Text

Attachment 2, Surry Power Station Units 1 and 2, Marked-up Technical Specifications Pages AFW Requirements and Surveillances Revisions
	ML050700079
Person / Time
Site:	Surry
Issue date:	03/08/2005
From:	; Virginia Electric & Power Co (VEPCO)
To:	; Office of Nuclear Reactor Regulation
References
	TS 3.6-1
	Download: ML050700079 (35)
	v • d • e

Attachment 2 Marked-up Technical Specifications Pages AFW Requirements and Surveillances Revisions Surry Power Station Units 1 and 2 Virginia Electric and Power Company (Dominion)

3.6 TURBINECYCLE Applicability TS 3.6-1

(+G?-W-Applies to the operaLrg status of the Main Steam and Auxiliary Feed Systems.

Objectives To define the conditions required in the Main Steam System and Auxiliary Feed System for protection of the steam generator and to assure the capability to remove residual heat from the core during a loss of station powedor accident situations.

Specifidon A. A unit's Reactor Coolant System temperatwe or pressure shall not exceed 350°F or 450 psig, respectively, or the reactor shall not be critical unless the five mi& steam line code safety vdves associated with each steam generator in unisolated reactor coolant loops are OPERABLE with lift settings as specified in Table 3.6-1A and 3-6-113. Assscie+ed s y s 4 - w ~ pip&, 5h4 also b t To *assure residual heat removal capabilities, the following conditions shail be met B L E,

C,

fistem conditions of 350°F and 450 psig which would preclude operation of the Residual Heat Removal System. The following shall apply:

1.

iary feedwater pumps shall be OPERABLE-2-A minimum of 96,000 gallons of water shall be available in the protected condensate storage tank to supply emergency water to the auxiliary feedwater pump suctions.

RELOCATE REVISED TS 3,b.D HERE 1

4. The auxiliary feedwater cross-connect capability shall be avaiIabIe, as follows:

a. Two of the three auxiliary feedwater pumpdon the opposite unit (automatic initiation instrumentation need not be OPERABLE) capable of being used with

(@nd %e &ssoclcLked red-undwf flocl the opening of the, cross-connect.

b. A minimum of 60,000 gallons of water available in the protected condensate storage tank of the opposite unit to supply emergency water to the auxiliary feedwater pump suction of that unit,

c. Emergency power supplied to the opposite units auxiliary feedwater pumps and to the AFW cross-connect valves, as follows:

1.

2.

3.

4.

5.

6.

Two diesel generators (the opposite units diesel generator and the shared backup diesel generator) OPERABLE with each generators day tank having at least 290 gallons of fuel and with a minimum on-site supply of 35,000 gallons of fuel available.

Two 4160V emergency buses energized.

Two OPERABLE flow paths for providing fuel to the opposite units diesel generator and the shared backup diesel generator.

Two station batteries, two chargers and the DC distribution systems OPERABLE.

Emergency diesel generator battery, charger and the DC control circuitry OPERABLE for the opposite units diesel generator and for the shared back-up diesel generator.

The 480V emergency buses energized which supply power to the auxiliary feedwater cross-connect valves:

a. For AFW from Unit 1 to Unit 2: Buses lH1 and 1J1.

b. For AFW from Unit 2 to Unit I: Buses 2ff I and 2J1-Amendment Nos. 22&mf%@

7. One of the two physically independent circuits from the offsite transmission network energizing the opposite unit's emergency buses.

1 5

1Usm.T A fiF?E WG?

7 5 s 3,6.D33c/(o.E,3.dS, 3,4,,

thejteam d@en ayCiliary f&ed components enumerated in Specifica EQWAL,ENT I-13 I. If the specific activity of the secondary coolant system exceeds 0.40 pCi/cc DOSE EQUIVALENT 1-13 1, the reactor shall be shut down and cooled to 500°F or less within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months after detection and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

unit's auxiliary feedwater pu making repairs.

1. One&& of the opposite u two of the opposite unit's auxiliary feedwater pumps may be inoperable for a period not to exceed 14 days.

Amendment Nos-4?&w&g&

INSERT A - New TSs 3.6.D, 3.6.E, 3.6.F, and 3.6.G D. With Reactor Coolant System conditions less than 350°F and 450 psig and the steam generators being used for heat removal, if either the motor driven pump or the associated flowpath becomes inoperable, immediately initiate action to restore the inoperable equipment to OPERABLE status.

E. With the turbine driven pump inoperable on the affected unit and with Reactor Coolant System temperature and pressure greater than 350°F and 450 psig, respectively, immediately following REFUELING SHUTDOWN and prior to REACTOR CRITICAL, restore the inoperable pump to OPERABLE status within 7 days or be less than 350°F and 450 psig within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

F. The following actions shall be taken when one or more auxiliary feedwater pumps are inoperable on the affected unit for reasons other than those addressed in Specification 3.6.E:

1. With one auxiliary feedwater pump inoperable, restore the inoperable pump to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. With two auxiliary feedwater pumps inoperable, be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

3. With three auxiliary feedwater pumps inoperable, immediately initiate action to restore one inoperable pump to OPERABLE status. Specification 3.0.1 and all other required actions directing mode changes are suspended until one inoperable pump is restored to OPERABLE status.

