITABILITY (III.D.3.4) 18.3-14
18.4 ENHANCEMENTS TO EMERGENCY 18.4-1 PREPAREDNESS REGULATIONS
18.4.1 EMERGENCY FACILITIES AND EQUIPMENT 18.4-1
Appendix A AGING MANAGEMENT PROGRAMS & TIME LIMITED 18 A-1 AGING ANALYSES
18.0-iii Rev. 29 WOLF CREEK TABLE OF CONTENTS (Continued)
LIST OF TABLES
Table No. Title
18.1-1 ISEG FUNCTION CROSS REFERENCE
18.2-1 Mitigating Core Damage Course
18.2-2 Essential/Nonessential Containment Penetrations
18.2-3 Details for the Thermocouple/Core Cooling Monitor
System
18.2-4 Narrow Range Measurement Uncertainty for Reactor
Vessel Level Instrumentation System
18.0-iv Rev. 29
WOLF CREEK CHAPTER 18 - LIST OF FIGURES
- Refer to Section 1.6 and Table 1.6-3. Controlled drawings were removed from the USAR at Revision 17 and are considered incorporated by reference.
Figure # Sheet Title Drawing #* 18.2-1 0 Reactor Head Vent System 18.2-2 0 Post-Accident Radiation Zones Elevation 1974' 18.2-3 0 Post-Accident Radiation Zones Elevation 1988' 18.2-4 0 Post-Accident Radiation Zones Elevation 2000' 18.2-5 0 Post-Accident Radiation Zones Elevation 2026' 18.2-6 0 Post-Accident Radiation Zones Elevation 2047'-6" 18.2-7 0 Post-Accident Radiation Zones Control Building and Communications Corridor Elevations 1974' and 1984' 18.2-8 0 Post-Accident Radiation Zones Control and Diesel Generator Buildings and Communications Corridor
Elevations 2000' and 2016' 18.2-9 0 Post-Accident Radiation Zones Control and Diesel Generator Buildings and Communications Corridor
Elevations 2032' and 2047'-6" 18.2-10 0 Normalized Dose Rate Decay Curves for Airborne Source (Source A) 18.2-11 0 Normalized Dose Rate Decay Curves for Sump Source (Source C) with 1 Percent Cs and 50 Percent
Cs 18.2-12 0 Functional Diagram (Reactor Core Subcooling Monitor) 18.2-13 0 Reactor Vessel Level Instrumentation System 18.2-14 0 PORV Opening Band - Turbine Trip with Condenser Unavailable 18.2-15 0 Nuclear Sampling System M-12SJ04
18.0-v Rev. 29 WOLF CREEK CHAPTER 18.0
18.0 RESPONSE TO NUREG-0737, "CLARIFICATION OF TMI ACTION PLAN REQUIREMENTS" The following discussion of the SNUPPS response to NUREG-0737 is subdivided
into three sections: 18.1, Operational Safety; 18.2, Siting and Design; and
18.3, Emergency Preparations and Radiation Protection. Unless otherwise noted, the subsections presenting the NRC guidance are verbatim quotes from NRC
documents.
Information in the sections listed below is historical and reflects conditions
at the time of plant licensing. This material will not be updated as a whole
as it establishes the conditions relevant to initial plant siting and design.
Changes to facilities or conditions will be reviewed and updated only when
potential hazards not previously analyzed are identified.
18.2.5 18.2.12 18.2.13.2 paragraph 2 2.d.
18.2.13.2 paragraph 2 3.
18.2.13.2 paragraph 2 4.d.
18.2.13.2 paragraph 2 4.e. 1)
18.2.13.2 paragraph 2 4.e. 2)
18.2.13.2 paragraph 2 7.
18.2.13.2 paragraph 2 8.
18.2.13.2 paragraph 2 9.
18.0.1 COMPLIANCE WITH REVSED REGULATIONS 10CFR50 AND 10CFR52 (NRC-2008-0122)
RIN 3150-AI10, "ENHANCEMENTS TO EMERGENCY PREPAREDNESS REGULATIONS" [EFFECTIVE 12/23/2011] AFFECTING RESPONSE TO NUREG-0737
Section 18.4 provides a discussion for compliance with revised regulations 10CFR50 and 10CFR52 pertaining to "Enhancements to Emergency Preparedness Regulations" applicable to the Emergency Operations Facility (EOF) and Alternate Technical Support Center (TSC). The compliance with the revised regulations may enhance or supersede previous information provided in section 18.3 applicable to the EOF and Alternate TSC for the response to NUREG-0737.
The comprehensive emergency plan provides the implementation of the revised objectives and requirements of 10CFR50, Appendix E, applicable to the EOF and Alternate TSC.
18.0-1 Rev. 28 WOLF CREEK 18.1 OPERATIONAL SAFETY
18.1.1 SHIFT TECHNICAL ADVISOR (I.A.1.1)
18.1.1.1 NRC Guidance Per NUREG-0737
Position
Each licensee shall provide an on-shift technical advisor to the shift supervisor. The shift technical advisor (STA) may serve more than one unit at
a multiunit site if qualified to perform the advisor function for the various
units.
The STA shall have a bachelor's degree or equivalent in a scientific or
engineering discipline and have received specific training in the response and
analysis of the plant for transients and accidents. The STA shall also receive
training in plant design and layout, including the capabilities of
instrumentation and controls in the control room. The licensee shall assign
normal duties to the STAs that pertain to the engineering aspects of ensuring safe operations of the plant, including the review and evaluation of operating experience.
Clarification
The staff letter of October 30, 1979 from H. R. Denton to All Operating Nuclear
Power Plants clarified the short-term STA requirements. The letter indicated
that the STAs must have completed all training by January 1, 1981. This paper
confirms these requirements and requests additional information.
The need for the STA position may be eliminated when the qualifications of the
shift supervisors and senior operators have been upgraded and the man-machine
interface in the control room has been acceptably upgraded. However, until
these long term improvements are attained, the need for an STA program will
continue.
The staff has not yet established the detailed elements of the academic and
training requirements of the STA beyond the guidance given in its October 30, 1979 letter. Nor has the staff made a decision on the level of upgrading
required for licensed operating personnel and the man-machine interface in the
control room that would be acceptable for eliminating the need of an STA.
Until these requirements for eliminating the STA position have been
established, the staff continues to require that, in addition to the staffing
requirements specified in its July 31, 1980 letter (as revised by item I.A.1.3
of this report), an STA be available for duty on each operating shift when a
plant is being operated in Modes 1-4 for a PWR and Modes 1-3 for a BWR. At
other times, an STA is not required to be on duty.
18.1-1 Rev. 0 WOLF CREEK Since the October 30, 1979 letter was issued, several efforts have been made to
establish, for the longer term, the minimum level of experience, education, and
training for STAs. These efforts include work on the revision to ANS-3.1, work
by the Institute of Nuclear Power Operations (INPO), and internal staff efforts.
INPO has issued a document entitled "Nuclear Power Plant Shift Technical
Advisor--Recommendations for Position Description, Qualifications, Education, and Training." A copy of Revision 0 of this document, dated April 30, 1980, is
attached as Appendix C [to NUREG-0737]. Sections 5 and 6 of the INPO document
describe the education, training, and experience requirements for STAs. The
NRC staff finds that the descriptions set forth in Sections 5 and 6 of Revision
0 to the INPO document are an acceptable approach for the selection and
training of personnel to staff the STA positions. [Note: This should not be interpreted to mean that this is an NRC requirement at this time. The intent is to refer to the INPO document as acceptable for interim guidance for a
utility in planning its STA program over the long term (i. e., beyond the
January 1, 1981 requirement to have STAs in place in accordance with the
qualification requirements specified in the staff's October 30, 1979 letter).]
No later than January 1, 1981, all licensees of operating reactors shall
provide this office with a description of their STA training program and their
plans for requalification training. This description shall indicate the level
of training attained by STAs by January 1, 1981 and demonstrate conformance
with the qualification and training requirements in the October 30, 1979
letter. Applicants for operating licenses shall provide the same information
in this application, or amendments thereto, on a schedule consistent with the
NRC licensing review schedule.
No later than January 1, 1981, all licensees of operating reactors shall provide this office with a description of their long-term STA program, including qualification, selection criteria, training plans, and plans, if any, for the eventual phaseout of the STA program. (Note: The description shall
include a comparison of the licensee/applicant program with the above-mentioned
INPO document. This request solicits industry views to assist NRC in
establishing long-term improvements in the STA program. Applicants for
operating licenses shall provide the same information in their application, or
amendments thereto, on a schedule consistent with the NRC licensing review
schedule.)
18.1-2 Rev. 0 WOLF CREEK 18.1.1.2 The Operating Agent Response
[Note: The remainder of Section 18.1.1 is included for historical purposes, however, the operating agent's conformance with NUREG-0737, Item I.A.1.1, is as specified by the Commission Policy Statement on Engineering Expertise on Shift.]
General The NRC issued a Policy Statement on Engineering Expertise on Shift in October
1985. The Commission Policy Statement on Engineering Expertise on shift is discussed in sections 13.2.1.1.3.1 and 13.2.1.1.3.2. The Policy Statement permits either of two options to be used to implement long term goals towards
upgrading the qualifications and training of operating staffs. These are
Option 1: Combined SRO/STA Position and Option 2: Continued Use of STA
Position. Either of these options may be used to meet the requirements of
NUREG-0737, Item I.A.1.1. Also, either Option 1 or 2 may be used on each shift. The complete requirements for the options are as follows:
Option 1: Combined SRO/STA Position
This option is satisfied by assigning an individual with the following qualifications to each operating shift crew as one of the SROs (preferably the Shift Manager) required by 10 CFR 50.54(m)(2)(i):
- a. Licensed as a senior operator on the nuclear power unit(s) to which assigned and;
- b. Meets the STA training criteria of NUREG-0737, Item I.A.1.1, and one of the following educational
alternatives:
- 1. Bachelor's degree in engineering from an accredited institution;
- 2. Professional Engineer's license obtained by the successful completion of the PE
examination;
- 3. Bachelor's degree in engineering technology from an accredited institution, including course work in the physical, mathematical, or engineering sciences; or
- 4. Bachelor's degree in a physical science from an accredited institution, including course work in the physical, mathematical, or engineering sciences.
18.1-3 Rev. 20 WOLF CREEK Option 2: Continued Use of STA Position
This option is satisfied by placing on each shift a dedicated Shift Technical Advisor (STA) who meets the STA criteria of NUREG-0737, Item I.A.1.1. The STA should assume an active role in shift activities. For example, the STA should review plant logs, participate in shift turnover activities, and maintain an awareness of plant configuration and status.
As stated in NUREG-0737 and the background to the NRC Policy Statement (discussed below), the requirement for an STA qualified person in the power
plant in addition to an SRO licensed Shift Manager was intended to be a temporary requirement until the qualifications of the Shift Manager and senior operators are upgraded and control boards are reviewed and modified to make
information and controls more useful to the operators. This is consistent with
the industry consensus established by INPO standard GPG-01, "Nuclear Power
Plant Shift Technical Advisor Position Description Qualifications, Education and Training" which refers to the fact of this position being "eliminated" when
certain additional actions are completed. The December 17, 1981 approved copy
of ANSI/ANS 3.1 also referred to this position as "interim."
The NRC staff has completed the review of the WCGS operator qualification
program developed to address NUREG-0737, Item I.A.1.1. The program and NRC
staff review results are discussed below.
Man-Machine Interface Upgrade The man-machine interface in the control room has been upgraded by means of an
extensive control room design review which included human factors input. For a
detailed description of this effort refer to Section 18.1.16 and 18.1.17.
Operator Qualification Upgrade Operator qualification upgrading in accordance with NUREG-0737, Item I.A.1.1 is
discussed in Section 13.2.1.1.3.
The NRC staff, in SER Supplement 5, noted that if the Kansas State University
adopted a Bachelor of Science Degree in Engineering Technology with a Nuclear
Option program, completion of the requirements for this degree would achieve
the necessary engineering expertise on shift. The program, which involves over
18.1-4 Rev. 13 WOLF CREEK 80 semester hours of college level credit, has been inaugurated as discussed in
Section 13.2.1.1.3, Item 1.c. The schedule for completion of this training is
provided in KMLNRC 85-210, dated September 3, 1985.
In the Fall of 1992, WCNOC suspended the implementation of its operator
Baccalaureate program. In place of this program, WCNOC implemented a Shift
Engineer Program. The Shift Engineers meet the academic and training
requirements to perform the duties of STA.
Training requirements for the STA are described in sections 13.2.1.1.3.2 and 13.2.2.12.
WCNOC has either a Senior Reactor Operator or a Shift Engineer who meets the STA training criteria of NUREG-0737, assigned to each of the Control Room
Operating Crews when the reactor is in MODES 1-4.
18.1.1.3 Conclusion The Operating Agent's actions to upgrade qualification of operating staff and
the man-machine interface for control room personnel are consistent with the
intent and specifics of the long-term resolution of Item I.A.1.1 of NUREG-0737.
18.1.2 SHIFT SUPERVISOR'S ADMINISTRATIVE DUTIES (I.A.1.2)
18.1.2.1 NRC Guidance Per NUREG-0578 Position
- 1. The highest level of corporate management of each licensee shall issue and periodically reissue a management directive that emphasizes the primary management responsibility of the shift supervisor for the safe operation of the plant under all conditions on his shift and that clearly establishes his command
duties.
- 2. Plant procedures shall be reviewed to ensure that the duties, responsibilities, and authority of the shift supervisor and control room operators are properly defined to effect the establishment of a definite line of command and clear delineation of the command decision authority of the shift supervisor in the control room, relative to other plant management personnel.
Particular emphasis shall be placed on the following:
- a. The responsibility and authority of the shift supervisor when on duty in the control room shall be to maintain the broadest perspective of operational conditions affecting the safety of the plant as a matter of highest priority at all times. The principle shall be reinforced that the shift supervisor should not become totally involved in any single operation in times of emergency when multiple operations are required in the control room.
18.1-5 Rev. 20 WOLF CREEK
- b. The shift supervisor, until properly relieved, shall remain in the control room at all times during accident situations to direct the activities of control room operators. Persons authorized to relieve the shift supervisor shall be specified.
- c. If the shift supervisor is temporarily absent from the control room during routine operations, a lead control room operator shall be designated to assume the control room command function. These temporary duties, responsibilities, and authority shall be clearly specified.
- 3. Training programs for shift supervisors shall emphasize and reinforce the responsibility for safe operation and the management function the shift supervisor is to provide for ensuring safety.
- 4. The administrative duties of the shift supervisor shall be reviewed by the senior officer of each utility responsible for plant operations. Administrative functions that detract from or are subordinate to the management responsibility for ensuring the safe operation of the plant shall be delegated to other operations personnel not on duty in the control room.
18.1.2.2 The Operating Agent Response The President and Chief Executive Officer issues and reviews on an annual basis
a management directive which emphasizes the responsibilities of the Shift
Manager. The directive clearly emphasizes the command responsibilities of the Shift Manager during all normal and emergency operating conditions.
As discussed in Section 13.1.2.2.1, plant administrative procedures also define
the duties, responsibilities, and authority of Shift Managers, Control Room
Supervisors, and Reactor Operators (ROs). Licensed operators are trained in
accordance with training programs which meet 10 CFR 55 criteria.
Administrative procedures further define the line of command for the Shift
Manager. The Shift Manager reports to the Superintendent Operations during
normal operations and to the Duty/Call Superintendent
18.1-6 Rev. 17 WOLF CREEK during an emergency. The Shift Manager is the senior licensed management representative onsite on back shifts. The Control Room Supervisor, who reports to the Shift Manager, is in direct charge of the control room during normal operation, in order to allow the Shift Manager to direct his attention to overall plant operation for which he is responsible. In the event of the absence of the Shift Manager from the control room the control room command function is established in accordance with Technical Specifications.
In conjunction with the annual review of the management directive defining the
Shift Manager's authority and responsibilities, the President and Chief Executive Officer is provided an assessment of the administrative duties undertaken by the Shift Manager. If these duties are found to detract from the Shift Manager's responsibility for safe operation of the plant, they will be delegated to other appropriate members of the station staff.
18.1.2.3 Conclusion
The Operating Agent's commitment to the establishment and annual review of
management directives defining the responsibilities and authority of the Shift
Manager and to the implementation of training programs in accordance with 10 CFR Part 55 meet the specifics of Item I.A.1.2 in NUREG-0737.
18.1.3 SHIFT MANNING (I.A.1.3)
18.1.3.1 NRC Guidance Per NUREG-0737
Position
This position defines shift manning requirements for normal operation. The letter of July 31, 1980 from D. G. Eisenhut to all power reactor licensees and
applicants sets forth the interim criteria for shift staffing (to be effective
pending general criteria that will be the subject of future rule-making).
Overtime restrictions were also included in the July 31, 1980 letter.
Clarification (as modified by NRC Generic Letter 82-12)
Licensees of operating plants and applicants for operating licenses shall
include in their administrative procedures (required by license conditions)
provisions governing required shift staffing and movement of key individuals about the plant. These provisions are required to assure that qualified plant personnel to man the operational shifts are readily available in the event of
an abnormal or emergency situation.
18.1-7 Rev. 13 WOLF CREEK These administrative procedures shall also set forth a policy, the objective of
which is to prevent situations where fatigue could reduce the ability of
operating personnel to keep the reactor in a safe condition. The controls
established should assure that, to the extent practicable, personnel are not assigned to shift duties while in a fatigued condition that could significantly
reduce their mental alertness or their decision making ability. The controls
shall apply to the plant staff who perform safety-related functions (e.g.,
senior reactor operators, reactor operators, auxiliary operators, health
physicists, and key maintenance personnel).
IE Circular No. 80-02, "Nuclear Power Plant Staff Work Hours", dated February
1, 1980 discusses the concern of overtime work for members of the plant staff
who perform safety-related functions. The guidance contained in IE Circular No.
80-02 was amended by the July 31, 1980 letter. In turn, the overtime guidance of the July 31, 1980 letter was revised in Section I.A.1.3 of NUREG-0737. The NRC has issued a policy statement which further revises the overtime guidance
as stated in NUREG-0737. This guidance is as follows:
Enough plant operating personnel should be employed to maintain adequate shift
coverage without routine heavy use of overtime. The objective is to have
operating personnel work a normal 8-hour day, 40-hour week while the plant is
operating. However, in the event that unforeseen problems require substantial
amounts of overtime to be used, or during extended periods of shutdown for
refueling, major maintenance or major plant modifications, on a temporary
basis, the following guidelines shall be followed:
- a. An individual should not be permitted to work more than 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> straight (excluding shift turnover time).
- b. An individual should not be permitted to work more than 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> in any 24-hour period, nor more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> in any 48-hour period, nor more than 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> in any seven day period (all excluding shift turnover time).
- c. A break of at least eight hours should be allowed between work periods (including shift turnover time).
- d. Except during extended shutdown periods, the use of overtime should be considered on an individual basis and not for the entire staff on shift.
18.1-8 Rev. 0 WOLF CREEK Recognizing that very unusual circumstances may arise requiring deviation from
the above guidelines, such deviation shall be authorized by the plant manager
or his deputy, or higher levels of management. The paramount consideration in
such authorization shall be that significant reductions in the effectiveness of operating personnel would be highly unlikely. Authorized deviations to the
working hour guidelines shall be documented and available for NRC review.
In addition, procedures are encouraged that would allow licensed operators at
the controls to be periodically relieved and assigned to other duties away from
the control board during their tours of duty.
Operating license applicants shall complete these administrative procedures
before fuel loading. Development and implementation of the administrative
procedures at operating plants will be reviewed by the Office of Inspection and Enforcement beginning October 1, 1982.
See Section III.A.1.2 [of NUREG-0737] for minimum staffing and augment
capabilities for emergencies.
18.1.3.2 The Operating Agent Response Shift staffing is discussed in Section 13.1. The Operating Agent has an
administrative procedure governing shift manning and movement of key
individuals. Unexpected absences are also addressed in the procedure.
Additional information on staffing requirements is contained in the WCGS
Technical Specifications and in the Technical Requirements Manual.
In addition, the Operating Agent administrative procedures discuss the overtime
restrictions addressed in NUREG-0737 as revised by Generic Letter 82-12. The
Operating Agent has committed to comply with these limitations, except in cases
where special circumstances require additional coverage. Any such exceptions
are approved by the Plant Manager or his designated alternate, with appropriate
documentation.
WCGS complies with 10 CFR 26, Subpart I, "Managing Fatigue." Procedures and Programs affected by 10 CFR 26, Subpart I, has been updated to ensure compliance with the rule.
18.1.3.3 Conclusion
The Operating Agent's commitments to a minimum shift complement and the
additional commitment to observing the overtime restrictions listed in NUREG-0737, as revised by Generic Letter 82-12, meet the NRC's guidance.
18.1-9 Rev. 23 WOLF CREEK 18.1.4 IMMEDIATE UPGRADING OF REACTOR OPERATOR AND SENIOR
REACTOR OPERATOR TRAINING AND QUALIFICATIONS (I.A.2.1)
18.1.4.1 NRC Guidance Per NUREG-0737
Position
Effective December 1, 1980, an applicant for a SRO license will be required to have been a licensed operator for 1 year.
Clarification
Applicants for SRO either come through the operations chain (C operator to B
operator to A operator, etc.) or are degree-holding staff engineers who obtain
licenses for backup purposes.
In the past, many individuals who came through the operator ranks were
administered SRO examinations without first being an operator. This was clearly a poor practice and the letter of March 28, 1980 requires reactor operator experience for SRO applicants.
However, NRC does not wish to discourage staff engineers from becoming licensed
SROs. This effort is encouraged because it forces engineers to broaden their
knowledge about the plant and its operation.
In addition, in order to attract degree-holding engineers to consider the Shift
Supervisor's job as part of their career development, NRC should provide an
alternate path to holding an operator's license for 1 year.
The track followed by a high-school graduate (a nondegreed individual) to
become an SRO would be 4 years as a control room operator, at least one of
which would be as a licensed operator, and participation in an SRO training
program that includes 3 months onshift as an extra person.
The track followed by a degree-holding engineer would be, at a minimum, 2 years
of responsible nuclear power plant experience as a staff engineer, participation in an SRO training program equivalent to a cold applicant
training program, and 3 months onshift as an extra person in training for an
SRO position.
Holding these positions ensures that individuals who will direct the licensed
activities of licensed operators have had the necessary combination of
education, training, and actual operating experience prior to assuming a
supervisory role at that facility.
18.1-10 Rev. 0 WOLF CREEK The staff realizes that the necessary knowledge and experience can be gained in
a variety of ways. Consequently, credit for equivalent experience should be
given to applicants for SRO licenses.
Applicants for SRO licenses at a facility may obtain their 1-year operating
experience in a licensed capacity (operator or senior operator) at another
nuclear power plant. In addition, actual operating experience in a position
that is equivalent to a licensed operator or senior operator at military
propulsion reactors will be acceptable on a one-for-one basis. Individual
applicants must document this experience in their individual applications in
sufficient detail so that the staff can make a finding regarding equivalency.
Applicants for SRO licenses who possess a degree in engineering or applicable
sciences are deemed to meet the above requirement, provided they meet the requirements set forth in Sections A.1.a. and A.2. in enclosure l in the letter from H. R. Denton to all power reactor applicants and licensees, dated March
28, 1980, and have participated in a training program equivalent to that of a
cold senior reactor operator applicant.
NRC has not imposed the 1-year experience requirement on cold applicants for
SRO licenses. Cold applicants are to work on a facility not yet in operation;
their training programs are designed to supply the equivalent of the experience
not available to them.
18.1.4.2 The Operating Agent Response As discussed in Section 13.2, the Operating Agent has committed to conduct its
licensed operator training and requalification programs in accordance with the
requirements of 10 CFR Part 55. In addition, the Operating Agent complies with training and qualification guidance delineated in Regulatory Guide 1.8, Revision 2, Personnel Selection and Training, which references ANS-3.1-1981.
Additional discussion of the Operating Agent's commitments relative to training
and requalification programs is presented in Section 18.1.6.
18.1.4.3 Conclusion
The Operating Agent has committed to comply with 10 CFR Part 55 requirements
for operator licensing and requalification programs and to follow
recommendations contained in supplementary industry guidance.
18.1-11 Rev. 14 WOLF CREEK 18.1.5 ADMINISTRATION OF TRAINING PROGRAMS (I.A.2.3)
18.1.5.1 NRC Guidance Per NUREG-0737
Position
Pending accreditation of training institutions, licensees and applicants for
operating licenses will assure that training center and facility instructors
who teach systems, integrated responses, transient, and simulator courses
demonstrate SRO qualifications and be enrolled in appropriate requalification
programs.
Clarification
The above position is a short-term position. In the future, accreditation of training institutions will include review of the procedure for certification of
instructors. The certification of instructors may, or may not, include
successful completion of an SRO examination.
The purpose of the examination is to provide the NRC with reasonable assurance
during the interim period that instructors are technically competent.
The requirement is directed to permanent members of training staff who teach
the subjects listed above, including members of other organizations who
routinely conduct training at the facility. There is no intention to require
guest lecturers who are experts in particular subjects (reactor theory, instrumentation, thermodynamics, health physics, chemistry, etc.) to
successfully complete an SRO examination. Nor is it intended to require a
system expert, such as the instrument and control supervisor teaching the control rod drive system, to complete an SRO examination.
18.1.5.2 The Operating Agent Response This material is discussed in Section 13.2.1.2.2, 13.2.2.10.3 and 13.2.3.4.
All operator license program instructors are required to participate in selected requalification program topics, for licensed operators. In addition, licensed training instructors engaged in operator training participate in the
following activities:
- Periodic onshift assignments
- Review of facility operating and emergency operating procedures as they are developed
18.1-12 Rev. 12 WOLF CREEK
- Participation in instructor certification programs, such as those proposed by INPO.
18.1.5.3 Conclusion
The Operating Agent has committed to comply with NRC guidance relative to the
training and qualifications of nuclear training staff, and meets the legal
requirements of 10 CFR Part 55 where SRO licenses are required.
18.1.6 REVISE SCOPE AND CRITERIA FOR LICENSING EXAMINATIONS
(I.A.3.1)
18.1.6.1 NRC Guidance Per NUREG-0737 Position
Simulator examinations will be included as part of the licensing examinations.
Clarification
The clarification does not alter the staff's position regarding simulator
examinations.
The clarification does provide additional preparation time for utility
companies and NRC to meet the examination requirements as stated. A study is
under way to consider how similar a nonidentical simulator should be for a
valid examination. In addition, present simulators are fully booked months in advance.
Application of this requirement was stated on June 1, 1980 to applicants where
a simulator is located at the facility. Starting October 1, 1981, simulator
examinations will be conducted for applicants of facilities that do not have
simulators at the site.
NRC simulator examinations normally require 2 to 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br />. Normally, two
applicants are examined during this time period by two examiners.
Utility companies should make the necessary arrangements with an appropriate
simulator training center to provide time for these examinations. Preferably, these examinations should be scheduled consecutively with the balance of the
examination. However, they may be scheduled no sooner than 2 weeks prior to
and no later than 2 weeks after the balance of the examination.
18.1-13 Rev. 0 WOLF CREEK 18.1.6.2 The Operating Agent Response
The Operating Agent has a full scope simulator near the plant site. The
simulator is used as part of the licensing examinations. For further direction
as to the use of the simulator see Section 13.2.
18.1.6.3 Conclusion The Operating Agent has committed to NUREG-0737 guidance with regard to the
NRC's revised scope and criteria for license examinations. In addition, the
Operating Agent has incorporated simulator examinations into it's training program. These commitments comply fully with the NRC guidance as stated in
NUREG-0737 relative to licensing examinations.
18.1.7 EVALUATION OF ORGANIZATION AND MANAGEMENT (I.B.1.2)
18.1.7.1 NRC Guidance Per NUREG-0694 and NUREG-0737 Position
The licensee organization shall comply with the findings and requirements generated in an interoffice NRC review of licensee organization and management.
The review will be based, in part, on an NRC document entitled "Draft Criteria
for Utility Management and Technical Competence." The first draft of this
document was dated February 25, 1980. The current draft was issued for interim
use and public comment in September 1980 as NUREG-0731, "Guidelines for Utility
Management Structure and Technical Resources." These draft guidelines address
the organization, resources, training, and qualifications of plant staff and
management (both onsite and offsite) for routine operations and the resources
and activities (both onsite and offsite) for accident conditions.
The licensee shall establish a group that is independent of the plant staff but is assigned onsite to perform independent reviews of plant operational
activities and a capability for evaluation of operating experiences of nuclear
power plants.
Organizational changes are to be implemented on a schedule to be determined
prior to fuel loading.
Corporate management of the utility-owner of a nuclear power plant shall be
sufficiently involved in the operational phase activities, including plant
modifications, to ensure a continual understanding of plant conditions and
safety considerations. Corporate management shall establish safety standards
for the operation and
18.1-14 Rev. 0 WOLF CREEK maintenance of the nuclear power plant. To these ends, each utility-owner
shall establish an organization, parts of which shall be located onsite, to:
perform independent reviews and audits of plant activities; provide technical
support to the plant staff for maintenance, modifications, operational problems, and operational analysis; and aid in the establishment of
programmatic requirements for plant activities.
The licensee shall establish an integrated organizational arrangement to
provide for the overall management of nuclear power plant operations. This
organization shall provide for clear management control and effective lines of
authority and communication between the organizational units involved in the
management, technical support, and operation of the nuclear unit.
The key characteristics of a typical organization arrangement are:
- a. Integration of all necessary functional responsibilities under a single responsible head.
- b. The assignment of responsibility for the safe operation of the nuclear power plant(s) to an upper level executive position.
Each applicant for an operating license shall establish an onsite independent
safety engineering group (ISEG) to perform independent reviews of plant
operation.
The principal function of the ISEG is to examine plant operating
characteristics, NRC issuances, Licensing Information Service advisories, and
other appropriate sources of plant design and operating experience information that may indicate areas for improving plant safety. The ISEG is to perform independent review and audits of plant activities, including maintenance, modifications, operational problems, and operational analysis, and aid in the
establishment of programmatic requirements for plant activities. Where useful
improvements can be achieved, it is expected that this group will develop and
present detailed recommendations to corporate management for such things as
revised procedures or equipment modifications.
Another function of the ISEG is to maintain surveillance of plant operations
and maintenance activities to provide independent verification that these
activities are performed correctly and that human errors are reduced as far as
practicable. ISEG will then be in a position to advise utility management on
the overall quality and safety of operations. ISEG need not perform detailed
audits of plant operations and shall not be responsible for sign-off functions
such that it becomes involved in the operating organization.
18.1-15 Rev. 0 WOLF CREEK Clarification
The new ISEG shall not replace the plant operations review committee (PORC) and
the utility's independent review and audit group as specified by current staff guidelines (Standard Review Plan, Regulatory Guide 1.33, Standard Technical
Specifications). Rather, it is an additional independent group of a minimum of
five dedicated, full-time engineers, located onsite, but reporting offsite to a
corporate official who holds a high-level, technically oriented position that
is not in the management chain for power production. The ISEG will increase
the available technical expertise located onsite and will provide continuing, systematic, and independent assessment of plant activities. Integrating the
STAs into the ISEG in some way would be desirable in that it could enhance the
group's contact with and knowledge of day-to-day plant operations and provide
additional expertise. However, the STA on shift is necessarily a member of the operating staff and cannot be independent of it.
It is expected that the ISEG may interface with the quality assurance (QA)
organization, but preferably should not be an integral part of the QA
organization.
The functions of the ISEG require daily contact with the operating personnel
and continued access to plant facilities and records. The ISEG review functions
can, therefore, best be carried out by a group physically located onsite.
However, for utilities with multiple sites, it may be possible to perform
portions of the independent safety assessment function in a centralized
location for all the utilities' plants. In such cases, an onsite group still
is required, but it may be slightly smaller than would be the case if it were
performing the entire independent safety assessment function. Such cases will
be reviewed on a case-by-case basis.
At this time, the requirement for establishing an ISEG is being applied only to
applicants for operating licenses in accordance with Action Plan Item I.B.1.2.
The staff intends to review this activity in about a year to determine its
effectiveness and to ascertain whether changes are required. Applicability to
operating plants will be considered in implementing long-term improvements in
organization and management for operating plants (Action Plan Item I.B.1.1).
18.1.7.2 The Operating Agent Response The Operating Agent performs the ISEG functions. The Vice President Engineering and Site Vice President, through ownership of ISEG function implementing procedures, are responsible for the ISEG functions. Refer to Table 18.1-1, ISEG Function Cross Reference, for ISEG function to implementing procedure details. Persons performing the ISEG functions have direct access to the President and Chief Executive Officer for resolution of any areas in
question. The ISEG functions are performed by degreed individuals with
specific experience and training in one or more of the following disciplines:
nuclear engineering, mechanical engineering, electrical engineering, chemistry/radiological controls, and nuclear operations. The persons performing the ISEG functions are located physically onsite at WCGS.
18.1-16 Rev. 24 WOLF CREEK The ISEG functions include independent review of plant activities and operating
experience information. The ISEG function includes performing independent
technical evaluations of plant maintenance, modifications, operational
problems, and operational analysis activities. The ISEG function also includes developing appropriate detailed recommendations for revisions to procedures or
modifications to equipment as may be necessary. The ISEG functions include the
survey of plant maintenance operations and test activities to provide
verification independent of the plant operating staff that maintenance, operations and test activities are performed in accordance with established
procedures. Table 18.1-1 provides a cross-reference of the ISEG functions to the implementing procedures.
Relative to organization and management structure, the Operating Agent has
established an Operations organization whose authorities and responsibilities
are consistent with NRC guidance.
18.1.7.3 Conclusion The Operating Agent has committed to the NUREG-0737 guidance relative to the
establishment of functions and activities to satisfy an onsite independent
safety engineering group and has established an Operations organization dedicated to the support of WCGS.
18.1.8 GUIDANCE FOR THE EVALUATION AND DEVELOPMENT OF
PROCEDURES FOR TRANSIENTS AND ACCIDENTS (I.C.1)
18.1.8.1 NRC Guidance Per NUREG-0737 Position
In letters of September 13 and 27, October 10 and 30, and November 9, 1979, the Office of Nuclear Reactor Regulation required licensees of operating plants, applicants for operating licenses, and licensees of plants under construction
to perform analyses of transients and accidents, prepare emergency procedure
guidelines, upgrade emergency procedures, including procedures for operating
with natural circulation conditions, and to conduct operator retraining (see
also Item I.A.2.1). Emergency procedures are required to be consistent with
the actions necessary to cope with the transients and accidents analyzed.
Analyses of transients and accidents were to be completed in early 1980, and
18.1-17 Rev. 19 WOLF CREEK implementation of procedures and retraining were to be completed 3 months after emergency procedure guidelines were established; however, some difficulty in
completing these requirements has been experienced. Clarification of the scope
of the task and appropriate schedule revisions are being developed. In the
course of the review of these matters on Babcock and Wilcox (B&W)-designed
plants, the staff will follow up on the bulletin and orders matters relating to analysis methods and results, as listed in NUREG-0660, Appendix C (see Table
C.1, items 3, 4, 16, 18, 24, 25, 26, 27; Table C.2, items 4, 12, 17, 18, 19, 20; and Table C.3, items 6, 35, 37, 38, 41, 47, 55, 57).
Clarification
The letters of September 13 and 27, October 10 and 30, and November 9, 1979
required that procedures and operator training be developed for transients and
accidents. The initiating events to be considered should include the events
presented in the FSAR: loss of instrumentation buses and natural phenomena such as earthquakes, floods, and tornadoes. The purpose of this paper is to clarify the requirements and add additional requirements for the reanalysis of
transients and accidents and inadequate core cooling.
Based on staff reviews to date, there appear to be some recurring deficiencies
in the guidelines being developed. Specifically, the staff has found a lack of
justification for the approach used (i.e., symptom-, event-, or function-
oriented) in the developing diagnostic guidance for the operator and in
procedural development. It has also been found that although the guidelines
take implicit credit for the operation of many systems or components, they do
not address the availability of these systems under expected plant conditions
nor do they address corrective or alternative actions that should be performed
to mitigate the event should these systems or components fail.
The analyses conducted to date for guideline and procedure development contain insufficient information to assess the extent to which multiple failures are considered. NUREG-0578 concluded that the single-failure criterion was not
considered appropriate for guideline development and called for the
consideration of multiple failures and operator errors. Therefore, the
analyses that support guideline and procedure development should consider the
occurrences of multiple and consequential failures. In general, the sequence
of events for the transients and accidents and inadequate core cooling analyzed
should postulate multiple failures such that, if the failures were unmitigated, conditions of inadequate core cooling would result.
18.1-18 Rev. 10 WOLF CREEK Examples of multiple failure events include:
- 1. Multiple tube ruptures in a single steam generator and tube rupture in more than one steam generator.
- 2. Failure of main and auxiliary feedwater.
- 3. Failure of high-pressure reactor coolant makeup system.
- 4. An anticipated transient without scram (ATWS) event following a loss of offsite power, stuck-open relief valve or safety/relief valve, or loss of main feedwater.
- 5. Operator errors of omission or commission.
The analyses should be carried out far enough into the event to ensure that all
relevant thermal/hydraulic/neutronic phenomena are identified (e.g., upper head
voiding due to rapid cooldown, steam generator stratification). Failures and
operator errors during the long-term cooldown period should also be addressed.
The analyses should support development of guidelines that define a logical
transition from the emergency procedures into the inadequate core cooling
procedure, including the use of instrumentation to identify inadequate core
cooling conditions. Rationale for this transition should be discussed.
Additional information that should be submitted includes:
- 1. A detailed description of the methodology used to develop the guidelines;
- 2. Associated control function diagrams, sequence-of-event diagrams, or others, if used;
- 3. The bases for multiple and consequential failure
considerations;
- 4. Supporting analysis, including a description of any computer codes used; and
- 5. A description of the applicability of any generic results to plant-specific applications.
Owners' Group or vendor submittals may be referenced as appropriate to support
this reanalysis. If Owners' Group or vendor submittals have already been
forwarded to the staff for review, a brief description of the submittals and
justification of their adequacy to support guideline development is all that is
required.
18.1-19 Rev. 0 WOLF CREEK Pending staff approval of the revised analysis and guidelines, the staff will
continue the pilot monitoring of emergency procedures described in Task Action
Plan Item I.C.8 (NUREG-0660). For PWRs, this will involve review of the loss-
of-coolant, steam-generator tube rupture, loss of main feedwater, and inadequate core cooling procedures. The adequacy of each PWR vendor's
guidelines will be identified to each NTOL during the emergency-procedure
review. Since the analysis and guidelines submitted by the General Electric
Company (GE) Owners' Group that comply with the requirements stated above have
been reviewed and approved for trial implementation on six plants with
applications for operating licenses pending, the interim program for BWRs will
consist of trial implementation of these six plants.
Following approval of analysis and guidelines and the pilot monitoring of
emergency procedures, the staff will advise all licensees of the adequacy of the guidelines for application to their plants. Consideration will be given to human-factors engineering and system operational characteristics, such as
information transfer under stress, compatibility with operator training and
control room design, the time required for component and system response, clarity of procedural actions, and control room personnel interactions. When
this determination has been made by the staff, a long-term plan for emergency
procedure review, as described in Task Action Plan Item I.C.9, will be made
available. At that time, the reviews currently being conducted on NTOLs under
Item I.C.8 will be discontinued, and the review required for applicants for
operating licenses will be as described in the long-term plan. Depending on
the information submitted to support development of emergency procedures for
each reactor type or vendor, this transition may take place at different times.
For example, if the GE guidelines are shown to be effective on the six plants
chosen for pilot monitoring, the long-term plan for BWRs may be complete in
early 1981. Operating plants and applicants will then have the option of implementing the long-term plan in a manner consistent with their operating schedule, provided they meet the final date required for implementation. This
may require a plant that was reviewed for an operating license under Item I.C.8
to revise its emergency procedures again prior to the final implementation date
for Item I.C.9. The extent to which the long-term program will include review
and approval of plant-specific procedures for operating plants has not been
established. Our objective, however, is to minimize the amount of plant-
specific procedure review and approval required. The staff believes this
objective can be acceptably accomplished by concentrating the staff review and
approval on generic guidelines. A key element in meeting this objective is the
use of staff-approved generic guidelines and guideline revisions by licensees
to develop procedures. For this approach to be effective, it is imperative
that, once the staff
18.1-20 Rev. 0 WOLF CREEK has issued approval of a guideline, subsequent revisions of the guideline
should not be implemented by licensees until reviewed and approved by the
staff. Any changes in plant-specific procedures based on unapproved guidelines
could constitute an unreviewed safety issue under 10 CFR 50.59. Deviations from this approach on a plant-specific basis would be acceptable provided the
basis is submitted by the licensee for staff review and approval. In this
case, deviations from generic guidelines should not be implemented until staff
approval is formally received in writing. Interim implementation of analysis
and procedures for small-break loss-of-coolant accident and inadequate core
cooling should remain on the schedule contained in NUREG-0578, Recommendation
2.1.9.
18.1.8.2 The Operating Agent Response The NRC issued additional requirements and guidance relative to this issue in
Supplement 1 to NUREG-0737 (Generic Letter 82-33). The requirements and
guidance in Supplement 1 to NUREG-0737 replaced the corresponding requirements in NUREG-0737.
Through participation in the Westinghouse Owners' Group (WOG), the Operating
Agent has been involved in the development of guidelines for accidents that
exceed existing design bases and guidelines for inadequate core cooling.
Guidelines were submitted to the NRC for review and approval, and after NRC
approval was obtained, the guidelines were used for the preparation of generic
and/or plant-specific emergency operating and inadequate core cooling
procedures.
The WOG has supported development of additional guidelines for comparison to existing guidelines for emergency operation. Events to be reconsidered in the
light of NUREG-0737 guidance (i.e., multiple failures) are:
- Large LOCA
- Small LOCA
- Feedline break
- Steamline break
- Steam generator tube rupture
The WOG has completed the expanded guidelines which include the bases for
detailed procedures to mitigate inadequate core cooling. The WOG has submitted
an update of Westinghouse Topical Report WCAP-9691, which used event tree
methodology to extend a review of analyzed accidents to include certain
multiple failure considerations. WCAP-9691 was updated to expand the Westinghouse Reference Operating Instruction set through consideration of extended coverage provided by current Emergency Operating
18.1-21 Rev. 0 WOLF CREEK Instruction Guidelines. A significant number of the original WCAP-9691 event
sequences were provided with additional "procedural coverage" as a result of
the evaluation commissioned by the Owners' Group. By letter dated December 24, 1984, the NRC staff has approved the WOG guidelines (Westinghouse Emergency Response Guidelines, Revision 1) for implementation.
The Operating Agent has developed emergency operating procedures consistent
with the WOG guidelines for the events enumerated above. The Operating Agent
has evaluated each guideline and developed plant emergency operating procedures
specifically applicable to WCGS. Consistent with the requirements of
Supplement 1 to NUREG-0737, the Operating Agent has submitted a Procedures
Generation Package (PGP) for NRC review. The NRC review of the PGP resulted in
submittal of additional information to address the process that was used to
derive the instrumentation and control characteristics from the information contained in Revision 1 to the generic guidelines and related background information. These characteristics are defined using function and task
analysis methods.
Certain WCGS Emergency Operating procedures were requested for review by the
NRC. These procedures were supplied to the NRC.
18.1.8.3 Conclusion The Operating Agent's commitment to develop emergency operating procedures
based on the WOG guidelines is consistent with NUREG-0737, Supplement 1
requirements. The Operating Agent has tailored the Westinghouse guidelines so that they are directly applicable to WCGS. In addition, the Operating Agent
has provided emergency operating procedures to Westinghouse for review (see
Section 18.1.14) in accordance with NUREG-0737 guidance. Responsibility for
the final procedure content and implementation remain with the Operating Agent.
18.1.9 SHIFT RELIEF AND TURNOVER PROCEDURES (I.C.2)
18.1.9.1 NRC Guidance Per NUREG-0578 The licensee shall review and revise, as necessary, the plant procedure for
shift and relief turnover to ensure the following:
- 1. A checklist shall be provided for the oncoming and offgoing control room operators and the oncoming shift supervisor to complete and sign. The following items, as a minimum, shall be included in the checklist:
18.1-22 Rev. 0 WOLF CREEK
- a. Assurance that critical plant parameters are within allowable limits (parameters and allowable limits shall be listed on the checklist).
- b. Assurance of the availability and proper alignment of all systems essential to the prevention and mitigation of operational transients and accidents by a check of the control console. What to check and criteria for acceptable status shall be included in the checklist.
- c. Identification of systems and components that are in a degraded mode of operation permitted by the Technical Specifications. For such systems and components, the length of time in the degraded mode shall be compared with the Technical Specifications action statement. (This shall be recorded as a separate entry on the checklist.)
- 2. Checklists or logs shall be provided for completion by the offgoing and oncoming auxiliary operators and technicians. Such checklists or logs shall include any equipment under maintenance or test that by itself could degrade a system critical to the prevention and mitigation of operational transients and accidents or initiate an operational transient (what to check and criteria for acceptable status shall be included on the checklist); and
- 3. A system shall be established to evaluate the effectiveness of the shift and relief turnover procedures (for example, periodic independent verification of system alignments).
18.1.9.2 The Operating Agent Response Plant administrative procedures define specific shift relief and turnover
procedures for WCGS. Turnover checklists have been developed which include the
following information:
- a. Control Room relief and turnover:
- Provides means to review plant system alignment for anomalies via critical plant parameter and control panel checks;
- Provides means to determine that onshift activities impacting Technical Specifications have been appropriately documented;
18.1-23 Rev. 0 WOLF CREEK
- Provides a clear record of transfer of control room command function from Shift Manager and Control Room Supervisor to their successors on the next shift.
- b. Nuclear Station Operator relief and turnover:
- Includes procedures which call for a review of equipment on which maintenance or test activities are being performed.
18.1.9.3 Conclusion The Operating Agent has satisfied NRC guidance relative to shift
relief/turnover procedures through it's commitments to implementation of the
described procedures.
18.1.10 SHIFT SUPERVISOR'S RESPONSIBILITIES (I.C.3)
This item is discussed in Section 18.1.2, Shift Supervisor Administrative
Duties.
18.1.11 CONTROL ROOM ACCESS (I.C.4)
18.1.11.1 NRC Guidance Per NUREG-0578 Position
The licensee shall make provisions for limiting access to the control room to those individuals responsible for the direct operation of the nuclear power
plant (e.g., operations supervisor, shift supervisor, and control room
operators), to technical advisors who may be requested or required to support
the operation, and the predesignated NRC personnel. Provisions shall include
the following:
- 1. Develop and implement an administrative procedure that establishes the authority and responsibility of the person in charge of the control room to limit access.
18.1-24 Rev. 13 WOLF CREEK
- 2. Develop and implement procedures that establish a clear line of authority and responsibility in the control room in the event of an emergency. The line of succession for the person in charge of the control room shall be established and limited to persons possessing a current SRO's license. The plan shall clearly define the lines of communication and authority for plant management personnel not in direct command of operations, including those who report to stations outside the control room.
18.1.11.2 The Operating Agent Response The Operating Agent has administrative procedures which define the line of
authority in the control room: the Shift Manager is in overall control room
command, and the Control Room Supervisor is in direct control room command.
The Operating Agent has implemented additional administrative procedures which
define lines of communication and authority for WCGS management "who report to
stations both within and outside the control room." During normal plant
operations, access to the control room is controlled in accordance with the
provisions of the WCGS Security Plan.
In addition, the Radiological Emergency Response Plan for the WCGS clearly
indicates that control room access is controlled by the Shift Manager. Access to the Control Room is controlled by the Shift Manager.
