ML20129B096
| ML20129B096 | |
| Person / Time | |
|---|---|
| Site: | Calvert Cliffs  |
| Issue date: | 07/01/1985 |
| From: | Lundvall A BALTIMORE GAS & ELECTRIC CO. |
| To: | Butcher E Office of Nuclear Reactor Regulation |
| References | |
| NUDOCS 8507150444 | |
| Download: ML20129B096 (40) | |
Text
-
d BALTIM O RE GAS AND ELECTRIC CHARLES CENTER P.O. BOX 1475 BALTIMORE, MARYLAND 21203 July 1,1983 ARTHUR E*. LUNDVALL. JR.
VICE PRESIDENT SUPPLY Director of Nuclear Reactor Regulation Attention: Mr. E. 3. Butcher, Jr. Chief Operating Reactors Branch #3 Division of Licensing U.S. Nuclear Regulatory Commission Washington, D.C. 20555
Subject:
Calvert Cliffs Nuclear Power Plant Units Nos.1 & 2; Dockets Nos. 50-317 and 50-318 Inadequate Core Cooling Instrumentation Gentlemen:
Your letter dated January 22, 1985 requested additional information regarding our plan and schedule for final implementation of inadequate core cooling instrumentation (ICCI) at Calvert Cliffs. The infc,rmation requested in Enclosure 1 of your letter is provided below. Our schedule for submitting the implementation report letter described in Enclosure 2 of your letter is May 1,1988 for Unit I and May 1,1987 for Unit 2.
1.
Describe the status of the RVLMS installation including a schedule for completion of installation and calibration and the description of the final display system for RVLMS.
Response 1 Our letter dated June 19, 1985 provided our schedule for Heated Junction Thermocouple (H3TC) system installation, calibration, and operator familiarization. A description of the H3TC displays was included in our letter dated April 10,1984. To summarize again, there are three displays associated with this system. The primary display is being developed as part of the new SPDS/ plant computer system and will consist of a CRT-based bar graph demarkated into discrete levels corresponding to the sensor locations on the H3TC probe. The design philosophy being applied to this display is described in our letter dated February 4, 1985 (specifically, see response to Question 2 concerning SPDS human factors approach). A safety-grade backup display will be provided on the main control board. This display will be consolidated with the subcooled margin monitor (SMM) and core exit thermocouple (CET) displays. The control board display for the H3TC will consist of a vertical array of eight lights per probe, corresponding to H3TC sensor locations. A second safety grade backup display will be located on each H3TC signal processing cabinet in the Switchgear Room. This is a digital display
-used for detailed H3TC system diagnostics.
8507150444 850701 PDR ADOCK 05000317 hd F
PDR 1
g i
s Mr. E. 3. Butche,r July 1,1985 2.
Provide the completion schedule and detailed plans for upgrading the core exit th.rmocouple system with respect to conformance with the design requirements of NUaEG-0737, Item II.F.2. Identify and justify any deviation.
Response 2 Our letter dated June 19, 1985 provided our schedule for CET installation, calibration and operator familiarization. A detailed description of the CET system and an evaluation of conformance with the criteria of NUREG-0737, Item II.F.2 is provided in Enclosure 1 to this letter.
3.
Provide an evaluation of the final SMM with respect to NUREG-0737 Appendix B design requirements and detailed plans for upgrading the SMM to incorporate CET inputs. Identify and justify any upgraded deviation.
Response 3 A Combustion Engineering Model 001 Subcooled Margin Monitor system is installed and operational at Calvert Cliffs Units 1 and 2. A description of the SMM and an evaluation of conformance with the criteria of NUREG-0737, Appendix B is provided in Enclosure 2.
We do not plan to incorporate the CET inputs to the SMM. However, we do intend to provide subcooled margin calculations based on CET input on the new plant computer CRT. The SMM will be maintained in its present configuration to give the operators the capability of simultaneously monitoring saturation conditions at both the hot / cold leg and core exit locations. It is felt that this capability allows the operator to better ascertain the status of his pressure control, inventory tracking, and ;u st removal safety functions.
As a backup to the calculations displayed on the plant computer CRT, the emergency operating procedures include appropriate saturation curves.
The operator can use these curves to quickly identify the degree of subcooling in the reactor vessel head area based on direct CET and RCS pressure readings obtained from the main control board or the SPDS/ plant computer CRT.
4.
Provide an over-all schedule for implementation of the final upgraded ICCI system and the upgraded ICC emergency procedure using CEN-152 Revision 2 guidelines.
Response 4 Our letter dated June 19, 1985 provided our schedules for completion of the H3TC and CET systems. These schedules include implementation of upgraded emergency operating procedures based on CEN-152, Revision 2.
r J
Mr. E. 3. Butcher July 1,1985 If you should have any questions, please do not hesitate to contact us.
i Very truly your j
2 - 11 AEL/BSM/vf -
Enclosures cc: D. A. Brune, Esq.