G. The following actions shall be taken with inoperability of a component or instrumentation other than the flow instrumentation in one or both redundant auxiliary feedwater flowpaths required by Specification 3.6.C.3 on the affected unit: (See Specification 3.7 and TS Table 3.7-6 for auxiliary feedwater flow instrumentation requirements.)

1. With component or instrumentation inoperability in one redundant flowpath, restore the inoperable component or instrumentation to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. With component or instrumentation inoperability affecting both redundant flowpaths, immediately initiate action to restore the inoperable component or instrumentation in one flowpath to OPERABLE status. Specification 3.0.1 and all other required actions directing mode changes are suspended until the inoperable component or instrumentation in one flowpath is restored to OPERABLE status.

TS 3.6-4 1 4%=%49-

2. Both of the opposite u the opposite units protected condensate storage tank; the cross-connect piping from the opposite unit; or three of the opposite units auxiliary feedwater pumps may bc inoperable for a. period not to exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

opposite units emergency power system as required by above may be inoperable for a period not to exceed 14 days; if this trains inoperability is related to a diesel may be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE; if after 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , the service, the diesel shall be considered following limitations apply:

a. If the offsite power source becomes unable to energize the opposite. units OPERABLE train, operation may continue provided its associated emergency

. diesel generator is energizing the OPERABLE train.

b. If the opposite units OPERABLE trains emergency diesel generator becomes unavailable, operation may continue for 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months provided the offsite power source is energizing the opposite units OPERABLE train.

1 r

c. Return of the originally inoperable train to OPERABLE status allows the second inoperable train to revert to the 14 day limitation, I

If the above requirements are not met, be in W HOT SHUTDOWN within the next 3.x The of protected condensate storage ta pumps provided the water level is maintained above 60,000 gallons, sufficient replenishment water is available in the 300,000 gallon condensate storage tank, and replenishment of the protected condensate storage tank is commenced within two hours after the cessation of protected condensate storage tank water consumption.

r with the auxiliary -feedM,akr Amendment Nos. &XhCE@-

Basis A reactor which has been shutdown from power requires removal of core residual heat. While reactor coolant temperature or pressure is > 350°F or 450 psig, respectively. residual heat removal requirements are normally satisfied by steam bypass to the condenser. If the condenser is unavailable, steam can be released to the atmosphere through the safety valves or power operated relief valves.

i 1

e capability to supply feedwater to the generators is normally provided by the operation of thej ndensate and Feedwater Systems-Rde event o comp ete oss of e %%z$power to the N S E R f f 45 rEy P S residud heat removal would continue to be assured by the availability of either the driven auxiliary feedwater pump or one of the motor driven auxiliary feedwater pumps and the protected condensate storage tank.

In the event of a fire or high energy line break which would render the auxiliary feedwater pumps inoperable on the affected unit, residual heat removal would continue to be assured by the availability of either G-?lrivcn auxiliary feedwater pump or one of the motor&ven auxiliary feedwater pumps from the opposite unit A minimum of two auxiliary feedwater pumps are required to be operable* on the opposite unit to ensure compliance with the design basis bin&

)

accident analysis assumptions, in that auxiliary feedwater can be delivered via the cross-connect, even if a single active failure results in the loss of one of the two pumps. In addition, the requirement for operability of the opposite units emergency power system is to ensure that auxiliary feedwater from the opposite unit can be supplied via the cross-connect in the event of a common-mode failure of all auxiliary feedwater pumps in the affected unit due to a high energy line break in the main steam valve house. Without this requirement, a single failure (such as ioss of the shared backup diesel generator) could result in Ioss of power to the opposite units emergency buses in the event of a ioss of offsite power, thereby rendering the cross-connect inoperable. The longer allowed outage time for the opposite units emergency power system is based on the low probability of a high energy line break in the main steam valve house coincident with a loss of offsite power.

excluding automatic initiation instrumentation Amendment Nos. iS&mH?&

INSERT B - New paragraphs in TS 3.6 Basis The Auxiliary Feedwater System provides a source of feedwater to the secondary side of the steam generators at times when the Feedwater System is not available, thereby maintaining heat sink capabilities of the steam generators. The Auxiliary Feedwater System provides heat removal until normal feedwater flow is restored or until an orderly cooldown to Reactor Coolant System conditions where the Residual Heat Removal System can be placed in service. The Auxiliary Feedwater System for each unit consists of two motor driven pumps, one turbine driven pump, a 1 10,000 gallon protected condensate storage tank, and associated common piping, redundant headers, valves, controls, and instrumentation. Although the flowpaths from the pumps to the steam generators include common piping, the configuration of the system provides two redundant flowpaths. The components in one flowpath are supplied by the H emergency bus, while the other is supplied by the J emergency bus. The auxiliary feedwater design basis accident is a loss of normal feedwater with offsite power available (the reactor coolant pumps running).

The auxiliary feedwater flow required to remove the heat and cool the unit to residual heat removal conditions for this design basis case can be provided by any combination of two auxiliary feedwater pumps.

Refer to the Basis of Specification 4.8 for a discussion of auxiliary feedwater pump operability considerations.

Regarding the allowed outage times for auxiliary feedwater pump inoperability, Specification 3.6.E allows 7 days versus a 72 hour8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months allowed outage time in Specification 3.6.F.1. The longer allowed outage time is based on the reduced decay heat following refueling and prior to reactor criticality.