18.1.11.3 Conclusion
The Operating Agent has established a procedure which clearly defines the line
of authority in the control room during normal and emergency situations. In
addition, the Operating Agent has established a procedure that clearly defines restrictions on control room access during normal and emergency conditions.
This procedure further defines the authority of the Shift Manager to restrict
control room access at all times. These procedures comply with the NRC
guidance specified in NUREG-0578.
18.1-25 Rev. 14 WOLF CREEK 18.1.12 PROCEDURES FOR FEEDBACK OF OPERATING EXPERIENCE TO
PLANT STAFF (I.C.5)
18.1.12.1 NRC Guidance Per NUREG-0737
Position
In accordance with Task Action Plan I.C.5, Procedures for Feedback of Operating Experience to Plant Staff (NUREG-0660), each applicant for an operating license
shall prepare procedures to ensure that operating information pertinent to
plant safety originating both within and outside the utility organization is
continually supplied to operators and other personnel and is incorporated into
training and retraining programs. These procedures shall:
- 1. Clearly identify organizational responsibilities for review of operating experience, the feedback of pertinent information to operators and other personnel, and the incorporation of such information into training and retraining programs;
- 2. Identify the administrative and technical review steps necessary in translating recommendations by the operating experience assessment group into plant actions (e.g., changes to procedures, operating orders);
- 3. Identify the recipients of various categories of information from operating experience (e.g., supervisory personnel, STAs, operators, maintenance personnel, and health physics technicians) or otherwise provide means through which such information can be readily related to the job functions of the recipients;
- 4. Provide means to assure that affected personnel become aware of and understand information of sufficient importance that should not wait for emphasis through routine training and retraining programs;
- 5. Assure that plant personnel do not routinely receive extraneous and unimportant information on operating experience in such volume that it would obscure priority information or otherwise detract from overall job performance and proficiency;
- 6. Provide suitable checks to assure that conflicting or contradictory information is not conveyed to operators and other personnel until resolution is reached; and
18.1-26 Rev. 0 WOLF CREEK
- 7. Provide periodic internal audit to assure that the feedback program functions effectively at all levels.
Clarification
Each utility shall carry out an operating experience assessment function that
will involve utility personnel having collective competence in all areas
important to plant safety. In connection with this assessment function, it is
important that procedures exist to assure that important information on
operating experience originating both within and outside the organization is
continually provided to operators and other personnel and that it is
incorporated into plant operating procedures, training, and retraining
programs.
Those involved in the assessment of operating experience will review information from a variety of sources. These include operating information
from the licensee's own plant(s), publications such as IE Bulletins, Circulars, Notices, and pertinent NRC or industrial assessments of operating experience.
In some cases, information may be of sufficient importance that it must be
dealt with promptly (through instructions, changes to operating and emergency
procedures, issuance of special changes to operating and emergency procedures, issuance of special precautions, etc.) and must be handled in such a manner to
assure that operations management personnel would be directly involved in the
process. In many other cases, however, important information will become
available which should be brought to the attention of operators and other
personnel for their general information to assure continued safe plant
operation. Since the total volume of information handled by the assessment
group may be large, it is important that assurance be provided that high-
priority matters are dealt with promptly and that discrimination is used in the feedback of other information so that personnel are not deluged with unimportant and extraneous information to the detriment of their overall
proficiency. It is important, also, that technical reviews be conducted to
preclude premature dissemination of conflicting or contradictory information.
18.1.12.2 The Operating Agent Response Operating experience assessment for WCGS was originally conducted by various
groups within the plant and Wichita office staffs who possessed appropriate
experience within the area of concern. The program utilized the INPO SEE-IN Program, NRC Office of Inspection and Enforcement Issuances and Licensee Event
Reports as input.
18.1-27 Rev. 1 WOLF CREEK The operating experience assessment activities have been upgraded and enlarged
to include the above inputs as well as INPO SOERs, SERs, NPRDS, Nuclear Network
and information received from vendors and contractors. Input received from
these sources is routed to the appropriate coordinator for logging, initial screening and assignment for evaluation. The coordinator also tracks the
information through the evaluation and action phases, if necessary.
The administrative system for control of the handling and evaluation of
appropriate operating experience data is controlled by division procedures.
18.1.12.3 Conclusion The Operating Agent's internal programs for the review, evaluation, and
dissemination of operating experience gained at WCGS and at other operating
facilities fulfill the NRC's NUREG-0737 guidance relative to feedback and evaluation of operating experience.
18.1.13 VERIFY CORRECT PERFORMANCE OF OPERATING ACTIVITIES
(I.C.6)
18.1.13.1 NRC Guidance Per NUREG-0737 Position
It is required (from NUREG-0660) that licensees' procedures be reviewed and revised, as necessary, to assure that an effective system of verifying the
correct performance of operating activities is provided as a means of reducing
human errors and improving the quality of normal operations. This will reduce
the frequency of occurrence of situations that could result in or contribute to
accidents. Such a verification system may include automatic system status
monitoring, human verification of operations and maintenance activities
independent of the people performing the activity (see NUREG-0585, Recommendation 5), or both.
Implementation of automatic status monitoring, if required, will reduce the extent of human verification of operations and maintenance activities but will not eliminate the need for such verification in all instances. The procedures
adopted by the licensees may consist of two phases--one before and one after
installation of automatic status monitoring equipment, if required, in
accordance with Item I.D.3.
18.1-28 Rev. 0 WOLF CREEK Clarification
Item I.C.6 of the U.S. Nuclear Regulatory Commission Task Action Plan (NUREG-
0660) and Recommendation 5 of NUREG-0585 propose requiring that licensees' procedures be reviewed and revised, as necessary, to assure that an effective
system of verifying the correct performance of operating activities is
provided. An acceptable program for verification of operating activities is
described below.
The American Nuclear Society has prepared a draft revision to ANSI Standard
N18.7-1972 (ANS-3.2), "Administrative Controls and Quality Assurance for the
Operational Phase of Nuclear Power Plants." A second proposed revision to
Regulatory Guide 1.33, "Quality Assurance Program Requirements (Operation),"
which is to be issued for public comment in the near future, will endorse the latest draft revision to ANS-3.2 subject to the following supplemental provisions:
- 1. Applicability of the guidance of Section 5.2.6 should be extended to cover surveillance testing in addition to
maintenance.
- 2. In lieu of any designated senior reactor operator (SRO),
the authority to release systems and equipment for maintenance or surveillance testing or return-to-service may be delegated to an onshift SRO, provided provisions are made to ensure that the shift supervisor is kept fully informed of system status.
- 3. Except in cases of significant radiation exposure, a second qualified person should verify correct implementation of equipment control measures, such as the tagging of equipment.
- 4. Equipment control procedures should include assurance that control room operators are informed of changes in equipment status and the effects of such changes.
- 5. For the return-to-service of equipment important to safety, a second qualified operator should verify proper system alignment unless functional testing can be performed without compromising plant safety, and can prove that all equipment, valves, and switches involved in the activity are correctly aligned.
18.1-29 Rev. 0 WOLF CREEK Note: A licensed operator possessing knowledge of the systems involved and the relationship of the systems to plant safety would be a "qualified" person. The staff is investigating the level of qualification necessary for other operators to perform these functions.
For plants that have or will have automatic system status monitoring, as
discussed in Task Action Plan Item I.D.3, NUREG-0660, the extent of human
verification of operations and maintenance activities will be reduced.
However, the need for such verification will not be eliminated in all
instances.
18.1.13.2 The Operating Agent Response The Operating Agent has developed specific administrative procedures and
utilizes available status monitoring in the control room to control equipment
status. The procedures describe the control measures and actions such as locking, tagging, notification, and identification of equipment. The
procedures provide for control of equipment to maintain reactor and personnel
safety and to avoid unauthorized or inadvertent operation of equipment. As
suggested by NUREG-0737, administrative procedures provide instructions for
verification of correct performance of operating and surveillance activities.
The status monitoring is in the form of position indication in the control room
of safety-related valves and breakers or logging of valve/breaker position on
the plant computer.
18.1.13.3 Conclusion The Operating Agent's administrative controls for performance of operating
activities satisfy the guidance of NUREG-0737, Item I.C.6.
18.1.14 NSSS VENDOR REVIEW OF PROCEDURES (I.C.7)
18.1.14.1 NRC Guidance Per NUREG-0660 Applicants for near-term operating licenses will be required to obtain NSSS
vendor review of their low-power and power-ascension tests, and emergency
procedures as a further verification of the adequacy of procedures.
18.1.14.2 The Operating Agent Response The Operating Agent committed to a review by Westinghouse of specific low-power
and power-ascension procedures as a means of further verification of their
adequacy. Westinghouse assistance in the preoperational and startup test programs is discussed in
18.1-30 Rev. 0 WOLF CREEK Section 14.2. However, the Operating Agent reserved the right to evaluate any
suggested changes resulting from vendor review and, in light of the Operating
Agent's ultimate responsibility for the safe operation of WCGS, to make the
final determination as to whether any suggested change is warranted.
As discussed in Section 18.1.8.2, the Operating Agent is participating in the
Westinghouse Owner's Group activities in which Westinghouse has developed
guidelines for preparation of emergency operating procedures. The Operating
Agent committed in that section to developing WCGS emergency operating
procedures from the generic guidelines. Westinghouse review of the WCGS
emergency operating procedures was not only limited to Westinghouse's review
and preparation of the generic guidelines. Copies of the emergency procedures
were provided to Westinghouse for review.
18.1.14.3 Conclusion The Operating Agent's actions relative to NSSS vendor review of selected
procedures comply with the guidance of NUREG-0737.
18.1.15 PILOT MONITORING OF SELECTED EMERGENCY PROCEDURES
FOR NEAR-TERM OPERATING LICENSE APPLICANTS (I.C.8)
18.1.15.1 NRC Guidance Per NUREG-0737 Position
The NRC will conduct an interdisciplinary and interoffice audit of selected plant emergency operating procedures (e.g., small-break LOCA, loss of
feedwater, restart of engineered safety features following a loss of ac power, steamline break, or steam-generator tube rupture).
The licensee should correct, before full-power operation, any deficiencies in
the emergency procedures, as necessary, based on the NRC audit.
18.1.15.2 The Operating Agent Response The Operating Agent did not object to a pilot review by the NRC of these
procedures. However, since the NRC has conducted an indepth review of the WOG
guidelines (refer to Section 18.1.8.1), and since the Operating Agent has agreed to use the WOG guidelines, a specific review of the Operating Agent
procedures did not appear to be necessary. Based on this reasoning, the NRC, in Supplement 5 to the WCGS Safety Evaluation Report, concluded that Item I.C.8
was resolved.
18.1-31 Rev. 0 WOLF CREEK 18.1.15.3 Conclusion
The Operating Agent activities associated with Item I.C.1, Section 18.1.8, comply with the objectives of Item I.C.8 of NUREG-0737.
18.1.16 CONTROL ROOM DESIGN REVIEW (I.D.1)
18.1.16.1 NRC Guidance Per NUREG-0737 Position
In accordance with Task Action Plan I.D.1, Control Room Design Reviews (NUREG-0660), all licensees and applicants for operating licenses will be required to
conduct a detailed control room design review to identify and correct design
deficiencies. This detailed control room design review is expected to take
about a year. Therefore, the Office of Nuclear Reactor Regulation (NRR)
requires that those applicants for operating licenses who are unable to
complete this review prior to the issuance of a license make preliminary
assessments of their control rooms to identify significant human factors and
instrumentation problems and establish a schedule approved by the NRC for
correcting deficiencies. These applicants will be required to complete the
more detailed control room reviews on the same schedule as licensees with operating plants.
Clarification
NRR is presently developing human engineering guidelines to assist each
licensee and applicant in performing detailed control room review. A draft of
the guidelines has been published for public comment as NUREG/CR-1580, "Human
Engineering Guide to Control Room Evaluation." The due date for comments on
this draft document was September 29, 1980. NRR will issue the final version
of the guidelines as NUREG-0700, by February 1981, after receiving, reviewing, and incorporating substantive public comments from operating reactor licensees, applicants for operating licenses, human factors engineering experts, and other
interested parties. NRR will issue evaluation criteria, by July 1981, which
will be used to judge the acceptability of the detailed reviews performed and
the design modifications implemented.
Applicants for operating licenses who will be unable to complete the detailed
control room design review prior to the issuance of a license are required to
perform a preliminary control room design assessment to identify significant
human factors problems. Applicants will find it of value to refer to draft
document NUREG/CR-1580, "Human Engineering Guide to Control Room Evaluation,"
in performing the preliminary assessment. NRR will evaluate the
18.1-32 Rev. 0 WOLF CREEK applicants' preliminary assessments, including the performance by NRR of onsite
review/audit. The NRR onsite review/audit will be on a schedule consistent
with licensing needs and will emphasize the following aspects of the control
room:
- 1. The adequacy of information presented to the operator to reflect plant status for normal operation, anticipated operational occurrences, and accident conditions.
- 2. The groupings of displays and the layout of panels.
- 3. Improvements in the safety monitoring and human factors enhancement of controls and control displays.
- 4. The communications from the control room to points outside the control room, such as the onsite technical support center, remote shutdown panel, and offsite telephone lines, and to other areas within the plant, for normal and emergency operation.
- 5. The use of direct rather than derived signals for the presentation of process and safety information to the
operator.
- 6. The operability of the plant from the control room with multiple failures of nonsafety-grade and non-seismic
systems.
- 7. The adequacy of operating procedures and operator training with respect to the limitations of instrumentation displays in the control room.
- 8. The categorization of alarms, with unique definition of safety alarms.
- 9. The physical location of the Shift Supervisor's office, either adjacent to or within the control room complex.
Prior to the onsite review/audit, NRR will require a copy of the applicant's
preliminary assessment and additional information, which will be used in
formulating the details of the onsite review/audit.
18.1.16.2 The Operating Agent Response Supplement 1 to NUREG-0737 (Generic Letter 82-33, dated December 17, 1982)
provided guidance and requirements for control room design reviews which
superseded previous NRC guidance.
18.1-33 Rev. 0 WOLF CREEK A Preliminary Design Assessment (PDA) of the WCGS control room was performed
and the results provided to the NRC (SNUPPS letter dated June 26, 1981). As a
result of the PDA activities, four significant actions were undertaken to
improve the operator-control board interface and the decision making process:
- 1. Extensive rearrangement of switches, recorders and indicators was performed to improve location relationship of equipment controls and associated
indications.
- 2. The location of all annunciators was reviewed and an extensive hierarchical arrangement by priority was developed to assist the operator in recognizing independently significant and dependent annunciator alarms.
- 3. Panels of status and permissive lights have been rearranged into functional groups, and methods of designating different plant safeguards modes have been incorporated to improve the operator's ability to understand and respond to these indications.
- 4. The Operating Agent, in conjunction with several owners of Westinghouse plants, has developed an extensive Safety Parameter Display System with an ability to display critical parameters, both quantitatively and graphically. The Senior Reactor Operators in the control room have these Safety Parameter Display Systems available to them to monitor plant conditions during any incident (refer to Section 18.1.17).
The original control board design had significant Prairie Island and Ginna
plant operating experience input from Northern States Power and Rochester Gas
and Electric during the initial design phases and had more extensive use of
system mimic-layout than most nuclear plant control boards. The above
modifications improved upon one of the better pre-TMI control board designs and
results in the control board supplying relevant, easy to comprehend information
to all control room personnel.
An NRC control room design review audit (CRDR/A) was conducted from July 29 to
July 31, 1981. Additional information to resolve PDA and CRDR/A issues was
submitted to the NRC by SNUPPS letters dated August 12, 1981, January 19, 1982, March 16, 1982 and April 12, 1982. Additional information, addressing panels
specific to WCGS, was submitted to the NRC by Operating Agent letters dated
January 15, 1982, March 10, 1982 and June 29, 1982.
18.1-34 Rev. 0 WOLF CREEK In response to Supplement 1 to NUREG-0737, additional detailed control room
design review (DCRDR) information was provided to the NRC by SNUPPS letters:
April 15, 1983 - Response to Generic Letter 82-33
June 30, 1983 - DCRDR Program Plan November 28, 1983 - Revised DCRDR Program Plan
November 30, 1983 - Responses to PDA Issues
February 2, 1984 - DCRDR Summary Report
March 21, 1984 - Auxiliary Shutdown Panel Issues
June 29, 1984 - Revision to DCRDR Summary Report
October 10, 1984 - Task Analysis Procedure
December 21, 1984 - Human Factors Review
The NRC conducted a second onsite audit in March 1984.
The Operating Agent also addressed the status of resolution of human
engineering discrepancies (HEDs) in a letter to the NRC dated May 11, 1984.
As a result of the DCRDR activities, including Control Room Inventory and
Supplemental Survey and Auxiliary Shutdown Panel review, several significant
activities were undertaken. Some of the major efforts are identified below and
were performed together with the resolution of hundreds of specific human
engineering findings.
- 1. A standard list of abbreviations was adopted to provide a uniform nomenclature for plant operators. The standard abbreviations were used to update control room equipment labels, annunciator windows, Auxiliary Shutdown Panel labels and plant computer software.
- 2. Several system mimic displays were extensively revised, e.g., Chemical and Volume Control System, Component Cooling Water System and electrical systems.
- 3. The J-handles of many control switches used on control boards were engraved with indicating arrows. The engraved arrows were filled with white paint for easy identification of handle position.
18.1-35 Rev. 4 WOLF CREEK
- 4. Approximately fifty instrumentation/control devices were relocated with attendant panel rewiring. An additional reactor coolant system wide range pressure channel was incorporated into the plant design.
- 5. Extensive use of demarcation lines was employed to visually isolate indication and control groups for systems and components.
- 6. Several hundred displays were modified to add tolerance bands to provide plant operators with information regarding range and setpoints.
In Supplement 5, to the WCGS Safety Evaluation Report, the NRC evaluated the DCRDR activities up to that time (March 1985) and concluded that the DCRDR substantially meets the requirements of Supplement 1 to NUREG-0737 except in
the area of System Function Review and Task Analysis (SFR&TA).
The Task Analysis procedure was revised by SNUPPS letter dated April 1, 1985.
By SNUPPS letters dated April 26, 1985 and May 24, 1985, a final report
entitled "Task Analysis and Verification of the SNUPPS Control Room" was
submitted to the NRC. Additional NRC questions regarding the SFR&TA were
addressed by Operating Agent letters dated November 4, 1985 and November 5, 1986. The NRC staff evaluation, documenting resolution of the SFR and TA
issue, was issued by letter dated December 2, 1986.
18.1.16.3 Conclusions Based on the DCRDR activities and NRC staff review results summarized above, the Operating Agent acceptably complies with the regulatory requirements for
control room design review.
18.1.17 PLANT SAFETY PARAMETER DISPLAY SYSTEM (I.D.2)
18.1.17.1 NRC Guidance Per NUREG-0696 The purpose of the safety parameter display system (SPDS) is to assist control
room personnel in evaluating the safety status of the plant. The SPDS is to
provide a continuous indication of plant parameters or derived variables representative of the safety status of the plant. The primary function of the
SPDS is to aid the operator in the rapid detection of abnormal operating
conditions. The functional criteria for the SPDS presented in this section are
applicable for use only in the control room.
It is recognized that, upon the detection of an abnormal plant status, it may
be desirable to provide additional information to
18.1-36 Rev. 1 WOLF CREEK analyze and diagnose the cause of the abnormality, execute corrective actions, and monitor plant response as secondary SPDS functions.
As an operator aid, the SPDS serves to concentrate a minimum set of plant parameters from which the plant safety status can be assessed. The grouping of
parameters is based on the function of enhancing the operator's capability to
assess plant status in a timely manner without surveying the entire control
room. However, the assessment based on SPDS is likely to be followed by
confirmatory surveys of many non-SPDS control room indicators.
Human factors engineering shall be incorporated in the various aspects of the
SPDS design to enhance the functional effectiveness of control room personnel.
The design of the primary or principal display format shall be as simple as
possible, consistent with the required function, and shall include pattern and coding techniques to assist the operator's memory recall for the detection and recognition of unsafe operating conditions. The human-factored concentration
of these signals shall aid the operator in functionally comparing signals in
the assessment of safety status.
All data for display shall be validated where practicable on a realtime basis
as part of the display to control room personnel. For example, redundant sensor
data may be compared, the range of a parameter may be compared to predetermined
limits, or other quantitative methods may be used to compare values. When an
unsuccessful validation of data occurs, the SPDS shall contain means of
identifying the impacted parameter(s). Operating procedures and operator
training in the use of the SPDS shall contain information and provide guidance
for the resolution of unsuccessful data validation. The objective is to ensure
that the SPDS presents the most current and accurate status of the plant
possible and is not compromised by unidentified faulty processing or failed sensors.
The SPDS shall be in operation during normal and abnormal operating conditions.
The SPDS shall be capable of displaying pertinent information during steady-
state and transient conditions. The SPDS shall be capable of presenting the
magnitudes and the trends of parameters or derived variables as necessary to
allow rapid assessment of the current plant status by control room personnel.
The parameter trending display shall contain recent and current magnitudes of
the parameter as a function of time. The derivation and presentation of
parameter trending during upset conditions is a task that may be automated, thus freeing the operator to interpret the trends rather than generate them.
Display of time derivatives of the parameters in lieu of trends to both
optimize operator-process communication and conserve space may be acceptable.
18.1-37 Rev. 0 WOLF CREEK The SPDS may be a source of information to other systems, and the functional
criteria of these systems shall state the required interfaces with the SPDS.
Any interface between the SPDS and a safety system shall be isolated in
accordance with the safety system criteria to preserve channel independence and ensure the integrity of the safety system in the case of SPDS malfunction.
Design provisions shall be included in the interfaces between the SPDS and
nonsafety systems to ensure the integrity of the SPDS upon failure of nonsafety
equipment.
A qualification program shall be established to demonstrate SPDS conformance to
the functional criteria of this [NUREG-0696] document.
18.1.17.2 The Operating Agent Response Supplement 1 to NUREG-0737 (Generic Letter 82-33, dated December 17, 1982)
provided guidance and requirements for the SPDS which superceded previous NRC
guidance.
In response to the NUREG-0696 design criteria guidance, a detailed description
of the SPDS conceptual design was submitted to the NRC by SNUPPS letter dated
June 1, 1981. In response to Generic Letter 82-33, further details were
provided in a SNUPPS letter dated April 15, 1983. By SNUPPS letter dated
January 13, 1984, an analysis of the bases for SPDS parameter selection was
submitted to the NRC.
Based on the NRC review of the submitted information and the results of an NRC
audit of the WCGS SPDS conducted in August 1984, the NRC staff concluded that the SNUPPS utilities were required to address (refer to WCGS Safety Evaluation Report, Supplement 5):
- 1. A commitment to add or justify not adding containment isolation status to the SPDS,
- 2. The inclusion of additional events in the SPDS variable validation and verification effort,
- 3. Involvement of human factors professionals in the design, and
- 4. Human engineering discrepancies identified during the NRC audit.
By SNUPPS letters dated September 5, 1984 and February 27, 1986, the above issues were addressed and the entire verification and validation program for the SPDS at the SNUPPS plants was reported to be successfully completed.
18.1-38 Rev. 1 WOLF CREEK 18.1.17.3 Conclusions
Based on the above summary of SPDS activities, the WCGS SPDS design agrees
adequately with the requirements established in Supplement 1 to NUREG-0737.
18.1.18 SPECIAL LOW POWER TESTING AND TRAINING (I.G.1)
18.1.18.1 NRC Guidance Per NUREG-0694 NUREG-0694, "TMI-Related Requirements for New Operating Licenses," requires
applicants for a new operating license to define and commit to a special low-
power testing program approved by the NRC staff, to be conducted at power levels no greater than 5 percent, for the purposes of providing meaningful
technical information beyond that obtained in the normal startup test program
and to provide supplemental training. This requirement must be met before fuel
loading.
Position
The staff position was stated in a letter to the applicants dated November 14, 1980. This letter stated that the program should provide for the following:
"Each licensed reactor operator (RO or SRO who performs RO or SRO duties, respectively) should experience the initiation, maintenance, and recovery from natural circulation mode, using nuclear heat to simulate decay heat. Operators should be able to recognize when natural circulation has stabilized, and should be able to control saturation margin, RCS pressure, and heat removal rate without exceeding specified operating limits.
These tests should demonstrate the following plant characteristics: length of time required to stabilize natural circulation, core flow distribution, ability to establish and maintain natural circulation with or without onsite and offsite power, and the ability to uniformly borate and cool down to hot shutdown conditions, using natural circulation. The latter demonstration may be performed using decay heat following power ascension and vendor acceptance tests, and need only be performed at those plants for which the tests has not been demonstrated at a comparable prototype plant."
18.1.18.2 The Operating Agent Response The WCGS natural circulation testing requirements are based on post-Three Mile
Island (TMI) regulatory positions and NRC Branch
18.1-39 Rev. 0 WOLF CREEK Technical Position RSB 5-1. In response to the post-TMI positions, Westinghouse developed a special low-power test program which was approved by
the NRC. In accordance with the test program, prototype natural circulation
testing for 4-loop plants was performed at the Diablo Canyon plant. The prototype testing was performed in 1985 and acceptably demonstrated plant
characteristics important to plant shutdown under natural circulation
conditions, such as, length of time to achieve natural circulation, the ability
to borate the reactor coolant system under natural circulation conditions and
the ability to cool the plant down and depressurize under natural circulation
conditions. The Diablo Canyon test results have been determined to be
applicable to the WCGS design.
Plant-specific natural circulation testing was conducted at one SNUPPS plant (Callaway Plant -- operated by Union Electric Company). Sufficient data was collected during this testing to validate the simulation of natural circulation on the WCGS simulator. All licensed operators for WCGS received natural
circulation training by either participating in the natural circulation testing
or by simulating natural circulation on a validated simulator.
- 1. Training - Each licensed RO (RO or SRO who performs RO or SRO duties respectively) participates in the initiation, maintenance and recovery from the natural circulation mode during the plant test or on the simulator. Operators are able to recognize when natural circulation has stabilized and will be able to control saturation margin, RCS pressure, and heat removal rates without exceeding specified operating limits.
- 2. Testing - The prototype and Callaway Plant tests demonstrated the following plant characteristics: Length of time required to stabilize natural circulation, core flow distribution, ability to establish and maintain natural circulation with or without onsite and offsite power, the ability to uniformly borate and cooldown to hot shutdown conditions using natural circulation and the ability to control reactor coolant system subcooling margins.
Thermocouple/Core Cooling Monitor (T/CCM) system performance was not specifically addressed in the natural circulation testing; however, the parameters used by the T/CCM system (see Section 18.2.13.2) for subcooling calculations were monitored and used to control the natural circulation cooldown. Therefore, the capability of the T/CCM system to function during natural circulation conditions is assured.
18.1-40 Rev. 0 WOLF CREEK
- 3. Procedure Validation - These tests or the simulation make maximum practical use of WCGS written plant procedures to validate the completeness and accuracy of the procedures.
18.1.18.3 Conclusion The Operating Agent testing and training program meets Item I.G.1 of NUREG-
0737.
18.1-41 Rev. 0 WOLF CREEK Table 18.1-1 (Sheet 1 of 2)
ISEG FUNCTION CROSS REFERENCE ISEG Function Implementing Procedures Examining plant operating characteristics, NRC issuances, industry advisories, reportable
events, and other sources of
plant design and operating
experience information, including plants of similar
design, which may indicate
areas of plant safety.
AP 20E-001, "Industry Operating Experience Program"
AP 23-006, "System Engineering
Program"
AP 28A-100, "Condition Reports" AI 17C-006, "Results Engineering Program" Through the corrective action
program, maintenance rule
program and the self assessment
program, detailed
recommendations are made to the
Vice President Engineering for
revised procedures, equipment
modifications, maintenance
activities, operations
activities, or other means of
improving plant safety.
AP 23-006, "System Engineering
Program"
Rule Program"
AP 28A-100, "Condition Reports" AP 28D-001, "Self Assessment
Process" Maintaining surveillance of
plant activities to provide
independent verification that
these activities are performed
correctly and that human errors
are reduced as much as
practical.
AP 28A-100, "Condition Reports" AI 17C-006, "Results Engineering Program"
Rule Program"
Process" Independent review of plant
activities and operating
experience information.
AP 20E-001, "Industry Operating Experience Program"
AP 23-006, "System Engineering
Program"
AI 17C-006, "Results Engineering Program" Perform independent technical
evaluations of plant
maintenance, modifications, operational problems, operational analysis activities AP 23-006, "System Engineering
Program"
Rule Program"
AP 28A-100, "Condition Reports" AI 17C-006, "Results Engineering Program"
AP 05-002, "Dispositions and
Change Packages"
Rev. 27 WOLF CREEK Table 18.1-1 (Sheet 2 of 2)
ISEG FUNCTION CROSS REFERENCE ISEG Function Implementing Procedures Develop appropriate detailed recommendations for revisions
to procedures or modifications
to equipment as may be
necessary.
Rule Program"
AP 28A-100, "Condition Reports" AI 17C-006, "Results Engineering Program" Survey plant maintenance
operations and test activities
to provide verification
independent of the plant in
accordance with established
procedures.
AP 23-006, "System Engineering
Program"
Rule Program"
AI 17C-006, "Results Engineering Program"
Rev. 27 WOLF CREEK 18.2 SITING AND DESIGN 18.2.1 POSTACCIDENT REACTOR COOLANT SYSTEM VENTING (II.B.1)
18.2.1.1 NRC Guidance Per NUREG-0737 Position Each applicant and licensee shall install reactor coolant system (RCS) and reactor vessel head high point vents remotely operated from the control room.
Although the purpose of the system is to vent noncondensible gases from the RCS
which may inhibit core cooling during natural circulation, the vents must not
lead to an unacceptable increase in the probability of a loss-of-coolant
accident (LOCA) or a challenge to containment integrity. Since these vents
form a part of the reactor coolant pressure boundary, the design of the vents
shall conform to the requirements of Appendix A to 10 CFR Part 50, "General
Design Criteria." The vent system shall be designed with sufficient redundancy
that ensures a low probability of inadvertent or irreversible actuation.
Each licensee shall provide the following information concerning the design and operation of the high point vent system:
- 1. Submit a description of the design, location, size, and power supply for the vent system along with results of
analyses for loss-of-coolant accidents initiated by a
break in the vent pipe. The results of the analyses
should demonstrate compliance with the acceptance
criteria of 10 CFR 50.46.
- 2. Submit procedures and supporting analysis for operator use of the vents that also include the information
available to the operator for initiating or terminating
vent usage.
Clarification A. General
- 1. The important safety function enhanced by this venting capability is core cooling. For events
beyond the present design basis, this venting
capability will substantially increase the plant's
ability to deal with large quantities of
noncondensible gas which could interfere with core
cooling.
18.2-1 Rev. 0 WOLF CREEK
- 2. Procedures addressing the use of the reactor coolant system vents should define the conditions under which the vents should be used as well as the conditions under which the vents should not be used. The procedures should be directed toward achieving a substantial increase in the plant being able to maintain core cooling without loss of containment integrity for events beyond the design basis. The use of vents for accidents within the
normal design basis must not result in a violation
of the requirements of 10CFR50.44 or 10CFR50.46.
- 3. The size of the reactor coolant vents is not a critical issue. The desired venting capability can be achieved with vents in a fairly broad spectrum of sizes. The criteria for sizing a vent can be developed in several ways. One approach, which may
be considered, is to specify a volume of noncondensible gas to be vented and in a specific
venting time. For containments particularly
vulnerable to failure from large hydrogen releases
over a short period of time, the necessity and
desirability for contained venting outside the
containment must be considered (e.g., into a decay
gas collection and storage system).
- 4. Where practical, the reactor coolant system vents should be kept smaller than the size corresponding
to the definition of LOCA (10 CFR 50, Appendix A).
This will minimize the challenges to the emergency
core cooling system (ECCS) since the inadvertent
opening of a vent smaller than the LOCA definition
would not require ECCS actuation, although it may
result in leakage beyond technical specification
limits. On PWRs, the use of new or existing lines
whose smallest orifice is larger than the LOCA
definition will require a valve in series with a
vent valve that can be closed from the control room
to terminate the LOCA that would result if an open
vent valve could not be reclosed.
- 5. A positive indication of valve position should be provided in the control room.
- 6. The reactor coolant vent system shall be operable from the control room.
- 7. Since the reactor coolant system vent will be part of the reactor coolant system pressure boundary, 18.2-2 Rev. 0 WOLF CREEK all requirements for the reactor pressure boundary must be met, and, in addition, sufficient redundancy should be incorporated into the design to minimize the probability of an inadvertent actuation of the system. Administrative procedures may be a viable option to meet the single-failure criterion. For vents larger than the LOCA definition, an analysis is required to demonstrate compliance with 10CFR50.46. 8. The probability of a vent path failing to close, once opened, should be minimized; this is a new requirement. Each vent must have its power supplied from an emergency bus. A single failure within the power and control aspects of the reactor coolant vent system should not prevent isolation of the entire vent system, when required. On BWRs, block valves are not required in lines with safety valves that are used for venting. 9. Vent paths from the primary system to within containment should go to those areas that provide good mixing with containment air. 10. The reactor coolant vent system (i.e., vent valves, block valves, position indication devices, cable terminations, and piping) shall be seismically and environmentally qualified in accordance with IEEE 344-1975 as supplemented by Regulatory Guide 1.100, 1.92 and SEP 3.92, 3.43, and 3.10. Environmental qualifications are in accordance with the May 23, 1980 Commission Order and Memorandum (CLI-80-21). 11. Provisions to test for operability of the reactor coolant vent system should be a part of the design. Testing should be performed in accordance with the ASME Code. 12. It is important that the displays and controls added to the control room as a result of this requirement not increase the potential for operator error. A human-factor analysis should be performed taking into consideration: a. The use of this information by an operator during both normal and abnormal plant
conditions. 18.2-3 Rev. 20 WOLF CREEK b. Integration into emergency procedures. c. Integration into operator training.
- d. Other alarms during emergency and need for prioritization of alarms. B. PWR Vent Design Considerations
- 1. Each PWR licensee should provide the capability to vent the reactor vessel head. The reactor vessel head vent should be capable of venting noncondensible gas from the reactor vessel hot legs (to the elevation of the top of the outlet nozzle) and cold legs (through head jets and other leakage
paths). 2. Additional venting capability is required for those portions of each hot leg that cannot be vented through the reactor vessel head vent or pressurizer. It is impractical to vent each of the many thousands of tubes in a U-tube steam generator; however, the staff believes that a procedure can be developed that ensures that sufficient liquid or steam can enter the U-tube region so that decay heat can be effectively removed from the RCS. Such operating procedures should incorporate this consideration. 3. Venting of the pressurizer is required to ensure its availability for system pressure and volume control. These are important considerations, especially during natural circulation.
18.2.1.2 The Operating Agent Response
The WCGS design provides the capability of venting the RCS to ensure that, if noncondensible gases become present in the RCS, regardless of the means
postulated for generation of such noncondensibles, gases can be vented from the
system, thereby ensuring that the flow paths associated with natural circulation core cooling capability are maintained. The venting capability is provided by the existing redundant pressurizer power-operated relief valves (PORVs) and their associated motor-operated isolation valves which can be used for the venting of the pressurizer and by the reactor vessel head vent system which provides redundant venting capability of the reactor vessel, RCS hot leg piping, and RCS cold leg piping via bypass leakage paths to the vessel head.
The design features of these systems are discussed below. 18.2-4 Rev. 0 WOLF CREEK The capability for venting of the pressurizer and the reactor vessel head is provided via safety grade, Class IE, environmentally qualified, seismic Category I, redundant systems, which meet the single failure criteria assuring both vent opening and vent closing capabilities. Block valves are an integral part of both the pressurizer and reactor vessel head vent system and meet the same qualification requirements as the vent valves.
The size of the RCS vents is determined as follows:
- 1. The pressurizer vent was based on the existing PORV (3-inch valve) capabilities.
- 2. The reactor vessel head vent system incorporates a 3/8-inch orifice to limit the maximum reactor coolant flow rate to a value less than that which defines a LOCA (see Figure 18.2-1).
The design provides for a motor-operated isolation valve in series with each pressurizer PORV. These PORV isolation valves may be either remotely actuated
from the control room or automatically closed based on an RCS pressure
setpoint. The setpoint is selected based on providing isolation prior to actuation of the safety injection system. Control room indication is provided for the pressurizer PORVs and PORV isolation valves and for the reactor vessel
head vent valves. Each vent is remotely operable from the control room. An
individual handswitch is provided for each valve.
The design of the RCS venting systems minimizes the probability of an inadvertent opening and consequence of such an opening.
- 1. The pressurizer vent system:
The pressurizer PORVs are normally closed, Class IE solenoid valves that energize to open. Thus, loss of
power will not actuate these valves. The PORV isolation
valves are normally open, motor-operated valves. As
discussed above, assuming an inadvertent opening of the
PORV or its failure to close, a protection grade Class
IE signal is provided to automatically close the
associated block valve.
- 2. The reactor vessel head vent system:
Each of the redundant vent paths off of the reactor vessel head contains two in-series, normally closed, same safety train, Class IE, environmentally qualified
solenoid valves. The two normally closed valves in
series limit any postulated events which could result in
an inadvertent opening of the vent.
18.2-5 Rev. 4 WOLF CREEK The pressurizer vents to the pressurizer relief tank. The reactor vessel head vent system valves are located on the CRDM seismic support platform above the reactor vessel. The discharge from these valves is directed to the open area of the containment above the refueling pool. This area precludes the potential for forming stagnant pockets of vented gases. Mixing and cooling of the vented gases is accomplished using permanent plant systems.
The Westinghouse Owners Group (WOG) has developed a generic reactor vessel head vent guideline. The Operating Agent has considered the generic guidance
developed by the WOG in the development of procedures for use of the head vent
system.18.2.1.3 Conclusion The WCGS design for the postaccident reactor coolant system vent system meets the applicable requirements of item II.B.1 of NUREG-0737.
18.2.2 DESIGN REVIEW OF THE PLANT SHIELDING (II.B.2) 18.2.2.1 NRC Guidance Per NUREG-0737 Position With the assumption of a postaccident release of radioactivity equivalent to that described in Regulatory Guides 1.3 and 1.4 (i.e., the equivalent of 50 percent of the core radioiodine, 100 percent of the core noble gas inventory, and 1 percent of the core solids are contained in the primary coolant), each
licensee shall perform a radiation and shielding-design review of the spaces around systems that may, as a result of an accident, contain highly radioactive materials. The design review should identify the location of vital areas and equipment, such as the control room, radwaste control stations, emergency power supplies, motor control centers, and instrument areas, in which personnel
occupancy may be unduly limited or safety equipment may be unduly degraded by the radiation fields during postaccident operations of these systems.
Each licensee shall provide for adequate access to vital areas and protection of safety equipment by design changes, increased permanent or temporary shielding, or postaccident procedural controls. The design review shall
determine which types of corrective actions are needed for vital areas
throughout the facility.
18.2-6 Rev. 0 WOLF CREEK Clarification The purpose of this item is to ensure that licensees examine their plants to determine what actions can be taken over the short-term to reduce radiation levels and increase the capability of operators to control and mitigate the consequences of an accident. These actions should be taken pending conclusions resulting in the long-term degraded core rulemaking, which may result in a need to consider additional sources.
Any area which will or may require occupancy to permit an operator to aid in the mitigation of or recovery from an accident is designated as a vital area.
For the purposes of this evaluation, vital areas and equipment are not
necessarily the same vital areas or equipment defined in 10 CFR 73.2 for
security purposes. The security center is listed as an area to be considered
as potentially vital, since access to this area may be necessary to take action
to give access to other areas in the plant.
The control room, technical support center (TSC), sampling station, and sample analysis area must be included among those areas where access is considered
vital after an accident. (See Item III.A.1.2 for discussion of the TSC and
emergency operations facility.) The evaluation to determine the necessary
vital areas should also include, but not be limited to, consideration of the
post-LOCA hydrogen control system, containment isolation reset control area, manual ECCS alignment area (if any), motor control centers, instrument panels, emergency power supplies, security center, and radwaste control panels. Dose rate determinations need not be for these areas if they are determined not to be vital.
As a minimum, necessary modifications must be sufficient to provide for vital system operation and for occupancy of the control room, TSC, sampling station, and sample analysis area.
In order to ensure that personnel can perform the necessary postaccident operations in the vital areas, the following guidance is to be used by licensees to evaluate the adequacy of radiation protection to the operators:
- 1. Source Term
The minimum radioactive source term should be equivalent to the source terms recommended in Regulatory Guides 1.3, 1.4, and 1.7 and Standard Review Plan 15.6.5 with appropriate decay times based on plant design (i.e., you may assume that the radioactive decay that occurs before fission products can be transported to various systems).
18.2-7 Rev. 0 WOLF CREEK
- a. Liquid-Containing Systems: 100 percent of the core equilibrium noble gas inventory, 50 percent of the core equilibrium halogen inventory, and 1 percent of all others are assumed to be mixed in the reactor coolant and liquids recirculated by residual heat removal (RHR), high-pressure coolant injection (HPCI), and low-pressure coolant injection (LPCI), or the equivalent of these systems. In determining the source term for
recirculated, depressurized cooling water, you may
assume that the water contains no noble gases.
- b. Gas-Containing Systems: 100 percent of the core equilibrium noble gas inventory and 25 percent of the core equilibrium halogen activity are assumed to be mixed in the containment atmosphere. For vapor-containing lines connected to the primary
system (e.g., BWR steam lines), the concentration of radioactivity shall be determined, assuming that
the activity is contained in the vapor space in the
primary coolant system.
- 2. Systems Containing the Source
Systems assumed in your analysis to contain high levels of radioactivity in a postaccident situation should include, but not be limited to, containment, residual
heat removal system, safety injection systems, chemical and volume control system (CVCS), containment spray recirculation system, sample lines, gaseous radwaste
systems, and standby gas treatment systems (or equivalent of these systems). If any of these systems or others that could contain high levels of radioactivity were excluded, you should explain why such systems were excluded. Radiation from the leakage of
systems located outside of the containment need not be
considered for this analysis. Leakage measurement and
reduction is treated under Item III.D.1.1, "Integrity of Systems Outside Containment Likely To Contain Radioactive Material for PWRs and BWRs." Liquid waste systems need not be included in this analysis.
Modifications to liquid waste systems will be considered after completion of Item III.D.1.4, "Radwaste System Design Features To Aid in Accident Recovery and Decontamination." 18.2-8 Rev. 0 WOLF CREEK
- 3. Dose Rate Criteria The design dose rate for personnel in a vital area should be such that the guidelines of GDC 19 will not be exceeded during the course of the accident. GDC 19 requires that adequate radiation protection be provided such that the dose to personnel should not be in excess of 5 rem whole body, or its equivalent to any part of the body for the duration of the accident. When
determining the dose to an operator, care must be taken
to determine the necessary occupancy times in a specific
area. For example, areas requiring continuous occupancy
will require much lower dose rates than areas where minimal occupancy is required. Therefore, allowable dose rates will be based upon expected occupancy, as well as the radioactive source terms and shielding.
However, in order to provide a general design objective, we are providing the following dose rate criteria with alternatives to be documented on a case-by-case bases.
The recommended dose rates are average rates in the
area. Local hot spots may exceed the dose rate
guidelines. These doses are design objectives and are
not to be used to limit access in the event of an
accident.
- a. Areas Requiring Continuous Occupancy: <15 mrem/hr (averaged over 30 days). These areas will require
full-time occupancy during the course of the accident. The control room and onsite technical support center are areas where continuous occupancy will be required. The dose rate for these areas is
based on the control room occupancy factors contained in SRP 6.4.
- b. Areas Requiring Infrequent Access: GDC 19. These areas may require access on an irregular basis, not
continuous occupancy. Shielding should be provided
to allow access at a frequency and duration
estimated by the licensee. The plant radiochemical/
chemical analysis laboratory, radwaste panel, motor
control center, instrumentation locations, and
reactor coolant and containment gas sample stations
are examples of sites where occupancy may be needed
often, but not continuously.
- 4. Radiation Qualification of Safety-Related Equipment
The review of safety-related equipment which may be unduly degraded by radiation during postaccident
operation of this equipment relates to equipment
inside and 18.2-9 Rev. 0 WOLF CREEK outside of the primary containment. Radiation source terms calculated to determine environmental qualification of safety-related equipment consider the following:
- a. LOCA events which completely depressurize the primary system should consider releases of the source term (100 percent noble gases, 50 percent iodines, and 1 percent particulates) to the
containment atmosphere.
- b. LOCA events in which the primary system may not depressurize should consider the source term (100 percent noble gases, 50 percent iodines, and 1 percent particulate) to remain in the primary coolant. This method is used to determine the qualification doses for equipment in close
proximity to recirculating fluid systems inside and outside of the containment. Non-LOCA events both
inside and outside of the containment should use 10
percent noble gases, 10 percent iodines, and 0
percent particulate as a source term.
The following table summarizes these considerations:
Containment LOCA Source Term (Noble Gas/Iodine/
Particulate)
Non-LOCA High-Energy Line Break Source Term( Noble Gas/Iodine/
Particulate) % % Outside (100/50/1) (10/10/0) in RCS in RCS Inside Larger of (10/10/0) (100/50/1) in RCS in containment or (100/50/1) in RCS 18.2.2.2 The Operating Agent Response The shielding design criteria used for WCGS is in accordance with NRC Standard
Review Plan 12.2 and is described in Section 12.3.2 of the USAR. Two basic
plant conditions are the bases of the 18.2-10 Rev. 0 WOLF CREEK shielding design, normal full power operation, and plant shutdown. The shielding design objectives for these conditions and anticipated operational occurrences, as stated in Section 12.3.2.1, are:
- a. To ensure that radiation exposure to plant operating personnel, contractors, administrators, visitors, and proximate site boundary occupants are ALARA and within the limits of 10 CFR 20.
- b. To ensure sufficient personnel access and occupancy time to allow normal anticipated maintenance, inspection, and
safety-related operations required for each plant
equipment and instrumentation area.
- c. To reduce potential equipment neutron activation and mitigate the possibility of radiation damage to materials.
- d. The control room is sufficiently shielded, so that the direct dose plus the inhalation dose (calculated in
Chapter 15.0) will not exceed the limits of GDC-19.
Radiation zones have been established, based on required personnel access during these plant conditions.
18.2.2.2.1 Design Review of Plant Shielding
18.2.2.2.1.1 General
The following discussion provides a description of the design review of plant shielding of spaces around systems that may contain highly radioactive
materials as a result of an accident. Systems required to process reactor
coolant outside the containment during post-accident conditions were selected
for evaluation.
The radiation and shielding design review was performed to identify the location of vital areas and equipment such as the control room, sample station, emergency power supplies, motor control centers, and instrument areas, in which
personnel occupancy may be unduly limited or safety equipment may be unduly
degraded by the radiation fields during post-accident operations of these
systems. Additionally, the review results ensure that adequate access to vital
areas and protection of safety-related equipment are provided.
As shown in Figures 18.2-2 through 18.2-11, a number of radiation zone maps and associated dose rate decay curves have been produced as a result of the design review. Radiation levels for various areas around contaminated systems for
various times can be found 18.2-11 Rev. 0 WOLF CREEK on these maps and curves. Operators may refer to the maps and curves to apprise themselves of the locations of potentially high radiation areas for any time following the postulated accident. These maps and curves are available in the critical post-accident control and support areas, e.g., control room, TSC, etc., for use following postulated DBA's.
18.2.2.2.1.2 Scope of Design Review
18.2.2.2.1.2.1 Systems Engineering Methodology
A. Selection of Systems for Shielding Review
Plant systems considered in the shielding review are classified into the following categories:
Category A (Recirculation Systems)
The first category of systems are those systems designed to mitigate a design basis loss of coolant accident and
which might contain highly radioactive sources. Such
systems include the emergency core cooling systems.