In the unlikely event of loss of auxiliary feedwater capability on the affected unit (i.e., with all required auxiliary feedwater pumps inoperable or with both redundant flowpaths having an inoperable component or instrumentation), the required action is to immediately initiate action to restore operability of one inoperable pump or of the inoperable component or instrumentation in one flowpath. With such a loss of auxiliary feedwater capability, the unit is in a seriously degraded condition. In this condition, the unit should not be perturbed by any action, including a power change, which could result in a plant transient or trip. The seriousness of this condition requires that action be taken immediately to restore operability, where immediately means the required action should be pursued without delay and in a controlled manner. Under these circumstances, Specification 3.0.1 and all other required actions directing mode changes are suspended until one inoperable pump or the inoperable component or instrumentation in one flowpath is restored to operable status, because taking those actions could place the unit in a less safe condition.

'UrSM Stttioo 4, Reactor Coolant Syrtta mAR Section 9.3, R c r i d u l &at Ruavrl System WSAR Section 10.3.1, thin Stcrs Syitca UFSAR Section 10.

UfSAR Section 10.

VFfAR Section 10.3

TS 3.9-2 43+w?-

7. Two emergency diesel generators OPERABLE as explained in Section 3.16.

B.

The requirements of Specification 3.9-A items 3, 4, 5, 6, and 7 may be modified as provided in Section 3.16-B.

Basis During startup of a unit, the stations 4,160V and 480V normal and emergency buses are energized from the stations 34.5KV buses. At reactor power levels greater than 5 percent of rated power the 34.5KV buses are required to energize only the emergency buses because at this power level the station generator can supply sufficient power to the normal 4,160V and 480V lines to operate the unit. Three reactor coolant loop operation with all 4,160V and 480V buses energized is the normal mode of operation for a unit.

The electrical power requirements and the emergency auxiliary feedwater cross-connect are contained in TS requirements for the 4.6, respectively.

References FSAR Section 8.4 Station Service Systems FSAR Section 8.5 Emergency Power Systems Amendment Nos. 22ihd2+

TS 3.16-6 The day tanks are filled by transferring fuel from any one of two buried tornado missile protected fuel oil storage tanks, each of 20,000 gal capacity. Two of 100 percent capacity fuel oil transfer pumps per diesel generator are powered from the emergency buses to assure that an operating diesei generator has a continuous supply of fuel. The buried fitel oil storage tanks contain a seven (7) day supply of fuel, 35,000 gal minimum, for the fkll load operation of one diesel generator; in addition, there is an above ground fuel oil storage tank on-site with a capacity of 210,000 gal which is used for transferring fuel to the buried tanks.

One of the two buried fuel oil storage tanks may be inoperable to permit inspection and related repair of that buried fuel oil storage tank. While one tank is removed from service, the remaining buried fuel oil storage tank supplies fuel oil to the EDGs of both units. Prior to removal of one buried tank from service and while it is inoperable, verification of the volume in the remaining buried he1 oil storage tank and the above ground fuel oif storage tank is required to ensure an adequate source of fuel oil remains available onsite. In addition, verification of the offsite replacement he1 oil supply is also required. While one buried tank is out of service, the verification of the onsite and offsite fuel oil sources continues to support full load operation of one diesel generator for seven days.

If a loss of normal power is not accompanied by a loss-of-coolant accident, the safeguards equipment will not be required. Under this condition the following additional auxiliary equipment may be operated from each emergency bus:

A. One component cooling pump

3. One residual heat removal pump C. One motor-driven auxiliary steam generator feedwater pump The emergency buses in each unit are capable of being interconnected under strict administrative procedures so that the equipment which would normally be operated by one.

of the diesels could be operated by the other diesel, if required.

The electrical power requirements and the auxiliary feedwater crossconnect are requirements for the 4.6 respectively.

Amendment Nos. 236ttmc235-.

TS 4.8-1

.cM-8ir-99.

4.8 AUXILIARY FEEDWATER SYSTEM Applies to the periodic testing requirements of the Auxiliaty Feedwater System..

x To verify the operabifity of the auxiliary feedwater pumps.

1.

At least once per 31 days:

a.

Verify that the Auxiliary Feedwater Sy operated, and automatic valves in e coned psltion. This verificdon indu locked, sealed; or otherwise secured in position, valves in the the cross-connect from the opposite unit and valves in the steam supply paths to the turbine driven auxiliary feedwater pump.

a.

Verify that vatve in the auxiliary cross-connect from the opposite u when tested in 4

2.

At least once per 92 days:

accordance with Specificatbns 4.0.5.

3.

At least once per 92 days on a STAGGERED TEST BASIS:

a.

Verify that the auxiliary feedwater pumps perform satisfactorily when tested in accordance with Specification 4.0.5.

The provisions of Specification 4.0.4 are not appfi&e for the turbine driven pump. f d o k %d-

F=a R TS 4.ELA.4-TS 4.8-2 4334+9+

lant System temperature and psig, respectively, the motor all be flow tested from the ency Condensate Storage criticality, the steam turbine mp shall be flow tested from the ergency Condensate Storage rovisions of Specification 4.0.4 P

5.

During periods of reactor shutdown with the opposite unit's Reactor Coolant System temperature and pressure greater than 350" F and 450 psig, respectively:

a.

Continue to verify that the motor driven auxiliary feedwater pumps perform satisfactorily when tested at the frequency defined in Specification 4.8.A.3.

b.

Verify that each valve in the auxiliary in accordance with feedwater for the opposite unit Specifications 4.0.5.

I M S E R T D HEPE l=O< T S 4. 8, A. b mXmJnce mma B.

The pump and valve test% (shall be considered satisfactory if they meet the ASME Section XI Inservice Testing Program acceptance criteria.

b generator.

Amendment Nos.

INSERT C - New TS 4.8.A.4

4. Whenever the units Reactor Coolant System temperature and pressure have been less than 350°F and 450 psig, respectively, for a period greater than 30 days, prior to Reactor Coolant System temperature and pressure exceeding 350°F and 450 psig, respectiveJy, verify proper alignment of the required auxiliary feedwater ffowpaths by verifying flow from the 1 10,000 gatlon above ground Emergency Condensate Storage Tank to the steam generators from each of the auxiliary feedwater pumps.

INSERT D - New TS 4.8.A.6

6. On an 18-month frequency:

a. Verify each auxiliary feedwater automatic valve that is not locked, sealed, or otherwise secured in position, actuates to the correct position on an actual or simulated actuation signal.

b. Verify each auxiliary feedwater pump starts automatically on an actual or simulated actuation signal. Note that this surveillance is required to be performed for the turbine driven pump within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after reaching HOT SHUTDOWN.

Basis TS 4.0-3 The correct alignment for manual, power Auxiliary Feedwater System steam and will provide system o This position check does not include:

locked, seated or oth8WiSe secured h position since they are verified to be in sealing or otherwise securing; 2) vent, drain their correct position prior to or reli,ef valves on those hs; and, 3) those valves that cannot be inadvertently misaligned s heck valves. This surveillance does not require any testing or valve manipulation. It involves verification that those vafves capable of being mispositioned am in the correct position.

The auxiliary feedwater pumps ASME Section XI to demonstrate operability.

8s that are )

1

)

ater pumps are capabte of supplying feedwater to the am generators. For a main steam fine break or fire event in the Therefore, when considering a single fajlure, both motor driven auxiliary feedwater pumps are required to be OPERABLE' during shutdown to support the opposite unit if the Reactor Coolant System temperature or pressure of the opposite unit is greater than 350°F and 450 psig, respectively. Thus, to establish quarterly on the same S

' excluding automatic initiation instrumentation Amendment NOS.-

INSERT E - Add to second paragraph in TS 4.8 Basis Verification of the developed head of each auxiliary feedwater pump ensures that the pump performance has not degraded. Flow and differential head tests are normal inservice testing requirements. Because it is sometimes undesirable to introduce cold auxiliary feedwater into the steam generators while they are operating, the inservice testing is typically performed on recirculation flow to the 1 10,000 gallon Emergency Condensate Storage Tank.

INSERT F - New paragraph in TS 4.8 Basis Appropriate surveillance and post-maintenance testing is required to declare equipment OPERABLE.

Testing may not be possible in the applicable plant conditions due to the necessary unit parameters not having been established. In this situation, the equipment may be considered OPERABLE provided testing has been satisfactorily completed to the extent possible, and the equipment is not otherwise believed to be incapable of performing its function.

This will allow operation to proceed to a condition where other necessary surveillance or post maintenance tests can be completed. Relative to the turbine driven auxiliary feedwater pump, Specification 4.8.A.3.a is modified by a note indicating that the developed head test of the turbine driven pump should be deferred until suitable conditions are established; this deferral is required because there may be insufficient steam pressure to perform the test.

75 4.0-4 0

@-e+w The capacity of the Emergency CondOnsate storage Tank and the flow rate of any one of the three auxiliary feedwater pumps in conjunction with the water inventory of the steam generators is capabfe of maintaining the plant in B safe condition and sufficient to cool the unit down.

Proper functioning of the steam turbine admission valve and the ability of the auxiliary feedwater pumps to start will demonstrate the integrity of the system. -p Verification of comd operation can be made both from instrumentation within the Main Control Room and direct visual obsenration of the pumps.

References

. Amendment Nos. +Xhd49&

Proposed Technical Specifications Pages AFW Requirements and Surveillances Revisions Surry Power Station Units 1 and 2 Virginia Electric and Power Company (Dominion)

TS 3.6-1 3.6 TURBINE CYCLE Applicability Applies to the operating status of the Main Steam and Auxiliary Feed Systems.

Objectives To define the conditions required in the Main Steam System and Auxiliary Feed System for protection of the steam generator and to assure the capability to remove residual heat from the core during a loss of station power/or accident situations.

Specification A. A unit's Reactor Coolant System temperature or pressure shall not exceed 350°F or 450 psig, respectively, or the reactor shall not be critical unless the five main steam line code safety valves associated with each steam generator in unisolated reactor coolant loops are OPERABLE with lift settings as specified in Table 3.6-1A and 3.6-1B. Associated system piping shall also be OPERABLE.

B. With Reactor Coolant System conditions less than 350°F and 450 psig and the steam generators being used for heat removal, one motor driven auxiliary feedwater pump and associated flowpath shall be OPERABLE.

C. To assure residual heat removal capabilities, the following conditions shall be met prior to exceeding Reactor Coolant System conditions of 350°F and 450 psig which would preclude operation of the Residual Heat Removal System. The following shall apply:

1. Three auxiliary feedwater pumps shall be OPERABLE.

I

2. A minimum of 96,000 gallons of water shall be available in the protected condensate storage tank to supply emergency water to the auxiliary feedwater pump suctions.