For the shielding review, the ECCS systems were postulated to contain significant additional sources of
radioactivity in excess of the original plant design
basis.
The following systems were selected to ensure the radiation safety concern is adequately addressed by the existing plant shielding design:
- 1. Those portions of the containment spray systems used to recirculate water from the containment sump back into the containment.
- 2. Those portions of the residual heat removal systems used to recirculate water from the containment sump back into
the containment.
- 3. Those portions of the safety injection system used to recirculate water from the containment sump back into the containment.
- 4. Those portions of the Chemical and Volume Control System (CVCS) used to recirculate water from the containment sump back into the containment. 18.2-12 Rev. 0 WOLF CREEK Category B (Extensions of Containment Atmosphere)
The second category of systems are the systems or portions of systems which
would contain radioactivity by virtue of their connection to the containment
atmosphere following an accident. These systems would not be expected to
contain a significant level of radioactive sources that are considered in this
shielding review, since proper operation of the emergency core cooling systems
is expected to prevent extensive core damage. Nevertheless, such sources have
been postulated for those portions of the post-accident containment hydrogen analyzer system external to the containment which would contain the atmosphere from the containment. An evaluation was also completed for a post-accident recovery sample should it be needed. (Amendment 137)
Category C (Liquid Samples)
The third category of systems is sampling systems. As discussed in Section
18.2.3, NUREG-0737, Task II.B.3 requires that certain post-accident liquid
samples be obtained from the reactor coolant system or containment systems.
Samples are no longer needed under this requirement. Those portions of the sampling system which must be used have been evaluated to assure that steps can be taken to obtain a post-accident recovery sample should it be needed. (Amendment 137)
B. Radioactive Source Release Fractions
Per NUREG-0737, the following release fractions were
used as a basis for determining the concentrations for
the shielding review:
- 1. Source A: Containment atmosphere - 100 percent
noble gases, 25 percent halogens
- 2. Source B: Reactor coolant - 100 percent noble
gases, 50 percent halogens, 1 percent
solids
- 3. Source C: Containment sump liquid - 50 percent
halogens, 1 percent solids
These release fractions were applied to the total curies
available for the particular chemical species (i.e.,
noble gas, halogens, or solid) for an equilibrium
fission product inventory for the WCGS core.
18.2-13 Rev. 20 WOLF CREEK The release fraction for Cs was assumed to be 1 percent for the purposes of this shielding review. However, a relationship was developed which related the dose rates calculated, assuming 1 percent Cs, to the dose rate that would be expected if 50 percent of the Cs was released to the liquid source (as recommended by Revision 1 to Regulatory Guide 1.89, "Qualification of Class IE Equipment for Nuclear Power Plants"). This relationship is provided in Figure 18.2-11. No noble gases were included in the containment sump liquid (Source C) because Regulatory Guide 1.7 has set this precedent in modeling liquids in the containment sump.
C. Source Term Models The preceding section (B) outlines the assumptions used for release fractions for the shielding design review.
However, these release fractions are only the first step in modeling the source terms for the activity concentrations in the systems under review. The
important modeling parameters, decay time and dilution volume, obviously also affect any shielding analysis.
The following sections outline the rationale for the
selection of values for these key parameters.
- 1. Decay Time
For the first stage of the shielding design review process, no decay time credit was used with the above releases. The primary reason for this was to
develop a set of normalized accident radiation zone maps (i.e., no decay) that could be used as a tool by the plant staff along with a set of decay curves to quantitatively assess the plant status quickly
following any abnormal occurrence. Decay curves are provided for the containment atmosphere and containment sump liquid only. Except for areas adjacent to the containment, the sump liquid source
will be the dominating contributor.
- 2. Dilution Volume
The volume used for dilution is important, since it affects the calculations of dose rate in a linear fashion. The following dilution volumes were used with the release fractions and decay times listed above to arrive at the actual source terms used in the shielding reviews: 18.2-14 Rev. 0 WOLF CREEK
- a. Source A: Containment free volume.
- b. Source B: Reactor coolant system volume.
- c. Source C: The volume of water present at the time of recirculation (reactor coolant system + refueling water storage tank + accumulator tanks).
- 3. Associated Sources and Systems
For the following systems, the source considered is listed. Note that normally shut valves were assumed to remain shut.
- a. Containment spray system - At the initiation of recirculation, Source C was used.
- b. Safety injection system - At the initiation of recirculation, Source C was used.
- c. Residual heat removal system - Source C was used for sump recirculation mode.
- d. Sampling system - The sources used in the shielding design review for sampling systems were as follows:
Containment air sample - Source A Reactor coolant sample - Source B
Containment sump sample - Source C
- e. CVCS system - The liquid source was Source C.
18.2.2.2.1.2.2 Shielding Design Review Methodology
A. Analytical Shielding Techniques
The previous sections outlined the rationale and assumptions used for the selection of the systems in the shielding design review, as well as the formulation of the sources for those systems. The next step in the review process was to use those sources to estimate dose rates from those selected systems. The dose rates were determined using a point-kernel computer code developed by Bechtel. This code utilizes the semi-empirical
methods developed by Rockwell (Reference 8) for calculating the direct gamma dose rates. To determine
the dose rate contribution from the containment, QAD-CG
(Reference 9) was used. For corridors outside
compartments, reviews were done to check the dose rate
transmitted into the corridor through the walls of
adjacent 18.2-15 Rev. 0 WOLF CREEK compartments. Checks were also made for any piping or equipment that could directly contribute to corridor dose rates, i.e., piping that may be running directly in the corridor or equipment/piping in a compartment that could shine directly into corridors with no attenuation through compartment walls.
B. Accident Radiation Zone Maps
Radiation levels are evaluated using the radiation zone maps, Figures 18.2-2 through 18.2-9, and associated
decay curves, Figures 18.2-10 and 18.2-11, and are
considered in parallel with required operator actions.
The zone boundaries were formulated based on the following rationale:
.
Zone D, Zone Dose Rate Limits Designation Rationale (Rem/hr)________
.
A-I The first zone is 0 D 0.015 consistent with the personnel radiation exposure guidelines of Task II.B.2 of NUREG-0737 for vital areas.
.
A-II The second zone is con- 0.015 D 0.100 sistent with the person-nel radiation exposure guidelines of Task II.B.2
of NUREG-0737 for vital
areas requiring infrequent
access or corridors to these areas. Such zones
involve no time and mo-tion evaluations.
.
A-III The third zone is con- 0.100 < D 5 sistent with the person-nel radiation exposure
guidelines of Task II.B.2
of NUREG-0737. Zones in
this range required that a
time and motion study be done to ensure that inte-
grated exposure was not greater than 5 Rem as given
in General Design Criteria 19. 18.2-16 Rev. 0 WOLF CREEK
.
Zone D, Zone Dose Rate Limits Designation Rationale (Rem/hr)
_______ .
A-IV 5 < D 50 .
A-V 50 < D 500 .
A-VI 500 < D 5000 .
A-VII 5000 < D 50,000 .
A-VIII 50,000 < D 500,000 18.2.2.2.1.2.3 Personnel Exposure Limits and Methodology A. Access Operator actions that are required post-LOCA were reviewed to ensure that first priority safety actions
can be achieved in the postulated radiation fields.
This review ensures that access is available and
required operator actions can be achieved as discussed
in Section 18.2.2.2.1.3.
B. Personnel Radiation Exposure Guidelines
The general basis for personnel radiation exposure guidelines was 10 CFR 50, Appendix A, GDC 19. The
following additional radiation limit guidelines were
used to evaluate occupancy and accessibility of plant vital areas. General area dose rates were used rather
than maximum surface dose rates. Contributions from all
sources were considered.
- 1. Vital areas requiring continuous occupancy
Vital areas such as control room, counting room, laboratory, and the onsite technical support center
were verified to ensure the direct dose rate was
less than 15 mr/hr. The 30 day average direct
radiation dose rate is less than 15 mr/hr for the
SAS room and the control room toilet. 18.2-17 Rev. 0 WOLF CREEK
- 2. Vital areas requiring infrequent access or corridors to these vital areas For these areas, the dose rate was verified to be less than 5 R/hr except as noted in Section 18.2.2.2.1.3.
18.2.2.2.1.3 Results of Review
The shielding design criteria and objectives have been met in the design of WCGS. These criteria and objectives have been extended to the areas designated
to be the onsite Technical Support Center and the Operations Support Center, as
required by the expected occupancy of these areas. The following is a
discussion of the impact of a postulated LOCA or TMI-2 type event on the WCGS
shielding design and is based on the WCGS specific system design capabilities:
A. LOCA
Assuming a DBA LOCA with radiation source terms consistent with Regulatory Guides 1.4 and 1.7, plus the
Cs fraction discussed in Section 18.2.2.2.1.2.1, all
safety-related equipment and instrumentation will be
qualified for the maximum equipment doses associated
with the time that the equipment must function. All
safety-related systems operations are performed either
automatically or remote manually from the control room.
Operations within the auxiliary building are not
expected following a LOCA. During the long-term
recovery phase, access to sample stations in the
auxiliary building may be limited. Should a sample be requested, conditions will determine what steps will be taken to assure dose is ALARA. Due to Amendment 137, PASS is no longer used. As discussed above, the dose limitations of GDC-19 for control room operators are met.
B. TMI-2 WCGS is designed to preclude events similar to the TMI-2 event. For example, the WCGS design includes reactor coolant system high point vents (as discussed in Section 18.2.1) and the associated Class IE instrumentation required to detect inadequate core cooling and thus
precludes the degradation of the fuel cladding and any
massive release of activity to the coolant. However, assuming that a TMI-2 event does occur, contamination 18.2-18 Rev. 20 WOLF CREEK of the auxiliary building is precluded by design: 1)
Compliance with containment isolation criteria is described in Section 6.2.4 and Section 18.2.11 and precludes contamination of the auxiliary building by auxiliary systems, and 2) the WCGS design includes a dedicated, safety-related letdown system located totally within the containment which provides controlled letdown capability to the pressurizer relief tank, eliminating any operational need to contaminate the chemical and
volume control system in the auxiliary building.
Based on the above, dose rates were not evaluated in the auxiliary building for an undiluted reactor coolant system source term being present in the residual heat removal system. Dose rates inside containment due to the TMI-2 type event have been considered for equipment qualification. Habitability of the TSC is addressed elsewhere in the USAR.
18.2.2.3 Conclusion The shielding design criteria and objectives for WCGS meets the applicable recommendations of item II.B.2 of NUREG-0737 and Amendment 137. Radiation qualification of WCGS safety-related equipment is addressed in Section 3.11(B).
18.2.3 POSTACCIDENT SAMPLING SYSTEM (II.B.3)
18.2.3.1 NRC Guidance Per NUREG-0737 Position A design and operational review of the reactor coolant and containment atmosphere sampling line systems shall be performed to determine the capability of personnel to promptly obtain (less than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />) a sample under accident
conditions without incurring a radiation exposure to any individual in excess
of 3 and 18-3/4 Rem to the whole body or extremities, respectively. Accident
conditions should assume a Regulatory Guide 1.3 or 1.4 release of fission
products. If the review indicates that personnel could not promptly and safely obtain the samples, additional design features or shielding should be provided to meet the criteria.
A design and operational review of the radiological spectrum analysis facilities shall be performed to determine the capability to promptly quantify (in less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />) certain radionuclides that are indicators of the degree of core damage. Such radionuclides are noble gases (which indicate cladding failure), iodines and cesiums (which indicate high fuel temperatures), and
nonvolatile isotopes (which indicate fuel melting). The initial reactor 18.2-19 Rev. 20 WOLF CREEK coolant spectrum should correspond to a Regulatory Guide 1.3 or 1.4 release.
The review should also consider the effects of direct radiation from piping and components in the auxiliary building and possible contamination and direct radiation from airborne effluents. If the review indicates that the analyses required cannot be performed in a prompt manner with existing equipment, design modifications or equipment procurement shall be undertaken to meet the criteria.In addition to the radiological analyses, certain chemical analyses are necessary for monitoring reactor conditions. Procedures shall be provided to
perform boron and chloride chemical analyses, assuming a highly radioactive
initial sample (Regulatory Guide 1.3 or 1.4 source term). Both analyses shall
be capable of being completed promptly (i.e., the boron sample analysis within
an hour and the chloride sample analysis within a shift).
Clarification The following items are clarifications of requirements identified in NUREG-0578, NUREG-0660, or the September 13 and October 30, 1979 clarification
letters. The system provides both online isotopic analysis and chemical
analysis with systems designed to operate in the accident environment.
Provisions have also been included for taking undiluted and diluted grab
samples. Accuracies of the online chemical analyzers will be comparable to
those available from commercial grade analyzers.
- 1. The licensee shall have the capability to promptly obtain reactor coolant samples and containment
atmosphere samples. The combined time allotted for sampling and analysis should be 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> or less from the time a decision is made to take a sample.
- 2. The licensee shall establish an onsite radiological and chemical analysis capability to provide, within the 3-hour time frame established above, quantification of the following:
- a. Certain radionuclides in the reactor coolant and containment atmosphere that may be indicators of
the degree of core damage (e.g., noble gases, iodines and cesiums, and non-volatile isotopes).
- b. Hydrogen levels in the containment atmosphere.
- c. Dissolved gases (e.g., H 2), chloride (time allotted for analysis subject to discussion below), and boron concentration of liquids. 18.2-20 Rev. 0 WOLF CREEK
- d. Alternatively, have inline monitoring capabilities to perform all or part of the above analyses.
- 3. Reactor coolant and containment atmosphere sampling during postaccident conditions shall not require an isolated auxiliary system [e.g., the letdown system, reactor water cleanup system (RWCUS)] to be placed in
operation in order to use the sampling system.
- 4. Pressurized reactor coolant samples are not required if the licensee can quantify the amount of dissolved gases
with unpressurized reactor coolant samples. The
measurement of either total dissolved gases or H2 gas in
reactor coolant samples is considered adequate.
Measuring the O2 concentration is recommended, but is not mandatory.
- 5. The time for a chloride analysis to be performed is dependent upon two factors: (a) if the plant's coolant
water is seawater or brackish water and (b) if there is
only a single barrier between primary containment
systems and the cooling water. Under both of the above
conditions, the licensee shall provide for a chloride
analysis within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of the sample being taken. For
all other cases, the licensee shall provide for the analysis to be completed within 4 days. The chloride analysis does not have to be done onsite.
- 6. The design basis for plant equipment for reactor coolant and containment atmosphere sampling and analysis must assume that it is possible to obtain and analyze a
sample without radiation exposures to any individual exceeding the criteria of GDC 19 (Appendix A, 10 CFR Part 50) (i.e., 5 rem whole body, 75 rem extremities).
[Note that the design and operational review criterion
was changed from the operational limits of 10 CFR Part
20 (NUREG-0578) to the GDC 19 criterion (October 30, 1979 letter from H. R. Denton to all licensees).
- 7. The analysis of primary coolant samples for boron is required for PWRs. (Note that Revision 2 of Regulatory Guide 1.97, when issued, will likely specify the need for primary coolant boron analysis capability at BWR plants.)
- 8. If inline monitoring is used for any sampling and analytical capability specified herein, the licensee shall provide backup sampling through grab samples, and
shall demonstrate the capability of analyzing the
samples. 18.2-21 Rev. 0 WOLF CREEK Established planning for analysis at offsite facilities is acceptable. Equipment provided for backup sampling shall be capable of providing at least one sample per day for 7 days following onset of the accident and at least one sample per week until the accident condition no longer exists.
- 9. The licensee's radiological and chemical sample analysis capability shall include provisions to:
- a. Identify and quantify the isotopes of the nuclide categories discussed above to levels corresponding
to the source terms given in Regulatory Guide 1.3 or 1.4 and 1.7. Where necessary and practicable, the ability to dilute samples to provide capability for measurement and reduction of personnel exposure should be provided. Sensitivity of onsite liquid
sample analysis capability should be such as to permit measurement of nuclide concentration in the
range from approximately 1 mCi/g to 10 Ci/g.
- b. Restrict background levels of radiation in the radiological and chemical analysis facility from
sources, such that the sample analysis will provide
results with an acceptably small error
(approximately a factor of 2). This can be
accomplished through the use of sufficient
shielding around samples and outside sources, and
by the use of ventilation system design which will
control the presence of airborne radioactivity.
- 10. Accuracy, range, and sensitivity shall be adequate to provide pertinent data to the operator in order to describe the radiological and chemical status of the reactor coolant systems.
- 11. In the design of the postaccident sampling and analysis capability, consideration should be given to the
following items:
- a. Provisions for purging sample lines, for reducing plateout in sample lines, for minimizing sample loss or distortion, for preventing blockage of sample lines by loose material in the RCS or containment, for appropriate disposal of the samples, and for flow restrictions to limit reactor
coolant loss from a rupture of the sample line.
The post-accident reactor coolant and containment
atmosphere samples should be representative of
the reactor 18.2-22 Rev. 0 WOLF CREEK coolant in the core area and the containment atmosphere following a transient or accident. The sample lines should be as short as possible to minimize the volume of fluid to be taken from containment. The residues of sample collection should be returned to containment or to a closed system.
- b. The ventilation exhaust from the sampling station should be filtered with charcoal adsorbers and
high-efficiency particulate air (HEPA) filters.
- c. Guidelines for analytical or instrumentation range are given below in Table II.B.3-1.
18.2.3.2 The Operating Agent Response By Amendment 137 the in-line analyzers contained with PASS are no longer used.
During a long term recovery, conditions will determine what steps will be taken to obtain a grab sample from the Nuclear Sample Panel SJ-143. Analyses will be done on site by appropriate instruments or shipped off-site as needed. The sample for the containment atmosphere is done using the sample flask on the containment hydrogen monitor as described in Section 6.2.5.2.2.3 and shown on Figure 6.2.5-1.
Guidelines of Table II.B.3-1 no longer apply.
TABLE II.B.3-1
ANALYSES FOR THE POSTACCIDENT SAMPLING SYSTEM Liquids Ranges Radioisotopic identification 10 10 7 Ci/cc Boron 0 - 6,000 ppm pH 1 - 13 Hydrogen (Not required or performed. Reference USQD 59 98-0071, letter WO 98-0047 and letter 98-01418.)
Oxygen 0 - 20 ppm Chloride 0 - 20 ppm Conductivity 0.1 - 1,000 mhos 18.2-23 Rev. 20 WOLF CREEK Gases Ranges Radioisotopic identification 10 10 5 Ci/cc Oxygen 0 - 50 wt%
Hydrogen 0 - 10 Volume Percent Since the sample panel is located in the auxiliary building, any leakage from the system is filtered through the charcoal adsorber and HEPA filters of the auxiliary building emergency exhaust system (see Section 9.4.3).
The nuclear sampling system P&ID (M-12SJ01, M-12SJ02, M-12SJ03) are listed in Table 1.7-2.
Accessibility of the auxiliary building to obtain a grab sample was addressed in Section 18.2.2.
Core Damage Assessment Methodology (CDAM) was developed and approved by the NRC. WCAP-14696, "Westinghouse Owners Group Core Damage Assessment Guidance,"
was developed and submitted to the NRC for review. This Core Damage Assessment Guidance (CDAG) utilizes installed instrumentation, rather than PASS samples to classify core damage accidents. NRC issued an SER on September 2, 1999 to approve the WCAP-14696 methodology. Justification for elimination of PASS was submitted to the NRC in WCAP-14986-A, "Post Accident Sampling System Requirements: A Technical Basis," October 26, 1998, as supplemented by letters dated April 28, 1999, April 10, 2000, and May 22, 2000.
18.2.3.3 Conclusion The postaccident sampling system design for WCGS is not required to meet the recommendations of Item II.B.3 of NUREG-0737. A Core Damage Assessment Guidance (WCAP-14696) is implemented to provide evaluation and action during an accident. With implementation of WCAP-14696, WCAP-14986-A and evaluations demonstrated that PASS was no longer required. Should contingency sampling be required during recovery, assessments will address taking samples from the Nuclear Sample System and the Containment Hydrogen Monitoring Equipment. No PASS samples are required to be taken. (Reference USQD 59 98-0071, letter WO 98-0047 and letter 98-01418.) 18.2-24 Rev. 20 WOLF CREEK 18.2.4 TRAINING FOR MITIGATING CORE DAMAGE (II.B.4) 18.2.4.1 NRC Guidance Per NUREG-0737 Position The staff requires that the applicants develop and implement a program to ensure that all operating personnel are trained in the use of installed plant systems to control or mitigate an accident in which the core is severely damaged.Clarification
Shift Technical Advisors and operating personnel from the plant manager through the operations chain to the licensed operators shall receive the training
listed below.
The training program shall include the following topics:
- a. Incore Instrumentation
- 1. Use of fixed or movable incore detectors to determine the extent of core damage and geometry changes.
- 2. Use of thermocouples in determining peak temperatures; methods for extended range readings; methods for direct readings at terminal junctions.
- 3. Methods for calling up (printing) incore data from the plant computer.
- b. Excore Nuclear Instrumentation (NIS)
Use of NIS for determination of void formation; void location basis for NIS response as a function of core temperatures and density changes.
- c. Vital Instrumentation
- 1. Instrumentation response in an accident environment; failure sequence (time to failure, method of failure); indication reliability (actual versus indicated level). 18.2-25 Rev. 0 WOLF CREEK
- 2. Alternative methods for measuring flows, pressures, levels, and temperatures.
(a) Determination of pressurizer level if all level transmitters fail.
(b) Determination of letdown flow with a clogged filter (low flow).
(c) Determination of other reactor coolant system parameters if the primary method of
measurement has failed.
- d. Primary Chemistry
- 1. Expected chemistry results with severe core damage; consequences of transferring small quantities of
liquid outside containment; importance of using leaktight systems.
- 2. Expected isotopic breakdown for core damage; for clad damage.
- 3. Corrosion effects of extended immersion in primary water; time to failure.
- e. Radiation Monitoring
- 1. Response of process and area monitors to severe damage; behavior of detectors when saturated; method for detecting radiation readings by direct
measurement at detector output (over ranged detector); expected accuracy of detectors at different locations; use of detectors to determine the extent of core damage.
- 2. Methods of determining dose rate inside the containment from measurements taken outside the
containment.
- f. Gas Generation
- 1. Methods of H 2 generation during an accident; other sources of gas (Xe, Kr); techniques for venting or disposal of noncondensibles.
- 2. H 2 flammability and explosive limit, sources of 0 2 in containment or reactor coolant system. 18.2-26 Rev. 0 WOLF CREEK Managers and technicians in the Instrumentation and Control (I&C), health physics, and chemistry departments shall receive training commensurate with their responsibilities.
18.2.4.2 The Operating Agent Response The Operating Agent provided a course in Mitigating Core Damage for licensed operator candidates. The outline of this course is provided in Table 18.2-1.
The course, in conjunction with other lectures in the reactor operator training
program, covered a minimum of 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br /> of training in the control or mitigation
of accidents in which the core is severely damaged. A Mitigating Core Damage course was given to all licensed operators and their supervisors up to and
including the Plant Manager prior to fuel load.
The current Mitigating Core Damage course is discussed in Section 13.2.
Supervisors and technicians in the Instrumentation and Controls, Health Physics and Chemistry groups were given training, prior to fuel load, commensurate with their responsibilities during accidents which involve severe core damage.
18.2.4.3 Conclusion The Operating Agent's training program for mitigating core damage satisfies NUREG-0737.
18.2.5 PERFORMANCE TESTING OF BOILING-WATER REACTOR AND PRESSURIZED-WATER REACTOR RELIEF AND SAFETY VALVES (II.D.1) 18.2.5.1 NRC Guidance Per NUREG-0737 Position Pressurized-water reactor and boiling-water reactor licensees and applicants shall conduct testing to qualify the reactor coolant system relief and safety valves under expected operating conditions for design-basis transients and
accidents.
Clarification
Licensees and applicants shall determine the expected valve operating conditions through the use of analyses of accidents and anticipated operational
occurrences referenced in Regulatory Guide 1.70, Revision 2. The single
failures applied to these analyses shall be chosen so that the dynamic forces 18.2-27 Rev. 10 WOLF CREEK on the safety and relief valves are maximized. Test pressures shall be the highest predicted by conventional safety analysis procedures. Reactor coolant system relief and safety valve qualification shall include qualification of
associated control circuitry, piping, and supports, as well as the valves
themselves.
A. Performance Testing of Relief and Safety Valves--The following information must be provided in report form by October 1, 1981 for BWRs and July 1, 1982 for PWRs.
- 1. Evidence supported by test of safety and relief valve functionability for expected operating and
accident (non-ATWS) conditions must be provided to
NRC. The testing should demonstrate that the
valves will open and reclose under the expected
flow conditions.
- 2. Since it is not planned to test all valves on all plants, each licensee must submit to NRC a correlation of other evidence to substantiate that the valves tested in the EPRI (Electric Power
Research Institute) or other generic test program demonstrate the functionability of as-installed primary relief and safety valves. This correlation must show that the test conditions used are
equivalent to expected operating and accident
conditions, as prescribed in the Final Safety
Analysis Report (FSAR). The effect of as-built
relief and safety valve discharge piping on valve
operability must also be accounted for, if it is
different from the generic test loop piping.
- 3. Test data, including criteria for success and failure of valves tested, must be provided for NRC
staff review and evaluation. These test data
should include data that would permit plant-specific evaluation of discharge piping and supports that are not directly tested.
B. Qualification of PWR Block Valves--Although not specifically listed as a short-term lessons learned
requirement in NUREG-0578, qualification of PWR block
valves is required by the NRC Task Action Plan NUREG-
0660 under task item II.D.1. It is the understanding of
the NRC that testing of several commonly used block
valve designs is already included in the generic EPRI
PWR safety and relief valve testing program to be
completed by July 1, 1981. By means of this letter, NRC
is establishing July 1, 1982 as the date for
verification 18.2-28 Rev. 10 WOLF CREEK of block valve functionability. By July 1, 1982, each PWR licensee, for plants so equipped, should provide evidence supported by test that the block or isolation valves between the pressurizer and each power-operated relief valve can be operated, closed, and opened for all fluid conditions expected under operating and accident conditions.
C. ATWS Testing--Although ATWS testing need not be completed by July 1, 1981, the test facility should be
designed to accommodate ATWS conditions of approximately
3,200 to 3,500 (Service Level C pressure limit) psi and
700 F with sufficient capacity to enable testing of
relief and safety valves of the size and type used on
operating pressurized-water reactors.
18.2.5.2 The Operating Agent Response The PORVs in the WCGS design are relied on to function to alleviate over-pressurization that possibly could occur during startup of the reactor, or
during cold shutdown conditions, and they may be relied on to function during
shut down of the reactor, assuming only safety-grade equipment is functioning.
(These functions are described in Section 5.2 and Appendix 5.4(A).) The PORVs are not required to function to mitigate the consequences of any design basis
accident.The PORVs are also designed to limit high pressure during normal operation.
The description of this control function is presented in Sections 5.2 and 7.6.
As discussed below, operability of the PORVs will be demonstrated by
prototypical testing and appropriate analyses.
The safety valves for the WCGS design are relied on to limit primary system pressure following anticipated operational transients. The design basis for
the safety valves is presented in Section 5.2. The valves are required by ASME Boiler and Pressure Vessel Code to mitigate excessive pressure increases, regardless of their source. As discussed below, operability of the safety valves was demonstrated by prototypical testing and appropriate analyses.
The reactor coolant system is provided with two PORVs and three code safety valves. Each PORV also has an associated motor-operated block valve. 18.2-29 Rev. 12 WOLF CREEK The PORVs for WCGS were manufactured by Garrett; the safety valves were manufactured by Crosby. These valves are included in the safety and relief valve testing program that has been developed by the Electric Power Research Institute (EPRI). A description of this program entitled "Program Plan for the Performance Verification of PWR Safety/Relief Valves and Systems," dated December 13, 1979, was submitted to the NRC on December 17, 1979 (letters from W. J. Cahill, Jr., Chairman of EPRI Safety and Analysis Task Force, to H.
Denton and D. Eisenhut, NRC). A revision to this program was submitted to the NRC in July 1980. The NRC staff completed its review of this program and found
it acceptable.
An interim report on these valve tests was submitted by the PWR utilities to the NRC in July 1981. A final report on these tests was submitted in SNUPPS letter dated October 20, 1982 and a final report on piping and supports was provided by SNUPPS letter dated January 7, 1983 (distributed as82-002).
Preoperational testing of the PORVs included monitoring the dynamic response of the relief valve discharge piping during actuation of the PORVs. These in-plant dynamic tests were initiated with a water-solid inlet (loop seal) at the
PORVs and a steam bubble maintained in the pressurizer.
Regarding verification of the block valve functionability, WCGS information on qualification of the block valves was provided by SNUPPS letter dated July 1, 1982.Based on the NRC review of the submittals addressing safety valves, PORVs, PORV block valves and associated piping, the Operating Agent was requested to
provide additional information. SNUPPS letters dated June 30, 1986 and September 26, 1986 provided responses to the NRC questions.
18.2.5.3 Conclusion The plan to demonstrate the operability of the PORVs and safety valves at WCGS satisfies the guidance of item II.D.1 in NUREG-0737. The NRC review of this issue is continuing.
18.2.6 DIRECT INDICATION OF RELIEF AND SAFETY VALVE POSITION (II.D.3) 18.2.6.1 NRC Requirement Per NUREG-0737 Position Reactor coolant system relief and safety valves shall be provided with a positive indication in the control room derived from a 18.2-30 Rev. 0 WOLF CREEK reliable valve-position detection device or a reliable indication of flow in the discharge pipe.
Clarification
- 1. The basic requirement is to provide the operator with unambiguous indication of valve position (open or closed) so that appropriate operator actions can be taken.
- 2. The valve position should be indicated in the control room. An alarm should be provided in conjunction with
this indication.
- 3. The valve position indication may be safety grade. If the position indication is not safety grade, a reliable single-channel direct indication powered from a vital
instrument bus may be provided if backup methods of determining valve position are available and are
discussed in the emergency procedures as an aid to
operator diagnosis of an action.
- 4. The valve position indication should be seismically qualified, consistent with the component or system to
which it is attached.
- 5. The position indication should be qualified for its appropriate environment (any transient or accident which
would cause the relief or safety valve to lift) and in
accordance with Commission Order, May 23, 1980 (CLI 81).
- 6. It is important that the displays and controls added to the control room as a result of this requirement not increase the potential for operator error. A human-
factor analysis should be performed taking into con-
sideration:
- a. The use of this information by an operator during both normal and abnormal plant conditions.
- b. Integration into emergency procedures.
- c. Integration into operator training.
- d. Other alarms during emergency and need for prioritization of alarms. 18.2-31 Rev. 0 WOLF CREEK 18.2.6.2 The Operating Agent Response Safety-grade position indication is provided for each safety valve and power-operated relief valve (PORV) that indicates when the valve is not in its fully closed position. The position indication is seismically and environmentally qualified. The position indication for each valve is displayed in the control room, and an alarm is provided if any of the PORVs or safety valves is not fully closed.
Other, nonsafety-related instrumentation is provided on the valve discharge piping and the pressurizer relief tank to provide an alternate means of
assessing the status of the safety valves and PORVs (see Figure 5.1-1, Sheet
2).18.2.6.3 Conclusion The WCGS design satisfies the guidance of Item II.D.3 of NUREG-0737.
18.2.7 AUXILIARY FEEDWATER SYSTEM EVALUATION (II.E.1.1)
18.2.7.1 NRC Guidance Per NUREG-0737 Position The office of Nuclear Reactor Regulation is requiring reevaluation of the auxiliary feedwater (AFW) systems for all PWR operating plant licensees and operating license applications. This action includes:
- 1. Perform a simplified AFW system reliability analysis that uses event-tree and fault-tree logic techniques to
determine the potential for AFW system failure under
various loss-of-main-feedwater-transient conditions.
Particular emphasis is given to determining potential
failures that could result from human errors, common
causes, single-point vulnerabilities, and test and
maintenance outages.
- 2. Perform a deterministic review of the AFW system using the acceptance criteria of Standard Review Plan Section 10.4.9 and associated Branch Technical Position ASB 10-1
as principal guidance.
- 3. Reevaluate the AFW system flowrate design bases and criteria. 18.2-32 Rev. 0 WOLF CREEK Clarification Operating License Applicants - Operating license applicants have been requested to respond to staff letters of March 10, 1980 (W and C-E) and April 24, 1980 (B&W). These responses will be reviewed during the normal review process for these applications.
18.2.7.2 The Operating Agent Response A reliability analysis of the WCGS auxiliary feedwater system (AFS) was submitted to the NRC by SNUPPS letter dated June 8, 1981. A comparison of the design with Standard Review Plan 10.4.9 and Branch Technical Position ASB 10-1 is provided in Section 10.4.9. An evaluation of the auxiliary feedwater system flowrate design bases and criteria was submitted by SNUPPS letter dated June 3, 1981.The NRC staff reviewed the SNUPPS AFS design capabilities against the recommendations of a March 10, 1980 NRC letter (D. Ross, NRC to All Pending W
and C-E License Applicants) which corresponds to NUREG-0737, Item II.E.1.1.
Based on this review, a confirmatory licensing issue was identified, regarding physically securing the condensate storage tank manual isolation valve. This issue was resolved prior to initial fuel load.
18.2.7.3 Conclusion The WCGS design and analyses for the AFS meet the recommendations of Item II.E.1.1 of NUREG-0737.
18.2.8 AUXILIARY FEEDWATER SYSTEM AUTOMATIC INITIATION AND FLOW INDICATION (II.E.1.2) 18.2.8.1 NRC Guidance Per NUREG-0737 Position - Part 1: AFS Automatic Initiation Consistent with satisfying the requirements of General Design Criterion 20 of Appendix A to 10 CFR Part 50 with respect to the timely initiation of the auxiliary feedwater system (AFS), the following requirements shall be
implemented in the short term:
- 1. The design shall provide for the automatic initiation of the AFS.
- 2. The automatic initiation signals and circuits shall be designed so that a single failure will not result in the loss of AFS function. 18.2-33 Rev. 0 WOLF CREEK
- 3. Testability of the initiation signals and circuits shall be a feature of the design.
- 4. The initiating signals and circuits shall be powered from the emergency buses.
- 5. Manual capability to initiate the AFS from the control room shall be retained and shall be implemented so that
a single failure in the manual circuits will not result
in the loss of system function.
- 6. The ac motor-driven pumps and valves in the AFS shall be included in the automatic actuation (simultaneous and/or sequential) of the loads onto the emergency buses.
- 7. The automatic initiating signals and circuits shall be designed so that their failure will not result in the
loss of manual capability to initiate the AFS from the control room.
In the long term, the automatic initiation signals and circuits shall be upgraded in accordance with safety-grade requirements.
Clarification
The intent of this recommendation is to ensure a reliable automatic initiation system. This objective can be met by providing a system which meets all the
requirements of IEEE Standard 279-1971.
Position - Part 2: AFS Flowrate Indication Consistent with satisfying the requirements set forth in General Design Criterion 13 to provide the capability in the control room to ascertain the actual performance of the AFS when it is called to perform its intended function, the following requirements shall be implemented:
- 1. Safety-grade indication of auxiliary feedwater flow to each steam generator shall be provided in the control
room.
- 2. The auxiliary feedwater flow instrument channels shall be powered from the emergency buses consistent with satisfying the emergency power diversity requirements of the auxiliary feedwater system set forth in Auxiliary Systems Branch Technical Position 10-1 of the Standard Review Plan, Section 10.4.9. 18.2-34 Rev. 0 WOLF CREEK Clarification The intent of this recommendation is to ensure a reliable indication of AFS performance. This objective can be met by providing an overall indication system that meets the following appropriate design principles:
For Westinghouse and Combustion Engineering Plants
- 1. To satisfy these requirements, W and C-E plants must provide as a minimum one auxiliary feedwater flow rate
indicator and one wide-range steam-generator level
indicator for each steam generator or two flowrate
indicators.
- 2. The flow indication system should be:
- a. Environmentally qualified
- b. Powered from highly reliable, battery-backed non-Class 1E power source
- c. Periodically testable
- d. Part of plant quality assurance program
- e. Capable of display on command
It is important that the displays and controls added to the control room as a result of this requirement not increase the potential for operator error. A human-factor analysis should be performed, taking into consideration:
- 1. The use of this information by an operator during both normal and abnormal plant conditions.
- 2. Integration into emergency procedures.
- 3. Integration into operator training.
- 4. Other alarms during emergency and need for prioritization of alarms.
18.2.8.2 The Operating Agent Response Automatic initiation of the AFS meets the NRC recommendations, as described in Sections 10.4.9 and 7.3.6. The AFS flowrate indication meets the NRC
recommendations, as described in Sections 10.4.9 and 7.5. 18.2-35 Rev. 0 WOLF CREEK The NRC staff reviewed the SNUPPS AFS design capabilities against the recommendations of a March 10, 1980 NRC letter (D. Ross, NRC to All Pending W and C-E License Applicants) which corresponds to NUREG-0737, Item II.E.1.1.
Based on this review a confirmatory licensing issue was identified, regarding physically securing the condensate storage tank manual isolation valve. This issue was resolved prior to initial fuel load.
18.2.8.3 Conclusion The WCGS design and analyses for the AFS meet the recommendations of Item II.E.1.2 of NUREG-0737.
18.2.9 EMERGENCY POWER SUPPLY FOR PRESSURIZER HEATERS (II.E.3.1) 18.2.9.1 NRC Guidance Per NUREG-0737 Position Consistent with satisfying the requirements of General Design Criteria 10, 14, 15, 17, and 20 of Appendix A to 10 CFR Part 50 for the event of loss of offsite power, the following positions shall be implemented:
- 1. The pressurizer heater power supply design shall provide the capability to supply, from either the offsite power
source or the emergency power source (when offsite power
is not available), a predetermined number of pressurizer
heaters and associated controls necessary to establish
and maintain natural circulation at hot standby
conditions. The required heaters and their controls
shall be connected to the emergency buses in a manner
that will provide redundant power supply capability.
- 2. Procedures and training shall be established to make the operator aware of when and how the required pressurizer
heaters shall be connected to the emergency buses. If
required, the procedures shall identify under what
conditions selected emergency loads can be shed from the
emergency power source to provide sufficient capacity
for the connection of the pressurizer heaters.
- 3. The time required to accomplish the connection of the preselected pressurizer heater to the emergency buses
shall be consistent with the timely initiation and maintenance of natural circulation conditions. 18.2-36 Rev. 0 WOLF CREEK
- 4. Pressurizer heater motive and control power interfaces with the emergency buses shall be accomplished through devices that have been qualified in accordance with safety-grade requirements.
Clarification
- 1. Redundant heater capacity must be provided, and each redundant heater or group of heaters should have access
to only Class 1E division power supply.
- 2. The number of heaters required to have access to each emergency power source is that number required to maintain natural circulation in the hot standby condition.
- 3. The power sources need not necessarily have the capacity to provide power to the heaters concurrently with the loads required for loss-of-coolant accident.
- 4. Any changover of the heaters from normal offsite power to emergency onsite power is to be accomplished manually
in the control room.
- 5. In establishing procedure to manually load the pressurizer heaters onto the emergency power sources, careful consideration must be given to:
- a. Which ESF loads may be appropriately shed for a given situation.
- b. Reset of the safety injection actuation signal to permit the operation of the heaters.
- c. Instrumentation and criteria for operator use to prevent overloading a diesel generator.
- 6. The Class 1E interfaces for main power and control power are to be protected by safety-grade circuit breakers (see also Regulatory Guide 1.75).
- 7. Being non-Class 1E loads, the pressurizer heaters must be automatically shed from the emergency power sources upon the occurrence of a safety injection actuation signal (see item 5.b. above).
18.2.9.2 The Operating Agent Response The total rated capacity of the pressurizer heaters at 480 volts ac is 1800 Kw (Table 5.1-1). The pressurizer heaters are divided 18.2-37 Rev. 14 WOLF CREEK into three groups (see Figure 8.3-1). The rated capacity of each group is as follows: Group A - 692 Kw Group B - 692 Kw Group C - 416 Kw The group C heaters are used for proportional control during power operation.
Groups A and B are the backup heater groups; each of these two groups is powered from a Class lE power source. This power is interrupted by the load shedder/sequencer following a safety injection or emergency bus undervoltage
signal.The controls for each backup pressurizer heater group are provided from a non-Class 1E 125 Vdc power system. The normal power source is from a non-Class 1E 480 Vac through a battery charger. There is a 125 Vdc battery backup to the 480 Vac supply (see Figure 8.3-6). Each battery charger of the 125-Vdc system is supplied from a single separation group of the 4.16-kV onsite emergency distribution system. When the 480-Vac system is unavailable following a loss-of-offsite power, the dc-backed power supplies will supply the backup
pressurizer heater controls. Similar to the breakers feeding the heater load centers, the circuit breakers supplying the 125-Vdc battery chargers are automatically tripped upon an SIS or emergency bus undervoltage signal. They
may be reclosed from the control room when desired after reset of the breaker
tripping signals.
For additional reliability, a cross-tie is provided between Separation Groups 5 and 6 of the non-Class 1E 125-Vdc system. This will permit operation of selected loads of both separation groups in the event of a failure of either battery charger.
All the breakers which function upon SIS and bus undervoltage are seismically qualified isolation devices.
Analysis shows that subcooling would be maintained in the reactor coolant system for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> without heat input from the pressurizer heaters.
Pressure control for the reactor coolant system, as discussed in Section 5.4(A), can be accomplished without pressurizer heaters. If pressurizer
heaters were used for pressure control, analysis indicates that 150 kW is
sufficient to maintain subcooling. Plant procedures have been provided for
manually connecting (from the control room) pressurizer heaters to emergency
power sources following a loss of offsite power. 18.2-38 Rev. 14 WOLF CREEK 18.2.9.3 Conclusion The WCGS design satisfies the guidance of item I.E.3.1 of NUREG-0737.
18.2.10 DEDICATED HYDROGEN PENETRATIONS (II.E.4.1) 18.2.10.1 NRC Guidance Per NUREG-0737 Position Plants using external recombiners or purge systems for post-accident combustible gas control of the containment atmosphere should provide containment penetration systems for external recombiner or purge systems that
are dedicated to that service only, that meet the redundancy and single-failure
requirements of General Design Criteria 54 and 56 of Appendix A to 10 CFR 50, and that are sized to satisfy the flow requirements of the recombiner or purge
system.The procedures for the use of combustible gas control systems following an accident that results in a degraded core and release of radioactivity to the
containment must be reviewed and revised, if necessary.
Clarification
- 1. An acceptable alternative to the dedicated penetration is a combined design that is single-failure proof for containment isolation purposes and single-failure proof
for operation of the recombiner or purge system.
- 2. The dedicated penetration or the combined single-failure proof alternative shall be sized such that the flow
requirements for the use of the recombiner or purge
system are satisfied. The design shall be based on 10 CFR 50.44 requirements.
- 3. Components furnished to satisfy this requirement shall be safety grade.
- 4. Licensees that rely on purge systems as the primary means of controlling combustible gases following a loss-of-coolant accident should be aware of the positions
taken in SECY-80-399, "Proposed Interim Amendments to 10
CFR Part 50 Related to Hydrogen Control and Certain Degraded Core Considerations." This proposed rule, published in the Federal Register on October 2, 1980, would require plants that do not have recombiners to 18.2-39 Rev. 0 WOLF CREEK have the capacity to install external recombiners by January 1, 1982. (Installed internal recombiners are an acceptable alternative to the above.)
- 5. Containment atmosphere dilution (CAD) systems are considered to be purge systems for the purpose of implementing the requirements of this TMI Task Action item.
18.2.10.2 The Operating Agent Response The postaccident H 2 control is accomplished by redundant hydrogen recombiners which are permanently installed inside the containment. Therefore, dedicated hydrogen control penetrations are not required, and this item is not applicable
to WCGS. As a backup to the safety-related hydrogen control system, a means of purging hydrogen from the containment is provided. Only the containment penetrations
and the associated isolation valves are safety-related in the hydrogen purge
system. These penetrations are not the subject of this item, since they do not
serve external hydrogen recombiners. Since the hydrogen recombiners are
actuated from the control room, the shielding and personnel exposure
limitations associated with recombiner use and development of procedures for
reduction of doses are not applicable to WCGS.
18.2.10.3 Conclusion Item II.E.4.1 is not applicable to WCGS.
18.2.11 CONTAINMENT ISOLATION DEPENDABILITY (II.E.4.2)
18.2.11.1 NRC Guidance Per NUREG-0737 Position
- 1. Containment isolation system designs shall comply with the recommendations of Standard Review Plan Section 6.2.4 (i.e., that there be diversity in the parameters
sensed for the initiation of containment isolation).
- 2. All plant personnel shall give careful consideration to the definition of essential and nonessential systems, identify each system determined to be essential, identify each system determined to be nonessential, describe the basis for selection of each essential
system, modify their containment isolation designs
accordingly, and report the results of the re-evaluation
to the NRC.
- 3. All nonessential systems shall be automatically isolated by the containment isolation signal. 18.2-40 Rev. 0 WOLF CREEK
- 4. The design of control systems for automatic containment isolation valves shall be such that resetting the isolation signal will not result in the automatic reopening of containment isolation valves. Reopening of containment isolation valves shall require deliberate operator action.
- 5. The containment setpoint pressure that initiates containment isolation for nonessential penetrations must
be reduced to the minimum compatible with normal
operating conditions.
- 6. Containment purge valves that do not satisfy the operability criteria set forth in Branch Technical Position CSB 6-4 or the Staff Interim Position of October 23, 1979 must be sealed closed as defined in SRP 6.2.4, Item II.3.f during operational conditions 1, 2, 3, and 4. Furthermore, these valves must be verified to be closed at least every 31 days. (A copy of the Staff
Interim Position [was to be] enclosed as Attachment 1
[to NUREG-0737].)
- 7. Containment purge and vent isolation valves must close on a high radiation signal.
Clarification
- 1. The reference to SRP 6.2.4 in position 1 is only to the diversity requirements set forth in that document.
- 2. For postaccident situations, each nonessential penetration (except instrument lines) is required to have two isolation barriers in series that meet the requirements of General Design Criteria 54, 55, 56, and 57, as clarified by Standard Review Plan, Section 6.2.4.
Isolation must be performed automatically (i.e., no
credit can be given for operator action). Manual valves
must be sealed closed, as defined by Standard Review Plan, Section 6.2.4, to qualify as an isolation barrier. Each automatic isolation valve in a nonessential penetration must receive the diverse isolation signals.
- 3. Revision 2 to Regulatory Guide 1.141 will contain guidance on the classification of essential versus nonessential systems and is due to be issued by June
1981. Requirements for operating plants to review their list of essential and nonessential systems will be
issued in conjunction with this guide, including an
appropriate time schedule for completion. 18.2-41 Rev. 0 WOLF CREEK
- 4. Administrative provisions to close all isolation valves manually before resetting the isolation signals is not an acceptable method of meeting position 4.
- 5. Ganged reopening of containment isolation valves is not acceptable. Reopening of isolation valves must be performed on a valve-by-valve basis, or on a line-by-line basis, provided that electrical independence and other single-failure criteria continue to be satisfied.
- 6. The containment pressure history during normal operation should be used as a basis for arriving at an appropriate
minimum pressure setpoint for initiating containment isolation. The pressure setpoint selected should be far enough above the maximum observed (or expected) pressure inside containment during normal operation so that inadvertent containment isolation does not occur during
normal operation from instrument drift or fluctuations due to the accuracy of the pressure sensor. A margin of
1 psi above the maximum expected containment pressure
should be adequate to account for instrument error. Any
proposed values greater than 1 psi will require detailed
justification. Applicants for an operating license
and operating plant licensees that have operated less
than one year should use pressure history data from similar plants that have operated more than one year, if possible, to arrive at a minimum containment setpoint
pressure.