Amendment Nos.

TS 3.6-2

3. Two redundant flowpaths, including system piping, headers, valves, and control board indication required for operation of the components enumerated in Specifications 3.6.C. 1 and 3.6.C.2, shall be OPERABLE.

4. The auxiliary feedwater cross-connect capability shall be available, as follows:

a. Two of the three auxiliary feedwater pumps and the associated redundant flowpaths on the opposite unit (automatic initiation instrumentation need not be OPERABLE) capable of being used with the opening of the cross-connect.

b. A minimum of 60,000 gallons of water available in the protected condensate storage tank of the opposite unit to supply emergency water to the auxiliary feedwater pump suction of that unit.

c. Emergency power supplied to the opposite units auxiliary feedwater pumps and to the AFW cross-connect valves, as follows:

1. Two diesel generators (the opposite units diesel generator and the shared backup diesel generator) OPERABLE with each generators day tank having at least 290 gallons of fuel and with a minimum on-site supply of 35,000 gallons of fuel available.

2. Two 4160V emergency buses energized.

3. Two OPERABLE flow paths for providing fuel to the opposite units diesel generator and the shared backup diesel generator.

4. Two station batteries, two chargers and the DC distribution systems OPERABLE.

5. Emergency diesel generator battery, charger and the DC control circuitry OPERABLE for the opposite units diesel generator and for the shared back-up diesel generator.

TS 3.6-3

6. The 480V emergency buses energized which supply power to the auxiliary feedwater cross-c onnect valves :

a. For AFW from Unit 1 to Unit 2: Buses 1H1 and 1J1.

b. For AFW from Unit 2 to Unit 1: Buses 2H1 and 2J1.

7. One of the two physically independent circuits from the offsite transmission network energizing the opposite units emergency buses.

D. With Reactor Coolant System conditions less than 350°F and 450 psig and the steam generators being used for heat removal, if either the motor driven pump or the associated flowpath becomes inoperable, immediately initiate action to restore the inoperable equipment to OPERABLE status.

E. With the turbine driven pump inoperable on the affected unit and with Reactor Coolant System temperature and pressure greater than 350°F and 450 psig, respectively, immediately following REFUELING SHUTDOWN and prior to REACTOR CRITICAL, restore the inoperable pump to OPERABLE status within 7 days or be less than 350°F and 450 psig within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

F. The following actions shall be taken when one or more auxiliary feedwater pumps are inoperable on the affected unit for reasons other than those addressed in Specification 3.6.E:

1. With one auxiliary feedwater pump inoperable, restore the inoperable pump to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. With two auxiliary feedwater pumps inoperable, be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

Amendment Nos.

TS 3.6-4

3. With three auxiliary feedwater pumps inoperable, immediately initiate action to restore one inoperable pump to OPERABLE status. Specification 3.0.1 and all other required actions directing mode changes are suspended until one inoperable pump is restored to OPERABLE status.

G. The following actions shall be taken with inoperability of a component or instrumentation other than the flow instrumentation in one or both redundant auxiliary feedwater flowpaths required by Specification 3.6.C.3 on the affected unit: (See Specification 3.7 and TS Table 3.7-6 for auxiliary feedwater flow instrumentation requirements.)

1. With component or instrumentation inoperability in one redundant flowpath, restore the inoperable component or instrumentation to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. With component or instrumentation inoperability affecting both redundant flowpaths, immediately initiate action to restore the inoperable component or instrumentation in one flowpath to OPERABLE status. Specification 3.0.1 and all other required actions directing mode changes are suspended until the inoperable component or instrumentation in one flowpath is restored to OPERABLE status.

H. The specific activity of the secondary coolant system shall be I 0.10 yCi/cc DOSE EQUIVALENT 1-131. If the specific activity of the secondary coolant system exceeds 0.10 pCi/cc DOSE EQUIVALENT 1-131, the reactor shall be shut down and cooled to 500°F or less within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months after detection and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

Amendment Nos.

TS 3.6-4a I. The requirements of Specification 3.6.C.4 above concerning the opposite units auxiliary feedwater pumps; the associated redundant flowpaths, including piping, headers, valves, and control board indication; the cross-connect piping from the opposite unit; and the protected condensate storage tank may be modified to allow the following components to be inoperable, provided immediate attention is directed to making repairs. Automatic initiation instrumentation associated with the opposite units auxiliary feedwater pumps need not be OPERABLE.

1. One of the opposite units flowpaths or two of the opposite units auxiliary feedwater pumps may be inoperable for a period not to exceed 14 days.

2. Both of the opposite units flowpaths; the opposite units protected condensate storage tank; the cross-connect piping from the opposite unit; or three of the opposite units auxiliary feedwater pumps may be inoperable for a period not to exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

3. A train of the opposite units emergency power system as required by Section 3.6.C.4.c above may be inoperable for a period not to exceed 14 days; if this trains inoperability is related to a diesel fuel oil path, one diesel fuel oil path may be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the other flowpath is proven OPERABLE; if after 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , the inoperable flowpath cannot be restored to service, the diesel shall be considered inoperable. During this 14 day period, the following limitations apply:

a.

If the offsite power source becomes unable to energize the opposite units OPERABLE train, operation may continue provided its associated emergency diesel generator is energizing the OPERABLE train.

b.