7.) Sealed-closed purge isolation valves shall be under administrative control to ensure that they cannot be inadvertently opened. Administrative control includes
mechanical devices to seal or lock the valve closed, or
to prevent power from being supplied to the valve
operator. Checking the valve position light in the
control room is an adequate method for verifying every
24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> that the purge valves are closed.
18.2.11.2 The Operating Agent Response The containment isolation system and the containment isolation actuation are described in Sections 6.2.4, 7.3.2, and 7.3.8.
All lines penetrating the containment are identified in Figure 6.2.4-1. This figure also identifies the actuation signal(s) for isolation of those lines requiring isolation. The logic design for containment isolation is such that resetting of the containment isolation signal will not result in the loss of containment 18.2-42 Rev. 0 WOLF CREEK isolation. Once the initiating signal is reset, individual valves can be opened from the control room, if required. Reopening of isolation valves is performed on a valve-by-valve or line-by-line basis.
The containment isolation setpoint pressure (Hi-1) that initiates containment isolation (CIS-A) for non-essential penetrations has been reduced to the minimum compatible with normal operating conditions. Refer to SNUPPS letter dated March 15, 1984. The Technical Specifications establish a limit for containment pressure during normal operations. The Technical Specifications
also contain the setpoint for Hi-1 which is based on the normal operation limit
and instrument drift and accuracy.
Table 18.2-2 identifies systems as either essential or nonessential. Essential systems are those systems required to have isolation valves open for either post-accident safe shutdown or mitigation of the consequences of an accident.
The greatest number of lines are automatically isolated upon initiation of a containment isolation signal, Phase A (CIS-A). A safety injection signal (SIS) initiates a feedwater isolation signal (FWIS) and a steam generator blowdown isolation signal (SGBSIS). A CIS-A is initiated when a safety injection signal (SIS) is initiated. The diverse parameters sensed to initiate a SIS are low steam line pressure or low pressurizer pressure or high containment pressure (Hi-1). The CIS-A logic is shown on Figure 7.2-1, Sheet 8.
The main steam and related lines are automatically isolated upon initiation of a steam line isolation signal (SLIS). The diverse parameters sensed to initiate an SLIS are either low steam line pressure or high negative steam
pressure rate and high containment pressure (Hi-2). The SLIS logic is shown
on Figure 7.2-1, Sheet 8.
The lines supplying component cooling water to equipment inside the containment are isolated by CIS-B. A CIS-B is initiated by high containment pressure (Hi-3). It is not diverse, and is initiated with initiation of a containment spray actuation, which does utilize diversity. The CIS-B is shown on Figure 7.2-1, Sheet 8. The containment purge system is isolated upon initiation of a containment purge isolation signal (CPIS). The diverse parameters sensed to initiate a CPIS are high containment radiation level and high containment purge exhaust radiation level, or a CIS-A signal. The CPIS logic is shown in Figure 7.3-1, Sheet 2. 18.2-43 Rev. 14 WOLF CREEK The guidelines used for operability of containment purge isolation valves intended for use during plant operation comply with NRC criteria.
Documentation of operability was provided by SNUPPS letter dated January 16, 1984. (Reference 11). The shutdown purge system isolation valves meet SRP 6.2.4, item II.3.f during operational conditions 1, 2, 3, and 4. Furthermore, these valves are verified to be closed in accordance with NUREG-0737, Item II.E.4.2.All containment isolation valves are provided with control switches on the main control board. Manual actuation switches are provided for initiation of CIS-A, SLIS, and CPIS. In addition to diversity, these systems are redundant and meet
safety-grade (Class 1E) criteria.
18.2.11.3 Conclusion The design for the containment isolation system satisfies the requirements of Item II.E.4.2 of NUREG-0737.
18.2.12 ACCIDENT MONITORING INSTRUMENTATION (II.F.1) 18.2.12.1 NRC Guidance Per NUREG-0737 Introduction Item II.F.1 of NUREG-0660 contains the following subparts:
- 1. Noble gas effluent radiological monitor.
- 2. Provisions for continuous sampling of plant effluents for post-accident releases of radioactive iodines and
particulates and onsite laboratory capabilities (this
requirement was inadvertently omitted from NUREG-0660;
see Attachment 2 that follows, for position).
- 3. Containment high-range radiation monitor.
- 4. Containment pressure monitor.
- 5. Containment water level monitor.
- 6. Containment hydrogen concentration monitor. 18.2-44 Rev. 0 WOLF CREEK NUREG-0578 provided the basic requirements associated with items 1 through 3 above. NRC staff letters issued to All Operating Nuclear Power Plants dated September 13, 1979 and October 30, 1979 provided clarification of staff requirements associated with items 1 through 6 above. Attachments 1 through 6 present the staff position on these matters.
It is important that the displays and controls added to the control room as a result of this requirement not increase the potential for operator error. A
human factor analysis should be performed (see NUREG-0737, Section II.D.2),
taking into consideration:
- a. the use of this information by an operator during both normal and abnormal plant conditions, b. integration into emergency procedures,
- c. integration into operator training, d. other alarms during emergency and need for prioritization of alarms.
(NOTE: Because of an editorial error, references to NUREG-0737, Appendix A in the following sections should
actually be references to Appendix B.) Noble Gas Effluent Monitor Position Noble gas effluent monitors shall be installed with an extended range designed to function during accident conditions as well as during normal operating conditions. Multiple monitors are considered necessary to cover the ranges of
interest. 1. Noble gas effluent monitors with an upper range capacity of 10 5 Ci/cc (Xe-133) are considered to be practical and should be installed in all operating plants.
- 2. Noble gas effluent monitoring shall be provided for the total range of concentration extending from normal conditions (as low as reasonably achievable (ALARA))
concentrations to a maximum of 10 5 Ci/cc (Xe-133).
Multiple monitors are considered to be necessary to cover the ranges of interest. The range capacity of individual monitors should overlap by a factor of 10. 18.2-45 Rev. 0 WOLF CREEK Clarification
- 1. Licensees shall provide continuous monitoring of high-level, post-accident releases of radioactive noble gases from the plant. Gaseous effluent monitors shall meet the requirements specified in Table II.F.1-1 [of NUREG-0737, presented below]. Typical plant effluent pathways to be monitored are also given in the table.
- 2. The monitors shall be capable of functioning both during and following an accident. System designs shall
accommodate a design-basis release and then be capable
of following decreasing concentrations of noble gases.
- 3. Offline monitors are not required for the PWR secondary side main steam safety valve and atmospheric relief valve discharge lines. For this application, externally mounted monitors viewing the main steam line upstream of the valves are acceptable with procedures to correct for the low energy gammas the external monitors would not detect. Isotopic identification is not required.
- 4. Instrumentation ranges shall overlap to cover the entire range of effluents from normal (ALARA) through accident
conditions.
The design description shall include the following information.
- a. System description, including:
(i) Instrumentation to be used, including range or sensitivity, energy dependence or response, calibration frequency and
technique, and vendor's model number, if
applicable.
(ii) Monitoring locations (or points of sampling), including description of methods
used to ensure representative measurements
and background correction.
(iii) Location of instrument readout(s) and method of recording including description
of the method or procedure for transmitting or disseminating the information or data. 18.2-46 Rev. 13 WOLF CREEK (iv) Assurance of the capability to obtain readings at least every 15 minutes during and following an accident.
(v) The source of power to be used.
- b. Description of procedures or calculational methods to be used for converting instrument readings to
release rate per unit time, based on exhaust air
flow and considering radionuclide spectrum
distribution as a function of time after shutdown.
TABLE II.F.1-1 HIGH-RANGE NOBLE GAS EFFLUENT MONITORS REQUIREMENT Capability to detect and measure concentrations of noble gas fission products in plant gaseous
effluents during and following an accident.
All potential accident release paths shall be
monitored.
PURPOSE To provide the plant operator and emergency planning agencies with information on plant
releases of noble gases during and following an
accident.
Design Basis Maximum Range Design range values may be expressed in Xe-133 equivalent values for monitors employing gamma radiation detectors or in microcuries per cubic centimeter of air at standard temperature and pressure (STP) for monitors employing beta
radiation detectors (Note: 1 R/hr at 1 ft = 6.7 Ci Xe-133 equivalent for point source). Calibrations with a higher energy source are acceptable. The decay of radionuclide noble gases after an accident (i.e., the distribution of noble
gases changes) should be taken into account.
10 5 Ci/cc Undiluted containment exhaust gases (e.g., PWR reactor building purge, BWR drywell purge through the standby gas treatment system).
Undiluted PWR condenser air removal system exhaust. 18.2-47 Rev. 0 WOLF CREEK 10 4 Ci/cc Diluted containment exhaust gases (e.g., >10:1 dilution, as with auxiliary building exhaust air).
BWR reactor building (secondary containment) exhaust air.
PWR secondary containment exhaust air.
10 3 Ci/cc Buildings with systems containing primary coolant or primary coolant offgases (e.g. PWR auxiliary building, BWR turbine buildings).
PWR steam safety valve discharge, atmospheric relief valve discharge.
10 2 Ci/cc Other release points (e.g., radwaste building, fuel handling/storage buildings).
REDUNDANCY Not required; monitoring the final release point of several discharge inputs is acceptable.
SPECIFICATIONS (None) Sampling design criteria per ANSI N13.1.
POWER SUPPLY Vital instrument bus or dependable backup power supply to normal ac.
CALIBRATION Calibrate monitors using gamma detectors to Xe-133 equivalent (1 R/hr @ 1 ft = 6.7 Ci Xe-133
equivalent for point source).
Calibrate monitors using beta detectors to Sr-90 or similar long-lived beta isotope of at least 0.2 MeV.
DISPLAY Continuous and recording as equivalent Xe-133 concentrations or Ci/cc or actual noble gases.
QUALIFICATION The instruments shall provide sufficiently accurate responses to perform the intended
function in the environment to which they will
be exposed during accidents.
DESIGN Offline monitoring is acceptable for all CONSIDERATIONS ranges of noble gas concentrations.
Inline (induct) sensors are acceptable for 10 2 Ci/cc to 10 5 Ci/cc noble gases. For less than 10 2 Ci/cc, offline monitoring is recommended. 18.2-48 Rev. 13 WOLF CREEK Upstream filtration (prefiltering to remove radioactive iodines and particulates) is not required; however, design should consider all alternatives with respect to capability to monitor effluents following an accident.
For external mounted monitors (e.g., PWR main steam line), the thickness of the pipe should be
taken into account in accounting for low-energy
gamma radiation. Sampling of Plant Effluents Sampling of Plant Effluents Position Because iodine gaseous effluent monitors for the accident condition are not considered to be practical at this time, capability for effluent monitoring of radioiodines for the accident condition shall be provided with sampling conducted by adsorption on charcoal or other media, followed by onsite
laboratory analysis.
Clarification
- 1. Licensees shall provide continuous sampling of plant gaseous effluent for postaccident releases of radioactive iodines and particulates to meet the
requirements of the enclosed Table II.F.1-2 (from NUREG-0737, presented below). Licensees shall also provide
onsite laboratory capabilities to analyze or measure
these samples. This requirement should not be construed
to prohibit design and development of radioiodine and
particulate monitors to provide online sampling and
analysis for the accident condition. If gross gamma
radiation measurement techniques are used, then provisions shall be made to minimize noble gas
interference.
- 2. The shielding design basis is given in Table II.F.1-2
[of NUREG-0737]. The sampling system design shall be such that plant personnel could remove samples, replace sampling media, and transport the samples to the onsite analysis facility with radiation exposures that are not
in excess of the criteria of GDC-19 of 5-rem whole-body exposure and 75 rem to the extremities during the
duration of the accident. 18.2-49 Rev. 0 WOLF CREEK
- 3. The design of the systems for the sampling of particulates and iodines should provide for sample nozzle entry velocities which are approximately isokinetic (same velocity) with expected induct or instack air velocities. For accident conditions, sampling may be complicated by a reduction in stack or vent effluent velocities to below design levels, making it necessary to substantially reduce sampler intake flow rates to achieve the isokinetic condition. Reductions
in air flow may well be beyond the capability of
available sampler flow controllers to maintain
isokinetic conditions; therefore, the staff will accept
flow control devices which have the capability of maintaining isokinetic conditions with variations in stack or duct design flow velocity of +20 percent.
Further departure from the isokinetic condition need not be considered in design. Corrections for nonisokinetic
sampling conditions, as provided in Appendix C of ANSI 13.1-1969, may be considered on an ad hoc basis.
- 4. Effluent streams which may contain air with entrained water, e.g., air ejector discharge, shall have
provisions to ensure that the adsorber is not degraded
while providing a representative sample, e.g., heaters.
TABLE II.F.1-2 SAMPLING AND ANALYSIS OR MEASUREMENT OF HIGH-RANGE RADIOIODINE AND PARTICULATE EFFLUENTS IN GASEOUS EFFLUENT STREAMS EQUIPMENT Capability to collect and analyze or measure representative samples of radioactive iodines and particulates in plant gaseous effluents during and following an accident. The capability to sample and analyze for radioiodine and particulate effluents is not required for PWR secondary main steam safety valve and dump
valve discharge lines.
PURPOSE To determine quantitative release of radioiodines and particulates for dose calculation and assessment.
DESIGN BASIS 10 2 Ci/cc of gaseous radioiodine and particu-SHIELDING lates, deposited on sampling media; 30 minutes ENVELOPE sampling time, average gamma energy (E) of 0.5
MeV. 18.2-50 Rev. 0 WOLF CREEK SAMPLING MEDIA - Iodine > 90 percent effective adsorption for all forms of gaseous iodine. - Particulates > 90 percent effective retention for 0.3 micron
() diameter particles.
SAMPLING CONSIDERATIONS - Representative sampling per ANSI N13.1-1969.
- Entrained moisture in effluent stream should not degrade adsorber. - Continuous collection required whenever exhaust flow occurs.
- Provisions for limiting occupational dose to personnel incorporated in sampling systems, in sample handling and
transport, and in analysis of samples.
ANALYSIS
- Design of analytical facilities and preparation of analytical procedures shall consider the design basis sample. - Highly radioactive samples may not be compatible with generally accepted analytical procedures; in such cases, measurement of emissive gamma radiations and the use of
shielding and distance factors should be considered in
design. Containment High-Range Radiation Monitor Position In containment radiation-level monitors with a maximum range of 10 8 rad/hr shall be installed. A minimum of two such monitors that are physically separated shall be provided. Monitors shall be developed and qualified to
function in an accident environment.
Clarification
- 1. Provide two radiation monitor systems in containment which are documented to meet the requirements of Table II.F.1-3 (of NUREG-0737, presented below). 18.2-51 Rev. 0 WOLF CREEK
- 2. The specification of 10 8 rad/hr in the above position was based on a calculation of postaccident containment radiation levels that included both particulate (beta) and photon (gamma) radiation. A radiation detector that responds to both beta and gamma radiation cannot be qualified to post-LOCA (loss-of-coolant accident) containment environments, but gamma-sensitive instruments can be so qualified. In order to follow the course of an accident, a containment monitor that
measures only gamma radiation is adequate. The
requirement was revised in the October 30, 1979 letter
to provide for a photon-only measurement with an
upper range of 10 7 R/hr. 3. The monitors shall be located in containment(s) in a manner which will provide a reasonable assessment of area radiation conditions inside the containment. The
monitors shall be widely separated so as to provide independent measurements and shall "view" a large
fraction of the containment volume. Monitors should not
be placed in areas which are protected by massive
shielding and should be reasonably accessible for
replacement, maintenance, or calibration. Placement
high in a reactor building dome is not recommended
because of potential maintenance difficulties.
- 4. For BWR Mark III containments, two such monitoring systems should be inside both the primary containment
(drywell) and the secondary containment.
- 5. The monitors are required to respond to gamma photons with energies as low as 60 keV and to provide an essentially flat response for gamma energies between 100 keV and 3 MeV, as specified in Table 11.F.1-3 of NUREG-0737. Monitors that use thick shielding to increase the
upper range will underestimate postaccident radiation
levels in containment by several orders of magnitude
because of their insensitivity to low energy gammas and are not acceptable.
TABLE II.F.1-3 CONTAINMENT HIGH-RANGE RADIATION MONITOR REQUIREMENT The capability to detect and measure the radiation level within the reactor containment during and following an accident. 18.2-52 Rev. 0 WOLF CREEK RANGE l rad/hr to 10 8 rads/hr (beta and gamma) or alternatively 1 R/hr to 10 7 R/hr (gamma only).
RESPONSE 60 keV to 3 MeV photons, with linear energy response +20%) for photons of 0.1 MeV to 3 MeV. Instruments must be accurate enough to provide usable information.
REDUNDANT A minimum of two physically separated monitors (i.e., monitoring widely separated spaces
within containment).
DESIGN AND Category 1 instruments as described in QUALIFICATION Appendix A (of NUREG-0737), except as listed below.
SPECIAL In situ calibration by electronic signal sub-CALIBRATION stitution is acceptable for all range decades above 10 R/hr. In situ calibration for at
least one decade below 10 R/hr shall be by
means of calibrated radiation source. The
original laboratory calibration is not an
acceptable position due to the possible
differences after in situ installation. For
high-range calibration, no adequate sources exist, so an alternate was provided.
SPECIAL Calibrate and type-test representative speci-ENVIRONMENTAL mens of detectors at sufficient points to QUALIFICATIONS demonstrate linearity through all scales up to
10 6 R/hr. Prior to initial use, certify calibration of each detector for at least one point per decade of range between 1 R/hr and 10 3 R/hr. Attachment 4 Containment Pressure Monitor Position A continuous indication of containment pressure shall be provided in the control room of each operating reactor. Measurement and indication capability shall include three times the design pressure of the containment for concrete, four times the design pressure for steel and -5 psig for all containments. 18.2-53 Rev. 0 WOLF CREEK Clarification
- 1. Design and qualification criteria are outlined in Appendix A (of NUREG-0737).
- 2. Measurement and indication capability shall extend to 5 psia for subatmospheric containments.
- 3. Two or more instruments may be used to meet requirements. However, instruments that need to be
switched from one scale to another scale to meet the
range requirements are not acceptable.
- 4. Continuous display and recording of the containment pressure over the specified range in the control room is required.
- 5. The accuracy and response time specifications of the pressure monitor shall be provided and justified to be
adequate for their intended function. Containment Water Level Monitor Position A continuous indication of containment water level shall be provided in the control room for all plants. A narrow range instrument shall be provided for PWRs and cover the range from the bottom to the top of the containment sump. A
wide range instrument shall also be provided for PWRs and shall cover the range
from the bottom of the containment to the elevation equivalent to a 600,000
gallon capacity. For BWRs, a wide range instrument shall be provided and cover
the range from the bottom to 5 feet above the normal water level of the
suppression pool.
Clarification
- 1. The containment wide-range water level indication channels shall meet the design and qualification
criteria as outlined in Appendix A (of NUREG-0737). The
narrow-range channel shall meet the requirements of
- 2. The measurement capability of 600,000 gallons is based on recent plant designs. For older plants with smaller
water capacities, licensees may propose deviations from this requirement, based on the available water supply capability at their plant. 18.2-54 Rev. 0 WOLF CREEK
- 3. Narrow-range water level monitors are required for all sizes of sumps but are not required in those plants that do not contain sumps inside the containment.
- 4. For BWR pressure-suppression containments, the emergency core cooling system (ECCS) suction line inlets may be used as a starting reference point for the narrow-range and wide-range water level monitors, instead of the bottom of the suppression pool.
- 5. The accuracy requirements of the water level monitors shall be provided and justified to be adequate for their
intended function. Containment Hydrogen Monitor Position A continuous indication of hydrogen concentration in the containment atmosphere shall be provided in the control room. Measurement capability shall be provided over the range of 0 to 10 percent hydrogen concentration under both positive
and negative ambient pressure.
Clarification
- 1. Design and qualification criteria are outlined in Appendix A (of NUREG-0737).
- 2. The continuous indication of hydrogen concentration is not required during normal operation.
If an indication is not available at all times, continuous indication and recording shall be functioning
within 30 minutes of the initiation of safety injection.
- 3. The accuracy and placement of the hydrogen monitors shall be provided and justified to be adequate for their intended function. 18.2-55 Rev. 0 WOLF CREEK 18.2.12.2 The Operating Agent Response Radiological Noble Gas Effluent Monitors The WCGS design provides a wide range noble gas radiation monitor for each of the release paths listed below. Each monitor includes detectors covering the range shown below:
MONITOR RANGE Plant unit vent 10
-7 to 10+5 Ci/cc (GT-RE-21B)
Radwaste building effluent 10
-7 to 10+5 Ci/Cc (GH-RE-10B)
The locations of these monitors are shown on Radiation Zone Drawing Figure 12.3.2, sheet 4. Separate monitoring capability for the condenser air removal
system is not provided because this system exhausts through the plant vent.
The WCGS design includes gamma detectors to monitor the plume from the main steam atmospheric relief valves and to monitor the steam discharge from the turbine-driven auxiliary feedwater pump except for a small quantity of steam
vented from the turbine glands. Additional information on this monitoring
system is included in Reference 10.
Continuous indication is provided in the control room for each monitor. Each monitor is recorded in the control room.
The system/methods for monitoring and analysis is described in Reference 10.
The readouts from the wide range monitors are input to the plant computers.
This information is accessible from the Technical Support Center and the Emergency Operations Facility.
The procedures used to calibrate the instruments and calculate release rates have been incorporated into the WCGS procedures.
The following additional information was provided by Reference 10.
- a. System description information, including energy dependence or response, range and sensitivity with respect to Xe-133, vendor model number, and methods used
to assure representative measurements and background correction.
- b. The calculational methods or procedures used for converting instrument readings to release rate per unit
time based on exhaust air flow, and considering
radionuclide spectrum distribution as a function of time
after shutdown. 18.2-56 Rev. 13 WOLF CREEK Provisions for Continuous Sampling of Plant Effluents for Post- Accident Releases of Radioiodines and Particulates The WCGS design provides for continuous sampling of effluent radioiodines and particulates. The wide range gas monitors described above include the capability to obtain grab samples. The sampling accomplished by adsorption of iodine on charcoal filters or other media has been determined to be within the
criteria of GDC-19 (see Reference 10). The sampling system criteria for all
airborne monitoring systems are provided in Section 11.5.2.3.1.2. After
collection, laboratory analyzers can be used to quantify iodine or particulates
releases. A backup power source is provided for sample collection and analysis
equipment to ensure operation for a minimum of 7 consecutive days. The WCGS
procedures discuss the methods and counting equipment used to determine
releases. The expected doses from obtaining and counting a sample have been
calculated to range between 750 and 1750 mrem for a sample at the unit vent.
These doses meet the requirements of NUREG-0737 and Regulatory Guide 1.97.
Additional information regarding how WCGS meets the recommendations of Table
II.F.1-2 and the provisions for approximate isokinetic sampling was provided by Reference 10.
Containment Radiation Monitors
The WCGS design meets the recommendations of Table II.F.1-3. The design includes two physically separated Class lE containment radiation monitors. The
monitors are designated as 0-GT-RE-59 and 0-GT-RE-60. The detectors are
located inside containment.
Indication is provided in the control room for each monitor, which is powered from a vital class lE power source. One channel is provided with a recorder, which is powered from vital class 1E power sources. Each monitor has a range
up to 10 8 R/hr for gamma radiation. The monitors are sensitive down to 60 keV photons. The energy response of the monitors is linear (+20%) for energies between .1 Mev and 3 Mev. The equipment is seismically qualified for the
location in which it is installed. The components are environmentally
qualified for the environmental conditions to which they may be subjected.
Calibration of the monitors is addressed in procedures.
Additional information regarding the details of the design is described in Section 11.5.2.3.2.4. 18.2-57 Rev. 14 WOLF CREEK Containment Pressure Indication The WCGS design provides a dual range, redundant, continuous indication of containment pressure with both ranges (0 to 60 psig and -5 to 180 psig) indicated and recorded in the control room at the same time. The extended range indication loops are Class lE. As a minimum, their range is from minus 5 psig to three times the containment design pressure of 60 psig.
The response time of the containment pressure control room indication is 10 seconds for both the narrow and wide-range instrument channels. The accuracy
of both the narrow and wide range channels is +4 percent of scale. The
pressure monitor instrumentation meets the design and qualification criteria of
NUREG-0737, Appendix B.
Containment Water Level Indication The WCGS design includes in the control room continuous indication of the containment water level. This instrumentation is redundant and designed and qualified in accordance with Class lE requirements to meet the requirements of
NUREG-0737, Appendix B. A single range is used to monitor both the containment
normal sump level and the containment water level. The range is 13 feet, which
covers 6 inches from the bottom of the containment normal sump to an elevation
equivalent to 836,000 gallons. The upper limit of the range is greater than the maximum calculated water level. The accuracy of the indication is 4 percent. The switchover of the low pressure safety injection pumps to recirculation is accomplished without the use of the containment water level indication.
A single range for the two RHR sump level indicators is used to measure the RHR sump level. Both RHR sump level indicator ranges are 11' 7" (139") measured from 1994' 6" (30" above sump bottom) to 2006' 11" (equivalent to 626,000 gallons). This indication issued to determine if adequate NPSH is available to the pumps taking suction from the containment.
Containment Hydrogen Concentration Monitor The present design includes redundant safety-grade (Class lE) containment post-LOCA hydrogen analyzers with redundant Class lE indication provided in the control room. These monitors meet the design and qualification requirements of NUREG-0737, Appendix B. The hydrogen analyzers have a range of 0-10 percent hydrogen volume and are designed to operate under minimum and maximum
containment design pressure.
The hydrogen analyzers are manually initiated following a LOCA. Once initiated, they provide a continuous measurement of hydrogen concentration within 30 minutes. 18.2-58 Rev. 21 WOLF CREEK The sample points for the containment hydrogen monitors are in the vicinity of the intake of the containment air coolers and the post-accident water level.
18.2.12.3 Conclusion The WCGS design provides six additional post-accident monitors specified in NUREG-0737 for accident diagnosis and mitigation. The Operating Agent has developed emergency operating procedures which detail use of each instrument
specified during an accident.
The WCGS design is consistent with the recommendations of NUREG-0737, item II.F.1, for noble gas monitors.
The WCGS design includes features to sample plant effluents under accident conditions. The design of sampling system satisfies the criteria in NUREG-
0737, item II.F.1.
The containment radiation monitor design meets the recommendations of item II.F.1-3.The extended range containment pressure monitor design meets the recommendations of item II.F.1-3.
The WCGS design for containment water level indication meets the requirements of NUREG-0737, item II.F.1-5.
The WCGS design for the containment hydrogen monitors meet the requirements of NUREG-0737, item II.F.1-6.
18.2.13 INSTRUMENTATION FOR DETECTION OF INADEQUATE CORE COOLING (II.F.2) 18.2.13.1 NRC Guidance Per NUREG-0737 Position Licensees shall provide a description of any additional instrumentation or controls (primary or backup) proposed for the plant to supplement existing instrumentation (including primary coolant saturation monitors) in order to provide an unambiguous, easy-to-interpret indication of inadequate core cooling (ICC). A description of the functional design requirements for the system
shall also be included. A description of the procedures to be used with the
proposed equipment, the analysis used in developing these procedures, and a
schedule for installing the equipment shall be provided. 18.2-59 Rev. 0 WOLF CREEK Clarification
- 1. Design of new instrumentation should provide an unambiguous indication of ICC. This may require new measurements or a synthesis of existing measurements which meet design criteria (item 7).
- 2. The evaluation is to include reactor-water-level indication.
- 3. Licensees and applicants are required to provide the necessary design analysis to support the proposed final
instrumentation system for inadequate core cooling and to evaluate the merits of various instruments to monitor water level and to monitor other parameters indicative of core-cooling conditions.
- 4. The indication of ICC must be unambiguous in that it should have the following properties:
- a. It must indicate the existence of inadequate core cooling caused by various phenomena (i.e., high-
void fraction-pumped flow as well as stagnant boil-
off); and, b. It must not erroneously indicate ICC because of the presence of an unrelated phenomenon.
- 5. The indication must give advanced warning of the approach of ICC.
- 6. The indication must cover the full range from normal operation to complete core uncovery. For example, water-level instrumentation may be chosen to provide advanced warning of two-phase level drop to the top of
the core and could be supplemented by other indicators
such as incore and core-exit thermocouples provided that
the indicated temperatures can be correlated to provide indication of the existence of ICC and to infer the extent of core uncovery. Alternatively, full-range level instrumentation to the bottom of the core may be employed in conjunction with other diverse indicators such as core-exit thermocouples to preclude misinterpretation due to any inherent deficiencies or inaccuracies in the measurement system selected. 18.2-60 Rev. 0 WOLF CREEK
- 7. All instrumentation in the final ICC system must be evaluated for conformance to Appendix A (to NUREG-0737), "Design and Qualification Criteria for Accident Monitoring Instrumentation," as clarified or modified by the provisions of items 8 and 9 that follow. This is a new requirement.
- 8. If a computer is provided to process liquid-level signals for display, seismic qualification is not
required for the computer and associated hardware beyond
the isolator or input buffer at a location accessible
for maintenance following an accident. The single-
failure criteria of item 2, Appendix A, need not apply
to the channel beyond the isolation device if it is
designed to provide 99 percent availability with respect to functional capability for liquid-level display. The display and associated hardware beyond the isolation
device need not be Class IE, but should be energized
from a high-reliability power source which is battery
backed. The quality assurance provisions cited in
Appendix A, item 5, need not apply to this portion of
the instrumentation system. This is a new requirement.
- 9. Incore thermocouples located at the core exit or at discrete axial levels of the ICC monitoring system and which are part of the monitoring system should be evaluated for conformity with Attachment 1, "Design and
Qualification Criteria for PWR Incore Thermo-couples," which is a new requirement.
- 10. The types and locations of displays and alarms should be determined by performing a human factors analysis taking into consideration:
- a. The use of this information by an operator during both normal and abnormal plant conditions.
- b. Integration into emergency procedures.
- c. Integration into operator training.
- d. Other alarms during emergency and need for prioritization of alarms. 18.2-61 Rev. 0 WOLF CREEK ATTACHMENT 1, DESIGN AND QUALIFICATION CRITERIA FOR PRESSURIZED-WATER REACTOR INCORE THERMOCOUPLES
- 1. Thermocouples located at the core exit for each core quadrant, in conjunction with core inlet temperature data, shall be of sufficient number to provide indication of radial distribution of the coolant
enthalpy (temperature) rise across representative
regions of the core. Power distribution symmetry should
be considered when determining the specific number and
location of thermocouples to be provided for diagnosis
of local core problems.
- 2. There should be a primary operator display (or displays) having the capabilities which follow:
- a. A spatially oriented core map available on demand indicating the temperature or temperature difference across the core at each core exit
thermocouple location.
- b. A selective reading of core exit temperature, continuous on demand, which is consistent with
parameters pertinent to operator actions in
connecting with plant-specific inadequate core
cooling procedures. For example, the action
requirement and the displayed temperature might be
either the highest of all operable thermocouples or
the average of five highest thermocouples.
- c. Direct readout and hard-copy capability should be available for all thermocouple temperatures. The range should extend from 200 F (or less) to 1800 F (or more).
- d. Trend capability showing the temperature-time history of representative core exit temperature
values should be available on demand.
- e. Appropriate alarm capability should be provided consistent with operator procedure requirements.
- f. The operator-display device interface shall be human-factor designed to provide rapid access to requested displays. 18.2-62 Rev. 0 WOLF CREEK
- 3. A backup display (or displays) should be provided with the capability for selective reading of a minimum of 16 operable thermocouples, 4 from each core quadrant, all within a time interval no greater than 6 minutes. The range should extend from 200 F (or less) to 2300 F (or more).
- 4. The types and locations of displays and alarms should be determined by performing a human-factors analysis taking
into consideration:
- a. the use of this information by an operator during both normal and abnormal plant conditions, b. integration into emergency procedures, c. integration into operator training, and
- d. other alarms during emergency and need for prioritization of alarms.
- 5. The instrumentation must be evaluated for conformance to Appendix B (to NUREG-0737), "Design and Qualification Criteria for Accident Monitoring Instrumentation," as modified by the provisions of items 6 through 9 which follow.
- 6. The primary and backup display channels should be electrically independent, energized from independent station Class lE power sources, and physically separated
in accordance with Regulatory Guide 1.75 up to and
including any isolation device. The primary display and
associated hardware beyond the isolation device need not
be Class lE, but should be energized from a high-
reliability power source, battery backed, where momentary interruption is not tolerable. The backup
display and associated hardware should be Class lE.
- 7. The instrumentation should be environmentally qualified as described in Appendix B, Item 1, except that seismic
qualification is not required for the primary display
and associated hardware beyond the isolater/input buffer
at a location accessible for maintenance following an
accident. 18.2-63 Rev. 0 WOLF CREEK
- 8. The primary and backup display channels should be designed to provide 99 percent availability for each channel with respect to functional capability to display a minimum of four thermocouples per core quadrant. The availability shall be addressed in Technical Specifications.
- 9. The quality assurance provisions cited in Appendix B, item 5, should be applied except for the primary display
and associated hardware beyond the isolation device.
18.2.13.2 The Operating Agent Response Item II.F.2 of NUREG-0737 specifies the following as required documentation concerning instrumentation for detection of inadequate core cooling (ICC):
- 1. A description of the proposed final system including:
- a. A final design description of additional instrumentation and displays.
- b. A detailed description of existing instrumentation system (e.g., subcooling meters and incore thermo-couples), including parameter ranges and displays, which provide operating information pertinent to
ICC consideration.
- c. A description of any planned modifications to the instrumentation systems described in item 1.b above.
- 2. The necessary design analysis, including evaluation of various instruments to monitor water level, and
available test data to support the design described in
item 1 above.
- 3. A description of additional test programs to be conducted for evaluation, qualification, and calibration
of additional instrumentation.
- 4. An evaluation, including proposed actions, of the conformance of the ICC instrument system to this document, including Attachment 1 and Appendix B. Any
deviations should be justified. 18.2-64 Rev. 0 WOLF CREEK
- 5. A description of the computer functions associated with ICC monitoring and functional specifications for relevant software in the process computer and other pertinent calculators. The reliability of nonredundant computers used in the system should be addressed.
- 6. A current schedule, including contingencies, for installation, testing and calibration, and
implementation of any proposed new instrumentation or
informative displays.
- 7. Guidelines for use of the additional instrumentation, and analyses used to develop these procedures.
- 8. A summary of key operator action instructions in the current emergency procedures for ICC and a description of how these procedures will be modified when the final
monitoring system is implemented.
- 9. A description and schedule commitment for any additional submittals which are needed to support the acceptability
of the proposed final instrumentation system and
emergency procedures for ICC.
The following is a discussion of each of the above items as they relate to the WCGS instrumentation for detection of ICC:
- 1. The system used at the WCGS unit to detect ICC consists of a reactor vessel level instrumentation system (RVLIS) and a thermocouple/core cooling monitor system (T/CCMS).
ICC Defined ICC was defined in WCAP-9754, "Inadequate Core Cooling Studies of Scenario With Feedwater Available Using the
NOTRUMP Computer Code," as a high temperature condition
in the core such that the operator is required to take
action to cool the core before significant damage occurs. During the design basis small loss-of-coolant
accident, the operator is not required to take any
action to recover the plant other than to verify the
operable status of the safeguards equipment, trip the reactor coolant pumps (RCPs) when appropriate plant conditions are met, and initiate cold and hot leg recirculation procedures as required. In the design
basis small Loss of Coolant Accident (LOCA), a period of
cladding heat-up may occur prior to automatic core
recovery by the safeguards equipment. The heat-up
period is dependent upon the break size and ECCS performance. 18.2-65 Rev. 0 WOLF CREEK For a LOCA equivalent in size to approximately 6 inches diameter or less, an ICC condition can only occur if two or more failures occur in the ECCS. As indicated in WCAP-9754, an ICC condition can be calculated by hypothesizing the failure of all high head safety injection (HPSI) for LOCAs of approximately 1 inch in size. For a 4-inch equivalent-size LOCA, one can hypothesize an ICC condition by assuming the failure of all HPSI as well as the failure of the passive
accumulator system (a truly incredible sequence of
events).
For LOCAs of sizes of 6 inches or less, the approach to ICC is unambiguous to the reactor operators. The first indication of a possible ICC situation is the indication that some of the ECCS pumps have failed to start or are not delivering flow. The second indication of a
possible ICC situation is the occurrence of a saturation condition in the primary coolant system as indicated on
the subcooling monitor. Shortly after the second
indication, the RVLIS would start to indicate the
presence of steam voids in the vessel. At some point in
time the RVLIS will indicate a collapsed liquid level
below the top of the core. The core exit thermocouples
(T/Cs) will begin to indicate superheated steam conditions. The RVLIS and core exit T/C behavior provide unambiguous indications to the operator to
follow the ICC mitigation procedure.
WCAP-9754 indicates that the selected core exit T/Cs will read 1200 F at approximately 11,000 seconds after the initiation of a 1-inch LOCA with the loss of all High Pressure Safety Injection. The Generic
Westinghouse Emergency Operating Procedure (EOP)
Guideline instructs the operator to pursue ICC
mitigation procedures when these conditions are reached. The 4-inch LOCA indicates 1200 F at about 1350 seconds. By following the Westinghouse recommended EOPs, the operators have earlier indication of a possible ICC situation.
Realistically, an indication of an ICC condition would not occur until the primary coolant system has drained
sufficiently for the reactor vessel mixture level to fall below the top of the core. Westinghouse has
performed analyses which indicate that the upper head
will drain below the top of the guide tubes before ICC conditions exist. The guide tubes are the only flow path from the upper head to the upper plenum. In WCAP-9754, it was found that ICC situations would not result
for LOCAs equivalent in size to approximately 6
inches or 18.2-66 Rev. 0 WOLF CREEK less without two or more failures in the ECCS. In both specific scenarios examined in WCAP-9754, a 1-inch and 4-inch small LOCA, the upper head and upper plenum had completely drained before the onset of an ICC condition.
Large break LOCAs consist of LOCAs in which the fluid behavior is inertially dominated. Small break LOCAs, on the other hand, have the fluid behavior dominated by gravitational effects. For LOCAs which are
significantly larger than an equivalent 6-inch break, the ECCS has the maximum potential for flow delivery, since the primary coolant system is at low pressure.
Analyses for LOCAs in this range indicate ambiguous behavior of the core exit T/Cs and RVLIS early in the accident due to dynamic blowdown effects. This behavior is temporary, and the core exit T/Cs and the RVLIS will indicate the progress being made by the ECCS in
recovering the core. When the core exit T/Cs and RVLIS may be temporarily providing ambiguous indications, no
manual action is needed or useful. Later in the
accident when manual action may be useful, the core exit
T/Cs and RVLIS provide an unambiguous indication of ICC
if it exists. This unambiguous indication may be
present as early as 30 seconds after the initiation of
the LOCA for a double ended guillotine rupture of a main coolant pipe.
It follows from the above discussion that, for ICC considerations, a reasonable definition of large breaks are breaks that are significantly larger than an equivalent 6-inch break. Note: The large and small break LOCA has been redefined as noted in section 6.3 and 15.6.5.
Reactor Vessel Level Instrumentation System The WCGS design provides redundant safety-grade (Class 1E) reactor vessel water level instrumentation. The
four reactor vessel water level indicators (LI-1311, LI-
1312, LI-1321, and LI-1322) are located on the main control board reactor auxiliaries console, RL-021. The reactor vessel level instrumentation system (Figures
18.2-13 and 5.1-1) utilizes two sets of two d/p cells.
These cells measure the pressure differential between the bottom of the reactor vessel and the top of the vessel. This d/p measuring system utilizes cells of differing ranges to cover different flow behavior with
and without pump operation as discussed below: 18.2-67 Rev. 14 WOLF CREEK
- a. Reactor Vessel - Narrow Range (Pb) This measurement provides an indication of reactor vessel level from the bottom of the reactor vessel to the top of the reactor during natural circulation conditions.
- b. Reactor Vessel - Wide Range (Pc) This instrument provides an indication of reactor core and internals pressure drop for any
combination of operating RCPs. Comparison of the
measured pressure drop with the normal, single-
phase pressure drop provides an approximate
indication of the relative void content or density of the circulating fluid. The indication of coolant density is significant only when the
subcooling is near zero. This instrument monitors
coolant conditions on a continuing basis during
forced flow conditions. Calculations were
performed to obtain an estimate of the differential
pressure that the wide range instrument measures
with all pumps operating, from ambient temperature
to operating temperature. The calculations employ
the same methods used to estimate reactor coolant
flow for plant design and safety analysis. These
calculations were used primarily to define the
instrument span and to provide an estimate for the
function that compensates the differential pressure
signal over the full temperature range, i.e., that results in the wide range display indicating 100 percent over the full temperature range with all
pumps operating, pumping subcooled coolant. During
the initial plant startup following installation of
the instrumentation, wide range differential
pressure data is obtained and used to confirm or
revise the compensation function so that a 100-
percent output is obtained at all temperatures.
Since the calculated compensation function was
verified by plant operating data, any uncertainties
in the flow and differential pressure estimates are
eliminated.
The relationships used in the analog-based RVLIS system to calculate density corrections are from
the ASME Steam Tables, dated 1967. These
relationships are implemented within the system by means of memory circuits that generate an output signal 18.2-68 Rev. 0 WOLF CREEK which is a predetermined function of the input signal. The predetermined functions produce specific scopes which are added together to obtain the required input-output relationships.
To provide the required accuracy for level measurement, temperature measurements of the impulse lines are provided. These measurements, together with existing reactor coolant temperature measurements and wide-range
RCS pressure, are employed to compensate the d/p
transmitter outputs for differences in system density
and reference leg density, particularly during the
change in the environment inside the containment structure following an accident.
Resistance Temperature Detector (RTD) sensors are installed on every independently run vertical section of
impulse line, to provide a measurement for density compensation of the reference leg. If the vertical
section of impulse line runs through two compartments
separated by a solid floor, an RTD sensor is installed
in each compartment. The RTD is installed at the
midpoint of each vertical section based on the
assumption that the temperature in the compartment is
uniform or that the temperature distribution is linear in the vicinity of the impulse line. An allowance for a 5 F difference between the true average impulse line
temperature and the RTD measurement is included in the measurement uncertainty analysis. This allowance permits a significant deviation from a linear gradient;
e.g., 20 percent of the impulse line could differ by as much as 25 F from a linear gradient without exceeding the allowance. During normal operation, forced circulation from cooling fans is expected to maintain reasonably uniform compartment temperatures. During the
LOCA, turbulence within a compartment due to release of
steam would also produce a reasonably uniform
temperature. Note that the impulse lines are protected from direct jet impingement by metal instrument tubing channels.
The WCGS design does not include hot leg impulse lines.
The layout of the impulse line from the upper head is arranged to prevent or minimize the impact of drainage during an accident. In general, however, the water in the impulse line is cooler than the water in the
reactor, and there is sufficient subcooling overpressure in the line so that very little, if any, of the water
would flash to steam during a depressurization or 18.2-69 Rev. 0 WOLF CREEK containment heat-up. Heat conduction along the small diameter piping and tubing would be insufficient to result in flashing in a significant length of piping.
The connection to the upper head from a spare control rod drive mechanism port drops or slopes down from the highest point of the vessel connection to the sensor bellows mounted on the refueling canal wall, so water would be retained in this piping. Draining of the
vertical section immediately above the reactor vessel
has no effect on the level measurement, since this
section is included in the operating range of the
instrument. Draining of the horizontal portion of vessel vent piping above the vessel also has no effect on the measurement, since no elevation head is involved.
The majority of the impulse line length is in capillary tubing sealed at both ends with a bellows (sensor
bellows at the reactor end, hydraulic isolator at the
containment penetration end), so water would be retained
in the impulse line at all times. The water is
demineralized, deaerated and pressurized by reactor
pressure. In the event of a LOCA, the water in the
capillary lines would not flash since it is in a sealed system. The lines contain no noncondensible gases and are not in a radiation environment sufficient for the
dissociation of water.
Since there is no mechanism for concentration of gases at the top of the reactor vessel during normal
operation, the connection to the top of the vessel would
contain, at most, the normal quantity of dissolved gases
in the coolant, and the subcooling pressure during an
accident would maintain this quantity of gas in
solution.
Redundancy of the two instrument trains of the RVLIS is not compromised by having a shared upper reactor vessel tap since it is not conceivable that the tap will fail either from plugging or breaking. Freedom from plugging is enhanced by 1) use of stainless steel connections which preclude corrosion products, and 2) absence of mechanisms, such as flow for concentrating boric acid.
It is also inconceivable that the tap will break because it is in a protected area. Even if the share tap does 18.2-70 Rev. 0 WOLF CREEK fail, it should be recognized that RVLIS is not a protection system initiating automatic action, but a monitoring system with adequate backup monitoring such as by core exit thermocouples for operator correlation.
Additional information (i.e., analyses, evaluations) concerning the Westinghouse generic reactor vessel level instrumentation system has been submitted to the NRC via Reference 7. The specific hardware for WCGS is not
exactly as documented in Reference 7, since the WCGS
design does not include a measurement of reactor vessel
level above the hot legs. However, the analyses, evaluations, and conclusions contained in Reference 7 are applicable to WCGS, since they are not sensitive to the above mentioned design difference.
The RVLIS measurement from top to bottom of the vessel measures the level in the following regions: top of vessel to top of guide tube; inside guide tube from top
to upper support plate; upper plenum; reactor core; and
lower plenum. During a LOCA, the RVLIS would measure
the water level in the upper head only until the level
drops to the top of the guide tubes; RVLIS would then
measure level reduction in the guide tubes and upper
plenum. The water remaining in the upper head below the top of the guide tubes is not measured by RVLIS. This water would eventually drain through small holes into
the guide tubes and downcomer, and this drainage would be accomplished within a few minutes, depending on the accident. In any case, the water temporarily retained
in the upper head would have no effect on the RVLIS indication. (It should be noted that the WFLASH Code, which was used to analyze RVLIS performance, includes calculation of water mass and pressure in the upper head, but this water mass is not included in the
calculation of mixture level; hence, the mixture level
is indicated only below the elevation of the upper
support plate.)
Environmental qualification of the reactor vessel level instrumentation system high volume sensor was completed in accordance with 10 CFR 50.49.
Thermocouple/Core Cooling Monitor System The T/CCMS is a core exit thermocouple/core cooling detection system which provides presentation and display of the status of the core heat removal capability to
both the plant operators and the technical support 18.2-71 Rev. 0 WOLF CREEK center. In the control room, the two subcooling
temperature indicators are located immediately above the
four level indicators on the vertical portion of the
control board, RL-022. The core exit thermocouple
display is mounted on the subcooling monitor cabinet, RP-081. The system consists of redundant channels and
output trains of thermocouple measurements, wide-range
hot and cold-leg RTD temperatures, and reactor pressure
signals. These parameters are used by the system to
display thermocouple temperatures and to calculate
saturation temperatures and margin of saturation (Tsat
margin), which is often referred to as subcooling. The
calculations are performed by the system which is based
on Advanced Logic System (ALS) Platform and data handling devices.
Thermocouple Monitor
The core exit thermocouple portion of the ICC system is
arranged as follows:
- a. Primary system
The primary system measures all the thermocouples
via isolators located in the qualified backup
system cabinet.
- b. Backup system
The backup system consists of two channels, each
monitoring approximately half of the 47 core outlet
thermocouples. The system has separation and
redundancy as well as qualification to comply with
Appendix B of NUREG-0737 (see the discussion of
item 4 below).
Core Cooling Monitor
The core cooling monitor portion of ICC system compares
core outlet thermocouple temperatures and hot and cold
leg RTD temperatures with the saturation temperature
based on the lowest of three pressure signals. This
system has separation and redundancy as well as
qualification to comply with Appendix B of NUREG-0737
(see the discussion of item 4 below).
One of the indicators of an approach to an ICC situation
is the response of the core exit thermocouples (T/Cs) to
the presence of superheated steam. The core exit
thermocouples do not provide an indication of the amount
18.2-72 Rev. 28 WOLF CREEK of core voiding. Response of the core exit T/Cs
provides a direct indication of the existence of ICC, the effectiveness of ICC recovery actions, and
restoration of adequate core cooling. The core is
adequately cooled whenever the vessel mixture level is
above the top of the core, and the core may have a
significant void fraction and still be adequately
cooled.
The thermocouple/core cooling monitor combines the
functions of monitoring for excessive core exit
thermocouple temperatures and monitoring both core exit
thermocouple temperatures and hot and cold leg RTD
temperatures for saturation margin (Tsat meter).
The system consists of two redundant channels, each
monitoring half of the core outlet thermocouples, and
four hot and cold leg RTDs. Three reactor pressure
input signals are used with the auctioneered low
pressure used by the ALS Platform to perform the Tsat margin function. The thermocouple temperatures are
corrected for reference junction temperature with three
reference junction temperature signals input to each
channel. (All of the thermocouples connected to one
channel are from one reference junction unit).
The system's two redundant trains utilize the following
safety-grade equipment:
- a. Thermocouples
- b. Reference junction boxes
- c. RTDs
- d. Termination Panel
- e. ALS Platform
- f. Flat Panel display
- g. Analog meters
- h. Digital Recorder (Black Box)
- i. Power supplies
- j. Connections and cabling
18.2-73 Rev. 28 WOLF CREEK The equipment listed above and shown in Figure 18.2-12
has been designed to satisfy the requirements of IEEE
Standard 279. This safety-grade system is isolated from
the non-Class 1E plant computer, technical support
center, and data links by qualified isolation devices.
Details of isolation device qualification for TCCM upgrade can be found in Westinghouse letter LTR-EQ-13-228 "Results of ALS-601 fault and Isolation Barrier Testing for TCCM."
The system can display individual thermocouple
temperatures and provides two levels of alarm when
preset temperatures are exceeded. The display is a flat panel display located at the processing cabinets, behind the main control board.
The thermocouple monitor can calculate and display core
outlet temperature quadrant tilts based on thermocouple
temperatures. The tilts calculated by each unit are
based on half the total number of core thermocouples.
This information is also available to the operator at
the main control board via the plant computer.
The core cooling monitor compares core outlet
thermocouple temperatures and hot and cold leg RTD
temperatures with the saturation temperature based on
the lowest of three pressure signals. Two levels of
alarm are provided for the core cooling (Tsat) monitor
function. The margin to saturation is displayed on two
redundant analog meters on the vertical section of the
main control board and are visible to an operator at the
control console.
The thermocouple/core cooling monitor provides
information to the operator that assists in the
performance of the required manual safety functions
following a Condition II, III, or IV event. This
includes information relative to maintaining the plant
in a Hot Standby condition or to proceeding to a cold
shutdown condition consistent with the Technical
Specification limits.
At WCGS, the core exit T/Cs protrude slightly from the
bottom of the upper core plate support columns. In this
location, they measure the temperature of the fluid
leaving the core region through the flow passages in the
upper core plate. Flow from the upper head must enter
the upper plenum via the control rod drive guide tubes
18.2-74 Rev. 28 WOLF CREEK before being able to enter the upper core plate flow passages. In addition, the LOCA blowdown depressurization behavior must be such that there is a flow reversal for the core exit T/Cs to detect the upper head fluid temperature. The upper head fluid is expected to mix with the upper plenum fluid as it drains from the upper head.
The potential for core exit T/C cooling from colder upper head fluid, while the core has an appreciable void
fraction, is not viewed as a potential problem for the
detection of an inadequate core cooling situation.
Although some Semiscale tests indicated core voiding
while the upper head was liquid solid, these tests do
not imply that the core exit T/Cs would give an ambiguous indication of ICC calculations for a Westinghouse PWR, and consideration of the core exit T/C
design would not result in ambiguous ICC indications.
Additional information concerning the thermocouple/core cooling monitor system is provided in Table 18.2-3.
- 2. Reference 7 provides a design analysis and evaluation of the instrumentation for detection of ICC. Additional
information is provided below.
The reactor coolant pressure and temperature signals originate from the existing wide-range pressure and hot
leg RTDs already installed in the plant, and the
uncertainties for these instruments are understood. The pressure uncertainty is 60 psi, and the temperature uncertainty is +/- 6 F, resulting in a maximum RVLIS uncertainty contribution of +/- 2.3 percent when the
vessel is full. This uncertainty is smaller when the
level is at the elevation of the reactor core. This
contribution to the total uncertainty would increase
roughly in proportion to an increase in the pressure or
temperature measurement uncertainty.
A system accuracy of +/- 6 percent water level was a target value established during the conceptual design
and was related to the dimensions of the reactor vessel (12 percent from nozzles to top of core) and core (30 percent), and the usefulness of the measurement during
an accident. The individual uncertainties, resulting
from random effects, were combined statistically to obtain the overall instrument system accuracy. Some of 18.2-75 Rev. 0 WOLF CREEK the individual uncertainties vary with conditions such as system pressure. Table 18.2-4 identifies the individual uncertainties for the narrow range measurement while at a system pressure of 1200 psia.
The statistical combination (square root of the sum of the squares) of the individual uncertainties described above resulted in an overall system instrumentation uncertainty of +/- 3.9 percent of the level span for the
narrow range indication of approximately 40 feet, or
+/- 1.5 feet, at a system pressure of 1200 psia. Examples
of the uncertainty at other system pressures are:
Uncertainty = +/- 3.6 percent at 400 psia Uncertainty = +/- 4.2 percent at 2000 psia By letter dated February 20, 1986, (Reference 15)
Westinghouse reported to the NRC the results of an evaluation relative to the consequences of larger than
expected post-accident errors on the T/CCMS. These
errors, which are identified in WCAP 8587 (Reference
16), affected subcooling margin calculations, the use of
T/Cs for ICC indication and the use of T/Cs as
temperature compensation for RVLIS. Based on the
revised error values, restrictions were placed on use of T/Cs for RVLIS and subcooling margin calculations and the EOP Guidelines were revised to incorporate new ICC
indication setpoints and revised accuracy requirements were developed for RVLIS. Modifications to plant hardware and procedures, required by the larger than expected T/CCMS errors, have been implemented at WCGS.
An analysis of the RVLIS hydraulics, an independent analysis of the hydraulics by Oak Ridge National Laboratory (ORNL), and the results of testing at the
Semiscale Test Facility in Idaho generally support a
response time (50 percent response to a step change in
level) of 3 seconds or less for the hydraulics. There are, however, two types of transients which affect the RVLIS response: a change in level and a change in system pressure. The major factors that influence the RVLIS hydraulics response to these two types of transients are the fluid volume within the RVLIS system and the length of capillary tubing connected to the d/p transmitter. For a level transient, the volume required to displace the transmitter bellows and the total length
of capillary tubing are the significant parameters.
Although the capillary tubing length (typically 600
feet) and diameter (0.089 inch) represent a significant 18.2-76 Rev. 0 WOLF CREEK resistance to flow, the volume required for a full span deflection of the transmitter bellows is small (0.1 cubic inch). The sensor and hydraulic isolator bellows displacement spring constants introduce a small error in the measured level but do not impact the response time of the system.
For a system pressure transient, the total fluid volume of the RVLIS system and the difference in length between
the two capillary lines connected to the d/p transmitter
are the significant parameters. In theory, the
transmitter would not respond to a change in pressure if
the two capillary lines were equal in length. In
practice, plant layout requirements result in lengths
differing by as much as 100 feet. During a system pressure change, the water volume in the RVLIS system will expand or contract a small amount, but measurable
pressure drops will develop in the capillary lines as
the small volumes move to equalize pressure. The d/p
transmitter will indicate a differential pressure or
offset caused by one line being longer than the other.
For a reasonably rapid transient of 100 psi per second
imposed on an RVLIS system having a difference in line
lengths of 100 feet, the offset or apparent level change
would approach about 2 feet of water, and the offset
would remain until the pressure transient is
terminated. After the initial blowdown from a small
break, the pressure transients would be much slower, and
the level offset would be negligible. Much larger
offsets approaching full scale deflection could occur (and have been observed during a large break test at Semiscale) during the initial large break transient, but
an RVLIS output during this short period of less than 2
minutes would not otherwise be useful or required for
actions associated with ICC. In addition to the
hydraulics response characteristics, the RVLIS
electronics incorporate an adjustable lag to filter
hydraulic noise when reactor coolant pumps are
operating. The lag time constant is adjustable up to 10
seconds. The response time associated with the rest of
the electronics has essentially no impact on the total
response time, which is within 10 seconds.
Blockage in the core will increase the frictional pressure drop and increase the total differential pressure across the vessel. This would be reflected as
a higher RVLIS indication. The increase in the RVLIS is most significant under forced flow conditions when the
reactor coolant pumps are operating. 18.2-77 Rev. 0 WOLF CREEK In order for blockage to be present, the core would have to have been uncovered for a prolonged period of time.
A low RVLIS indication along with a high core exit thermocouple indication would have been indicated during this time. If the RCPs had been operating throughout the transient, there would have been sufficient cooling to prevent significant core damage. Therefore, for significant blockage to exist during pump operation, the operator would have restarted the pumps after an ICC
condition had existed for a period of time. Based on
the history of the transient, the operator would know
that the RVLIS would read higher than expected.
Although the RVLIS would read high, it would still follow the trend in vessel inventory. The operator would be able to monitor the recovery with the RVLIS.
Under natural circulation conditions, the impact of core blockage is not expected to be large. Although the RVLIS indication will read slightly higher than normal, the RVLIS will still trend with the vessel inventory and
provide useful information for monitoring the recovery
from ICC. ICC will have been indicated at an earlier
time, before a significant amount of core blockage has
occurred. The operator would know that the RVLIS could
read slightly high, based on the history of the transient.
Reverse flow in the vessel tends to decrease the d/p across the vessel which would cause the RVLIS to indicate a lower collapsed level than actually exists.
The low indication would not cause the operator to take unnecessary actions, since an ICC recovery action would be based on a coincidence of a low level indication and a high core exit thermocouple indication (>700 F). In a reverse flow situation, the core exit thermocouples would be responding to the saturated temperature of the
water flowing from the upper plenum to the core, so a high thermocouple indication of >700 F would not occur.
It is important to note that large reverse flows are not expected to occur for breaks smaller than 6 inches in
diameter during the time that the core is uncovered.
Large reverse flow rates may occur early in the blowdown
transient for large diameter breaks, but, as is
discussed below, it is not necessary to use the RVLIS as
a basis for operator action for breaks in this range. 18.2-78 Rev. 0 WOLF CREEK During the course of a LOCA transient, the upper plenum will experience voiding before the upper head. The voids in the upper plenum will be indicated by a lower RVLIS reading. The RVLIS will not indicate where the voiding is occurring, but at this point in the transient, it is not necessary to know the location of the region of voiding. In the early part of the transient, when the mixture level is above the top of the guide tube in the upper head, it is sufficient for
the operator to know that the vessel inventory is
decreasing, irrespective of the region where voiding is
occurring. The fluid in the upper head does not affect
the RVLIS indication after the upper head has drained to below the top of the guide tubes. The upper head will drain before the onset of ICC, and there is not an ambiguous indication during the period of time RVLIS is used.
Experience in overranging of differential pressure instruments has been obtained in previous applications
of differential pressure capsules similar to those used
in RVLIS. In dual range flow (differential pressure)
applications, the "low flow" transmitter (and/or gauges)
are overranged to 300 percent or greater by normal flow
rates, yet provide reliable metering when required for
start-up.
Also, test data exist on the basic transmitter design showing about 0.5 percent effect on calibration with 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> exposure to 3000 psig overrange. All units are
similarly exposed to this overrange for 5 minutes in both directions as a part of factory testing.
There have been instances involving accidental overrange of these instruments (including RVLIS) as the result of
leakage or operator errors where full line pressure
overranges have occurred for up to several weeks with
minimal effect on instrument accuracy.
Based upon this experience and test data, it is expected that reliable measurements can be made by the selected overranged instrument designs used for RVLIS. On-line calibration capability is provided if needed to support gathering of statistical data. 18.2-79 Rev. 0 WOLF CREEK The following are conditions which could cause the DP level system to give ambiguous indications:
- a. When the downcomer is highly voided and the accumulators inject, the cold accumulator water condenses some of the steam in the downcomer which causes a local depressurization. The local
depressurization will lower the pressure at the
bottom of the vessel which will lower the
differential pressure across the vessel, causing an
apparent decrease in level indication. The lower
pressure in the downcomer also causes the mixture
in the core to flow to the lower plenum, causing an
actual decrease in level. The period of time when
the RVLIS indication is lower than the actual collapsed liquid level is brief.
An example of a situation in which this phenomenon may occur is when the reactor coolant pumps have
been running for a long period of time in a small
break transient. After the RCS loops have drained
and the pumps are circulating mostly steam, the
level in the downcomer will be depressed. A large
volume of steam will be present in the downcomer, above the low mixture level, which allows a large amount of condensation to occur. For most small break transients, the reactor coolant pumps are
tripped early in the transient, and the downcomer mixture level will remain high, even in cases where ICC occurs. When the downcomer level is high, the effect of accumulator injection on the RVLIS
indication is minor.
- b. When the upper head begins to drain, the pressure in the upper head decreases at a slower rate than
the pressure in the rest of the RCS. This is due
to the upper head region behaving much like the
pressurizer. The higher resistance across the upper support plate relative to the rest of the RCS prevents the upper head from draining quickly.
This situation only exists until the mixture level in the upper head falls below the top of the guide tubes. At this time, steam is allowed to flow from the upper plenum to the upper head, and the pressure equilibrates. While the upper head is behaving like a pressurizer, the vessel
differential pressure is reduced, and the RVLIS indicates a lower than actual collapsed liquid
level. 18.2-80 Rev. 0 WOLF CREEK This phenomenon is discussed in the summary report on the Westinghouse RVLIS for Monitoring ICC, December 1980 relative to the 3-inch cold leg break. Since that time, the upper head modeling has been investigated in more detail. It was found that the modeling used at that time assumed a flow resistance that was too high for the guide tubes.
Subsequent analyses have shown that the pressurizer effect has less impact on the vessel differential
pressure than was originally shown. There is very
little impact on the results after the level drains
below the top of the guide tubes. The pressurizer
effect is still believed to exist, and it becomes more significant as break size increases. The interval of time when the upper head behaves like a pressurizer is brief, and the RVLIS will resume trending with the vessel level after the top of the
guide tubes uncovers. The reduced RVLIS indication will not cause the operator to take any non-conservative action, even if a level below the top of the core is indicated, since the core exit thermocouples are used as a corroborative indication
of the approach to ICC.
- c. The normal condition for continuous upper plenum injection (UPI) occurs only with the operation of the low head safety injection pumps, which does not occur until a pressure of under 200 psi is realized. The RVLIS may not accurately trend with
vessel level during the initial start of UPI.
During this short period of time, the cold water
being injected mixes with the steam in the upper
plenum causing condensation. This condensation
will occur faster than the system response. The
system will equilibrate after a short period of time. Upon equilibrating, the system will continue to accurately trend with the vessel level.
In the range of break sizes where RVLIS is most useful in detecting the approach to ICC, the system
pressure will equilibrate at a level above the pressure where UPI will normally occur. It is important to note that the flow from the low head pumps is sufficient to recover the core, and no operator action based on the RVLIS indication will
be necessary. 18.2-81 Rev. 14 WOLF CREEK For the vast majority of small breaks, the condition of upper plenum injection does not cause a significant impact. For the remainder, the impact is very small and within tolerable limits.
- d. During the time when the distribution of voids in the vessel is changing rapidly, there can be a large change in the two-phase mixture level with very little change in collapsed mixture level. The
use of the RVLIS, in conjunction with the core exit
thermocouples, is still valid for this situation, however. The only event that has been identified
which could cause a large void redistribution is when the reactor coolant pumps are tripped when the vessel mixture is highly voided. After the pump performance has degraded enough that the flow pressure drop contribution to the vessel
differential pressure is small, the change in RVLIS indication is very small when the pumps are
tripped. As discussed in the summary report, the
approach to ICC would be indicated when the wide
range indication read 33 percent. If the pumps
were tripped at this time, the core would still be
covered. The operator knows that the core may
uncover if the pumps were tripped with a wide range indication lower than 33 percent. Prior to pump trip, the core will remain adequately cooled due to
forced circulation of the mixture. When the pumps trip, the two-phase level may equilibrate at a level below the top of the core. The narrow range indication provides an indication of core
coolability at this time.
A Westinghouse RVLIS was installed at the Semiscale Test Facility in Idaho. Small break loss-of-
coolant experiments were conducted at this facility
by EG&G for the NRC. The results of these tests
have been used to compare the RVLIS measurements with Semiscale differential pressure measurements, gamma densitometer data, and core cladding surface thermocouple indications. To date, after correcting for difference between PWR reactor vessel internals and Semiscale modeling, good correlation between Semiscale level indications and RVLIS measurements has been observed. In cooperation with the NRC, EG&G, and ORNL, Westinghouse has prepared a report summarizing the RVLIS performance during selected Semiscale tests.
The reports are "Westinghouse Evaluation of
RVLIS Performance at 18.2-82 Rev. 0 WOLF CREEK the Semiscale Test Facility for Test 5-2B-1,"
transmitted to the NRC in letter SED-SA-00081 dated
June 28, 1982 from E.P. Rahe, Westinghouse, to
L.E. Phillips, NRC, and "Westinghouse Evaluation of
RVLIS Performance at the Semiscale Test Facility,"
transmitted to the NRC in letter NS-EPR-2526 dated
December 9, 1981 from E.P. Rahe, Westinghouse, to
L.E. Phillips, NRC.
- 3. Additional testing of the equipment described above has
been completed in order to establish and upgrade
qualification of the equipment to comply with NUREG-
0737.
The test programs were:
- a. Qualification tests of core exit thermocouples
- b. Qualification tests of reference (temperature
compensation) junction boxes
- c. Qualification tests of electronics to add to the
system computer and technical support center
isolators and signal processing equipment.
- d. Qualification of isolation devices, cables and
connectors, reference leg RTDs and hydraulic
isolators.
The in-service life of the RVLIS and T/CCM electronics
is dependent upon proper maintenance, including the
replacement of individual component parts when
necessary. The provisions for this maintenance are
included in the technical manual. Based on the
assumption of normal conditions and proper maintenance
of the components, the only limitation to the in-service
life is the availability of replacement parts. It is
estimated that in 20 years, some of the components will
be technically obsolete and no longer produced.
Consequently, the cards may have to be modified in the
future to accommodate the current technology. Thus, any
individual component failures are regarded as
maintenance considerations, and their replacement is
necessary to prolong in-service life.
In-service life, which is different than design life and
qualified life, is dependent upon implementing a
scheduled preventative maintenance program including
periodic overhaul of the equipment. In this manner, the
18.2-83 Rev. 28 WOLF CREEK equipment is restored to a level that ensures continual
operability. In developing the maintenance program, repair costs may necessitate replacement of the
equipment. If the maintenance program is followed, there is no apparent reason that operation of the
equipment cannot be extended. Some of the equipment is
similar to equipment installed in present Westinghouse
plants that have been operating for 10 to 15 years.
The RVLIS valves supplied by Westinghouse were designed
for a service life of 40 years.
- 4. An evaluation of the conformance of the reactor vessel
level instrumentation system to NUREG-0737 is provided
in Reference 7.
An evaluation of the conformance of the
thermocouple/core cooling monitor system to NUREG-0737
(Attachment l and Appendix B) is as follows:
- a. Attachment l, Item (1)
The core exit thermocouples have been qualified so
as to comply with the recommendations of Regulatory
Guides 1.89 and 1.100. The thermocouples are
located at the core exit and in an arrangement such
that each of the redundant systems has core exit temperatures distributed over the entire core, in sufficient number to determine the radial power distribution and so located as to
verify power distribution symmetry among core
quadrants.
- b. Attachment 1, Item (2)
The primary operator display is a computer-based
display and calculation system. It provides
information as required by subitems (a) through (f)
of Attachment 1, Item (2) in Section 18.2.13.1.
- c. Attachment 1, Item (3)
The backup system to display thermocouple readings
is located in a cabinet which also houses the core
cooling monitor. Backup system display is
accomplished by the Class 1E ICC instrumentation
including the ALS platform, flat panel
18.2-84 Rev. 28 WOLF CREEK displays, analog meters, and digital recorders.
This backup system can display all of the 47 individual thermocouple temperatures within 6 minutes. The range extends from less than 200 F to 2300 F.
- d. Attachment 1, Item (4)
Human factors consideration of the types and
locations of displays and alarms is discussed in
Sections 18.1.16 and 18.3.2. The ICC
instrumentation has been considered in the overall
human factors evaluation.
- e. Attachment 1, Item (5)
Conformance to the specific items of Appendix B to
NUREG-0737 is as follows:
- 1) Appendix B, Item (1)
The thermocouple/core cooling monitor
instrumentation has been tested to establish
environmental qualification in accordance with
Regulatory Guide 1.89 (NUREG-0588). This
qualification requirement applies to the
complete instrumentation channel from
thermocouple to display where display
indicates the remote display, analog meter, and digital recorder. Qualified channel isolation devices isolate this qualified instrumentation
from the data links, technical support center
display, and plant computer display.
The seismic portion of the environmental
qualification testing has been performed to
comply with Regulatory Guide 1.100. This
seismic qualification provides assurance that
the instrumentation will continue to read
within the required accuracy following, but
not necessarily during, a safe shutdown
18.2-85 Rev. 28 WOLF CREEK Instrumentation whose ranges are required to extend beyond those ranges calculated in the most severe design basis accident event for a given variable has been qualified using the following criteria.
The qualification environment is based on the design basis accident events, except the
assumed maximum of the value of the monitored
variable is the value equal to the maximum
range for the variable. The monitored
variable is assumed to approach this peak by
extrapolating the most severe initial ramp associated with the design basis accident events. The decay for this variable is considered proportional to the decay for this variable associated with the design basis
accident events. No additional qualification margin needs to be added to the extended range
variable. All environmental envelopes except
that pertaining to the variable measured by
the information display channel are those
associated with the design basis accident
events.
The above environmental qualification requirement does not account for steady-state
elevated levels that may occur in other environmental parameters associated with the extended range variables. For example, a sensor measuring containment pressure must be
qualified for the measured process variable range, but the corresponding ambient temperature is not mechanistically linked to that pressure. Rather, the ambient
temperature value is the bounding value for
design basis accident events analyzed in
Chapter 15.0. The extended range requirement ensures that the equipment will continue to provide information should conditions degrade beyond those postulated in the safety analysis. Since variable ranges are nonmechanistically determined, extension of associated parameter levels is not justifiable and has, therefore, not been required. 18.2-86 Rev. 0 WOLF CREEK
- 2) Appendix B, Item (2)
The purpose for qualifying the thermocouple/
core cooling monitoring system is to generate
evidence that the equipment will maintain and
perform its functions during a design basis
event. It is of special concern during the
qualification effort to uncover common mode
failures.
The single-failure criteria for the computer
and information beyond the isolator does not
apply to this data-based information device as
referred to in NUREG-0737 (clarification item
[8]). In relation to diversification, the use
of reactor vessel level instrumentation adds
diversification to the ICC instrumentation.
Inclusion of the core cooling (Tsat margin)
monitoring functions enhances even further the
capability of the ICC instrumentation.
- 3) Appendix B, Item (3)
The instrumentation is energized from Class 1E
power sources.
- 4) Appendix B, Item (4)
Although not specifically recommended by
NUREG-0737, the ICC instrumentation complies
with the applicable portions of IEEE Standard
279. The systems utilize two trains;
therefore, the "Exemption" as defined in
Paragraph 4.11 of IEEE Standard 279 is
applicable here.
- 5) Appendix B, Item (5)
The ICC equipment falls under the quality
assurance requirements applicable to Class 1E
equipment. Refer to Appendix 3A for a
discussion of the quality assurance regulatory
guides.
- 6) Appendix B, Item (6)
A flat panel display is provided for thermocouple readings in the backup system.
18.2-87 Rev. 28 WOLF CREEK The computer-based (primary) thermocouple indication system has continuous (recording) displays.
- 7) Appendix B, Item (7)
The backup Class 1E system (which is on
demand) includes redundant digital recorders. The computer-based (primary) indication system has
continuous (recording) displays.
- 8) Appendix B, Item (8)
The instruments are specifically identified on
the control panels so that the operator can
easily discern that they are intended for use
under accident conditions.
- 9) Appendix B, Item (9)
The WCGS ICC instrumentation complies with
isolation requirements.
- 10) Appendix B, Item (10)
The WCGS ICC instrumentation is testable as
required.
- 11) Appendix B, Item (11)
Servicing, testing, and calibrating programs
are specified to maintain the capability of
the monitoring instrumentation.
- 12) Appendix B, Item (12)
The access to the thermocouple/core cooling
monitor permits removing channels for service
(location is in the main control room). The
testing and/or maintenance is facilitated by
this system location.
- 13) Appendix B, Item (13)
The design facilitates administrative control
of the access to all setpoint adjustments, module calibration adjustments, and test
points.
18.2-88 Rev. 28 WOLF CREEK
- 14) Appendix B, Item (14)
The monitoring instrumentation design
minimizes the development of conditions that
would cause meters, annunciators, recorders, alarms, etc., to give anomalous indications
potentially confusing to the operator.
- 15) Appendix B, Item (15)
The instrumentation is designed to facilitate
the recognition, location, replacement, repair, or adjustment of malfunctioning
components or modules.
- 16) Appendix B, Item (16)
The instrumentation used in both the reactor
vessel level instrumentation system and
thermocouple monitoring receives input signals
directly from the sensors that measure the
parameters. The core cooling monitor also
derives most of the signals directly from the
sensors except in the case where Tsat
pressures and others are obtained from the
protection set.
- 17) Appendix B, Item (17)
The instruments used for ICC instrumentation
are also used, with the exception of the
reactor vessel level indication, for
monitoring normal operation of the plant to
the extent that it is practical. No loss of
sensitivity is expected due to this use.
- 18) Appendix B, Item (18)
Periodic testing is in accordance with the
applicable portions of Regulatory Guide 1.118.
(f) Attachment 1, Item (6)
The instrumentation system power supplies are in
conformance with this requirement. However, the
required circuits to the thermocouples are
separated only to the maximum extent possible.
18.2-89 Rev. 0 WOLF CREEK (g) Attachment 1, Item (7)
The instrumentation qualification is discussed in
item 4.e.1 above.
(h) Attachment 1, Item (8)
The instrumentation system is in conformance with
this requirement.
(i) Attachment l, Item (9)
Quality assurance is discussed in item 4.e.5 above.
- 5. The nonredundant plant computer performs the
thermocouple and Tsat functions for the primary
display. However, these functions are also performed
independent of the plant computer by the Class 1E ICC
instrumentation. The Class 1E ALS platform performs the calculations and provides the signals to the Class
1E backup display.
- 6. In general, the system electronics are verified, maintained, and calibrated on-line by placing one of the
redundant trains into a test and calibrate mode while
leaving the other train in operation to monitor
inadequate core cooling.
A general verification was performed before shipment, but plant specific data was not used. The capability
exists for the operator to verify the operation of the
system. This involves disconnecting the sensors at the
RVLIS electronics, providing an artificial input, and
observing the response of the system on the front panel
and remote display.
The "7300" RVLIS incorporates circuit cards that provide
an output proportional to the change in resistance of
the RTD. The card contains a resistance bridge driven
by a power supply to produce a signal proportional to
the changes in resistance of the RTD, and a signal
characterizer which accommodates linear calibration of
non-linear RTDs.
On-line calibration of the system is made possible by
the "card edge" adjustments. The circuit cards were
calibrated at the factory; however, if the function is
changed or a component on the card is replaced, the
calibration procedure is given within the equipment
reference manual.
18.2-90 Rev. 28 WOLF CREEK The RVLIS system requires the normal maintenance given to other control and protection systems within the plant. On-line maintenance is accomplished by placing only one of the two redundant trains into maintenance at a time; this allows continued monitoring of inadequate core cooling.
The remote display unit of RVLIS indicates the status of the input sensors. If any sensors are out of range, regardless of the reason, a symbol allows the affected
level reading on the summary display page. The
particular sensor that is out of range is identified at
the bottom of the summary display page. Due to the
redundant sensors and trains it is possible for the
operator to disable some of the sensors without affecting the system reliability. The display indicates which level readings are affected. The disabled sensors
are also displayed at the bottom of the summary page. A
separate sensor status page can be displayed, showing
all sensors that are disabled or out of range and their
affected level readings.
In addition, software programs are provided so that the front panel controls and display can be used to perform
a functional test, serial data link tests, calibration
tests, and deadman timer tests. These tests are
considered part of the operator maintenance procedures
and are performed monthly. The cabinet-mounted
equipment is designed to facilitate periodic tests to
identify malfunctioning components and to ensure that the equipment functional operability is maintained comparable to the original design standards. Component
power supply failure is annunciated in the main control
room. The ICC instrumentation was installed by fuel
load.
- 7. and 8. The Westinghouse Owners Group has developed ICC operating guidelines. These guidelines were
developed using the generic ICC analyses discussed
in Section 18.1.8. These generic guidelines were considered, as appropriate, by The Operating Agent in developing plant specific operating procedures.
- 9. No additional submittals are required, with the exception of emergency operating procedures. 18.2-91 Rev. 0 WOLF CREEK 18.2.13.3 Conclusion The WCGS instrumentation used for detection of ICC adequately meets the guidance of NUREG-0737, Item II.F.2.
18.2.14 EMERGENCY POWER FOR PRESSURIZER EQUIPMENT (II.G.1) 18.2.14.1 NRC Guidance Per NUREG-0737 Position Consistent with satisfying the requirements for General Design Criteria 10, 14, 15, 17, and 20 of Appendix A to 10 CFR Part 50 for the event of loss-of-offsite power, the following positions shall be implemented:
Power Supply for Pressurizer Relief and Block Valves and Pressurizer Level Indicators
- 1. Motive and control components of the power-operated relief valves (PORVs) shall be capable of being supplied
from either the offsite power source or the emergency
power source when the offsite power is not available.
- 2. Motive and control components associated with the PORV block valves shall be capable of being supplied from either the offsite power source or the emergency power source when the offsite power is not available.
- 3. Motive and control power connections to the emergency buses for the PORVs and their associated block valves
shall be through devices that have been qualified in
accordance with safety-grade requirements.
- 4. The pressurizer level indication instrument channels shall be powered from the vital instrument buses. The buses shall have the capability of being supplied from either the offsite power source or the emergency power source when offsite power is not available.
Clarification
- 1. Although the primary concern resulting from lessons learned from the accident at TMI is that the PORV block valves must be closable, the design should retain, to
the extent practical, the capability to also open these
valves. 18.2-92 Rev. 0 WOLF CREEK
- 2. The motive and control power for the block-valve should be supplied from an emergency power bus different from the source supplying the PORV.
- 3. Any changeover of the PORV and block-valve motive and control power from the normal offsite power to the emergency onsite power is to be accomplished manually in the control room.
- 4. For those designs in which instrument air is needed for operation, the electrical power supply should be
required to have the capability to be manually connected
to the emergency power sources.
18.2.14.2 The Operating Agent Response The pressurizer level indication channels are powered from vital, Class lE buses and displayed in the control room. These buses are described in Section
8.3; they are capable of being supplied from onsite emergency power (diesel
generators) or offsite power.
The pressurizer PORVs and block valves are powered from vital, Class lE power sources. The separation group assignment is indicated on system drawings in
Section 5.1.
The pressurizer PORVs are relied on to perform two safety functions:
- a. Pressure control during a shutdown concurrent with loss of offsite power
- b. Over-pressure protection at low reactor coolant system pressures These functions are described in Sections 5.2 and 5.4 (A).
The PORV block valve is provided to isolate the PORV should the PORV develop unacceptable leakage during operation.
The pressurizer level indication is used during normal operation to control pressurizer level (see Figure 7.2-1, sheet 11).
The pressurizer level indication is used for the reactor trip logic and is a displayed parameter for post-accident and post-fire safe shutdown control. The safety design basis of the pressurizer level indication is provided in Section 7.2 and Section 7.5. 18.2-93 Rev. 14 WOLF CREEK 18.2.14.3 Conclusion The WCGS design for the emergency power for pressurizer equipment satisfies Item II.G.1 of NUREG-0737. The WCGS design proposes an alternative to the power supply assignment proposed for the pressurizer PORVs and PORV block valves. The alternative is justified based on the diversity in power supply assignments for these valves, i.e., motor-operated (AC) block valves and solenoid-operated (DC) PORVs and based on the requirements for PORV use for overpressure protection.
18.2.15 REQUESTS BY NRC INSPECTION AND ENFORCEMENT BULLETINS (II.K.1) 18.2.15.1 NRC Guidance Per NUREG-0694 Position"(C.1.5) Review all valve positions, positioning requirements, positive controls and related test and maintenance procedures to assure proper ESF functioning. See Bulletins79-06A Item 8,79-06B Item 7, and 79-08 Item 6 in
Reference 11 [NUREG-0560]. (C.1.10) Review and modify, as required, procedures for removing safety-related systems from service (and restoring to service) to assure operability status is
known. See Bulletins79-05A Item 10,79-06A Item 10,79-06B Item 9, and 79-08
Item 8 in Reference 11 [NUREG-0560]. (C.1.17) For Westinghouse-designed reactors, trip the pressurizer low-level coincident signal bistables, so that safety injection would be initiated when the pressurizer low-pressure setpoint is reached regardless of the pressurizer
level. See Bulletin 79-06A and Revision 1, Item 3 in Reference 11 [NUREG-
0560]." 18.2.15.2 The Operating Agent Response The development and review of procedures for testing, maintenance and system operation for the SNUPPS facilities were carried out as a joint effort between
Union Electric, the Operating Agent, and other consultants. This development
and review effort has considered the concerns of Items C.1.5 and C.1.10 of NUREG-0694 and The Operating Agent has performed the actions required by the applicable I&E Bulletin sections.
The item related to the safety injection logic is not applicable to the WCGS design (see Figure 7.2-1, Sheet 8). 18.2-94 Rev. 0 WOLF CREEK 18.2.15.3 Conclusion The Operating Agent has developed and reviewed plant procedures in accordance with the NRC guidance in II.K.1 of NUREG-0694.
18.2.16 ORDERS ON FACILITIES WITH BABCOCK & WILCOX NUCLEAR STEAM SUPPLIER SYSTEMS (II.K.2) 18.2.16.1 Control of Auxiliary Feedwater Independent of the Integrated Control System (II.K.2.2)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.2 Auxiliary Feedwater System Upgrading (II.K.2.8)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.3 Failure Mode Effects Analysis on the Integrated Control System II.K.2.9)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.4 Safety-Grade Anticipatory Reactor Trip (II.K.2.10)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.5 Thermal Mechanical Report--Effect of High-Pres-sure Injection on Vessel Integrity for Small-Break Loss-of-Coolant Accident with no Auxiliary Feedwater (II.K.2.13) 18.2.16.5.1 NRC Guidance Per NUREG-0737
Position A detailed analysis shall be performed of the thermal-mechanical conditions in the reactor vessel during recovery from small breaks with an extended loss of all feedwater.
Clarification The position deals with the potential for thermal shock of reactor vessels resulting from cold safety injection flow. One aspect that bears heavily on
the effects of safety injection flow is the mixing of safety injection water
with reactor coolant in the reactor vessel. B&W provided a report on July 30, 1980 that discussed the mixing question and the basis for a conservative 18.2-95 Rev. 0 WOLF CREEK analysis of the potential for thermal shock to the reactor vessel. Other PWR vendors are also required to address this issue with regard to recovery from small breaks with an extended loss of all feedwater. In particular, demonstration shall be provided that sufficient mixing would occur of the cold high-pressure injection (HPI) water with reactor coolant so that significant thermal shock effects to the vessel are precluded.
18.2.16.5.2 The Operating Agent Response
Westinghouse (in support of the Westinghouse Owners Group) has developed a method and performed analyses for a spectrum of small break loss-of-coolant
accidents. The method employs the NOTRUMP computer program to generate the
thermal/hydraulic transients. The thermal transients on the reactor vessel
belt-line and the inlet nozzle are analyzed based on the thermal/hydraulic data
from the NOTRUMP code. The Westinghouse-developed pressurized thermal shock
evaluation (PTS) methodology has been submitted to the NRC (Reference 13). In
accordance with the Operating Agent's letter to the NRC dated January 23, 1986, the WCGS calculated RTPTS values are well below the screening criterion of 10
CFR 50.61.
18.2.16.6 Effects of Slug Flow on Steam Generator Tubes (II.K.2.15)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.7 Reactor Coolant Pump Seal Damage (II.K.2.16)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.8 Potential for Voiding in the Reactor Coolant System During Transients (II.K.2.17) 18.2.16.8.1 NRC Guidance Per NUREG-0737
Position Analyze the potential for voiding in the reactor coolant system (RCS) during anticipated transients.
Clarification
The background for this concern and a request for this analysis was originally sent to the Babcock and Wilcox (B&W) licensees in a letter from R. W. Reid, NRC, to all B&W operating plants, dated January 9, 1980. 18.2-96 Rev. 0 WOLF CREEK 18.2.16.8.2 The Operating Agent Response Westinghouse (in support of the Westinghouse Owners Group) has performed a study which addresses the potential for void formation in Westinghouse-designed nuclear steam supply systems during natural circulation cooldown/depressurization transients. This study has been submitted to the NRC by the Westinghouse Owners Group (Ref. 1) and is applicable to Wolf Creek.
In addition, the Westinghouse Owners Group has developed appropriate modifications to the Westinghouse Owners Group Emergency Response Guidelines (ERGs) to take the results of the study into account so as to preclude void
formation in the upper head region during natural circulation
cooldown/depressurization transients, and to specify those conditions under
which upper head voiding may occur. The Operating Agent has considered the
generic guidance developed by the Westinghouse Owners Group in the development of plant specific operating procedures.
18.2.16.9 Sequential Auxiliary Feedwater Flow Analysis (II.K.2.19)
Not applicable to Westinghouse pressurized water reactors.
18.2.16.10 Small-Break Loss-of-Coolant Accident Which Repressurizes the Reactor Coolant System to the Power-Operated Relief Valve Set Point (II.K.2.20)
Not applicable to Westinghouse pressurized water reactors.
18.2.17 RECOMMENDATIONS FROM THE BULLETINS AND ORDERS TASK FORCE (II.K.3) 18.2.17.1 Installation and Testing of Automatic Power-Operated Relief Valve Isolation System (II.K.3.1) 18.2.17.1.1 NRC Guidance Per NUREG-0737 Position All PWR licensees should provide a system that uses the PORV block valve to protect against a small-break loss-of-coolant accident. This system will automatically cause the block valve to close when the reactor coolant system
pressure decays after the PORV has opened. Justification should be provided to
ensure that failure of this system would not decrease overall safety by
aggravating plant transients and accidents. 18.2-97 Rev. 0 WOLF CREEK Each licensee shall perform a confirmatory test of the automatic block valve closure system following installation.
Clarification
Implementation of this action item was modified in the May 1980 version of NUREG-0660. The change delays implementation of this action item until after the studies specified in TMI Action Plan item II.K.3.2 have been completed, if such studies confirm that the subject system is necessary.
18.2.17.1.2 The Operating Agent Response Westinghouse, as a part of the response prepared for the Westinghouse Owners Group to address item II.K.3.2 (refer to Section 18.2.17.2), has evaluated the necessity of incorporating an automatic pressurizer power-operated relief valve isolation system. This evaluation is documented in Reference 2 and concluded that such a system should not be required. However, an automatic PORV
isolation capability is part of the WCGS design as discussed in Sections 7.6.6 and 7.6.10.
18.2.17.1.3 Conclusion
Based on the above discussion, WCGS meets the guidelines of NUREG-0737, Item II.K.3.1.18.2.17.2 Report on Overall Safety Effect of Power-Operated Relief Valve Isolation System (II.K.3.2) 18.2.17.2.1 NRC Guidance Per NUREG-0737 Position
- 1. The licensee should submit a report for staff review documenting the various actions taken to decrease the probability of a small-break loss-of-coolant accident
(LOCA) caused by a stuck-open, power-operated relief
valve (PORV) and show how those actions constitute
sufficient improvements in reactor safety.
- 2. Safety-valve failure rates based on past history of the operating plants designed by the specific nuclear steam
supply system (NSSS) vendor should be included in the
report submitted in response to (1) above. 18.2-98 Rev. 0 WOLF CREEK Clarification Based on its review of feedwater transients and small LOCAs for operating plants, the Bulletins and Orders Task Force in the Office of Nuclear Reactor Regulation recommended that a report be prepared and submitted for staff review which documents the various actions that have been taken to reduce the probability of a small-break LOCA caused by a stuck-open PORV and show how these actions constitute sufficient improvements in reactor safety. Action Item II.K.3.2 of NUREG-0660, published in May 1980, changed the implementation of
this recommendation as follows: In addition to modifications already
implemented on PORVs, the report specified above should include safety
examination of an automatic PORV isolation system identified in Task Action
Plan item II.K.3.1.
Modifications to reduce the likelihood of a stuck-open PORV will be considered sufficient improvements in reactor safety if they reduce the probability of a small-break LOCA caused by a stuck-open PORV such that it is not a significant
contributor to the probability of a small-break LOCA due to all causes.(According to WASH-1400, the median probability of a small-break LOCA S2 with a
break diameter between 0.5 inches and 2.0 inches is 10
-3 per reactor-year with a variation ranging from 10
-2 to 10-4 per reactor-year.)
The above-specified report should also include an analysis of safety-valve failures based on the operating experience of the pressurized-water-reactor (PWR) vendor designs. The licensee has the option of preparing and submitting
either a plant-specific or a generic report. If a generic report is submitted, each licensee should document the applicability of the generic report to his
own plant.
Based on the above guidance and clarification, each licensee should perform an analysis of the probability of a small-break LOCA caused by a stuck-open PORV or safety valve. This analysis should consider modifications which have been
made since the TMI-2 accident to improve the probability. This analysis shall
evaluate the effect of an automatic PORV isolation system specified in Task
Action Plan, Item II.K.3.1.
In evaluating the automatic PORV isolation system, the potential of causing a subsequent stuck-open safety valve and the overall effect on safety (e.g.,
effect on other accidents) should be examined. 18.2-99 Rev. 0 WOLF CREEK Actual operational data may be used in this analysis, where appropriate. The bases for any assumptions used should be clearly stated and justified.
The results of the probability analysis should then be used to determine whether the modifications already implemented have reduced the probability of a small-break LOCA due to a stuck-open PORV or safety valve a sufficient amount to satisfy the criterion stated above, or whether the automatic PORV isolation
system specified in Task Action item II.K.3.1 is necessary.
In addition to the analysis described above, the licensee should compile operational data regarding pressurizer safety valves for PWR vendor designs.
These data should then be used to determine safety-valve failure rates.
The analyses should be documented in a report. If this requirement is implemented on a generic basis, each licensee should review the appropriate generic report and document its applicability to his own plant(s). The report and the documentation of applicability (where appropriate) should be submitted
for NRC staff review by the specified date.
18.2.17.2.2 The Operating Agent Response
As mentioned in item II.K.3.1 above (Section 18.2.17.1), the Westinghouse Owners Group has submitted a Westinghouse-prepared report (Ref. 2) which
provides a probabilistic analysis to determine the probability of a PORV LOCA, estimates the effect of the post-TMI modifications, evaluates an automatic PORV
isolation concept, and provides PORV and safety valve operational data for
Westinghouse plants. Because of the sensitivity analyses included in the
report, the report is generic and is applicable to the WCGS. The report
identifies a significant reduction in the PORV LOCA probability as a result of
post-TMI modifications, and the calculations compare favorably with the operational data for Westinghouse plants (included as an appendix to the
report).18.2.17.2.3 Conclusion
The requirements of this item were resolved by submittal of the Reference 2 analysis report. 18.2-100 Rev. 0 WOLF CREEK 18.2.17.3 Reporting Safety and Relief Valve Failures and Challenges (II.K.3.3) 18.2.17.3.1 NRC Guidance Per NUREG-0694 Assure that any failure of a PORV or safety valve to close will be reported to the NRC promptly. All challenges to the PORVs or safety valves should be documented in the annual report.
18.2.17.3.2 The Operating Agent Response The failure of a PORV to close on demand and a failure of a primary system safety valve to close will no longer be reported per the guidance of Generic Letter 97-02.
18.2.17.3.3 Conclusion The Operating Agent's commitment documented above meets the requirements of NUREG-0737, II.K.3.3.
18.2.17.4 Automatic Trip of Reactor Coolant Pumps During Loss-of-Coolant Accident (II.K.3.5) 18.2.17.4.1 NRC Guidance Per NUREG-0737
Position Tripping of the reactor coolant pumps in case of a loss-of-coolant accident (LOCA) is not an ideal solution. Licensees should consider other solutions to the small-break LOCA problem (for example, an increase in the safety injection flow rate). In the meantime, until a better solution is found, the reactor
coolant pumps should be tripped automatically in case of a small-break LOCA.
The signals designated to initiate the pump trip are discussed in NUREG-0623. 18.2-101 Rev. 13 WOLF CREEK Clarification This action item has been revised in the May 1980 version of NUREG-0660 to provide for continued study of criteria for early reactor coolant pump trip.
Implementation, if any is required, will be delayed accordingly. As part of the continued study, all holders of approved emergency core cooling (ECC) models have been required to analyze the forthcoming LOFT test (L3-6). The capability of the industry models to correctly predict the experimental behavior of this test will have a strong input on the staff's determination of
when and how the reactor coolant pumps should be tripped.
18.2.17.4.2 The Operating Agent Response
In response to IE Bulletin No.79-06C, Westinghouse, in support of the Westinghouse Owners Group (WOG) performed an analysis of delayed reactor coolant pump (RCP) trip during small-break LOCAs. This analysis is documented in Reference 3 and is the basis for the Westinghouse and WCGS position on RCP trip (i.e., automatic RCP trip is not necessary since sufficient time is available for manual tripping of the RCPs).
Westinghouse (again in support of the Westinghouse Owners Group) has performed test predictions of the LOFT Experiment L3-6. The results of these predictions
are documented in References 4 and 5. The results constitute both a best estimate model prediction with the NOTRUMP computer program and an evaluation model prediction with the WFLASH computer program, using the supplied set of initial boundary assumptions.
By letter dated February 8, 1983, the NRC issued Generic Letter 83-10c. The NRC concluded that each nuclear plant applicant should determine the need to trip the reactor coolant pumps following an accident or transient. By SNUPPS letters dated April 22, 1983 and April 13, 1984, responses to Generic Letter 83-10c were provided. The responses referenced previous Westinghouse Owner's
Group reports dated December 1, 1983 and March 9, 1984.
The NRC has issued Generic Letter 85-12 which confirmed the acceptability of the information provided by the Westinghouse Owner's Group, in response to
Generic Letter 83-10, and requested that plant-specific information be
submitted to the NRC. By letter dated November 27, 1985, the Operating Agent
responded to Generic Letter 85-12. By letter dated March 21, 1989 (89-00605), the NRC staff found that Wolf Creek appropriately referenced the WOG reports and the issue was closed. 18.2-102 Rev. 21 WOLF CREEK 18.2.17.5 Evaluation of PORV Opening Probability During Overpressure Transient (II.K.3.7)
Not applicable to Westinghouse pressurized water reactors.