If the opposite units OPERABLE trains emergency diesel generator becomes unavailable, operation may continue for 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months provided the offsite power source is energizing the opposite units OPERABLE train.

Amendment Nos.

TS 3.6-4b

c.

Return of the originally inoperable train to OPERABLE status allows the second inoperable train to revert to the 14 day limitation.

If the above requirements are not met, be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be less than 350°F and 450 psig within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

J. The requirements of Specification 3.6.C.2 above may be modified to allow utilization of protected condensate storage tank water with the auxiliary feedwater pumps provided the water level is maintained above 60,000 gallons, sufficient replenishment water is available in the 300,000 gallon condensate storage tank, and replenishment of the protected condensate storage tank is commenced within two hours after the cessation of protected condensate storage tank water consumption.

TS 3.6-5 Basis A reactor which has been shutdown from power requires removal of core residual heat. While reactor coolant temperature or pressure is > 350'F or 450 psig, respectively, residual heat removal requirements are normally satisfied by steam bypass to the condenser. If the condenser is unavailable, steam can be released to the atmosphere through the safety valves or power operated relief valves. The capability to supply feedwater to the generators is normally provided by the operation of the Condensate and Feedwater Systems.

The Auxiliary Feedwater System provides a source of feedwater to the secondary side of the steam generators at times when the Feedwater System is not available, thereby maintaining heat sink capabilities of the steam generators. The Auxiliary Feedwater System provides heat removal until normal feedwater flow is restored or until an orderly cooldown to Reactor Coolant System conditions where the Residual Heat Removal System can be placed in service. The Auxiliary Feedwater System for each unit consists of two motor driven pumps, one turbine driven pump, a 110,000 gallon protected condensate storage tank, and associated common piping, redundant headers, valves, controls, and instrumentation. Although the flowpaths from the pumps to the steam generators include common piping, the configuration of the system provides two redundant flowpaths. The components in one flowpath are supplied by the H emergency bus, while the other is supplied by the J emergency bus. The auxiliary feedwater design basis accident is a loss of normal feedwater with offsite power available (the reactor coolant pumps running). The auxiliary feedwater flow required to remove the heat and cool the unit to residual heat removal conditions for this design basis case can be provided by any combination of two auxiliary feedwater pumps.

Refer to the Basis of Specification 4.8 for a discussion of auxiliary feedwater pump operability considerations.

Regarding the allowed outage times for auxiliary feedwater pump inoperability, Specification 3.6.E allows 7 days versus a 72 hour8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months allowed outage time in Specification 3.6.F.1.

The longer allowed outage time is based on the reduced decay heat following refueling and prior to reactor criticality.

In the unlikely event of loss of auxiliary feedwater capability on the affected unit (i.e., with all required auxiliary feedwater pumps inoperable or with both redundant flowpaths having an inoperable component or instrumentation), the required action is to immediately initiate action to

TS 3.6-5a restore operability of one inoperable pump or of the inoperable component or instrumentation in one flowpath. With such a loss of auxiliary feedwater capability, the unit is in a seriously degraded condition. In this condition, the unit should not be perturbed by any action, including a power change, which could result in a plant transient or trip. The seriousness of this condition requires that action be taken immediately to restore operability, where immediately means the required action should be pursued without delay and in a controlled manner. Under these circumstances, Specification 3.0.1 and all other required actions directing mode changes are suspended until one inoperable pump or the inoperable component or instrumentation in one flowpath is restored to operable status, because taking those actions could place the unit in a less safe condition.

In the event of complete loss of electrical power to the station, residual heat removal would continue to be assured by the availability of either the turbine driven auxiliary feedwater pump or one of the motor driven auxiliary feedwater pumps and the 110,000-gallon protected condensate storage tank.

I In the event of a fire or high energy line break which would render the auxiliary feedwater pumps inoperable on the affected unit, residual heat removal would continue to be assured by the availability of either the turbine driven auxiliary feedwater pump or one of the motor driven auxiliary feedwater pumps from the opposite unit. A minimum of two auxiliary feedwater pumps are required to be operable* on the opposite unit to ensure compliance with the design basis accident analysis assumptions, in that auxiliary feedwater can be delivered via the cross-connect, even if a single active failure results in the loss of one of the two pumps. In addition, the requirement for operability of the opposite units emergency power system is to ensure that auxiliary feedwater from the opposite unit can be supplied via the cross-connect in the event of a common-mode failure of all auxiliary feedwater pumps in the affected unit due to a high energy line break in the main steam valve house. Without this requirement, a single failure (such as loss of the shared backup diesel generator) could result in loss of power to the opposite units emergency buses in the event of a loss of offsite power, thereby rendering the cross-connect inoperable. The longer allowed outage time for the opposite units emergency power system is based on the low probability of a high energy line break in the main steam valve house coincident with a loss of offsite power.

excluding automatic initiation instrumentation

TS 3.6-5b The specified minimum water volume in the 110,000-gallon protected condensate storage tank is sufficient for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of residual heat removal following a reactor trip and loss of all offsite electrical power. It is also sufficient to maintain one unit at hot shutdown for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months , followed by a 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months cooldown from 547°F to 350°F (i.e., RHR operating conditions). If the protected condensate storage tank level is reduced to 60,000 gallons, the immediately available replenishment water in the 300,000-gallon condensate tank can be gravity-fed to the protected tank if required for residual heat removal. An alternate supply of feedwater to the auxiliary feedwater pump suctions is also available from the Fire Protection System Main in the auxiliary feedwater pump cubicle.