18.2.17.6 Proportional Integral Derivative Controller Modification (II.K.3.9) 18.2.17.6.1 NRC Guidance Per NUREG-0737
Position The Westinghouse-recommended modification to the proportional integral derivative (PID) controller should be implemented by affected licensees.
Clarification
The Westinghouse-recommended modification is to raise the interlock bistable trip setting to preclude derivative action from opening the power-operated
relief valve (PORV). Some plants have proposed changing the derivative action setting to zero, thereby eliminating it from consideration. Either modification is acceptable to the staff. This represents a newly available option.18.2.17.6.2 The Operating Agent Response
The WCGS design includes a pressure integral derivative (PID) controller in the power-operated relief valve control circuit (see Figures 7.7-4 and 7.2-1, Sheet
11). The time derivative constant in the PID controller for the pressurizer
PORV will be turned to "OFF" (set to zero) at WCGS. The appropriate plant procedure for calibrating the set points in this nonsafety grade system will reflect this decision.
Setting the derivative time constant to "OFF," in effect, removes the derivative action from the controller. Removal of the derivative action will
decrease the likelihood of opening the pressurizer PORV since the actuation
signal for the valve is then no longer sensitive to the rate of change of pressurizer pressure.
18.2.17.6.3 Conclusion
The NUREG-0737 provisions for the PID controller are met at WCGS. 18.2-103 Rev. 14 WOLF CREEK 18.2.17.7 Proposed Anticipatory Trip Modification (II.K.3.10) 18.2.17.7.1 NRC Guidance Per NUREG-0737 Position The anticipatory trip modification proposed by some licensees to confine the range of use to high-power levels should not be made until it has been shown on a plant-by-plant basis that the probability of a small-break loss-of-coolant accident (LOCA) resulting from a stuck-open power-operated relief valve (PORV)
is substantially unaffected by the modification.
Clarification
This evaluation is required for only those licensees/applicants who propose the modification.
18.2.17.7.2 The Operating Agent Response This anticipatory trip modification is included in the WCGS design.
The NRC has raised the question of whether the pressurizer power-operated relief valves would be actuated for a turbine trip without reactor trip below a power level of 50 percent (P-9 set point). An analysis has been performed
using realistic yet conservative values for the core physics parameters (primarily reactivity feedback coefficients and control rod worths), and a
conservatively high initial power, average reactor temperature (TAVG), and
pressurizer pressure level to account for instrument inaccuracies.
The transient was initiated from the set point for the P-9 interlock, namely 50 percent of the reactor full power level plus 2 percent for power measurement
uncertainty. This is a conservative starting point, and would bracket all transients initiated from a lower power level. The core physics parameters
used were the ones that would result in the most positive reactivity feedbacks (i.e., highest power levels). The steam dump valves were assumed to be actuated by the load rejection controller.
Based upon the results from the analysis, the peak pressure reached in the pressurizer would be 2,302 psia. The set point for the actuation of the
pressurizer power-operated relief valves is 2,350 psia. Even including the +20 psi pressure measurement 18.2-104 Rev. 0 WOLF CREEK uncertainty, there is still a margin of 28 psi between the peak pressure reached and the minimum activation pressure for the pressurizer power-operated relief valves.
An additional analysis has been performed to determine the consequences (specifically the likelihood of the pressurizer power-operated relief valves opening) of having a turbine trip due to a loss of condenser vacuum.
The major difference between this analysis and the one presented above is that now the normal steam dump system is unavailable, and the steam relief must be
carried out through the atmospheric relief valves. Since there is a longer
delay time before the atmospheric reliefs reach their set point (in comparison
to the normal steam dump system) and their capacity is about one-half of the
steam dump system, there is an increased likelihood that the pressurizer PORVs
will open.
Figure 18.2-14 shows the plant operating ranges for which the pressurizer PORVs will open for a turbine trip due to a loss of condenser signal. Above 50 percent power, a turbine trip will cause a reactor trip (due to P-9 set point),
and the pressurizer PORV set point will not be reached. Below a power level of
35 to 40 percent (depending on fuel burnup), the pressurizer spray rate is
adequate to maintain the pressurizer pressure below the set point. Therefore, only in the narrow band between about 35 and 50 percent power will the
pressurizer PORVs open for a loss of condenser.
Based upon the operating history of current plants, the chances of getting a condenser unavailable signal (and hence a turbine trip) is about 156 out of 10 7 operating hours. Assuming 98 percent plant availability and a 40-year plant lifetime, this works out to about four condenser unavailable turbine trips occurring during the normal life of a plant. Assuming an equal chance of
having the plant operate anywhere between 0 and 100 percent power (an unrealistic value, since they usually operate either at a full or no load level), the chances of having a condenser unavailable signal generate a transient which would result in the opening of the pressurizer PORVs is less than one per plant lifetime.
18.2.17.7.3 Conclusion
The analysis described above demonstrates an acceptably low probability of a small LOCA caused by a stuck open PORV. 18.2-105 Rev. 0 WOLF CREEK 18.2.17.8 Justification for Use of Certain PORVs (II.K.3.11) 18.2.17.8.1 NRC Guidance Per NUREG-0694 Position Demonstrate that the PORV installed in the plant has a failure rate equivalent to or less than the valves for which there is an operating history.
18.2.17.8.2 The Operating Agent Response
The PORVs to be used in the WCGS design are pilot-operated relief valves.
These valves are a new design and were supplied by Garrett. The valve design
was tested in the Electric Power Research Institute (EPRI) valve test program (refer to NUREG-0737, Item II.D.1). The performance of the Garrett PORVs was
comparable to other designs tested. In addition, the analysis of PORVs in accordance with NUREG-0737, Item III.K.3.2 (Section 18.2.17.2) addresses valve failure rates.
18.2.17.8.3 Conclusion
Based on the EPRI testing and PORV analysis identified above, failure rates for the WCGS PORV design are adequately addressed.
18.2.17.9 Confirm Existence of Anticipatory Reactor Trip Upon Turbine Trip (II.K.3.12) 18.2.17.9.1 NRC Guidance Per NUREG-0737 Position Licensees with Westinghouse-designed operating plants should confirm that their plants have an anticipatory reactor trip upon turbine trip. The licensee of any plant where this trip is not present should provide a conceptual design and
evaluation for the installation of this trip.
18.2.17.9.2 The Operating Agent Response
The WCGS design includes an anticipatory reactor trip upon turbine trip (refer to Figure 7.2-1). 18.2-106 Rev. 0 WOLF CREEK 18.2.17.10 Separation of High-Pressure Coolant Injection and Reactor Core Isolation Cooling System Initiation Levels--Analysis and Implementation (II.K.3.13)
Not applicable to pressurized water reactors.
18.2.17.11 Isolation of Isolation Condensers on High Radiation (II.K.3.14)
Not applicable to pressurized water reactors.
18.2.17.12 Modify Break-Detection Logic to Prevent Spurious Isolation of High-Pressure Coolant Injection and Reactor Core Isolation Cooling (II.K.3.15)
Not applicable to pressurized water reactors.
18.2.17.13 Reduction of Challenges and Failures of Relief Valves--Feasibility Study and System Modification (II.K.3.16)
Not applicable to pressurized water reactors.
18.2.17.14 Report on Outages of Emergency Core-Cooling Systems Licensee Report and Proposed Technical Specification Changes (II.K.3.17) 18.2.17.14.1 NRC Guidance Per NUREG-0737
Position Several components of the emergency core-cooling (ECC) systems are permitted by technical specifications to have substantial outage times (e.g., 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> for one diesel-generator; 14 days for the HPCI system). In addition, there are no
cumulative outage time limitations for ECC systems. Licensees should submit a
report detailing outage dates and lengths of outages for all ECC systems for
the last 5 years of operation. The report should also include the causes of
the outages (i.e., controller failure, spurious isolation).
Clarification
The present technical specifications contain limits on allowable outage times for ECC systems and components. However, there are no cumulative outage time
limitations on these same systems. It 18.2-107 Rev. 0 WOLF CREEK is possible that ECC equipment could meet present technical specification requirements but have a high unavailability because of frequent outages within the allowable technical specifications.
The licensees should submit a report detailing outage dates and length of outages for all ECC systems for the last 5 years of operation, including causes of the outages. This report will provide the staff with a quantification of historical unreliability due to test and maintenance outages, which will be used to determine if a need exists for cumulative outage requirements in the
technical specifications.
Based on the above guidance and clarification, a detailed report should be submitted. The report should contain (1) outage dates and duration of outages; (2) cause of the outage; (3) ECC systems or components involved in the outage; and (4) corrective action taken. Test and maintenance outages should be included in the above listings which are to cover the last 5 years of operation. The licensee should propose changes to improve the availability of
ECC equipment, if needed.
Applicant for an operating license shall establish a plan to meet these requirements.
18.2.17.14.2 The Operating Agent Response
The Operating Agent provides safety system outage information as required by regulations and WCGS Technical Specifications. In addition, records are retained of the maintenance, inspections, and surveillance tests of the
principal items related to nuclear safety. These records can be reviewed by the NRC for additional specific data on component availability. The documentation will include: 1) outage dates and duration, 2) cause of the outage, 3) systems or components involved in the outage, and 4) corrective
action taken.
18.2.17.14.3 Conclusion
The WCGS reports safety system outages as required by 10 CFR 50.72, 10 CFR 50.73, The Technical Specifications and other applicable regulations. This
reporting ensures that the data requested by Item II.K.3.17 of NUREG-0737 is
available.
18.2.17.15 Modification of Automatic Depressurization System Logic--Feasibility for Increased Diversity for Some Event Sequences (II.K.3.18)
Not applicable to pressurized water reactors. 18.2-108 Rev. 0 WOLF CREEK 18.2.17.16 Interlock on Recirculation Pump Loops (II.K.3.19)
Not applicable to pressurized water reactors.
18.2.17.17 Restart of Core Spray and Low-Pressure Coolant-Injection Systems (II.K.3.21)
Not applicable to pressurized water reactors.
18.2.17.18 Automatic Switchover of Reactor Core Isolation Cooling System Suction--Verify Procedures and Modify Design (II.K.3.22)
Not applicable to pressurized water reactors.
18.2.17.19 Confirm Adequacy of Space Cooling for High-Pressure Coolant Injection and Reactor Core Isolation Cooling Systems (II.K.3.24)
Not applicable to pressurized water reactors.
18.2.17.20 Effect of Loss of Alternating-Current Power on Pump Seals (II.K.3.25) 18.2.17.20.1 NRC Guidance Per NUREG-0737
Position The licensees should determine, on a plant-specific basis, by analysis or experiment, the consequences of a loss of cooling water to the reactor recirculation pump seal coolers. The pump seals should be designed to
withstand a complete loss of alternating-current (ac) power for at least 2
hours. Adequacy of the seal design should be demonstrated.
Clarification
The intent of this position is to prevent excessive loss of reactor coolant system (RCS) inventory following an anticipated operational occurrence. Loss of ac power for this case is construed to be loss of offsite power. If seal failure is the consequence of loss of cooling water to the reactor coolant pump (RCP) seal coolers for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, due to loss of offsite power, one acceptable
solution would be to supply emergency power to the component cooling water
pump. This topic is addressed for Babcock and Wilcox (B&W) reactors in Section II.K.2.16. 18.2-109 Rev. 0 WOLF CREEK 18.2.17.20.2 The Operating Agent Response During normal operation, seal injection flow from the chemical and volume control system is provided to cool the RCP seals, and the component cooling water system provides flow to the thermal barrier heat exchanger to limit the heat transfer from the reactor coolant to the RCP internals. In the event of a loss of offsite power, the RCP motor is deenergized and both of these cooling supplies are terminated; however, the diesel generators are automatically started and both seal injection flow and component cooling water to the thermal
barrier heat exchanger are automatically restored within seconds. Either of
these cooling supplies is adequate to provide seal cooling and prevent seal
failure due to a loss of seal cooling during a loss of offsite power for at
least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.
18.2.17.20.3 Conclusion The WCGS design meets the RCP seal cooling requirements of this item.
18.2.17.21 Provide Common Reference Level for Vessel Level Instrumentation (II.K.3.27)
Not applicable to pressurized water reactors.
18.2.17.22 Verify Qualification of Accumulators on Automatic Depressurization System Valves (II.K.3.28)
Not applicable to pressurized water reactors.
18.2.17.23 Study to Demonstrate Performance of Isolation Condensers with Noncondensibles (II.K.3.29)
Not applicable to pressurized water reactors.
18.2.17.24 Revised Small-Break Loss-of-Coolant Accident Methods to Show Compliance with 10 CFR Part 50, Appendix K (II.K.3.30) 18.2.17.24.1 NRC Guidance Per NUREG-0737
Position The analysis methods used by nuclear steam supply system (NSSS) vendors and/or fuel suppliers for small-break loss-of-coolant accident (LOCA) analysis for compliance with Appendix K to 10 CFR 18.2-110 Rev. 0 WOLF CREEK Part 50 should be revised, documented, and submitted for NRC approval. The revisions should account for comparisons with experimental data, including data from the LOFT Test and Semiscale Test facilities.
Clarification As a result of the accident at TMI-2, the Bulletins and Orders Task Force was formed within the Office of Nuclear Reactor Regulation. This task force was
charged, in part, to review the analytical predictions of feedwater transients
and small-break LOCAs for the purpose of assuring the continued safe operation
of all operating reactors, including a determination of acceptability of
emergency guidelines for operators.
As a result of the task force reviews, a number of concerns were identified regarding the adequacy of certain features of small-break LOCA models, particularly the need to confirm specific model features (e.g., condensation heat transfer rates) against applicable experimental data. These concerns, as
they applied to each lightwater reactor (LWR) vendor's models, were documented in the task force reports for each LWR vendor. In addition to the modeling
concerns identified, the task force also concluded that, in light of the TMI-2
accident, additional systems verification of the small-break LOCA model as
required by II.4 of Appendix K to 10 CFR 50 was needed. This included
providing predictions of Semiscale Test S-07-10B and LOFT Test (L3-1) and
providing experimental verification of the various modes of single-phase and
two-phase natural circulation predicted to occur in each vendor's reactor during small-break LOCAs.
Based on the cumulative staff requirements for additional small-break LOCA model verification, including both integral system and separate effects verification, the staff considered model revision as the appropriate method for reflecting any potential upgrading of the analysis methods.
The purpose of the verification was to provide the necessary assurance that the small-break LOCA models were acceptable to calculate the behavior and consequences of small primary system breaks. The staff believes that this
assurance can alternatively be provided, as appropriate, by additional
justification of the acceptability of present small-break LOCA models with
regard to specific staff concerns and recent test data. Such justification could supplement or supersede the need for model revision.
The specific staff concerns regarding small-break LOCA models are provided in the analysis sections of the B&O Task Force reports for each LWR vendor, (NUREG-0635, -0565, -0626, -0611, and 18.2-111 Rev. 0 WOLF CREEK
-0623). These concerns should be reviewed in total by each holder of an approved emergency core cooling system (ECCS) model and addressed in the evaluation as appropriate.
The recent tests include the entire Semiscale small-break test series and LOFT Tests (L3-1) and (L3-2). The staff believes that the present small-break LOCA models can be both qualitatively and quantitatively assessed against these tests. Other separate effects tests (e.g., ORNL core uncovery tests) and future tests, as appropriate, should also be factored into this assessment.
Based on the preceding information, a detailed outline of the proposed program to address this issue should be submitted. In particular, this submittal
should identify (1) which areas of the models, if any, the licensee intends to upgrade, (2) which areas the licensee intends to address by further justification of acceptability, (3) test data to be used as part of the overall verification/upgrade effort, and (4) the estimated schedule for performing the necessary work and submitting this information for staff review and approval.
18.2.17.24.2 The Operating Agent Response
The present Westinghouse Small Break Evaluation Model used to analyze WCGS (refer to Section 15.6.5) is in conformance with 10 CFR Part 50, Appendix K.
Nevertheless, Westinghouse (as documented in Ref. 6) has addressed the specific
NRC items contained in NUREG-0611 in a model (NOTRUMP) documented in WCAP 10054 (dated 12/28/82) and WCAP 10079 (dated 11/12/82). The NRC approved NOTRUMP as
satisfying II.K.3.30 in a safety evaluation dated May 21, 1985. NOTRUMP was
also found to be in full compliance with Appendix K to 10 CFR 50 and was
designated as the new Westinghouse licensing tool for small-break LOCA
evaluations to satisfy the provisions of II.K.3.31.
18.2.17.24.3 Conclusion
The NOTRUMP Code satisfies the provisions of NUREG-0737, Item II.K.3.30.
18.2.17.25 Plant-Specific Calculations to Show Compliance With 10 CFR Part 50.46 (II.K.3.31) 18.2.17.25.1 NRC Guidance Per NUREG-0737 Position Plant-specific calculations using NRC-approved models for small-break loss-of-coolant accidents (LOCAs), as described in item 18.2-112 Rev. 0 WOLF CREEK II.K.3.30 to show compliance with 10 CFR 50.46, should be submitted for NRC approval by all licensees.
18.2.17.25.2 The Operating Agent Response
The present Westinghouse Small Break Evaluation Model and small break LOCA analyses for WCGS (refer to Section 15.6.5) are in conformance with 10 CFR Part 50, Appendix K and 10 CFR Part 50.46. As stated in the response to Item II.K.3.30 (refer to Section 18.2.17.24.2), the NRC has approved the
Westinghouse NOTRUMP Code for small-break LOCA analysis.
In response to generic letter 83-35, the Westinghouse Owners Group has developed a program to demonstrate on a generic basis that the new NOTRUMP model predicts lower calculated peak clad temperatures than WFLASH. By letter dated October 6, 1986 (Reference 17), the NRC concluded that the generic study results could be used to resolve NUREG-0737, Item II.K.3.31. The Operating Agent has submitted a letter dated June 26, 1986 to the NRC to verify the
applicability of the generic study results to WCGS.
18.2.17.25.3 Conclusion
Upon submittal of the letter confirming the applicability of the generic results to WCGS, the requirements of NUREG-0737, Item II.K.3.31 are met.
18.2.17.26 Evaluation of Anticipated Transients with Single Failure to Verify No Fuel Failure (II.K.3.44)
Not applicable to pressurized water reactors.
18.2.17.27 Evaluation of Depressurization with Other than Automatic Depressurization System (II.K.3.45)
Not applicable to pressurized water reactors.
18.2.17.28 Identify Water Sources Prior to Actuation of Automatic Depressurization System (II.K.3.57)
Not applicable to pressurized water reactors.
18.2.18 REFERENCES
- 1. Letter OG-57, dated April 20, 1981, Jurgensen, R. W.
(Chairman, Westinghouse Owners Group) to Check, P. S. (NRC). 18.2-113 Rev. 0 WOLF CREEK
- 2. Wood, D. C. and Gottshall, C. L., "Probabilistic Analysis and Operational Data in Response to NUREG-0737 Item II.K.3.2 for Westinghouse NSSS Plants," WCAP-9804, February 1981.
- 3. "Analysis of Delayed Reactor Coolant Pump Trip During Small Loss of Coolant Accidents for Westinghouse Nuclear Steam Supply Systems," WCAP-9584 (Proprietary) and WCAP-9585 (Non-Proprietary), August 1979.
- 4. Letter OG-49, dated March 3, 1981, Jurgensen, R. W.
(Chairman, Westinghouse Owners Group) to Ross, D. F., Jr.
(NRC).
- 5. Letter OG-50, dated March 23, 1981, Jurgensen, R. W.
(Chairman, Westinghouse Owners Group) to Ross, D. F., Jr.
(NRC).
- 6. Letter NS-TMA-2318, dated September 26, 1980, Anderson, T. M.
(Westinghouse) to Eisenhut, D. G. (NRC).
- 7. Letter NS-TMA-2357, dated December 23, 1980, T. M. Anderson (Westinghouse) to D. G. Eisenhut (NRC).
- 9. QAD-CG: A Combinatorial Geometry Version of QAD-P5A , Bechtel Power Corporation internal computer code.
- 10. Letter SLNRC 83-0048, dated September 1, 1983, N. A. Petrick (SNUPPS) to H. R. Denton (NRC).
- 11. Letter SLNRC 84-004, dated January 16, 1984, N. A. Petrick (SNUPPS) to H. R. Denton (NRC).
- 12. Letter SLNRC 83-002 (distributed as82-002), dated January 7, 1983, N. A. Petrick (SNUPPS) to H. R. Denton (NRC).
- 13. "A Generic Assessment of Significant Flaw Extension, Including, Stagnant Loop Conditions, From Pressurized Thermal Shock of Reactor Vessels on Westinghouse Power Plants," WCAP
10319, December 1983.
- 14. Union Electric Calculation Sheet HPCI-84-04, dated April 27, 1984, "An Assessment of Personnel Dose to Obtain Gaseous
Effluent and Reactor Coolant System Grab Samples Following a
DBA Loss of Coolant Accident." 18.2-114 Rev. 0 WOLF CREEK
- 15. Letter NS-NRC-86-3099, dated February 20, 1986, Rahe, E. P.
(Westinghouse) to Taylor, J. M. (NRC).
- 16. "Methodology for Qualifying Westinghouse WRD-Supplied NSSS Safety-Related Electrical Equipment," WCAP-8587, Rev. 6-A, dated November 1983.
- 17. Safety Evaluation Report, WCAP-11145, Westinghouse Small-Break LOCA ECCS Evaluation Model Generic Study with NOTRUMP
Code, transmitted by NRC letter (C. Rossi) to Westinghouse
Owners Group (L. Butterfield), dated October 6, 1986. 18.2-115 Rev. 0 WOLF CREEK TABLE 18.2-1 (Page 1 of 2)
MITIGATING CORE DAMAGE COURSE COURSE DESCRIPTION Westinghouse has performed detailed analysis of numerous situations which could arise in two loop, three loop, and four
loop PWR plants. The Westinghouse program has then been
structured to use the most limiting case for each situation as the
basis for instruction to students.
COURSE INTRODUCTION
- Major Plant Assumptions
- Core Thermal and Linear Power Density Limits INCORE INSTRUMENTATION
- System Functions, Characteristics, and Operations
Including Moveable Incore Detection System and Incore
Thermocouples
- Determination of Core Damage Extent and Core Geometry
Changes
- Determination of Peak Core Temperatures
- Methods of Obtaining Extended Range Readings
- Direct Readings at Terminal Junctions
- System Outputs and Recorders
- Potential Causes of Instrument Failures and Probable Time
to Failure Under Various Degraded Conditions EXCORE INSTRUMENTATION
- Factors Affecting Excore Instrumentation Response During
Various Operational Conditions
- Expected Indications for Various Loss of Coolant
Accidents
- Determination of Void Formation in the Core Region
- Detector Reliability Under Adverse Environmental
Conditions POST ACCIDENT CHEMISTRY
- Expected Changes in Primary Plant Chemistry
- Consequences of Transferring Primary Water Outside of
Containment
- Long Term System Problems Associated with Extended
Immersion in Contaminated Primary Water and Potential
Failure Mechanisms
- Expected Isotopic Breakdowns for Various Conditions of
Fuel and Cladding Rev. 0 TABLE 18.2-1 (Page 2 of 2)
RADIATION MONITORING
- Types of Detectors Utilized in the Radiation Monitoring
System
- Response of Process and Area Monitors to Radioactivity
Release
- Verification of Installed Instrumentation Through
Supplemental Measurements
- Determination of Dose Rates with Nonfunctional or
Nonavailable Instrumentation VITAL PROCESS INSTRUMENTATION
- Specific Applications of Major Types of Transmitters
- Various Failure Methods and Their Reliability
- Pressurizer Pressure Instrumentation
- Steam Generator Level Instrumentation
- Various Temperature Detectors
- Major Flow Indicators
- Alternate Methods to Determine Critical Process Variables
- Use of Plant Computer Stored Information GAS GENERATION
- Physical and Chemical Characteristics and Potential
Sources of Major Gases
- Hydrogen Flammability and Explosion Limits
- Venting, Disposal, and Sampling Methods of Containment
Gases POTENTIALLY DAMAGING SITUATIONS AND COOLING METHODS
- Loss of Feedwater Induced Loss of Coolant Accident
- Heat Removal Paths and Sinks
- Steam and Water Cooling
- Injection Flowpaths - Hot Leg Versus Cold Leg Injection
- Quenching Effects on Clad Material
- Gas or Steam Binding Effects
- Natural Circulation Indications and Controls - One Phase
and Two Phase Fluids Rev. 0 WOLF CREEK TABLE 18.2-2 ESSENTIAL/NONESSENTIAL CONTAINMENT
PENETRATIONS Fig. 6.2.4-1, Essential/
Sheet Penetration Service Nonessential 1 P-1 Main steam/PORV Nonessential/
essential
2 P-2 Main steam/PORV Nonessential/
essential
3 P-3 Main steam/PORV & AFW Nonessential/
steam essential
4 P-4 Main steam/PORV & AFW Nonessential/
steam essential
5 P-5 Main/aux. feedwater Nonessential/
essential
6 P-6 Main/aux. feedwater Nonessential/
essential
7 P-7 Main/aux. feedwater Nonessential/
essential
8 P-8 Main/aux. feedwater Nonessential/
essential
9 P-9 SG blowdown Nonessential
10 P-10 SG blowdown Nonessential
11 P-11 SG blowdown Nonessential
12 P-12 SG blowdown Nonessential
13 P-13 Containment recirc- Essential
ulation sump suction
pump
14 P-14 Containment recirc- Essential
ulation sump suction
to RHR pump
15 P-15 Containment recirc- Essential
ulation sump suc-
tion to RHR pump
16 P-16 Containment recirc- Essential
ulation sump suction
pump
17 P-21 RHR hot leg injection Essential
18 P-22 RCP-B seal water Essential
supply
19 P-23 CVCS letdown Nonessential
20 P-24 RCP seal water return Nonessential Rev. 0 WOLF CREEK TABLE 18.2-2 (Sheet 2)
Fig. 6.2.4-1, Essential/
Sheet Penetration Service Nonessential 21 P-25 Reactor makeup water Nonessential
supply
22 P-26 Reactor coolant drain Nonessential
tank discharge
23 P-27 RHR cold leg injection Essential
loops 3 and 4
24 P-28 ESW supply to contain- Essential
ment air coolers
25 P-29 ESW return from con- Essential
tainment air coolers
26 P-30 Instrument air supply Nonessential
27 P-32 Containment sump pump Nonessential
discharge
28 P-34 Containment ILRT test Nonessential
line
29 P-39 RCP-C seal water supply Essential
30 P-40 RCP-D seal water supply Essential
31 P-41 RCP-A seal water supply Essential
32 P-43 Auxiliary steam supply - Nonessential
decontamination
33 P-44 Reactor coolant drain Nonessential
tank vent
34 P-45 Accumulator nitrogen Nonessential
supply
35 P-48 SI pump-B, discharge to Essential
hot legs 1 and 4
36 P-49 SI pumps to cold legs Essential
1, 2, 3, and 4
37 P-51 ILRT pressure sensing Nonessential
lines
38 P-52 RHR shutdown suction Essential
39 P-53 Fuel pool cooling and Nonessential
cleanup, refueling pool
supply
40 P-54 Fuel pool cooling and Nonessential
cleanup, refueling pool
suction
41 P-55 Fuel pool cooling and Nonessential
cleanup, refueling pool
skimmer suction Rev. 0 WOLF CREEK TABLE 18.2-2 (Sheet 3)
Fig. 6.2.4-1, Essential/
Sheet Penetration Service Nonessential 42 P-56 Post-LOCA hydrogen Essential
analyzer return
42a P-56 Containment Atmosphere Nonessential Monitor 42b P-57 Sample Return - Post Nonessential Accident Sampling System 43 P-58 Accumulator fill line Nonessential
from SI pump
43a P-59,91 RVLIS Sample Line Nonessential Reactor Coolant System 44 P-62 Pressurizer relief tank Nonessential
nitrogen supply
45 P-63 Service air supply Nonessential
45a P-64 RC loop and Pressurizer Nonessential liquid sample 46 P-65 Hydrogen purge Nonessential
47 P-66 Containment spray supply Essential
pump B
48 P-67 Fire protection supply Nonessential
49 P-69 Pressurizer vapor sample Nonessential
50 P-71 ESW supply to contain- Essential
ment air coolers
51 P-73 ESW return from contain- Essential
ment air coolers
52 P-74 CCW supply Essential
53 P-75 CCW return Essential
54 P-76 CCW return RCP thermal Essential
barrier
55 P-78 S.G. drain Nonessential
56 P-79 RHR shutdown suction Essential
57 P-80 CVCS charging Nonessential
58 P-82 RHR discharge to hot Essential
legs loops 1 and 2
59 P-83 S.G. D sample Nonessential
60 P-84 S.G. A sample Nonessential
61 P-85 S.G. B sample Nonessential
62 P-86 S.G. C sample Nonessential
63 P-87 SI pump A discharge to Essential
hot legs loops 2 and 3
64 P-88 Boron injection supply Essential
to cold legs loops 1, 2, 3, and 4
65 P-89 Containment spray supply Essential
pump A
66 P-92 ECCS test line return Nonessential
67 P-93 R.C. loop Nonessential liquid samples 68 P-95 Accumulator tank sample Nonessential Rev. 15 WOLF CREEK TABLE 18.2-2 (Sheet 4)
Fig. 6.2.4-1, Essential/
Sheet Penetration Service Nonessential 69 P-97 Post-LOCA hydrogen Essential
analyzer return
69a P-97 Sample Return - Nonessential Containment Atmosphere Monitor 69b P-98 Breathing Air Supply Nonessential 70 P-99 Post-LOCA hydrogen Essential
analyzer supply
70a P-99 Sample Line - Nonessential Containment Atmosphere Monitor 71 P-101 Post-LOCA hydrogen Essential
analyzer supply
71a P-101 Sample Line - Nonessential Containment Atmosphere Monitor 72 E-256 Containment pressure Essential
P-103/104 sensing monitors
73 V-160 Containment purge Nonessential
exhaust
74 V-161 Containment purge Nonessential
supply Rev. 15 WOLF CREEK TABLE 18.2-3
DETAILS FOR THE THERMOCOUPLE/CORE COOLING MONITOR SYSTEM
Display Information Displayed (T-Tsat, Tsat, P-Psat subcooled-Press, etc.) T-Tsat - superheated Display Type (analog, digital, CRT) Analog (control board) and digital (electronics
package)
Continuous or on Demand Continuous (control board) and on
demand (electronics
package)
Single or Redundant Display Redundant
Location of Display Control board and control room Alarms (include set points) Caution: 5°F subcooled Alarm: 0°F subcooled
Overall uncertainty Digital: 3°F for RTD
Analog: 5°F for RTD
Range of Display Calibrated: 200°F subcooled to
2000°F
superheat
Overall: Never off
scale Qualifications (seismic, environ- Seismic and environmental mental)
Rev. 10 WOLF CREEK TABLE 18.2-3 (Sheet 2)
Calculator Type (process computer, dedicated Dedicated digital digital or analog calc.)
If process computer is used specify NA availability (percent of time)
Single or redundant calculators Redundant
Selection Logic (highest T., Auctioneered high hot lowest press) leg RTD. Auctioneered
low reactor coolant
pressure Qualifications (seismic, environ- Seismic and environmental mental)
Calculational Technical (steam Functional fit - ambient tables, functional fit, ranges) to critical point Input Temperature (RTDs or T/Cs) RTDs, T/Cs, and Tref
Temperature (number of sensors RTDs - 2 hot leg and 2 and locations) cold leg/channel
T/Cs - 25 per channelRange of temperature sensorsRTDs 700°F T/Cs 2300°F
Calibration unit
range 2300°F Uncertainty* of temperature sensors See WCAP 8587
Qualifications (seismic, environ- Seismic and environ-mental) mental as classified in
Section 18.2.13.2 Rev. 0 WOLF CREEK TABLE 18.2-3 (Sheet 3)
Pressure (specify instrument used) Qualified Pressure Transmitter Pressure (number of sensors and 1 wide range - RCS loop locations) 2 narrow range - pres-
surizer Range of pressure sensors Wide range 0-3000 psi narrow range 1700-2500
psi Uncertainty* of pressure sensors See WCAP 8587
Qualifications (seismic, environ- Seismic and environmental mental)
- Uncertainties must address conditions of forced flow and natural circulation.
Rev. 0 WOLF CREEK TABLE 18.2-4 NARROW RANGE MEASUREMENT UNCERTAINTY FOR
REACTOR VESSEL LEVEL INSTRUMENTATION SYSTEM Uncertainty Component and Uncertainty Definition Level, percent
- a. Differential pressure transmitter +2.1 calibration and drift allowance
(+1.5 percent of span) multiplied
by the ratio of ambient to
operating water density.
- b. Differential pressure transmitter +0.7 allowance for change in calibration due to ambient temperature change
(+0.5 percent of span for +50°F) multiplied by the density ratio.
- c. Differential pressure transmitter +0.34 allowance for change in calibration due to change in system pressure
(+0.2 percent of span per 1000 psi change) multiplied by the density
ratio.
- d. Differential pressure transmitter +0.7 allowance for change in calibration due to exposure to long-term
overrange (+0.5 percent of span) multiplied by the density ratio.
- e. Reference leg temperature instrument +0.64 (RTD) uncertainty of +5°F and/or allowance of +5°F for the difference between the measurement and the true average temperature of
the reference leg, applied to each
vertical section of the reference
leg where a measurement is made.
Stated uncertainty is based on a
maximum containment temperature of
420°F, and a typical reference leg
installation.
Rev. 0 WOLF CREEK TABLE 18.2-4 (Sheet 2)
Uncertainty Component and Uncertainty Definition Level, percent
- f. Reactor coolant density based on +
2.3 auctioneering for highest water
density obtained from hot leg
temperature (+
6 F) or system pressure (+6 psi). Magnitude of
uncertainty varies with system
pressure and water level, with
largest uncertainty occurring when
the reactor vessel is full.
- g. Sensor and hydraulic isolator bellows +
1.46 displacements due to system pressure
changes or reference leg temperature
changes will introduce minor errors
in the level measurement due to the
small volumes and small bellows
spring constants. The changes, such
as pressure or temperature, tend to
cancel; i.e., the bellows associated
with each measurement move in the
same direction. Maximum expected
error due to differences in
capillary line volume and local
temperatures is equivalent to a
level change of about 5 inches, multiplied by the density ratio.
- h. Density function generator output +
0.50 mismatch with ASME Steam Tables
limited to this maximum.
- i. Overall uncertainty of electronics +
1.0 system calibration is limited to
less than this amount.
- j. Control board indicator resolution. +
0.5 Rev 0 REACTOR VESSEL HEAD WOLP CREBK: TO CONTAINMENT NOTES: AREA OF CHANGE 1. EXISTING VENT LINE REV. 19 WOLP CRBBX. UPDATED SAPETY ANALYSIS RBPORT FIGURE 18.2-1 REACTOR HEAD VENT SYSTEM ' L _______________________________________________________________
l
- i WOLF CREEK ---------i-@
REV. 4 I r-e i ,----'-::,.::.:OL""r"""c""ao""'B,..K
..l e UP't)A.1'f.:D SAFET'f ARAL18IS RI:POR'I' FIGURE 18.2-2 POST-ACCTOE,,T RADIATION ZoN(S [LEYITION 1974' I'A)LF CREEK ----------
PARTIAL FUr:R 1\.AN & EL r9SBlU'
..... 0 --*--L- F!BURE 18.2*3 RADIATlDH ZONES EUVHIOM 1988' WOLF CREEK POST-ACCIDENT RADIATION ZONES 0 ElEVATIO.'Il 2000' mLF. CREEK i 1: ' :,. . -.1 ::* -t*l :.10 -*. . .,. j@ 0 er :;I l==-f!i=:q. ! j Jln. 0 Posr-Accro£NT RAour lOti ZoNes ElEVATION 20'17'*6" -,-e WOLF CREEK M-OG050 tlt'*r -----------------
**--* -*--**--*-*-----'t tZ::Zi!l !!loKI< WALL t:3J cor-'STAUCTION OPENING I ""' '::...;/ D'*lr -... "'. *-........--
--*--*-* -I , ,JC-f Rev. 0 FIGURE 18.2-7 POST-ACCIDENT RADIATION ZONES CONTROL BLDG. AND COMMUNICATION CORRIDOR ELEVATIONS 1974' AND 1984 I WOLF CREEK Rev. 0 WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-8 POST-ACCIDENT RADIATION ZONES CONTROL AND DIESEL GENERATOR BUILDINGS AND COMMUNICATION CORRIDOR 2000' AND . ::>t j 1 hI CREEK
- 30 -Day Average Rev. 0 . I C. J .... -r*
- I __ , WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-9 POST ACCIDENT RADIATION ZONES CONTROL & DIESEL GENERATOR BUILDINGS AND COMMUNICATION CORRIDOR ELEVATIONS f f-"
tl>LF CREEK 1 o*1 1 oO 1 o 1 1 o 2 1 Q 3 1 o 4 TIME (HOURS) Rev. o WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-10 NORMALIZED DOSE RATE DECAY CURVE FOR AIRBORNE SOURCE (SOURCE A) w *t-c( a: w en 0 0 0 a: I \'l>LF CREEK 100 I 0 II w 10" 1 w 0 a: 0 en rJ) 0 1-z 10-2 w 0 a: w 0.. -...... w w en . o 1o*? 0 I 10-4 LEGEND: 1 PERCENT Cs SOURCE ----50 PERCENT Cs SOURCE TIME (HOURS) Rev. 0 WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-11 NORMALIZED DOSE RATE DECAY CURVES FOR SUMP SOURCE (SOURCE C) WITH 1 PERCENT Cs AND 50 PERCENT Cs REFERENCE JUNCTION BOX RTDS nala T/cs* nals WOLFCREEK Clasa Non -Clasa 1E I I
- 1E Aunnunciator Outputs L------1 TC/CCt.t CONSOLE RS422 ISOLATOR PLANT COMPUTER Two T-hot Temp Signals ------...1 Two T -c:old Temp Signals -----....1
'-----1 P1-------1 1----r----, P2 and P3------I.
____ .J-, TRAINA TRAIN B REFERENCE JUNCTION BOX RTOS nals TIC nals AunnunciatOr Outputs TC/CCM CONSOLE REMOTE DISPLAY ANALOG METER BLACK BOX RECORDER RS422 ISOLATOR I I I I I I I
I I I PLANT COMPUTER Two T-hot Temp Signals _____ __, Two T -cold Temp Signals ------1 P1-----__, 1---t------, REMOTE DISPLAY P2 and P3-----.....,L
___ _J.-, I I I I ANALOG METER Class I Non -Class 1E I I 1E Notes: 1. P1 is a wide range loop presaura 2. P2 and P3 are narrow range pressurizer pressures.
- 3.
for TIC Is shown belciw. Type K extension Wire size Is 22 AWG chromai18Jumel wlra.
BLACK BOX RECORDER I I I I I WOLFCREEK REV.28 UPDATE SAFETY ANALYSIS REPORT Figure 18.2-12 Functional Diagram ( Reactor Core Subcooling Manito.,
SPARE HEAD PENETRATION OUTLET MOVABLE DETECTOR CONDUIT TRAIN A WOLF CREEK Rev. 0 OUTLET. WIDE RANGE TRAIN B \ NARROW RANGE WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-13 REACTOR VESSEL LEVEL INSTRUMENTATION SYSTEM 100* 90* 80* 70 "#. 60-a: w 3: 0 G. 50 a: 0 1-(J I <( w 40 a: 30 20 10* BOL CR.E£K NO PORV ACTUATION (REACTOR TRIP DUE TO P-9) PORV ACTUATED NO PORV ACTUATION (SPRAY ADEQUATE TO CONTROL OVERPRESSURE)
MOL CORE HISTORY Rev. 0 EOL WOLF CREEK UPDATED SAFETY ANALYSIS REPORT FIGURE 18.2-14 PORV OPENING BAND -TURBINE TRIP WITH CONDENSER UNAVAILABLE WOLF CREEK 18.3 EMERGENCY PREPARATIONS AND RADIATION PROTECTION
18.3.1 UPGRADE EMERGENCY PREPAREDNESS (III.A.1.1)
18.3.1.1 NRC Guidance per NUREG-0694
Position
Provide an emergency response plan in substantial compliance with NUREG-0654, "Criteria for Preparation and Evaluation of Radiological Emergency Response
Plans and Preparedness in Support of Nuclear Power Plants," except that only a
description of and completion schedule for the means for providing prompt
notification to the population (App. 3), the staffing for emergencies in
addition to that already required (Table B.1), and an upgraded meteorological
program (App. 2) need be provided. NRC will give substantial weight to Federal
Emergency Management Agency (FEMA) findings on offsite plans in judging the
adequacy against NUREG-0654. Perform an emergency response exercise to test
the integrated capability and a major portion of the basic elements existing
within emergency preparedness plans and organizations. This requirement shall
be met before issuance of a full-power license.
18.3.1.2 The Operating Agent Response
The Operating Agent has prepared and filed with the NRC on April 7, 1981 the "Radiological Emergency Response Plan for the Wolf Creek Generating Station."
This plan and subsequent revisions were prepared to meet the requirements of 10
CFR Part 50, Section 50.47 and Appendix E. The plan has been prepared with
consideration given to additional NRC emergency planning guidance presented in
NUREG-0654. Compliance with NRC requirements has been addressed in Supplement
6 to the WCGS Safety Evaluation Report, NUREG-0881.
18.3.1.3 Conclusion
The Operating Agent has provided the NRC documentation relative to the
emergency planning activities at WCGS which satisfies the requirements of 10
CFR Part 50, Section 50.47 and Appendix E, and the supplementary NRC guidance
in NUREG-0694.
18.3.2 UPGRADE EMERGENCY SUPPORT FACILITIES (III.A.1.2)
18.3.2.1 NRC Guidance Per NUREG-0578 and NUREG-0694
(A) ONSITE TECHNICAL SUPPORT CENTER (NUREG-0578, ITEM 2.2.2.b)
(See Section 18.4 for Updated Information)
18.3-1 Rev. 28 WOLF CREEK Position Each operating nuclear power plant shall maintain an onsite Technical Support Center (TSC) separate from and in close proximity to the control room that has the capability to display and transmit plant status to those individuals who are knowledgeable of and responsible for engineering and management support of reactor operations in the event of an accident. The center shall be habitable to the same degree as the control room for postulated accident conditions. The licensee shall revise his emergency plans as necessary to incorporate the role
and location of the technical support center. Records that pertain to the as-
built conditions and layout of structures, systems, and components shall be
readily available to personnel in the TSC.
Clarification (NRC Letter dated November 9, 1979)
- 1. By January 1, 1980, each licensee should meet items a-g that follow. Each licensee is encouraged to provide additional
upgrading of the TSC (items b-g) as soon as practical, but no later than January 1, 1981.
- a. Establish a TSC and provide a complete description.
- b. Provide plans and procedures for engineering/ management support and staffing of the TSC.
- c. Install dedicated communications between the TSC and the control room, near-site emergency operations center, and the
NRC.
- d. Provide monitoring (either portable or permanent) for both direct radiation and airborne radioactive contaminants. The
monitors should provide warning if the radiation levels in
the support center are reaching potentially dangerous
levels. The licensee should designate action levels to
define when protective measures should be taken (such as
using breathing apparatus and potassium iodide tablets or
evacuation to the control room).
- e. Assimilate or ensure access to technical data, including the licensee's best effort to have direct display of plant parameters necessary for assessment in the TSC.
- f. Develop procedures for performing this accident assessment function from the control room should the TSC become uninhabitable.
18.3-2 Rev. 0 WOLF CREEK
- g. Submit to the NRC a longer range plan for upgrading the TSC to meet all requirements.
- 2. Location It is recommended that the TSC be located in close proximity to the control room to ease communications and access to technical information during an emergency. The center should be located
onsite, i.e., within the plant security boundary. The greater the distance from the control room, the more sophisticated and complete should be the communications and availability of technical information. Consideration should be given to providing key TSC personnel with a means for gaining access to the control room.
- 3. Physical Size and Staffing The TSC should be large enough to house 25 persons, necessary engineering data, and information displays (TV monitors, recorders, etc.). Each licensee should specify staffing levels and disciplines reporting to the TSC for emergencies of varying severity.
- 4. Activation The center should be activated in accordance with the "Alert" level as defined in the NRC document "Draft Emergency Action
Level Guidelines, NUREG-0610" dated September 1979, and
currently out for public comment. Instrumentation in the TSC
should be capable of providing displays of vital plant parameters from the time the accident began (t = 0 defined as either reactor or turbine trip). The STA should be consulted on the "Notification of Unusual Event." However, the activation of the TSC is discretionary for that class of event.
- 5. Instrumentation The instrumentation to be located in the TSC need not meet safety-grade requirements but should be qualitatively comparable (as regards accuracy and reliability) to that in the control room. The TSC should have the capability to access and display plant parameters independent from actions in the
control room. Careful consideration should be given to the
design of the interface of the TSC instrumentation to ensure
that addition of the TSC will not result in any degradation of
the control room or other plant functions.
18.3-3 Rev. 0 WOLF CREEK
- 6. Instrumentation Power Supply The power supply to the TSC instrumentation need not meet safety-grade requirements, but should be reliable and of a quality compatible with the TSC instrumentation requirements.
To ensure continuity of information at the TSC, the power supply provided should be continuous once the TSC is activated. Consideration should be given to avoid loss of stored data (e.g., plant computer) due to momentary loss of power or switching transients. If the power supply is provided
from a plant safety-related power source, careful attention should be given to ensure that the capability and reliability of the safety-related power source is not degraded as a result
of this modification.
- 7. Technical Data Each licensee should establish the technical data requirements for the TSC, keeping in mind the accident assessment function that has been established for those persons reporting to the TSC during an emergency. As a minimum, data (historical in addition to current status) should be available to permit the
assessment of:
- a. Plant Safety System Parameters for:
(2) Secondary System (PWRs)
(3) Emergency Core Cooling Systems (4) Feedwater and Makeup Systems (5) Containment
- b. Inplant Radiological Parameters for:
(2) Containment
(3) Effluent Treatment
(4) Release Paths 18.3-4 Rev. 0 WOLF CREEK
- c. Offsite Radiological for:
(1) Meteorology
(2) Offsite Radiation Levels
- 8. Data Transmission In addition to providing a data transmission link between the TSC and the control room, each licensee should review current
technology as regards transmission of those parameters
identified for TSC display. Although there is not a
requirement at the present time, each licensee should investigate the capability to transmit plant data offsite to
the Emergency Operations Center (EOC), the NRC, the reactor
vendor, etc.
- 9. Structural Integrity
- a. The TSC need not be designed to seismic Category I requirements. The center should be well built in accordance with sound engineering practice with due consideration to
the effects of natural phenomena that may occur at the site.
- b. Since the center need not be designed to the same stringent requirements as the control room, each licensee should
prepare a backup plan for responding to an emergency from the control room.
- 10. Habitability The licensee should provide protection for the TSC personnel from radiological hazards, including direct radiation and
airborne contaminants, as per General Design Criterion (GDC) 19
and SRP 6.4.
- a. Licensee should ensure that personnel inside the TSC will not receive doses in excess of those specified in GDC-19 and SRP 6.4 (i.e., 5 rem whole-body and 30 rem to the thyroid
for the duration of the accident). Major sources of radiation should be considered.
- b. Permanent monitoring systems should be provided to continuously indicate radiation dose rates and airborne
radioactivity concentrations inside the TSC. The monitoring
systems should include local alarms to warn personnel of adverse conditions.