The five main steam code safety valves associated with each steam generator have a total combined capacity of 3,842,454 pounds per hour at their individual relieving pressure; the total combined capacity of all fifteen main steam code safety valves is 11,527,362 pounds per hour.

The nominal power rating steam flow is 11,260,000 pounds per hour. The combined capacity of the safety valves required by Specification 3.6 always exceeds the total steam flow corresponding to the maximum steady state power than can be obtained during three reactor coolant loop operation.

The availability of the auxiliary feedwater pumps, the protected condensate storage tank, and the main steam line safety valves adequately assures that sufficient residual heat removal capability will be available when required.

The limit on steam generator secondary side iodine-131 activity is based on limiting the inhalation dose at the site boundary following a postulated steam line break accident to a small fraction of the 10 CFR 100 limits. The accident analysis, which is performed based on the guidance of NUREG-0800 Section 15.1-5, assumes the release of the entire contents of the faulted steam generator to the atmosphere.

Amendment Nos.

TS 3.6-6 REFERENCES UFSAR Section 4, Reactor Coolant System UFSAR Section 9.3, Residual Heat Removal System UFSAR Section 10.3.1, Main Steam System UFSAR Section 10.3.2, Auxiliary Steam System UFSAR Section 10.3.5, Condensate and Feedwater Systems UFSAR Section 10.3.8, Secondary Vent and Drain Systems UFSAR Section 14.2.1 1, Loss of Normal Feedwater UFSAR Section 14.3.2, Rupture of a Main Steam Pipe UFSAR Appendix 14B, Effects of Piping System Breaks Outside Containment Amendment Nos.

TS 3.9-2

7. Two emergency diesel generators OPERABLE as explained in Section 3.16.

B.

The requirements of Specification 3.9-A items 3,4,5,6, and 7 may be modified as provided in Section 3.16-B.

Basis During startup of a unit, the stations 4,160V and 480V normal and emergency buses are energized from the stations 34.5KV buses. At reactor power levels greater than 5 percent of rated power the 34.5KV buses are required to energize only the emergency buses because at this power level the station generator can supply sufficient power to the normal 4,160V and 480V lines to operate the unit. Three reactor coolant loop operation with all 4,160V and 480V buses energized is the normal mode of operation for a unit.

The electrical power requirements and the emergency power testing requirements for the auxiliary feedwater cross-connect are contained in TS 3.6.C.4.c and TS 4.6, respectively.

I References FSAR Section 8.4 Station Service Systems FSAR Section 8.5 Emergency Power Systems Amendment Nos.

TS 3.16-6 The day tanks are filled by transferring fuel from any one of two buried tornado missile protected fuel oil storage tanks, each of 20,000 gal capacity. Two of 100 percent capacity fuel oil transfer pumps per diesel generator are powered from the emergency buses to assure that an operating diesel generator has a continuous supply of fuel. The buried fuel oil storage tanks contain a seven (7) day supply of fuel, 35,000 gal minimum, for the full load operation of one diesel generator; in addition, there is an above ground fuel oil storage tank on-site with a capacity of 210,000 gal which is used for transferring fuel to the buried tanks.

One of the two buried fuel oil storage tanks may be inoperable to permit inspection and related repair of that buried fuel oil storage tank. While one tank is removed from service, the remaining buried fuel oil storage tank supplies fuel oil to the EDGs of both units. Prior to removal of one buried tank from service and while it is inoperable, verification of the volume in the remaining buried fuel oil storage tank and the above ground fuel oil storage tank is required to ensure an adequate source of fuel oil remains available onsite. In addition, verification of the offsite replacement fuel oil supply is also required. While one buried tank is out of service, the verification of the onsite and offsite fuel oil sources continues to support full load operation of one diesel generator for seven days.

If a loss of normal power is not accompanied by a loss-of-coolant accident, the safeguards equipment will not be required. Under this condition the following additional auxiliary equipment may be operated from each emergency bus:

A. One component cooling pump B. One residual heat removal pump C. One motor-driven auxiliary steam generator feedwater pump The emergency buses in each unit are capable of being interconnected under strict administrative procedures so that the equipment which would normally be operated by one of the diesels could be operated by the other diesel, if required.

The electrical power requirements and the emergency power testing requirements for the auxiliary feedwater cross-connect are contained in TS 3.6.C.4.c and TS 4.6 respectively.

I Amendment Nos.

TS 4.8-1 4.8 AUXILIARY FEEDWATER SYSTEM Applicability Applies to the periodic testing requirements of the Auxiliary Feedwater System.

Objective To verify the operability of the auxiliary feedwater pumps.

Specification A. Tests and Frequencies

1. At least once per 3 1 days:

a. Verify that the Auxiliary Feedwater System manual, power operated, and automatic valves in each flowpath are in the correct position. This verification includes valves that are not locked, sealed, or otherwise secured in position, valves in the cross-connect from the opposite unit and valves in the steam supply paths to the turbine driven auxiliary feedwater pump.

I

2. At least once per 92 days:

a. Verify that each motor-operated valve in the auxiliary feedwater flowpaths, including the cross-connect from the opposite unit, performs satisfactorily when tested in accordance with Specifications 4.0.5.