18.3-5 Rev. 0 WOLF CREEK Procedures must be provided which will specify appropriate protective actions
to be taken in the event that high dose rates or airborne radioactive
concentrations exist.
- c. Permanent ventilation systems which include particulate and charcoal filters should be provided. The ventilation systems need not be qualified as ESF systems. The design and testing guidance of Regulatory Guide 1.52 should be followed, except that the systems do not have to be redundant, seismic, instrumented in the control room, or automatically activated. In addition, the HEPA filters need not be tested as specified in Regulatory Guide 1.52, and the HEPAs do not have to meet the QA requirements of Appendix B to 10 CFR 50. However, spare parts should be readily available and procedures in place for replacing failed components during an accident. The systems should be designed to operate from the emergency power supply.
- d. Dose reduction measures such as breathing apparatus and potassium iodide tablets cannot be used as a design basis for the TSC in lieu of ventilation systems with charcoal filters. However, potassium iodide and breathing apparatus should be available.
(B) ONSITE OPERATIONAL SUPPORT CENTER (NUREG-0578, Item 2.2.2.c)
Position
An area to be designated as the onsite Operational Support Center (OSC) shall
be established. It shall be separate from the control room and shall be the
place to which the operations support personnel will report in an emergency
situation. Communications with the control room shall be provided. The
emergency plan shall be revised to reflect the existence of the center and to
establish the methods and lines of communication and management.
(C) NEAR-SITE EMERGENCY OPERATION FACILITY (NUREG-0694)
(See Section 18.4 for Updated Information)
Position
Designate a near-site emergency operations facility with communications with
the plant to provide evaluation of radiation releases and coordination of all
onsite and offsite activities during an accident.
18.3-6 Rev. 28 WOLF CREEK Provide shielding against direct radiation, ventilation isolation capability, dedicated communications with the onsite Technical Support Center, and direct display of radiological and meteorological parameters.
18.3.2.2 The Operating Agent Response The Operating Agent prepared a detailed description of each emergency response facility: the onsite TSC, the onsite OSC, and the near-site EOF. This report
submitted by SNUPPS letter dated June 4, 1981, contains a complete functional
system description for each facility which describes the data acquisition display and transmittal systems selected for each facility. The report, in
addition, discusses the size, location, and habitability specifications to
which the facilities have been designed. The design of the emergency
facilities for WCGS has been prepared in consideration of the 10 CFR Part 50, Appendix E legal requirement and the guidance presented in NUREG-0696 and NUREG-0654.
NRC Generic Letter 82-33, dated December 17, 1982, provided guidance for meeting regulatory requirements for, among other issues, NUREG-0737, Item
III.A.1.2. Based on the NRC review of the response to Generic Letter 82-33 (SNUPPS letter dated April 15, 1983), a license condition was issued which
required that the TSC and EOF be operational prior to startup following the
first refueling outage at WCGS. As discussed in Supplement 4 to the WCGS
Safety Evaluation Report, the NRC will conduct a post-implementation appraisal
of WCGS Emergency Response Facilities.
18.3.2.3 Conclusion The functional description of each emergency response facility at WCGS filed with the NRC on June 1, 1981 detailed the means by which the Operating Agent
meets the appropriate NRC guidance.
18.3.3 IMPROVING LICENSEE EMERGENCY PREPAREDNESS -
LONG-TERM (III.A.2) 18.3.3.1 NRC Guidance Per NUREG-0737 Each nuclear facility shall upgrade its emergency plans to provide reasonable assurance that adequate protective measures can and will be taken in the event of a radiological emergency. Specific criteria to meet this requirement is delineated in NUREG-0654 (FEMA-REP-1), "Criteria for Preparation and Evaluation of Radiological Emergency Response Plans and Preparation in Support of Nuclear
Power Plants." 18.3-7 Rev. 2 WOLF CREEK Clarification In accordance with Task Action Plan Item III.A.1.1, "Upgrade Emergency Preparedness," each nuclear power facility was required to immediately upgrade its emergency plans with criteria provided October 10, 1979, as revised by NUREG-0654 (FEMA-REP-1, issued for interim use and comment, January 1980). New plans were submitted by January 1, 1980, using the October 10, 1979 criteria.
Reviews were started on the upgraded plans using NUREG-0654. Concomitant to these actions, amendments were developed to 10 CFR Part 50 and Appendix E to 10
CFR Part 50, to provide the long-term implementation requirements. These new
rules were issued in the Federal Register on August 19, 1980, with an effective
date of November 3, 1980. The revised rules delineate requirements for
emergency preparedness at nuclear reactor facilities.
NUREG-0654 (FEMA-REP-1), "Criteria for Preparation and Evaluation of Radiological Emergency Response Plans and Preparedness in Support of Nuclear Power Plants," provides detailed items to be included in the upgraded emergency
plans and, along with the revised rules, provides for meteorological criteria, means for providing for a prompt notification to the population, and the need
for emergency response facilities (see Item III.A.1.2 [of NUREG-0737]).
Implementation of the new rules levied the requirement for the licensee to provide procedures implementing the upgraded emergency plans to the NRC for
review. Publication of Revision 1 to NUREG-0654 (FEMA-REP-1) which incorporates
the many public comments received is expected in October 1980. This is the
document that will be used by the NRC and FEMA in their evaluation of emergency
plans submitted in accordance with the new NRC rules.
NUREG-0654, Revision 1; NUREG-0696, "Functional Criteria for Emergency Response Facilities;" and the amendments to 10 CFR Part 50 and Appendix E to 10 CFR Part
50 regarding emergency preparedness, provide more detailed criteria for emergency plans, design, and functional criteria for emergency response facilities and establishes firm dates for submission of upgraded emergency plans for installation of prompt notification systems. These revised criteria and rules supersede previous Commission guidance for the upgrading of emergency
preparedness at nuclear power facilities.
Revision 1 to NUREG-0654, "Criteria for Preparation and Evaluation of Radiological Emergency Response Plans and Preparedness in Support of Nuclear Power Plants," provides meteorological criteria to fulfill, in part, the standard that "Adequate methods, systems, and equipment for assessing and monitoring actual or potential offsite consequences of a radiological emergency condition are in 18.3-8 Rev. 0 WOLF CREEK use" (see 10 CFR 50.47). The position in Appendix 2 to NUREG-0654 outlines four essential elements that can be categorized into three functions:
measurements, assessment, and communications.
Proposed Revision 1 to Regulatory Guide 1.23, "Meteorological Measurements Programs in Support of Nuclear Power Plants," has been adopted to provide guidance criteria for the primary meteorological measurements program consisting of a primary system and secondary system(s) where necessary, and a backup system. Data collected from these systems are intended for use in the
assessment of the offsite consequences of a radiological emergency condition.
Appendix 2 to NUREG-0654 delineates two classes of assessment capabilities to provide input for the evaluation of offsite consequences of a radiological emergency condition. Both classes of capabilities provide input to decisions regarding emergency actions. The Class A capability should provide information to determine the necessity for notification, sheltering, evacuation, and, during the initial phase of a radiological emergency, making confirmatory
radiological measurements. The Class B capability should provide information regarding the placement of supplemental meteorological monitoring equipment, and the need to make additional confirmatory radiological measurements. The
Class B capability shall identify the areas of contaminated property and
foodstuff requiring protective measures and may also provide information to
determine the necessity for sheltering and evacuation.
Proposed Revision 1 to Regulatory Guide 1.23 outlines the set of meteorological measurements that should be accessible from a system that can be interrogated; the meteorological data should be presented in the prescribed format. The
results of the assessments should be accessible from this system; this information should incorporate human-factors engineering in its display to convey the essential information to the initial decision makers and subsequent management team. An integrated system should allow the eventual incorporation
of effluent monitoring and radiological monitoring information with the environmental transport to provide direct dose consequence assessments.
Requirements of the new emergency-preparedness rules under Paragraphs 50.47 and 50.54 and the revised Appendix E to Part 50 taken together with NUREG-0654
Revision 1 and NUREG-0696, when approved for issuance, go beyond the previous
requirements for meteorological programs. To provide a realistic time frame
for implementation, a staged schedule has been established with compensating
actions provided for interim measures.
18.3-9 Rev. 0 WOLF CREEK 18.3.3.2 The Operating Agent Response See Section 18.3.1.2.
18.3.3.3 Conclusion See Section 18.3.1.3.
18.3.4 INTEGRITY OF SYSTEMS OUTSIDE OF CONTAINMENT (III.D.1.1) 18.3.4.1 NRC Guidance Per NUREG-0737 Position Applicants shall implement a program to reduce leakage from systems outside containment that would or could contain highly radioactive fluids during a serious transient or accident to as-low-as-practical levels. This program
shall include the following:
- 1. Immediate leak reduction
- a. Implement all practical leak reduction measures for all systems that could carry radioactive fluid outside of
containment.
- b. Measure actual leakage rates with system in operation and report them to the NRC.
- 2. Continuing Leak Reduction -- Establish and implement a program of preventive maintenance to reduce leakage to as-low-as-practical levels. This program shall include periodic
integrated leak tests at intervals not to exceed each
refueling cycle.
Clarification Applicants shall provide a summary description, together with initial leak-test results, of their program to reduce leakage from systems outside the
containment that would or could contain primary coolant or other highly
radioactive fluids or gases during or following a serious transient or
accident. 1. Systems that should be leak tested are as follows (any other plant system which has similar functions or postaccident characteristics, even though not specified herein, should be
included): 18.3-10 Rev. 0 WOLF CREEK Residual heat removal (RHR)
Containment spray recirculation
High-pressure injection recirculation
Containment and primary coolant sampling
Reactor core isolation cooling
Makeup and letdown (PWRs only)
Waste gas (includes headers and cover gas system outside of the
containment in addition to decay or storage system)
Include a list of systems containing radioactive materials
which are excluded from program and provide justification for
exclusion.
- 2. Testing of gaseous systems should include helium leak
detection or equivalent testing methods.
- 3. Should consider program to reduce leakage potential release
paths due to design and operator deficiencies as discussed in
our letter to all operating nuclear power plants regarding
North Anna and related incidents dated October 17, 1979.
18.3.4.2 The Operating Agent Response
This defines the operating agent's program to reduce leakage from those
portions of systems outside containment that could contain highly radioactive
fluids during a serious transient or accident to as low as practical levels.
The systems considered include the recirculation portion of the containment
spray system, safety injection system, chemical and volume control system,and residual heat removal system. The program is as follows:
- 1. General Practical Leak Reduction Measures
Operations, via their normal duties and responsibilities, perform routine rounds in the auxiliary and radwaste buildings. These help
assure the integrity of systems which routinely contain radioactive
fluids or gases. Identification of leakage and initiation of
appropriate corrective is one of the objectives of routine operator
rounds, consistent with keeping occupational and routine releases
as low as reasonable achievable.
Maintenance, as directed by the corrective action program, performs repair/rework on all components as needed to correct leaks.
18.3-11 Rev. 29 WOLF CREEK 2. Periodic Visual Inspection
In accordance with administrative procedures, Operations performs a periodic visual inspection, on a refueling cycle basis, of the
recirculation portion of the containment spray system, safety
injection system, chemical and volume control system and residual
heat removal system. These procedures require measurement of leakage rates and initiation of corrective action for any and all
detectable leaks.
- 3. Additional Programs Resulting in Detection and Reduction of Leakage
WCNOC has a Managed Maintenance Program, which includes preventive maintenance activities based on experience, engineering judgment, inspection, testing and replacement of items which have a specific
lifetime such as wear rings, bearings, seals, and packing.
WCNOC is also committed to ASME Section XI Inservice Inspection Program using the ASME Code.
A description of the WCGS program is documented in KMLNRC 84-46, dated March
30, 1984. Amendment No. 137 eliminated the requirements for PASS. The PASS
system has been abandoned in place.
18.3.4.3 Conclusion
The WCGS design includes provisions to insure the integrity of fluids systems
which are postulated to contain highly contaminated fluids following a design
basis accident. The provision is based on the preservice and inservice tests
required by the ASME Code and programmatic controls implemented by the
Operating Agent. These provisions provide assurance that these systems perform
their intended functions, including leaktightness, following a design basis
accident. This commitment satisfies Item III.D.1.1 of NUREG-0737 and Amendment
No. 137.
18.3.5 IMPROVED INPLANT IODINE INSTRUMENTATION UNDER ACCIDENT
CONDITIONS (III.D.3.3)
18.3.5.1 NRC Guidance Per NUREG-0737
Position
- a. Each licensee shall provide equipment and associated training
and procedures for accurately determining the airborne iodine
concentration in areas within the facility where plant
personnel may be present during an accident.
18.3-12 Rev. 29 WOLF CREEK
- b. Each applicant for a fuel-loading license to be issued prior to January 1, 1981 shall provide the equipment, training, and procedures necessary to accurately determine the presence of airborne radioiodine in areas within the plant where plant personnel may be present during an accident.
Clarification
Effective monitoring of increasing iodine levels in the buildings under accident conditions must include the use of portable instruments using sample
media that will collect iodine selectively over xenon (e.g., silver zeolite)
for the following reasons:
- a. The physical size of the auxiliary and/or fuel handling building precludes locating stationary monitoring instrumentation at all areas where airborne iodine concentration data might be required.
- b. Unanticipated isolated "hot spots" may occur in locations where no stationary monitoring instrumentation is located.
- c. Unexpectedly high background radiation levels near stationary monitoring instrumentation after an accident may interfere
with filter radiation readings.
- d. The time required to retrieve samples after an accident may result in high personnel exposures if these filters are
located in high-dose-rate areas.
After January 1, 1981, each applicant and licensee shall have the capability to remove the sampling cartridge to a low-background, low-contamination area for further analysis. Normally, counting rooms in auxiliary buildings will not
have sufficiently low backgrounds for such analyses following an accident. In
the low background area, the sample should first be purged of any entrapped
noble gases using nitrogen gas or clean air free of noble gases. The licensee
shall have the capability to measure accurately the iodine concentrations
present on these samples under accident conditions. There should be sufficient
samplers to sample all vital areas.
For applicants with fuel-loading dates prior to January 1, 1981, provide by fuel loading (until January 1, 1981) the capability to accurately detect the presence of iodine in the region of interest following an accident. This can be accomplished by using a portable or cart-mounted iodine sampler with attached single-channel analyzer (SCA). The SCA window should be calibrated to the 365 KeV of iodine-131, using the SCA. This will give an initial conservative estimate of presence of iodine and can be used to determine if
respiratory protection is required. Care must be taken to assure that the counting system is not saturated as a result of too much activity collected on
the sampling cartridge. 18.3-13 Rev. 12 WOLF CREEK 18.3.5.2 The Operating Agent Response The Operating Agent provides iodine monitoring capability as specified in the following paragraphs.
During accident conditions, sampling cartridges removed from air samplers will be purged with air or nitrogen to remove noble gases. Purging will be done under an appropriate ventilation hood. Cartridges will then be taken to the counting room for isotopic analysis using a high purity Germanium detector and a multichannel analyzer to accurately determine the radioiodine concentrations.
If, due to the accident conditions, the normal counting room is unavailable or
unaccessible, an alternate low background counting room in the shop building
will be used.
Depending upon the conditions at the time of sampling, the sample media may be charcoal or silver zeolite cartridges. The appropriate sample media will be determined on the basis of sampling environment and the efficiency of the media for collection of radiohalogens, particulates and noble gases.
Procedures are based on specific equipment purchased by the Operating Agent. A training program has been developed and includes the review of procedures and
demonstration of methods by personnel responsible for air sample collection, preparation and counting/analysis to assure proficiency in determining
radioiodine concentrations during accident and post-accident conditions.
18.3.5.3 Conclusion See Section 18.3.1.3.
18.3.6 CONTROL ROOM HABITABILITY (III.D.3.4)
18.3.6.1 NRC Guidance Per NUREG-0737 In accordance with Task Action Plan Item III.D.3.4 and control room habitability, licensees shall ensure that control room operators will be adequately protected against the effects of accidental release of toxic and
radioactive gases and that the nuclear power plant can be safely operated or shut down under design basis accident conditions (Criterion 19, "Control Room," of Appendix A, "General Design Criteria for Nuclear Power Plants," to 10 CFR Part 50).
Clarification
- 1. All licensees must make a submittal to the NRC regardless of whether or not they met the criteria of the referenced Standard Review Plans (SRP) sections. The new clarification specifies that licensees that meet the criteria of the SRPs should provide the basis for their conclusion that SRP 6.4 requirements are met. Licensees may establish this basis by
referencing past submittals to the NRC and/or providing new or additional information to supplement past submittals.
- 2. All licensees with control rooms that meet the criteria of the following sections of the Standard Review Plan:
2.2.1-2.2.2 Identification of Potential Hazards in Site Vicinity, 2.2.3 Evaluation of Potential Accidents, and
6.4 Habitability System 18.3-14 Rev. 12 WOLF CREEK shall report their findings regarding the specific SRP sections as explained below. The following documents should be used for guidance:
- a. Regulatory Guide 1.78, "Assumptions for Evaluating the habitability of a Nuclear Power Plant Control Room During a Postulated Hazardous Chemical Release;" b. Regulatory Guide 1.95, "Protection of Nuclear Power Plant Control Room Operators Against an Accidental Chlorine
Release;" and, c. K. G. Murphy and K. M. Campe, "Nuclear Power Plant Control Room Ventilation System Design for Meeting General Design Criterion 19," 13th AEC Air Cleaning Conference, August 1974.
Licensees shall submit the results of their findings as well as the basis for those findings by January 1, 1981. In providing the basis for the habitability finding, licensees may reference
their past submittals. Licensees should, however, ensure
that these submittals reflect the current facility design and that the information requested in Attachment 1, to NUREG-0737, item III.D.3.4 is
provided.
- 3. All licensees with control rooms that do not meet the criteria of the above-listed references, Standard Review
Plans, Regulatory Guides, and other references.
These licensees shall perform the necessary evaluations and identify appropriate modifications.
Each licensee submittal shall include the results of the analyses of control room concentrations from postulated accidental release of toxic gases and
control room operator radiation exposures from airborne radioactive material
and direct radiation resulting from design-basis accidents. The toxic gas
accident analysis should be performed for all potential hazardous chemical releases occurring either on the site or within 5 miles of the plant-site boundary. Regulatory Guide 1.78 lists the chemicals most commonly encountered in the evaluation of control room habitability but is not all inclusive.
The design-basis-accident (DBA) radiation source term should be for the loss-of-coolant accident (LOCA) containment leakage and engineered safety feature (ESF) leakage contribution outside the containment, as described in Appendix A and B of Standard Review Plan Chapter 15.6.5. In addition, boiling-water
reactor (BWR) facility evaluations should add any leakage from the main steam isolation valves (MSIV) (i.e., valve-stem leakage, valve seat leakage, main
steam isolation valve leakage control system release) to the containment
leakage and ESF leakage following a LOCA. This should not be construed as
altering the staff recommendations in Section D of Regulatory Guide 1.96 (Rev.
determine whether they might constitute a more-severe control room hazard than the LOCA. 18.3-15 Rev. 12 WOLF CREEK In addition to the accident-analysis results, which should either identify the possible need for control room modifications or provide assurance that the
habitability systems will operate under all postulated conditions to permit the
control room operators to remain in the control room to take appropriate
actions required by General Design Criterion 19, the licensee should submit
sufficient information needed for an independent evaluation of the adequacy of
the habitability systems. Attachment 1 lists the information that should be
provided along with the licensee's evaluation.
18.3.6.2 The Operating Agent Response The safety design bases for the habitability system for the control room are defined in Section 6.4. This section also discusses the applicable
recommendations of Regulatory Guides 1.78, and 1.95. The results of dose
calculations for a design basis loss-of-coolant accident release are presented
in Section 15.6.5 and 15A.3.
The design of the habitability system for the control room envelope meets the appropriate recommendations of Regulatory Guide 1.78 and 1.95 and requirements
of GDC-19.
18.3.6.3 Conclusion The design of the control room habitability system meets the recommendations of item III.D.3.4 of NUREG-0737.
18.3-16 Rev. 28 WOLF CREEK 18.4 ENHANCEMENTS TO EMERGENCY PREPAREDNESS REGULATIONS 18.4.1 EMERGENCY FACILITIES AND EQUIPMENT 18.4.1.1 10CFR50, Appendix E, Section IV, E Position The NRC updated 10CFR50, Appendix E, Section IV, E, in 2011 providing revised requirements for emergency facilities and associated equipment.
18.4.1.2 The Operating Agent Compliance for EOF and Alternate TSC The Operating Agent has constructed an off-site Emergency Operations Facility and Alternate Technical Support Center (TSC) whuch replaces previously existing facilities in compliance with 10CFR50, Appendix E, Section IV, E.
The building facility is located approximately 11 miles northwest of the plant and approximately 1/4 mile southwest of te intersection fo US Highway 75 and Interstate 35 (locally referred as BETO Junction). This building facility and its operation are intended to fully meet the requirements of the applicable regulations. Details of te facility are provided in the comprehensive emergency plan and applicable site procedures. The facility was declared operational prior to December 23, 2014, as required.
18.4.1.3 Conclusion The Operating Agent has established an operational off-site EOF and Alternate TSC which meets requirements of the applicable regulations.
18.4-1 Rev. 28 Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-1 Rev. 29 License Renewal Application A0 APPENDIX A INTRODUCTION AND LICENSE RENEWAL COMMITMENTS Introduction This appendix provides the information submitted in an Updated Safety Analysis Report Supplement as required by 10 CFR 54.21(d) for the WCGS License Renewal application. Section A1 of this appendix contains summary descriptions of the programs used to manage the effects of aging during the period of extended operation. Section A2 contains summary descriptions of programs used for management of time-limited aging analyses during the period of extended operation.
Section A3 contains evaluation summaries of Time Limited Aging Analyses (TLAAs) for the period of extended operation.
During the review of the WCGS Unit 1 license renewal application (LRA) by the staff of the NRC, WCNOC made commitments related to aging management programs to manage aging effects for structures and components. The following pages list these commitments.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-2 Rev. 29 License Renewal Application A1
SUMMARY
DESCRIPTIONS OF AGING MANAGEMENT PROGRAMS The integrated plant assessment and evaluation of time-limited aging analyses (TLAA) identified existing and new aging management programs necessary to provide reasonable assurance that components within the scope of License Renewal will continue to perform their intended functions consistent with the current licensing basis (CLB)
for the period of extended operation. Sections A1 and A2 describe the programs and their implementation activities. Three elements common to all aging management programs discussed in Sections A1 and A2 are corrective actions, confirmation process, and administrative controls. These elements are included in the WCNOC Quality Assurance (QA) Program, which implements the requirements of 10 CFR 50, Appendix B and are applicable to the safety-related and nonsafety-related systems, structures and components that are
subject to aging management review activities. A1.1 ASME SECTION XI INSERVICE INSPECTION, SUBSECTIONS IWB, IWC, AND IWD ASME Section XI Inservice Inspection, Subsections IWB, IWC, & IWD inspections are performed to manage aging in Class 1, 2, and 3 piping and components within the scope of license renewal. The
program includes periodic visual, surface, volumetric examinations and leakage tests of Class 1, 2 and 3 pressure-retaining components, including welds, pump casings, valve bodies, integral attachments, and pressure-retaining bolting. WCGS inspections meet ASME Section XI requirements and can manage aging such as cracking, surface and subsurface discontinuities, loss of material, loss of fracture
toughness, and physical damage. The WCGS ISI Program is in accordance with 10 CFR 50.55a and ASME Section XI, 1998 edition through 2000 addenda. A1.2 WATER CHEMISTRY The Water Chemistry program includes maintenance of the chemical environment in the reactor coolant system and related auxiliary systems containing treated borated water and includes maintenance of the chemical environment in the steam generator secondary side and the secondary cycle systems to limit loss of material and cracking.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-3 Rev. 29 License Renewal Application The Water Chemistry Program is based upon the EPRI primary and secondary water chemistry guidelines. A1.3 REACTOR HEAD CLOSURE STUDS The Reactor Head Closure Studs p rogram includes periodic visual, surface, and volumetric examinations of reactor vessel flange stud hole threads, reactor head closure studs, nuts, and washers and performs visual inspection of the reactor vessel flange closure during primary system leakage tests. The program implements ASME Section XI code, Subsection IWB, 1998 Edition through the 2000 addenda and detects reactor vessel stud, nut and washer cracking, loss of material due to wear and corrosion, and reactor coolant
leakage from the reactor vessel flange. A1.4 BORIC ACID CORROSION The Boric Acid Corrosion program manages loss of material due to boric acid corrosion. The program includes provisions to identify, inspect, examine and evaluate leakage, and initiate corrective actions. The program relies in part on implementation of recommendations of NRC Generic Letter 88-05, "Boric Acid Corrosion of Carbon Steel Reactor Pressure Boundary Components in PWR plants." Additionally, the program includes examinations conducted during ISI pressure tests performed in accordance with ASME Section XI requirements. The program addresses recent operating experience noted in NRC Regulatory Issue Summary 2003, "NRC Review of Responses to Bulletin 2002-01, "Reactor Pressure Vessel Head Degradation and
Reactor Coolant Pressure Boundary Integrity," (which includes NRC Bulletin 2002-01, 2002-02, and NRC Order EA-03-009). Prior to the period of extended operation, procedures will be enhanced to state that susceptible components adjacent to potential leakage sources will include electrical components and connectors. A1.5 NICKEL-ALLOY PENETRATION NOZZLES WELDED TO THE UPPER REACTOR VESSEL CLOSURE HEADS OF PRESSURIZED WATER REACTORS The Nickel-Alloy Penetration Nozzles Welded to the Upper Reactor Vessel Closure Heads of Pressurized Water Reactors program manages cracking due to primary water stress corrosion cracking and loss of Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-4 Rev. 29 License Renewal Application material due to boric acid wastage in nickel-alloy vessel head penetration nozzles and includes the reactor vessel closure head, upper vessel head penetration nozzles and associated welds. This program was developed in response to NRC Order EA-03-009 and was revised to comply with the requirements of ASME Code Case N-729-1
with conditions as published in 10CFR 50.55a. Detection of cracking is accomplished through implementation of a combination of bare metal visual examination (external surface of head) and non-visual examination (underside of head) techniques.
Procedures are developed to perform reactor vessel head bare metal inspections and calculations of the susceptibility ranking of the plant. Examinations are performed by Level II or III VT-2 certified personnel. Inspections completed to date have indicated no evidence of cracking in the vessel head penetration nozzles. Completed testing to date verifies that the inspection interval requirement is base metal visual inspections every third refueling outage or every
five years, which ever is less and volumetric inspections every 8 calendar years or before RIV = 2.25 whichever is less. Prior to the period of extended operation, procedures will be
enhanced to indicate that if flaws attributed to PWSCC have been identified, whether acceptable or not for continued service under Paragraphs - 3130 or 3140 of ASME Code Case N-729-1, the re-
inspection interval must be each refueling outage instead of the re-inspection intervals required by Table 1, Note (8) of ASME Code Case N-729-1, commencing from the same outage in which the flaw is
detected.
A1.6 Flow-Accelerated Corrosion
The Flow-Accelerated Corrosion (FAC) program manages aging effects of wall thinning due to FAC on the internal surfaces of carbon or
low alloy steel piping, elbows, reducers, expanders, and valve
bodies which contain high energy fluids (both single phase and two phases).
The objectives of the FAC program are achieved by (a) identifying system components susceptible to FAC, (b) an analysis using a predictive code such as CHECWORKS to determine critical locations for inspection and evaluation, (c) providing guidance of follow-up inspections, (d) repairing or replacing components, as determined by the guidance provided by the program, and (e) continual evaluation and incorporation of the latest technologies, industry and plant in-house operating experience.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-5 Rev. 29 License Renewal Application Procedures and methods used by the FAC program are consistent with WCGS commitments to NRC Bulletin 87-01, "Thinning of Pipe Wall in Nuclear Power Plants," and NRC Generic Letter 89-08, "Erosion/Corrosion-Induced Pipe Wall Thinning." A1.7 BOLTING INTEGRITY The Bolting Integrity program manages the aging effects of cracking, loss of material, and loss of preload for pressure retaining bolting and ASME component support bolting. The program includes preload control, selection of bolting material, use of lubricants/sealants consistent with EPRI good bolting practices, and performance of periodic inspections for indication of aging techniques. The program also includes the inservice inspection requirements established in
accordance with ASME Section XI, Subsections IWB, IWC, IWD, and IWF for ASME Class bolting. WCGS good bolting practices are established in accordance with plant procedures. These procedures include requirements for proper disassembling, inspecting, and assembling of connections with threaded fasteners. The general practices that are established in this program are consistent with EPRI NP-5067, "Good Bolting Practices, Volume 1 and Volume 2," and EPRI TR-104213, "Bolted Joint Maintenance and Applications Guide." A1.8 STEAM GENERATOR TUBE INTEGRITY The Steam Generator Tube Integrity program includes the preventive measures, condition monitoring inspections, degradation assessment, repair and leakage monitoring activities necessary to manage cracking and loss of material. The aging management measures employed include non-destructive examination, visual inspection, sludge removal, tube plugging, in-situ pressure testing, maintaining the chemistry environment by removal of impurities and addition of chemicals to control pH and oxygen. NDE inspection scope and frequency, and primary to secondary leak rate monitoring are conducted consistent with the requirements of WCGS Unit 1 Technical Specifications. Structural integrity limits
consistent with Regulatory Guide 1.121, Revision 0, "Bases for Plugging Degraded PWR Steam Generator Tubes," are applied. Steam generator management practices are consistent with NEI 97-06 "Steam Generator Program Guidelines". Program deviations from NEI 97-06 Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-6 Rev. 29 License Renewal Application are prepared and approved in accordance with NEI 97-06 and EPRI steam generator management program guidance. A1.9 OPEN-CYCLE COOLING WATER SYSTEM The Open-Cycle Cooling Water (OCCW) System program manages loss of material and reduction of heat transfer for components exposed to
raw water. The program includes chemical treatment and control of biofouling; heat exchanger performance testing; and periodic inspections to ensure that the effects of aging will be managed on the OCCW systems or structures and components serviced by the OCCW systems for the period of extended operation. The program is consistent with commitments as established in WCGS responses to NRC Generic Letter 89-13 "Service Water System Problems Affecting Safety-Related Components." The Open-Cycle Cooling Water System program provides the general requirements for implementation and maintenance of programs and activities which mitigate aging of OCCW systems and components. The various aspects of the WCGS program (control, monitoring, maintenance and inspections) are implemented in station procedures. A1.10 CLOSED-CYCLE COOLING WATER SYSTEM The Closed-Cycle Cooling Water System Program manages loss of material, cracking, and reduction in heat transfer for components in closed cycle cooling water systems. The program includes maintenance of system corrosion inhibitor concentrations and chemistry parameters following the guidance of EPRI TR-107396 to minimize aging, and periodic testing and inspections to evaluate system and component performance. Inspection methods include visual, ultrasonic testing (UT) and eddy current testing (ECT).
Prior to the period of extended operation, a new periodic preventive maintenance activity will be developed to specify performing inspections of the internal surfaces of valve bodies and accessible piping while the valves are disassembled for operational readiness
inspections to detect loss of material and fouling. The acceptance criteria will be specified in this preventive maintenance activity. In addition, visual inspection procedures used for identification of stress corrosion cracking will be enhanced to define cracking, provide additional guidance for detection of cracking and identify specific acceptance criteria relating to "as-found" cracking.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-7 Rev. 29 License Renewal Application A1.11 INSPECTION OF OVERHEAD HEAVY LOAD AND LIGHT LOAD (RELATED TO REFUELING) HANDLING SYSTEMS The Inspection of Overhead Heavy Load and Light Load (Related to Refueling) Handling Systems program manages the loss of material due to corrosion and the effects of rail wear for all cranes, trolley
structural components and applicable rails within the scope of license renewal. The program is implemented through periodic visual inspections of components. Crane inspection activities verify structural integrity of the crane components required to maintain the crane intended function. Visual inspections assess conditions such as loss of material due to corrosion of structural members, misalignment, flaking, side wear of rails, loose tie down bolts and excessive wear or deformation of monorails. The inspection requirements are consistent with the guidance provided by NUREG-0612, "Control of Heavy Loads at Nuclear Power Plants" for load handling systems that handle heavy loads which can directly or indirectly cause a release of radioactive material, applicable industry standards (such as CMAA Spec 70 and ANSI B30.11) for other cranes within the scope of license renewal, and applicable OSHA regulations (such as 29 CFR Volume XVII, Part 1910 and Section 1910.179). Prior to the period of extended operation, procedures will be enhanced to identify industry standards or WCGS specifications that are applicable to the component and to specifically inspect for loss of material due to corrosion or rail wear. A1.12 FIRE PROTECTION The Fire Protection program manages loss of material for fire rated doors, fire dampers, diesel-driven fire pump, and the halon fire suppression system, cracking, spalling, and loss of material for fire barrier walls, ceilings, and floors, hardness and shrinkage due to weathering of fire barrier penetration seals, and hardness - loss of strength for halon fire suppression system flexible hoses.
Periodic visual inspections of fire barrier penetration seals, fire
dampers, fire barrier walls, ceilings and floors, and periodic visual inspections and functional tests of fire-rated doors are performed. The internal surface of the diesel-driven fire pump fuel
oil supply line is managed by the Fuel Oil Chemistry program (A1.14), which utilizes the One-Time Inspection program (A1.16) to verify the effectiveness of the Fuel Oil Chemistry program using a Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-8 Rev. 29 License Renewal Application representative sample of components in systems that contain fuel oil, ensuring that there is no loss of function due to aging of the fuel oil supply line. Drop tests on approximately 10 percent of accessible horizontal and vertical fire dampers are performed on an 18 month basis. Fire dampers that are inaccessible for drop testing are visually inspected to assess integrity/availability. Visual inspections are performed on fire-rated doors at least once per year to verify the integrity of door surfaces and for clearances to detect aging of the fire doors. A visual inspection and function test of the halon fire suppression system is performed every 18 months. Approximately 10 percent of each type (electrical and mechanical as practical) of penetration seal is visually inspected at least once every 18 months. Fire barrier walls, ceilings, and floors including coatings and wraps (structural steel fireproofing, raceway fire wrap and
hatch covers) are visually inspected at least once every 18 months. Prior to the period of extended operation, fire damper inspection and drop test procedures will be enhanced to inspect damper housing for signs of corrosion and to specify fire barriers and doors described in USAR Appendix 9.5A, "WCGS Fire Protection Comparison to APCSB 9.5-1 Appendix A," and WCGS Fire Hazards Analysis. Training for technicians performing the fire door and fire damper visual
inspections will be enhanced to include fire protection inspection requirements and training documentation.
Prior to the period of extended of operation, halon fire suppression system inspection procedures will be enhanced to include visual inspection of halon tank flexible hoses for hardening - loss of strength. Visual inspections would not be required for flexible hoses that have scheduled periodic replacement intervals. A1.13 FIRE WATER SYSTEM The Fire Water System program manages loss of material for water-based fire protection systems. Periodic hydrant inspections, fire main flushing, sprinkler inspections, and flow tests are performed
considering applicable National Fire Protection Association (NFPA) codes and standards. Nuclear Electric Insurance Limited (NEIL) performance based guidance is utilized for fire protection system inspection, testing, and maintenance intervals. The fire water system discharge pressure is continuously monitored such that loss of system pressure is immediately detected and corrective actions Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-9 Rev. 29 License Renewal Application are initiated. The Fire Water System program conducts an air or water flow test through each open head spray/sprinkler head to verify that each open head spray/sprinkler nozzle is unobstructed.
The Fire Water System program tests a representative sample of fire protection sprinkler heads or replaces those that have been in service for 50 years, using the guidance of NFPA 25, 2002 Edition, and tests at 10 year intervals thereafter during the period of extended operation to ensure that signs of aging are detected in a timely manner. Visual inspections of the fire protection system exposed to water, evaluating wall thickness to identify evidence of loss of material due to corrosion, are covered by the Inspection of Internal Surfaces in Miscellaneous Piping and Ducting Components program (A1.22). A1.14 FUEL OIL CHEMISTRY The Fuel Oil Chemistry program manages loss of material on the internal surface of components in the emergency diesel fuel oil storage and transfer system and diesel fire pump fuel oil system.
The program includes (a) surveillance and monitoring procedures for maintaining fuel oil quality by controlling contaminants in accordance with applicable ASTM Standards, (b) periodic draining of
water from fuel oil tanks, (c) visual inspection of internal surfaces during periodic draining and cleaning of fuel oil tanks in the emergency diesel fuel oil storage and transfer system, (d) ultrasonic wall thickness measurements from external surfaces of fuel oil tanks, (e) one-time ultrasonic (UT) or pulsed eddy current (PEC) thickness examination on the external surface of the diesel fire pump fuel oil tank, (f) inspection of new fuel oil before it is introduced into the storage tanks, and (g) one-time inspections of a representative sample of components in systems that contain fuel oil
by the One-Time Inspection program.
Prior to the period of extended operation, the emergency fuel oil day tanks will be added to the ten year drain, clean, and internal inspection program. Procedures will be enhanced to provide for supplemental ultrasonic thickness measurements if there are indications of reduced cross sectional thickness found during the visual inspection of the emergency fuel oil storage tanks.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-10 Rev. 29 License Renewal Application A1.15 Reactor Vessel Surveillance The Reactor Vessel Surveillance program is consistent with ASTM E 185. Actual reactor vessel coupons are used, but an exemption in the original license permits use of other than beltline weld material for the weld coupons. The surveillance coupons are tested by a qualified offsite vendor, to its procedures. The testing program and reporting conform to requirements of 10 CFR 50 Appendix H. The schedule has been revised by removal of the last two coupon sets to the spent fuel pool, at exposures greater than those expected at the beltline wall at 60 years. This withdrawal therefore meets the ASTM E 185-82 criterion which states that capsules may be removed when the capsule neutron fluence is between one and two times the limiting fluence calculated for the vessel at the end of expected life. Vessel fluence is now determined by ex-vessel dosimetry. This schedule change has been approved by the NRC, as required by 10 CFR 50 Appendix H, "Reactor Vessel Material Surveillance Program
Requirements." A1.16 ONE-TIME INSPECTION The One-Time Inspection program conducts one-time inspections of plant system piping and components to verify the effectiveness of
the Water Chemistry program (A1.2), Fuel Oil Chemistry program (A1.14), and Lubricating Oil Analysis program (A1.23). The aging
effects to be evaluated by the One-Time Inspection program are loss of material, cracking, and reduction of heat transfer. The One-Time Inspection program determines non-destructive examination (NDE)
sample size for each material-environment group using established statistical methodologies and selects piping/component inspection locations within the sample that are based on service period, operating conditions, and design margins. The One-Time Inspection program specifies corrective actions and increased sampling of components if aging effects are found.
This new program will be implemented and completed within the ten year period prior to the period of extended operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-11 Rev. 29 License Renewal Application A1.17 Selective Leaching of Materials The Selective Leaching of Materials program manages the loss of material due to selective leaching for brass (>15% zinc) and gray cast iron components exposed to raw water or closed-cycle cooling water within the scope of license renewal. The Selective Leaching of Materials program is in addition to the Open Cycle Cooling Water
program and the Closed Cycle Cooling Water program in these cases. The program includes a one-time inspection (visual and mechanical methods) of a selected sample of component internal surfaces to determine whether loss of material due to selective leaching is occurring. If indications of selective leaching are confirmed, follow up examinations or evaluations are performed.
The Selective Leaching of Materials program is a new program that will be implemented prior to the period of extended operation. A1.18 BURIED PIPING AND TANKS INSPECTION The Buried Piping and Tanks Inspection program manages loss of material of buried components in the essential service water system, emergency diesel engine fuel oil storage and transfer system, auxiliary feedwater system, high pressure coolant injection system (borated refueling water storage system), and the fire protection system. Visual inspections monitor the condition of protective
coatings and wrappings found on carbon steel, gray cast iron or ductile iron components and assess the condition of stainless steel components with no protective coatings or wraps. The program includes opportunistic inspection of buried piping and tanks as they are excavated or on a planned basis if opportunistic inspections have not occurred. The Buried Piping and Tanks Inspection program is a new program that will be implemented prior to the period of extended of operation.
Within the ten year period prior to entering the period of extended operation, an opportunistic or planned inspection will be performed.
Upon entering the period of extended operation a planned inspection within ten years will be required unless an opportunistic inspection has occurred within this ten year period.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-12 Rev. 29 License Renewal Application A1.19 ONE-TIME INSPECTION OF ASME CODE CLASS 1 SMALL-BORE PIPING The One-Time Inspection of ASME Code Class 1 Small-Bore Piping program manages cracking of stainless steel ASME Code Class 1 piping less than or equal to 4 inches. This program is a part of the WCGS
Risk-Informed Inservice Inspection (RI-ISI) program.
For ASME Code Class 1 small-bore piping, the RI-ISI program requires volumetric examinations (by ultrasonic testing) on selected weld locations to detect cracking. Weld locations are selected based on the guidelines provided in EPRI TR-112657. Ultrasonic examinations are conducted in accordance with ASME Section XI with acceptance criteria from Paragraph IWB-3131 and IWB-2430.
The fourth interval of the ISI program at WCGS will provide the results for the one time inspection of ASME Code Class 1 small-bore piping. A1.20 EXTERNAL SURFACES MONITORING PROGRAM The External Surfaces Monitoring Program manages loss of material for external surfaces of steel components and hardening and loss of strength for elastomers in ventilation and mechanical systems. The External Surfaces Monitoring Program consists of periodic visual
inspections for aging management of loss of material, leakage, elastomer hardening and loss of strength. Loss of material for external surfaces is managed by the Boric Acid Corrosion program (A1.4) for components in a system with treated borated water or reactor coolant environment on which boric acid corrosion may occur, Buried Piping and Tanks Inspection program (A1.18) for buried components, and Structures Monitoring Program (A1.32) for supports, structural items, and electrical components. A1.21 FLUX THIMBLE TUBE INSPECTION The Flux Thimble Tube Inspection program performs wall thickness eddy current testing of all flux thimble tubes that form part of the
reactor coolant system pressure boundary.
The pressure boundary includes the length of the tube inside the reactor out to the seal fittings outside the reactor vessel. Eddy current testing is performed on the portion of the tubes inside the reactor vessel. The program implements the recommendations of NRC Bulletin 88-09, "Thimble Tube Thinning in Westinghouse Reactors."
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-13 Rev. 29 License Renewal Application During each outage, flux thimble tube wear is evaluated and inspections are performed based on evaluation results. Wall thickness measurements are trended and wear rates are calculated.
If the predicted wear (as a measure of percent through wall) for a given flux thimble tube is projected to exceed the established acceptance criteria prior to the next outage, corrective actions are taken to reposition, cap or replace the tube. A1.22 INSPECTION OF INTERNAL SURFACES IN MISCELLANEOUS PIPING AND DUCTING COMPONENTS The Inspection of Internal Surfaces in Miscellaneous Piping and Ducting Components program manages cracking, loss of material and hardening - loss of strength. Visual inspections of the internal surfaces of piping, piping components, ducting and other components that are not covered by other aging management programs is included
in this program. The Inspection of Internal Surfaces in Miscellaneous Piping and Ducting Components program uses the work control process to conduct and document inspections. The program performs visual inspections
during periodic maintenance, predictive maintenance, surveillance testing and corrective maintenance to detect aging effects that could result in a loss of component intended function. For those
systems or components where inspections of opportunity are insufficient, an inspection will be conducted prior to the period of extended operation to provide reasonable assurance that the intended
functions are maintained. The Inspection of Internal Surfaces in Miscellaneous Piping and Ducting Components program is a new program that will be implemented prior to the period of extended operation. A1.23 LUBRICATING OIL ANALYSIS The Lubricating Oil Analysis program manages loss of material and reduction of heat transfer for components within the scope of license renewal. The program maintains lubricating oil contaminants within acceptable limits, thereby preserving an environment that is not conducive to aging effects and includes acceptance criteria based on industry guidelines for oil chemical and physical properties, wear metals, contaminants, additives, and water. Increased impurities and degradation of oil properties provide an indication of aging of materials exposed to lubricating oil.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-14 Rev. 29 License Renewal Application Additionally, ferrography is performed on oil samples for trending of wear particle concentrations for the reactor coolant pumps upper and lower bearing oil and other components. Monitoring and trending of lubricating oil analysis results identifies component aging prior
to loss of component intended function. A1.24 ELECTRICAL CABLES AND CONNECTIONS NOT SUBJECT TO 10 CFR 50.49 ENVIRONMENTAL QUALIFICATION REQUIREMENTS The Electrical Cables and Connections Not Subject to 10 CFR 50.49 Environmental Qualification Requirements program manages the aging effects of embrittlement, melting, cracking, swelling, surface contamination, or discoloration to ensure that electrical cables and connections not subject to the environmental qualification (EQ) requirements of 10 CFR 50.49 and within the scope of license renewal are capable of performing their intended functions.
Non-EQ cables and connections within the scope of license renewal in accessible areas with an adverse localized environment are inspected. The inspections of Non-EQ cables and connectors in accessible areas are representative, with reasonable assurance, of
cables and connections in inaccessible areas with an adverse localized environment. At least once every ten years, the Non-EQ cables and connections within the scope of license renewal in accessible areas are visually inspected for embrittlement, melting, cracking, swelling, surface contamination, or discoloration. The acceptance criterion for visual inspection of accessible Non-EQ cable jacket and connection insulating material is the absence of anomalous indications that are signs of degradation. Corrective actions for conditions that are adverse to quality are performed in accordance with the corrective action program as part of the QA
program. The Electrical Cables and Connections Not Subject to 10 CFR 50.49 Environmental Qualification Requirements program is a new program that will be implemented prior to the period of extended operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-15 Rev. 29 License Renewal Application A1.25 ELECTRICAL CABLES AND CONNECTIONS NOT SUBJECT TO 10 CFR 50.49 ENVIRONMENTAL QUALIFICATION REQUIREMENTS USED IN INSTRUMENTATION CIRCUITS The scope of this program includes the cables and connections used in sensitive instrumentation circuits with sensitive, high voltage low-level signals within the Ex-core Neutron Monitoring System including the source range, intermediate range, and power range monitors. This program provides reasonable assurance that the intended function of cables and connections used in instrumentation circuits with sensitive, low-level signals that are not subject to the environmental qualification requirements of 10 CFR 50.49 and are exposed to adverse localized environments caused by heat, radiation, or moisture are maintained consistent with the current licensing basis through the period of extended operation. In most areas, the actual ambient environments (e.g., temperature, radiation, or moisture) are less severe than the plant design environment for those areas.
Calibration surveillance tests are used to manage the aging of the cable insulation and connections so that instrumentation circuits perform their intended functions. When an instrumentation channel is found to be out of calibration during routine surveillance testing, troubleshooting is performed on the loop, including the instrumentation cable and connections. A review of calibration results will be completed prior to the period of extended operation and every 10 years thereafter. A1.26 INACCESSIBLE MEDIUM VOLTAGE CABLES NOT SUBJECT TO 10 CFR 50.49 ENVIRONMENTAL QUALIFICATION REQUIREMENTS The Inaccessible Medium Voltage Cables Not Subject to 10 CFR 50.49 EQ Requirements program manages the aging effects of inaccessible
medium voltage cables within the scope of license renewal exposed to adverse localized environments caused by significant moisture
simultaneously with significant voltage. All cable manholes that contain in-scope Non-EQ inaccessible medium voltage cables will be inspected for water collection. Collected
water will be removed as required. This inspection and water removal will be performed based on actual plant experience with the
inspection frequency being at least once every two years for electrical manholes without sump pumps and with the inspection Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-16 Rev. 29 License Renewal Application frequency being at least once every five years for electrical manholes with sump pumps.
The program provides for testing of in-scope Non-EQ inaccessible medium voltage cables to provide an indication of the conductor insulation condition. At least once every ten years, a polarization
index test as described in EPRI TR-103834-P1-2 or other testing that is state-of-the-art at the time of the testing is performed.