3. At least once per 92 days on a STAGGERED TEST BASIS:

a. Verify that the auxiliary feedwater pumps perform satisfactorily when tested in accordance with Specification 4.0.5. The provisions of Specification 4.0.4 are not applicable for the turbine driven pump. Note that the developed head test of the turbine driven pump is required to be performed within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after reaching HOT SHUTDOWN.

I Amendment Nos.

TS 4.8-2

4. Whenever the units Reactor Coolant System temperature and pressure have been less than 350°F and 450 psig, respectively, for a period greater than 30 days, prior to Reactor Coolant System temperature and pressure exceeding 350°F and 450 psig, respectively, verify proper alignment of the required auxiliary feedwater flowpaths by verifying flow from the 110,000 gallon above ground Emergency Condensate Storage Tank to the steam generators from each of the auxiliary feedwater pumps.

5. During periods of reactor shutdown with the opposite units Reactor Coolant System temperature and pressure greater than 350°F and 450 psig, respectively:

a. Continue to verify that the motor driven auxiliary feedwater pumps perform satisfactorily when tested at the frequency defined in Specification 4.8.A.3.

b. Verify that each motor-operated valve in the auxiliary feedwater cross-connect flowpath for the opposite unit performs satisfactorily when tested in accordance with Specifications 4.0.5.

6. On an 18-month frequency:

a. Verify each auxiliary feedwater automatic valve that is not locked, sealed, or otherwise secured in position, actuates to the correct position on an actual or simulated actuation signal.

b. Verify each auxiliary feedwater pump starts automatically on an actual or simulated actuation signal. Note that this surveillance is required to be performed for the turbine driven pump within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after reaching HOT SHUTDOWN.

Amendment Nos.

TS 4.8-2a B. Acceptance Criteria The pump and valve tests shall be considered satisfactory if they meet the ASME Section XI Inservice Testing Program acceptance criteria.

The flowpath alignment tests during unit startup from REFUELING, COLD, or INTERMEDIATE SHUTDOWN shall be considered satisfactory if the control board indication demonstrates that flowpaths exist to each steam generator.

TS 4.8-3 Basis The correct alignment for manual, power operated, and automatic valves in the Auxiliary Feedwater System steam and water flowpaths, including the cross-connect flowpath, will provide assurance that the proper flowpaths exist for system operation. This position check does not include: 1) valves that are locked, sealed or otherwise secured in position since they are verified to be in their correct position prior to locking, sealing or otherwise securing; 2) vent, drain or relief valves on those flowpaths; and, 3) those valves that cannot be inadvertently misaligned such as check valves. This surveillance does not require any testing or valve manipulation. It involves verification that those valves capable of being mispositioned are in the correct position.

Valves in the auxiliary feedwater flowpaths to the steam generators and cross-connect flowpath are tested periodically in accordance with ASME Section XI. The auxiliary feedwater pumps are tested periodically in accordance with ASME Section XI to demonstrate operability. Verification of the developed head of each auxiliary feedwater pump ensures that the pump performance has not degraded. Flow and differential head tests are normal inservice testing requirements. Because it is sometimes undesirable to introduce cold auxiliary feedwater into the steam generators while they are operating, the inservice testing is typically performed on recirculation flow to the 110,000 gallon Emergency Condensate Storage Tank.

Appropriate surveillance and post-maintenance testing is required to declare equipment OPERABLE. Testing may not be possible in the applicable plant conditions due to the necessary unit parameters not having been established. In this situation, the equipment may be considered OPERABLE provided testing has been satisfactorily completed to the extent possible, and the equipment is not otherwise believed to be incapable of performing its function. This will allow operation to proceed to a condition where other necessary surveillance or post maintenance tests can be completed. Relative to the turbine driven auxiliary feedwater pump, Specification 4.8.A.3.a is modified by a note indicating that the developed head test of the turbine driven pump should be deferred until suitable conditions are established; this deferral is required because there may be insufficient steam pressure to perform the test.

Amendment Nos.

TS 4.8-4 The auxiliary feedwater pumps are capable of supplying feedwater to the opposite units steam generators. For a main steam line break or fire event in the Main Steam Valve House, one of the opposite units auxiliary feedwater pumps is required to supply feedwater to mitigate the consequences of those accidents. Therefore, when considering a single failure, both motor driven auxiliary feedwater pumps are required to be OPERABLE* during shutdown to support the opposite unit if the Reactor Coolant System temperature or pressure of the opposite unit is greater than 350°F and 450 psig, respectively. Thus, to establish operability* the motor driven auxiliary feedwater pumps will continue to be tested quarterly on the same STAGGERED TEST BASIS when the unit is shutdown to support the opposite unit.

The capacity of the Emergency Condensate Storage Tank and the flow rate of any one of the three auxiliary feedwater pumps in conjunction with the water inventory of the steam generators is capable of maintaining the plant in a safe condition and sufficient to cool the unit down.

Proper functioning of the steam turbine admission valve and the ability of the auxiliary feedwater pumps to start will demonstrate the integrity of the system. Verification of correct operation can be made both from instrumentation within the Main Control Room and direct visual observation of the pumps.

excluding automatic initiation instrumentation References UFSAR Section 10.3.1, Main Steam System UFSAR Section 10.3.2, Auxiliary Steam System UFSAR Section 10.3.5, Condensate and Feedwater Systems Amendment Nos.

ML050700079

Text

Navigation menu

Search