The Inaccessible Medium Voltage Cables Not Subject to 10 CFR 50.49 EQ Requirements program is a new program that will be implemented prior to the period of extended operation. A1.27 ASME SECTION XI, SUBSECTION IWE The ASME Section XI, Subsection IWE containment inservice inspection program provides aging management of the steel liner of the concrete containment building, including the containment liner plate, piping and electrical penetrations, access hatches, and the fuel transfer tube. Inspections are performed to identify and manage any
containment liner aging effects that could result in loss of intended function. Acceptance criteria for components subject to Subsection IWE exam requirements are specified in Article IWE-3000.
In conformance with 10 CFR 50.55a(g)(4)(ii), the WCGS CISI Program is updated during each successive 120-month inspection interval to comply with the requirements of the latest edition and addenda of
the Code specified twelve months before the start of the inspection interval. A1.28 ASME SECTION XI, SUBSECTION IWL The ASME Section XI, Subsection IWL containment inservice inspection program manages aging of the concrete containment structure (including the tendon gallery ceiling), the concrete dome, and the
post-tensioning system. Inspections are performed to identify and manage any containment concrete aging effects that could result in loss of intended function. In conformance with 10 CFR 50.55a(g)(4)(ii), the WCGS ISI Program is updated during each successive 120-month inspection interval to comply with the requirements of the latest edition and addenda of the Code specified twelve months before the start of the inspection interval.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-17 Rev. 29 License Renewal Application Prior to the period of extended operation, procedures will be enhanced to include two new provisions regarding inspection of
repair/replacement activities. A1.29 ASME SECTION XI, SUBSECTION IWF The ASME Section XI, Subsection IWF program manages aging effects that could result in loss of intended function for Class 1, 2 and 3 component supports. There are no Class MC supports at WCGS. In conformance with 10 CFR 50.55a(g)(4)(ii), the WCGS ISI Program is updated during each successive 120-month inspection interval to comply with the requirements of the latest edition and addenda of
the Code specified twelve months before the start of the inspection
interval. A1.30 10 CFR 50, APPENDIX J The 10 CFR Part 50, Appendix J program monitors leakage rates through the containment pressure boundary, including the penetrations and access openings, in order to detect degradation of containment pressure boundary. Seals, gaskets, and bolted
connections are also monitored under the program.
Containment leak rate tests are performed in accordance with 10 CFR 50 Appendix J, "Primary Reactor Containment Leakage Testing for Water-Cooled Power Reactors" Option B; Regulatory Guide 1.163, Revision 0, "Performance-Based Containment Leak-Testing Program," NEI 94-01, Industry Guideline for Implementing Performance-Based Option of 10 CFR Part 50 Appendix J; and ANSI/ANS 56.8, "Containment
System Leakage Testing Requirements." Containment leak rate tests are performed to assure that leakage through the primary containment, and systems and components penetrating primary containment does not exceed allowable leakage limits specified in the Technical Specifications. Corrective actions are taken if leakage rates exceed established administrative limits for individual penetrations or the overall containment
pressure boundary. A1.31 MASONRY WALL PROGRAM The Masonry Wall Program, which is part of the Structures Monitoring Program, manages aging of masonry walls, and structural steel Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-18 Rev. 29 License Renewal Application restraint systems of the masonry walls, within scope of license renewal based on guidance provided in IE Bulletin 80-11, "Masonry Wall Design" and NRC Information Notice 87-67, "Lessons Learned from Regional Inspections of Licensee Actions in Response to NRC IE
Bulletin 80-11." The Masonry Wall Program contains inspection Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-19 Rev. 29 License Renewal Application guidelines and lists attributes that cause aging of masonry walls, which are to be monitored during structural monitoring inspections, as well as establishes examination criteria, evaluation requirements, and acceptance criteria. Prior to the period of extended operation, procedures will be enhanced to identify unreinforced masonry in the radwaste building within the scope of license renewal that requires aging management. A1.32 STRUCTURES MONITORING PROGRAM The Structures Monitoring Program manages the cracking, loss of material, and change in material properties by monitoring the condition of structures and structural supports that are within the scope of license renewal. The Structures Monitoring Program implements the requirements of 10 CFR 50.65 and is consistent with
the guidance of NUMARC 93-01, Revision 2 and Regulatory Guide 1.160, Revision 2. The Structures Monitoring Program provides inspection guidelines and walkdown checklists for concrete elements, structural steel, masonry walls, treated wood, structural features (e.g., caulking, sealants, roofs, etc.), structural supports, and miscellaneous components such
as doors. The Structures Monitoring Program includes all masonry walls within the scope of license renewal. The Structures Monitoring Program also inspects supports for equipment, piping, conduit, cable tray, HVAC, and instrument components. The Structures Monitoring Program monitors groundwater for pH, sulfates, and chlorides. Prior to the period of extended operation, procedures will be enhanced to add inspection parameters for treated wood, to add the disconnect enclosure and foundation in the switchyard, and to monitor groundwater for pH, sulfates, and chlorides. Two samples of groundwater will be tested every five years. A1.33 RG 1.127, INSPECTION OF WATER-CONTROL STRUCTURES ASSOCIATED WITH NUCLEAR POWER PLANTS The Regulatory Guide 1.127, Inspection of Water Control Structures Associated with Nuclear Power Plants program manages aging due to extreme environmental conditions and the effects of natural Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-20 Rev. 29 License Renewal Application phenomena that may affect water-control structures. WCGS meets the recommendations of Regulatory Guide 1.127, Revision 1.
This program includes inspection and surveillance activities for dams, slopes, canals, and other water-control structures associated with emergency cooling water systems or flood protection.
The program includes periodic visual inspections of in-scope concrete structures, periodic monitoring of the hydraulic and structural condition of the Ultimate Heat Sink (UHS), as well as associated structures, main dam service spillway, and auxiliary spillway, periodic dredging of the UHS reservoir and channel connecting the reservoir to the essential service water pumphouse, and survey of the UHS dam for vertical movement.
Prior to the period of extended operation, procedures will be enhanced so that the main dam service spillway and the auxiliary
spillway will be inspected in accordance with the same specification, to clarify the scope of inspections for the spillways, to add the 5 year inspection frequency for the main dam
service spillway, and to add cavitation to the list of concrete aging effects for surfaces other than spillways.
A1.34 NICKEL ALLOY AGING MANAGEMENT PROGRAM The Nickel Alloy Aging Management Program manages cracking due to primary water stress corrosion cracking in all plant locations that contain Alloy 600, with the exception of steam generator tubing (aging management of steam generator tubing is performed by the
Steam Generator Tubing Integrity program (B2.1.8)). Aging management requirements for nickel alloy penetration nozzles welded to the upper reactor vessel closure head noted in the Nickel-Alloy Penetration Nozzles Welded to the Upper Reactor Vessel Closure Heads of Pressurized Water Reactors program (B2.1.5) are included here for review convenience. This includes reactor coolant system (RCS) pressure boundary, RCS non-pressure boundary, and ESF locations.
The Nickel Alloy Aging Management Program uses inspections, mitigation techniques, repair/replace activities and monitoring of operating experience to manage the aging of Alloy 600 at WCGS. Detection of indications is accomplished through a variety of examinations consistent with ASME Section XI Subsections IWB and IWC, and ASME Code Cases N-729-1, N-770-1 & N-722-1 with conditions as published in 10 CFR 50.55(a).
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-21 Rev. 29 License Renewal Application Mitigation techniques are implemented when appropriate to preemptively remove conditions that contribute to primary water stress corrosion cracking. Repair/replacement activities are
performed to proactively remove or overlay Alloy 600 material, or as a corrective measure in response to an unacceptable flaw in the
material.
The Wolf Creek Nickel Alloy Aging Management Program will be supplemented with implementation of applicable (1) ASME Code Cases N-729-1, N-770-1 & N-722-1 with conditions as published in 10 CFR 50.55 (a) and (2) staff-accepted industry guidelines, and (3) participation in industry initiatives, such as owners group programs and the EPRI Materials Reliability Program, for managing aging effects associated with nickel alloys, (4) upon completion of these programs, but not less than 24 months before entering the period of extended operation, WCNOC will submit an inspection plan for reactor coolant system nickel alloy pressure boundary components to the NRC for review and approval. A1.35 REACTOR COOLANT SYSTEM SUPPLEMENT Section 3.1 of NUREG-1800, "Standard Review Plan for the Review of License Renewal Applications for Nuclear Power Plants," supplements
the aging management programs for the reactor coolant system components with the following additional requirements.
WCNOC will: A. Reactor Coolant System Nickel Alloy Pressure Boundary Components Implement applicable (1) NRC Orders, Bulletins and Generic Letters associated with nickel alloys and (2) staff-accepted industry guidelines, (3) participate in the industry initiatives, such as owners group programs and the EPRI Materials Reliability Program, for managing aging effects associated with nickel alloys, (4) upon completion of these programs, but not less than 24 months before entering the period of extended operation, WCNOC will submit an inspection plan for reactor coolant system nickel alloy pressure boundary components to the NRC for review and approval, and B. Reactor Vessel Internals Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-22 Rev. 29 License Renewal Application (1) Participate in the industry programs for investigating and managing aging effects on reactor internals; (2) evaluate and implement the results of the industry programs as applicable to the reactor internals; and (3) upon completion of these programs, but not less than 24 months before entering the period of extended operation, WCNOC will submit an inspection plan for reactor internals to the NRC for review and approval. A1.36 ELECTRICAL CABLE CONNECTIONS NOT SUBJECT TO 10 CFR 50.49 ENVIRONMENTAL QUALIFICATION REQUIREMENTS The Electrical Cable Connections Not Subject to 10 CFR 50.49 Environmental Qualification Requirements program manages the effects of loosening of bolted connections due to thermal cycling, ohmic
heating, electrical transients, vibration, chemical contamination, corrosion, and oxidation. A representative sample of electrical cable connections not subject to 10 CFR 50.49 environmental qualification requirements within the scope of license renewal is infrared thermography tested as part of the WCGS predictive maintenance. The sample is based upon application, circuit loading
and environment. Infrared thermography testing is being performed at least once every 10 years. Prior to the period of extended operation, the infrared thermography testing procedure will be enhanced to require an engineering evaluation when test acceptance criteria are not met. The evaluation will include identifying the extent of condition, the potential root cause for not meeting the test acceptance criteria, and the likelihood of recurrence.
A one-time inspection of a representative sample of low voltage low current or low load connections will be performed prior to the period of extended operation. The technical basis for the selected sample will be documented and based upon application (low voltage), circuit loading (low current or low load), and environment (plant indoor air and outdoor air). An engineering evaluation will be
performed when test acceptance criteria are not met. The evaluation will include identifying the extent of condition, the potential root cause for not meeting the test acceptance criteria, the likelihood of recurrence and the need to expand the sample size and/or
frequency of the inspection.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-23 Rev. 29 License Renewal Application A2
SUMMARY
DESCRIPTIONS OF TIME-LIMITED AGING ANALYSIS AGING MANAGEMENT PROGRAMS A2.1 METAL FATIGUE OF REACTOR COOLANT PRESSURE BOUNDARY The WCGS Metal Fatigue of the Reactor Coolant Pressure Boundary program ensures that actual plant ex perience remains bounded by the assumptions used in the deesign calculations, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. The more-recent fatigue monitoring results
indicate that none of the design transients should occur more than the currently-specified number of times before the end of a 60-year period of extended operation, and that fatigue usage factors should
remain below the code allowable limit of 1.0, including effects of
the reactor coolant environment as described by NUREG/CR-6260.
Prior to the period of extended operation, the Metal Fatigue of Reactor Coolant Pressure Boundary program will be enhanced to include: A cycle count action limit and corrective actions. An action limit will be established that requires corrective action when the cycle count for any of the critical thermal and pressure transients is projected to reach a stated percentage of the design-specified number of cycles before the end of the next fuel cycle.
If this action limit is reached, acceptable corrective actions include:
- 1. Review of fatigue usage calculations To determine whether the transient in question
contributes significantly to CUF. To identify the components and analyses that are
affected by the transient in question. To ensure that the analytical bases of the leak-
before-break (LBB) fatigue crack propagation analysis and of the high-energy line break (HELB) locations are maintained. 2. Evaluation of remaining margins on CUF based on cycle-based or stress-based CUF calculations using the WCGS fatigue management program software.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-24 Rev. 29 License Renewal Application
- 3. Redefinition of the specified number of cycles (e.g., by reducing specified numbers of cycles for other transients and using the margin to increase the allowed number of cycles for the transient that is approaching its
specified number of cycles). A cumulative fatigue usage action limit and corrective actions. An action limit will be established that requires corrective action when calculated CUF (from cycle-based or stress-based monitoring) for any monitored location is projected to reach 1.0 within the next 2 or 3 fuel cycles. If this action limit is reached acceptable corrective actions
include: 1. Determine whether the scope of the monitoring program must be enlarged to include additional affected reactor coolant pressure boundary locations. This determination will ensure that other locations do not approach design limits without an appropriate action. 2. Enhance fatigue monitoring to confirm continued conformance to the code limit. 3. Repair the component. 4. Replace the component.
- 5. Perform a more rigorous analysis of the component to demonstrate that the design code limit will not be exceeded. 6. Modify plant operating practices to reduce the fatigue usage accumulation rate. 7. Perform a flaw tolerance evaluation and impose component-specific inspections, under ASME Section XI Appendices A or C (or their successors), and obtain required approvals by the NRC. These corrective actions are equally applicable to the WCGS NUREG/CR-6260 locations described in Section A3.2.3, "Effects of the Reactor Coolant System Environment on Fatigue Life of Piping and Components," including consideration of the effects
of the reactor coolant environment.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-25 Rev. 29 License Renewal Application 10 CFR 50 Appendix B procedural and record requirements. Validation of the presence of absence of charging nozzle thermal sleeves. If sleeves are not present, the fatigue monitoring program analysis for the charging nozzle will be re-performed. A fatigue monitoring program updated baseline for the pressurizer hot leg surge nozzle based on the additional insurge/outsurge cycles accumulated in a pre-MOP environment. Additionally, the fatigue monitoring program baseline for the charging nozzles will be updated with consideration for the
differential contribution of fatigue for each category of charging event. A2.2 ENVIRONMENTAL QUALIFICATION (EQ) OF ELECTRICAL COMPONENTS The Environmental Qualification (EQ) of Electrical Components program manages component thermal, radiation, and cyclical aging through the use of aging evaluations based on 10 CFR 50.49(f)
qualification methods. As required by 10 CFR 50.49, EQ components not qualified for the current license term are to be refurbished or replaced, or have their qualification extended prior to reaching the
aging limits established in the evaluation. The Environmental Qualification (EQ) of Electrical Components program is consistent with the requirements of 10 CFR 50.49, and the guidance of NUREG-0588, "Interim Staff Position on Environmental Qualification of Safety-Related Electrical Equipment" and Regulatory Guide 1.89, "Environmental Qualification of Certain Electric Equipment Important to Safety for Nuclear Power Plants", Revision 1 for maintaining qualification of equipment. A2.3 CONCRETE CONTAINMENT TENDON PRESTRESS The Concrete Containment Tendon Prestress program, within the WCGS Creek ASME Section XI Subsection IWL Program, manages the loss of
tendon prestress in the post-tensioning system. The WCGS post-tensioning system consists of inverted U-shaped tendons, extending up through the basemat, through the full height of the cylindrical walls and over the dome; and horizontal circumferential (hoop) tendons, at intervals from the basemat to about the 45-degree elevation of the dome. The basemat is Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-26 Rev. 29 License Renewal Application conventionally reinforced. The tendons are ungrouted, in grease-filled glands. Prior to the period of extended operation, procedures will be revised to extend the list of surveillance tendons to include random samples for the 40, 45, 50, and 55 year surveillances, to explicitly require a regression analysis for each tendon group after every surveillance; and to invoke and describe regression analysis methods used to construct the lift-off trend lines. Surveillance program
predicted force lines for the vertical and hoop tendon groups will be extended to 60 years. Procedure descriptions of acceptance criteria action levels will be revised to conform to the ASME Code, Subsection IWL 3221 descriptions.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-27 Rev. 29 License Renewal Application A3 EVALUATION SUMMARIES OF TIME-LIMITED AGING ANALYSES 10 CFR 54.21(c) requires that an applicant for a renewed license identify time-limited aging analyses (TLAAs) and evaluate them for
the period of extended operation. The following TLAAs have been identified and evaluated for WCGS. A3.1 REACTOR VESSEL NEUTRON EMBRITTLEMENT Ferritic materials of the reactor vessel are subject to embrittlement (loss of fracture toughness) due to high-energy neutron exposure. The following predictions of neutron fluence and of its embrittlement effects are TLAAs: Neutron Fluence, Upper Shelf Energy, Adjusted Reference
Temperature (Fluence, USE, and ART) Pressurized Thermal Shock (PTS) Reactor Vessel Thermal Limit Analysis and Pressure-Temperature (P-T) Limits Low Temperature Overpressure Protection (LTOP) The Reactor Vessel Surveillance program is described in
Section A1.15. A3.1.1 Neutron Fluence, Upper Shelf Energy and Adjusted Reference Temperature (Fluence, USE, and ART)
Fluence Neutron embrittlement depends on lifetime fluence of neutrons with energies greater than 1 MeV. The original design basis estimate for expected end-of-life fluence has been increased to account for increased unit rating and for increased plant capacity factors, but also reduced for low-leakage core loadings. WCGS has evaluated projected fluences and their uncertainties based on the guidance of Regulatory Guide 1.190, "Calculational and Dosimetry Methods for Determining Pressure Vessel Neutron Fluence,"
Revision 0. The 1/4-t and 3/4-t fluences in the vessel wall were also projected consistent with Regulatory Guide 1.99, "Radiation Damage Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-28 Rev. 29 License Renewal Application to Reactor Vessel Materials," Revision 2, Section 1.1, Equation 3, attenuation. The evaluation also projected the alternative displacements-per-iron atom (dpa) measure of embrittlement to 54 EFPY using methods consistent with ASTM E853 and E693, in support of dpa assessments consistent with Regulatory Guide 1.99, Revision 2. Since the W and Z coupon exposure has now exceeded that expected at the end of the extended period of operation, these capsules have been removed to the spent fuel pool, and vessel neutron fluence is now confirmed by ex-vessel dosimetry.
USE and ART For reactor vessel materials, 10 CFR 50 Appendix G requires the predicted end-of-life Charpy impact test upper-shelf absorbed energy (USE) to be at least 50 ft-lb, unless an approved analysis supports a lower value. The 60 year end-of-life USE and adjusted reference temperature (ART) of the limiting material was confirmed from test of the X-capsule coupons, with exposures nearly equal to the projected 54 EFPY, 60-year vessel wall fluence. The examination methods were consistent with 10 CFR 50 Appendices G and H, ASTM E185-82, and Westinghouse procedures. The X-coupon analysis demonstrates more-than-adequate EOL USE, and indicates that ART for the limiting material will remain modest and will permit adequate operating margins to P-T limits until the end of a 60-year period of
extended operation. See Section A3.1.3 for P-T limits. A3.1.2 Pressurized Thermal Shock (PTS)
If the reference temperature for pressurized thermal shock (RT PTS) for each heat of material of the reactor pressure vessel does not exceed 270 ºF for plates, forgings, and axial welds; or 300 ºF for circumferential welds (the PTS screening criteria), only the reactor pressure vessel is "relied on to demonstrate compliance" with the 10 CFR 50.61 PTS rule. RT PTS for the limiting material has been projected to remain well below its screening criterion until the end of a 60-year period of extended operation. The reactor pressure vessel therefore meets the PTS screening criteria and will continue to do so for the period of extended operation. Therefore no safety analysis by Regulatory Guide 1.154, "Format and Content of Plant-Specific Pressurized Thermal Shock Safety Analysis Reports for Pressurized Water Reactors," Revision 0, alternative methods is required, and the vessel is therefore the only component relied upon Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-29 Rev. 29 License Renewal Application to demonstrate compliance with 10 CFR 50.61 throughout the period of extended operation. A3.1.3 Pressure-Temperature (P-T) Limits 10 CFR 50 Appendix G requires a reactor vessel thermal limit analysis to determine operating pressure-temperature limits for heatup, cooldown, criticality, and inservice leakage and hydrostatic testing. The resulting P-T limit curves are operating limits, conditions of the operating license, and are included in the Pressure and Temperature Limits Report (PTLR), as required by Technical Specifications. Because of the relationship between the operating pressure-temperature limits and the fracture toughness transition of the reactor vessel, the thermal limits analysis is valid only up to a
stated vessel fluence limit. The currently-applicable PTLR is valid up to 54 EFPY. A3.1.4 Low Temperature Overpressure Protection (LTOP) LTOP is required by Technical Specifications and is provided (in part) by the cold overpressurization mitigation system (COMS), which opens the power-operated relief valves at a setpoint determined by
the currently-applicable pressure-temperature limits analysis.
The COMS setpoint is established in the Pressure and Temperature Limits Report (PTLR), Section A3.1.3. A3.2 METAL FATIGUE
This section describes: ASME Section III Class 1 Fatigue Analysis of Vessels, Piping, and Components ASME Section III Subsection NG Fatigue Analysis of Reactor Pressure Vessel Internals Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-30 Rev. 29 License Renewal Application Effects of the Reactor Coolant System Environment on Fatigue Life of Piping and Components (Generic Safety Issue 190 Assumed Thermal Cycle Count for Allowable Secondary Stress
Range Reduction Factor in B31.1 and ASME Section III Class 2
and 3 Piping Fatigue Design of Spent Fuel Pool Liner and Racks for Seismic
Events Fatigue Design and Analysis of Class IE Electrical Raceway
Support Angle Fittings for Seismic Events At WCGS, no vessels, heat exchangers, or pumps were designed to ASME Section III Class 2 or 3, or ASME VIII Division 2 rules that required design for a stated number of load cycles.
Basis of Fatigue Analyses ASME Section III Class 1 design specifications define a design basis set of static and transient load conditions. The design number of
each transient was selected to be somewhat larger than expected to occur during the 40-year licensed life of the plant, based on
operating experience, and on projections of future operation based on innovations in the system designs. Although original design specifications commonly state that the transients are for a 40-year design life, the fatigue analyses themselves are based on the specified number of occurrences of each transient rather than on this lifetime.
Fatigue Management Program The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 will ensure that actual plant experience remains bounded by the assumptions used in the design calculations, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. The more-recent fatigue monitoring cycle counts indicate that none of the design transients will occur more than the currently-specified number of times before the end of a 60-year period of extended operation, and consequently, that the fatigue analysis TLAAs based on those transients will remain valid for the period of extended operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-31 Rev. 29 License Renewal Application A3.2.1 ASME Section III Class 1 Fatigue Analysis of Vessels, Piping, and Components Fatigue analyses exist for ASME Section III Division 1 Class 1 piping, vessels, steam generators, pumps, and valves. The reactor vessel internals are not designed to ASME Section III Class 1 but
are analyzed to ASME Section III Subsection NG. See Section A3.2.2. A3.2.1.1 Reactor Pressure Vessel, Nozzles, Head, and Studs The WCGS reactor vessel is designed to ASME Section III, Subsection NB (Class 1), 1971 Edition with addenda through Winter
1972. The analysis has been updated to incorporate redefinitions of loads and design basis events, operating changes, power rerate and
T hot reduction, minor modifications, and possible operating contingencies. See Section A3.2.1.9 for the evaluation of certain noise events affecting the fatigue analyses of the primary coolant system and reactor vessel. The reactor vessel primary coolant inlet and outlet nozzles and lower-head-to-shell juncture are evaluated for effects of the reactor coolant environment on fatigue behavior of these materials, consistent with the guidance of NUREG/CR-06260. See Section A3.2.3
of this document.
Fatigue usage factors in the reactor vessel pressure boundary do not depend on effects that are time-dependent at steady-state conditions, but depend only on effects of operational, abnormal, and upset transient events, principally on startup and shutdown transients and on boltup. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 ensures that the fatigue usage factors based on those transients will remain within the code limit of 1.0 for the period of extended operation, or that appropriate corrective measures maintain the design and licensing
basis by other acceptable means. A3.2.1.2 Control Rod Drive Mechanism (CRDM) Pressure Housings, Adapter Plugs, and Canopy Seals The CRDM housings are designed to ASME Section III, Subsection NB (Class 1), 1974 Edition with addenda through Winter 1974. The analysis of pressure-retaining components was reexamined for the power rerate and T hot reduction modification, and for addition of Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-32 Rev. 29 License Renewal Application canopy seal clamp assemblies. The fatigue usage factors for the CRDM pressure housings, adapter plugs, and canopy seals have been evaluated and projected to remain below the ASME Code allowable of 1.0 for 60 years. A3.2.1.3 Reactor Coolant Pump Pressure Boundary Components The pump pressure boundary was designed to ASME Section III, 1971 edition with addenda through Summer 1973. Subarticle NB-3400, "Design of Class 1 Pumps," of this edition and addenda, does not require a fatigue analysis, but the nuclear steam supply vendor specified a fatigue analysis. Low stresses permitted a fatigue
waiver analysis for many pump components. These fatigue and fatigue waiver analyses have been updated to incorporate redefinitions of loads and design basis events, operating changes, power rerate, and minor modifications. Fatigue usage factors in the reactor coolant pumps do not depend on effects that are time-dependent at steady-state conditions, but depend only on effects of operational, abnormal, and upset transient events, principally on startup and shutdown transients. The WCGS
Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 will ensure that the fatigue usage factors based on those transients will remain within the code limit of 1.0 for the period of extended operation, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. A3.2.1.4 Pressurizer and Pressurizer Nozzles The WCGS pressurizer is designed to ASME Section III, Subsection NB (Class 1), 1974 Edition. The analysis has been updated from time to time to incorporate redefinitions of loads and design basis events, operating changes, power rerate and Thot reduction, and minor modifications; including the effects of thermal stratification in the lower head, surge nozzle, and surge line discussed in NRC Bulletin 88-11.
The pressurizer surge nozzle and lower head may be subject to significant operating thermal stress cycles due to thermal stratification and insurge-outsurge cycles, and are therefore
expected to be the limiting pressurizer components for fatigue. The fatigue usage factors of these locations are specifically monitored. The expected usage factors in these locations should be acceptable
for 60 years of operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-33 Rev. 29 License Renewal Application With the exception of thermal stratification effects in the surge nozzle, fatigue usage factors in the pressurizer pressure boundary
and support components do not depend on effects that are time-dependent at steady-state conditions, but depend only on effects of operational, abnormal, and upset transient events. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 will ensure that the fatigue usage factors based on those transients will remain within the code limit of 1.0 for the period of extended operation, or that appropriate corrective measures maintain the design and licensing basis by other acceptable
means. A3.2.1.5 Steam Generator ASME Section III Class 1, Class 2 Secondary Side, and Feedwater Nozzle Fatigue Analyses The steam generators are designed to ASME Section III, Subsection NB (Class 1) and Subsection NC (Class 2), 1971 Edition with addenda through Summer 1973. Although the secondary side is Class 2, all pressure retaining parts of the steam generator satisfy the Class 1
criteria, including the Class 2 secondary side boundaries. Although the steam generator tubes have a Class 1 fatigue analysis, the safety determination for integrity of steam generator tubes now depends on managing aging effects by a periodic inspection program rather than on the fatigue analysis, described in Section A1.8. The code fatigue analysis of the tubes is theefore not a TLAA.
Except for the tubes, fatigue usage factors in the steam generator components do not depend on flow-induced vibration or other effects that are time-dependent at steady-state conditions, but depend only on effects of operational and upset transient events. At the current rate of accumulation of these events the design basis number of events should be sufficient for 60 years of operation. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 ensures that the fatigue usage factors based on those transients remain within the code limit of 1.0 for steam generator components with fatigue analyses for the period of extended operation, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. A3.2.1.6 ASME Section III Class 1 Valves WCGS Class 1 valves are designed to ASME Section III, Subsection NB, 1974 Edition and later addenda. At WCGS, Class 1 fatigue analyses Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-34 Rev. 29 License Renewal Application are TLAAs only for Class 1 valves with inlets greater than four inches nominal.
For all valves the allowed NB-3545.3 N A normal duty operations far exceed those expected to occur.
The calculated worst-case usage factors I t for Class 1 pressurizer safety valves and for six inch swing check valves indicate that the designs have large margins, and therefore that the pressure boundaries would withstand fatigue effects for at least two of the original design lifetimes. The design of these valves for fatigue
effects is therefore valid for the period of extended operation.
The calculated worst-case usage factors for the 12 inch Class 1 RHR suction gate valves and the 10 inch Class 1 check valves exceed 0.4.
However, fatigue usage factors in these valves do not depend on effects that are time-dependent at steady-state conditions, but depend only on effects of operational, abnormal, and upset transient events. As discussed in Section A3.2.1.7, the current rate of accumulation of these event cycles for Class 1 piping systems containing valves indicates that the 40-year design basis number of events should be sufficient for 60 years of operation, and that the calculated usage factors should not be exceeded. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 ensures that the assumed numbers of transient cycles for 12 inch Class 1 RHR suction gate valves and the 10 inch Class 1 check valves are not exceeded, and consequently, that the fatigue analysis TLAAs based on those transients remain valid for the period of extended operation, or that appropriate corrective measures
maintain the design and licensing basis by other acceptable means. A3.2.1.7 ASME Section III Class 1 Piping and Piping Nozzles Class 1 reactor coolant main-loop piping supplied by Westinghouse is designed to ASME Section III, Subsection NB, 1974 edition with
addenda through Winter 1975. The main loop piping fatigue analysis was performed to the 1974 edition with addenda through Winter 1975.
The fatigue analyses of piping outside the main loop used code addenda through summer 1979 [USAR Table 5.2-1]. These analyses have been updated from time to time to incorporate redefinitions of loads and design basis events, operating changes, power rerate, and minor
modifications.
See Section A3.2.1.8 for fatigue in the pressurizer surge lines.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-35 Rev. 29 License Renewal Application See Section A3.2.1.9 for the evaluation of certain noise events affecting the fatigue analyses of the primary coolant system and
reactor vessel. The evaluation of these noise events found no effect on the primary coolant piping fatigue analysis. The hot leg surge nozzle is subject to possible thermal stratification effects. Fatigue at this location is specifically
monitored, including the stratification effects. Fatigue due to high-cycle vibration has been evaluated in thermowells added at former RTD nozzles. The calculated usage factor has been validated for the period of extended operation and
remains negligible.
With the exception of the hot leg surge nozzle and thermowells, fatigue usage factors in Class 1 piping and nozzles do not depend on effects that are time-dependent at steady-state conditions, but depend only on effects of operational, abnormal, and upset transient events. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 ensures that fatigue usage factors based on those transients remain within the code limit of 1.0 for the period of extended operation, or that appropriate corrective measures maintain the design and licensing basis by other acceptable
means. A3.2.1.8 Bulletin 88-11 Revised Fatigue Analysis of the Pressurizer Surge Line for Thermal Cycling and Stratification NRC Bulletin 88-11 requested that licensees establish and implement a program to confirm pressurizer surge line integrity in view of the occurrence of thermal stratification and required them to inform the staff of the actions taken to resolve this issue. The original surge line fatigue analysis used code addenda through summer 1979.
The surge line design was re-evaluated to the 1986 code in response to the NRC Bulletin 88-11 thermal stratification concerns. This analysis was later reevaluated for effects of snubber removals.
These results have been incorporated into the piping and main-loop nozzle code design reports. The current analysis includes effects of power rerate and T hot reduction. See Section A3.2.1.4 for effects on the pressurizer surge nozzle.
See Section A3.2.1.7 for effects on the hot leg surge nozzle.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-36 Rev. 29 License Renewal Application The maximum calculated CUF at any location in the surge lines, under the current analysis of record, including thermal stratification effects, is less than 0.1. The WCGS Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 monitors fatigue in the surge line and ensures that the fatigue usage factors based on those transients remain within the code limit of 1.0 for the period of extended operation, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. The re-evaluation of the surge line for NRC Bulletin 88-11 under the 1986 code did not retroactively impose Subarticle NF-3330 stress limits for high-cycle fatigue of Class 1 supports. A3.2.1.9 Primary Coolant System Heatup Expansion Noise Events Since 1990, abrupt audible events have been heard inside containment at WCGS toward the end of primary system heatups. They have been attributed to an abrupt release of differential expansion energy, originally believed to be at the crossover piping support saddle shims, later found to have probably also occurred between the
reactor vessel support pads and shoes, under the vessel main loop nozzles. The evaluation of effects of these events found no effect, or only nominal effects, on stress and fatigue analyses of the reactor vessel inlet and outlet nozzles, reactor coolant piping primary loop and component supports, steam generator nozzles, and primary loop leak-before-break analysis.
The heatup noise events have been evaluated and projected to remain within the 330 cycles assumed in the fatigue evaluation. A3.2.1.10 High Energy Line Break Postulation Based on Fatigue Cumulative Usage Factor A leak-before-break analysis (LBB) eliminated large breaks in the main reactor coolant loops. See Section A3.2.1.11. Outside the main loop breaks are selected in accordance with Regulatory Guide 1.46, Revision 0, "Protection Against Pipe Whip Inside Containment," and Branch Technical Positions ASB 3-1 and MEB 3-1.
See USAR Section 3.6.1. The citation of MEB 3-1 means that "intermediate breaks," "between terminal ends," in piping with ASME Section III Class 1 fatigue Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-37 Rev. 29 License Renewal Application analyses are identified at any location where cumulative usage factor is equal to or greater than 0.1, with the stated exception of the reactor coolant system primary loops.
A revised stress analysis of the surge line reduced all intermediate locations below 0.1, and thereby eliminated intermediate breaks in it. Break locations that depend on usage factor, and their absence in the surge line, remain valid as long as the calculated usage factors are not exceeded. The WCGS Metal Fatigue of Reactor Coolant
Pressure Boundary program described in Section A2.1 ensures that the originally calculated maximum usage factors are not exceeded, or that appropriate corrective measures maintain the design and licensing basis by other acceptable means. A3.2.1.11 Fatigue Crack Growth Assessment in Support of a Fracture Mechanics Analysis for the Leak-Before-Break (LBB)
Elimination of Dynamic Effects of Primary Loop Piping Failures USAR Section 3.6.1 describes a leak-before-break analysis that
eliminated the large breaks in the main reactor coolant loops, which permitted omission of evaluations of their jet and pipe whip effects. This permitted omission of large jet barriers and whip restraints. The containment pressurization and equipment
qualification analyses retained the large-break assumptions.
The fracture mechanics analysis depends on a saturated rather than a time-dependent crack initiation energy integral, is therefore not time-dependent, and is therefore not a TLAA. However, the final leak-before-break submittal is also supported by a fatigue crack growth assessment for a 40-year design life, which is a TLAA.
The Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 is written to confirm that the maximum usage factor in the primary loop piping remains below the number assumed for the existing analysis, and therefore that the basis for the LBB analysis remains valid for the period of extended operation, or that appropriate corrective measures maintain the design and
licensing basis by other acceptable means.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-38 Rev. 29 License Renewal Application A3.2.2 ASME Section III Subsection NG Fatigue Analysis of Reactor Pressure Vessel Internals The WCGS reactor vessel internals were designed after the incorporation of Subsection NG into the 1974 Edition of Section III of the ASME Boiler and Pressure Vessel Code. The design meets the intent of paragraph NG-3311(c); that is, design and construction of core support structures meet Subsection NG in full, and other internals are designed and constructed to ensure that their effects on the core support structures remain within the core support structure code limits.
The current reactor vessel internals design report incorporates effects of power rerate and of hot leg temperature reduction (T hot). It identifies usage factors for the specified set of design basis transient events and for 40 years of high-cycle effects. The greater part of each calculated fatigue usage factor is due to effects of significant transients.
The review and projection of transient events and usage factor accumulation to date indicates that the specified number of each transient should not be exceeded during the 60-year period of extended operation, and the WCGS fatigue management program tracks these events. Therefore, the contribution of these transient events to fatigue usage in the internals will not exceed that originally calculated without the condition being identified, and without an appropriate evaluation
being performed and any necessary mitigating actions being taken. However, some part of fatigue usage in internals is due to the high-cycle effects, and therefore depends on steady-state operating time rather than on the number of transients. High-cycle fatigue must therefore be evaluated separately in order to extend the conclusion of the supplementary design report to the end of the 60-year licensed operating period.
For locations with reported usage factors greater than 0.66, the detailed fatigue calculations were reviewed to determine the contribution of high cycle fatigue to the total usage. In these locations, the review determined that high cycle fatigue was not calculated for the component because either the vibratory stresses are very small compared to thermal transient stresses or the usage from high cycle effects was insignificant. Therefore, the reported usage is from the specified design transients and is proportional to the numbers of transients experienced but not explicitly to time of
operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-39 Rev. 29 License Renewal Application For locations with reported usage factors of less than 0.66, some part of the fatigue usage in internals may be due to the high-cycle effects, and therefore depends on steady-state operating time rather than on the number of transient events. Because these locations have reported usage of less than 0.66, multiplying the reported fatigue usage values by 1.5 to account for 60 years of operation gives fatigue usage results less than the limit of 1.0 and is therefore acceptable. Therefore, the analysis has been projected to the end of the period of extended operation.
Fatigue Analyses of Barrel-to-Former and Baffle-to-Former Bolts Cracked baffle-to-former bolts were found in a few offshore reactors with designs and materials similar to Westinghouse units. The failures have been attributed to a combination of time-dependent effects. Fatigue in these bolts is the subject of an ASME code analysis, which is a TLAA. The high predicted usage factor, the additional aging effects requiring mitigation, and the fact that some of these are synergistic (e.g., fatigue and the other cracking mechanisms) dictate that management of the fatigue usage factor in these bolts will be insufficient by itself, and that an aging management program must be constructed for the bolts which either adequately address all of these effects, or which will ensure their safety function despite these effects. The Wolf Creek aging management program for
reactor vessel internals for the license renewal period has not been determined. See Section A1.35 for the commitment to develop this program. A3.2.3 Effects of the Reactor Coolant System Environment on Fatigue Life of Piping and Components (Generic Safety Issue 190) Concerns with possible effects of elevated temperature, reactor coolant chemistry environments, and different strain rates prompted NRC-sponsored research to assess these effects, culminating in the guidance of NUREG/CR-6260, "Application of NUREG/CR-5999 Interim Fatigue Curves to Selected Nuclear Power Plant Components." Although GSI 190 has been closed for plants with 40-year initial licenses, the NUREG-1800 states that "The applicant's consideration of the effects of coolant environment on component fatigue life for license renewal is an area of review," noting the staff recommendation "-that the samples in NUREG/CR-6260 should be
evaluated considering environmental effects for license renewal."
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-40 Rev. 29 License Renewal Application NUREG/CR-6260 Table 5-82 identifies seven sample locations for newer Westinghouse plants such as WCGS: Reactor Vessel Lower Head to Shell Juncture Reactor Vessel Primary Coolant Inlet Nozzle Reactor Vessel Primary Coolant Outlet Nozzle Surge Line Hot Leg Nozzle Charging Nozzles (Loop 1 and 4 nozzles are separately monitored at WCGS) Safety Injection Nozzles - Boron Injection tank (BIT) or High-
Head Safety Injection (HHSI) Nozzles Residual Heat Removal Line Inlet Transition Degree Accumulator Safety Injection (ACCSI) and RHR Cold Leg Injection Nozzles.
WCGS performed plant-specific calculations for these seven sample
locations using the appropriate F en factors from NUREG/CR-6583 for carbon and low-alloy steels and from NUREG/CR-5704 for stainless
steels, as appropriate for the material at each location. The material-specific worst-case F EN multiplier was calculated for each location, and applied to the fatigue usage factor expected at 60 Years at that location. Strain rate information was not used to determine F EN. All of these locations except the first, the vessel lower head to shell juncture, are included in the Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1. The first location is not monitored because the low projected usage factor, when multiplied by the applicable F EN , remains negligible. At the first location, the expected 60-year fatigue usage factor was determined by multiplying the calculated design basis 40-year usage factor times 1.5. All others were projected from the historical and current rates of accumulation of transient cycles and usage factors. When these projected 60-year usage factors are multiplied by the respective F EN, the results are all less than the code limit of 1.0.
The Metal Fatigue of Reactor Coolant Pressure Boundary program described in Section A2.1 is structured to continue to confirm that this is so, or to initiate appropriate evaluations and corrective
measures.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-41 Rev. 29 License Renewal Application A3.2.4 Assumed Thermal Cycle Count for Allowable Secondary Stress Range Reduction Factor in B31.1 and ASME Section III Class 2 and 3 Piping None of ANSI B31.1 or ASME Section III Subsections NC and ND invokes fatigue analyses. However, if the number of full-range thermal cycles is expected to exceed 7,000, these codes require the application of a stress range reduction factor to the allowable stress range for expansion stresses (secondary stresses). The allowable secondary stress range is 1.0 S A for 7000 equivalent full-temperature thermal cycles or less and is reduced in steps to 0.5 S A for greater than 100,000 cycles. Partial cycles are counted
proportional to their temperature range. A review of ASME Section III Class 2 and 3 and B31.1 piping specifications found no indication of a number of expected lifetime full-range or equivalent full-range thermal cycles greater than 7,000 during the original 40-year plant life. The survey of all plant piping systems found that some of the reactor coolant sample lines may be subject to more than 7,000 but
less than 11,000 full temperature cycles in 60 years requiring a stress range reduction factor (SRRF) of 0.9 times the allowable
stress. The WCGS design analyses of secondary stress ranges are within the limits imposed by the 0.9 SRRF in all line segments. A3.2.5 Fatigue Design of Spent Fuel Pool Liner and Racks for Seismic Events The WCGS spent fuel pool racks were replaced in order to accommodate a larger inventory. The design of the replacement racks included a fatigue analysis of the racks and of high-stress locations in the pool liner. These analyses are described in USAR Section 9.1A.4.3.5.4. The analyses remain valid for any period for which the number of operating basis earthquake events (OBE) has not been and is not expected to be exceeded, assuming an additional safe shutdown earthquake (SSE) might occur. Since the remaining plant life from the present to the end of the period of extended operation (2006 to 2045) is less than that of the original license to which the numbers of OBE and SSE events apply, and since no SSE or significant OBE has occurred, these analyses remain valid for the period of extended
operation.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-42 Rev. 29 License Renewal Application A3.2.6 Fatigue Design and Analysis of Class IE Electrical Raceway Support Angle Fittings for Seismic Events The design of Class IE electrical raceway included a fatigue evaluation of the effects of operating basis and safe shutdown earthquake loads (OBE and SSE loads) on angle fittings used at the connections of strut hangers to overhead supports, or at interhanger locations.
This analysis was extremely conservative, assuming 1000 allowable cycles for a deflection considerably less than the endurance limit. No seismic events have induced significant cyclic loads on these components in the 20-year operating history of the plant to date, so that the design basis number of events remains sufficient for the remainder of the original licensed operating period, plus the period
of extended operation. A3.3 ENVIRONMENTAL QUALIFICATION (EQ) OF ELECTRICAL COMPONENTS Aging evaluations that qualify electrical and I&C components required to meet the requirements of 10 CFR 50.49 are evaluated to
demonstrate qualification for the 40 year plant life are TLAAs. The existing WCGS Environmental Qualification program adequately manages component thermal, radiation, and cyclical aging through the use of aging evaluations based on 10 CFR 50.49(f) qualification methods. As required by 10 CFR 50.49, EQ components not qualified for the
current license term are to be refurbished or replaced, or have their qualification extended prior to reaching the aging limits established in the evaluation.
Continuing the existing 10 CFR 50.49 EQ program ensures that the aging effects are managed and that the EQ components continue to perform their intended functions for the period of extended operation. The Environmental Qualification of Electrical Components
program is described in Section A2.2. A3.4 CONCRETE CONTAINMENT TENDON PRESTRESS The WCGS containment is a prestressed concrete, hemispherical-dome-on-a-cylinder structure, with a steel membrane liner. Post-tensioned tendons compress the concrete and permit the structure to withstand design basis accident internal pressures. The reinforced concrete basemat is conventionally reinforced.
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-43 Rev. 29 License Renewal Application To ensure the integrity of the containment pressure boundary under design basis accident loads, design predictions of loss of prestress demonstrate that prestress should remain adequate for the design life. An inspection program confirms that the tendon prestress
remains within design limits throughout the life of the plant [USAR Section 3.8.1, Technical Specification Surveillance Requirement SR 3.6.1.2]. Continuing the existing ASME Subsection IWL tendon surveillance program ensures that loss of prestress aging effects will be managed and that the containment tendons will continue to perform their intended functions for the period of extended operation. The program
is described in Section A2.3. A3.5 CONTAINMENT LINER PLATE, POLAR CRANE BRACKET, AND PENETRATION LOAD CYCLES Design of the polar crane for a finite number of loads is a TLAA at WCGS (Section A3.6.1). At some plants, though not at WCGS, the supporting crane rail brackets or other supporting structural elements may also have been designed for these cyclic loads.
NUREG-1800 Section 4.6.1 notes that in some designs "Fatigue of the liner plates or metal containments may be considered in the design based on an assumed number of loading cycles for the current
operating term." At WCGS however, the only metallic components of the containment pressure boundary that are designed for a specific number of load cycles in a design lifetime are the main steam penetrations. The containment liner and the remaining penetrations were designed to stress limit criteria, independent of the number of load cycles, and with no fatigue analyses. A3.5.1 Design Cycles for the Main Steam Line Penetrations The BC-TOP-1, "Containment Building Liner Plate Design Report," Part II Section 1.1, describes the main steam penetration design for cyclic loads. The design basis includes 100 lifetime steady state operating thermal gradient plus
normal operating cyclic loads ("Loading Condition V"), and 10 steady state operating thermal gradient plus steam pipe rupture cyclic loads ("Loading Condition IV").
Wolf Creek Appendix A USAR Supplement Wolf Creek Generating Station Page 18A-44 Rev. 29 License Renewal Application The operating history to date indicates that the original design basis 100 operating cycles assumed for main steam penetrations will be adequate for the 60-year extended operating period. For license renewal, an evaluation of an equivalent ASME Section III Class 1 fatigue usage factor found that the penetrations could withstand as many as 2500 lifetime full-range thermal cycles ("Condition V" events), plus the fatigue effects of an end-of-life main steam rupture inside containment (a "Condition IV" event), with a cumulative usage factor of less than 1.0. There is therefore more than sufficient margin in the design for any possible increase in operating cycles above the original estimate. The design of the main steam penetrations is therefore valid for the
period of extended operation. A3.6 PLANT-SPECIFIC TIME-LIMITED AGING ANALYSES A3.6.1 Containment Polar Crane, Fuel Building Cask Handling Crane, Spent Fuel Pool Bridge Crane, and Fuel Handling Machine CMAA-70 Load Cycle Limits The USAR Section 9.1.4 describes design of these lifting machines to Crane Manufacturers Association of America Specification No. 70 (CMAA-70 (1975)). The CMAA-70 crane service classification ("class"
or "design class") for each machine depends, in part, on the assumption that the number of stress cycles at or near the maximum allowable stress will not exceed the number assumed for that design class. In operation, this means the number of significant lifts, i.e. those which approach or equal the design load, should not exceed the number of stress cycles assumed for that design class.
In all cases the design standard number of full-capacity lifts far exceeds the number expected of the machine for a 60-year period of extended operation. The lifting machine designs therefore remain valid for the period of extended operation. A3.7 TLAAS SUPPORTING 10 CFR 50.12 EXEMPTIONS One 10 CFR 50.12 exemption, for use of a leak-before-break analysis for the primary coolant loops, is based in part on a time-limited aging analysis of fatigue effects. See Section A3.2.1.11.