G. F. Trowbridge, Esq.
Mr. D. H. Jaffe, NRC Mr. T. Foley, NRC i
- ,,. S Enclosure (1) to BG&E letter to NRC dated July 1,1985.
Baltimore Gas & Electric Company Calvert Cliffs Nuclear Power Plant Units 1 and 2 Core Exit Thermocouples Licensing Report J uly,1985
1 1
c.
i Table of Contents SECTION PAGE
1.0 INTRODUCTION
1 1.1 Purpose 1
2.0 SYSTEM DESCRIPTION 1
2.1 Original System 1
2.2 M odified System 1
2.2.1 Modifications in the Auxiliary Building i
2.2.2 Modifications in the Containment Building 2
2.2.3 Electrical Design 2
2.2.4 Environmental Qualification 3'
3.0 SYSTEM TESTING 4
4.0 DISPLAY SYSTEMS 4
4.1 Primary Display
- 4. 2 '
Backup Display 5
4.3 Use of CET Displays 5
4.4 Human Factors Engineering 6
EXHIBITS A.
Core Exit Thermocouple Numbers and Locations A-1 & A-2 B.
CET Original System B-1 thru B-3 '
C.
Modified CET System C-1 D.
Plant Computer Typical SPDS Format Design D-1 thru D-4 E.
Plant Computer Typical SPDS Format Methodology E-1 thru E-4 F.
Plant Computer SPDS Inadequate Core Cooling F-1 thru F-4 Inf ormation Display G.
Typical Inadequate Core Cooling Display
'G-1 ATTA CH MENTS 1.
NRC Generic Letter 82-28 Checklist 2 pages N URE G-0737, Item II.F.2 2.
NRC Generic Letter 82-28 Checklist 2 pages NUREG-0737, Item II.F.2 Attachment 1 3.
NRC Generic Letter 82-28 Checklist I page NUREG-0737, Item II.F.2 Appendix B REFERENCES 1 page i
1
1.0 INTRODUCTION
1.1 Purpose In response to NRC Generic Letter 32-28, this report describes the design of the Core Exit Thermocouple System modification to be installed in the Calvert Cliff s Nuclear Power Plant Units I and 2 pursuant to NUREG-0737, Item II.F.2.
2.0 SYSTEM DESCRIPTION The primary f metion of the reactor core exit thermocouples (CET)is to provide temperature data f rom which gross core power distribution and thermal margins may be inf erred. As a result of the Three Mile Island Unit 2 incident, the Nuclear Regulatory, Commission has specificallyidentified CET as an element of theInadequate Core Cooling (ICC)instrurnentation system. Therefore, the function of the CET has been expanded and upgraded to a safety related status.
2.1 Original System The reactor in-core instrumentation system consists of forty-five fixed in-core detectors inserted into selectedinstrumentation assemblies. See Exhibit A. Each assembly contains four rhodium self-powered neutron detectors (SPND), a background wire and one CET. These circuits f or each assembly are containedin a single multiconductor cable assembly routed to the respective electrical containment penetrations via the ref ueling pool electrical cable platform interface panel (Q-panel). At the electrical penetration, the SPND and CET circuits are separated into individual twisted shielded pair cables f or the SPND and a standard thermocouple Type K cable for the CET. The respective circuits are then routed to the main plant computer for processing and logging. Exhibit B provides additional inf orm ation.
- 2. 2 Modified System The f ollowingis a description of the modified CET system. Exhibit C is a block diagram of the modified system and provides additionaliniormation.
2.2.1 Modifications in the Auxiliary Building A non-microprocessor based approach has been selected f or modif ying the CET instrumentation system, to provide continuous on demand selective reading of core exit temperatures. A dual output thermocouple transducer will be added to each CET channel (f orty-five per unit). The transducer will prc duce twoindependent isolated analog outputs. One isolated output will be used for the saiety related CET backup display system. The other will be used forinterface with the non-safety related primary CET display system - which is defined as the Main Plant Computer based system.
Each saf ety related CET backup display transducer signal will be fed to a channel selector switch and trend recorder. Multi-channel trend recorders will record all of the CET channels and will be unaffected by the channel selector switch position. The channel selector switch (located on the Reactivity Controls and Protective System Control Board in the Main Control Room) will allow the operator to select any desired CET for display on a Main Control Board digital indicator. The selector switches are 1
mounted along with the indicators to denote which CET is being monitored and to allow operator selective channel comparison with the primary CET display system.
(1)
]
P 1
To meet the requirements for saf ety related systems, redundancy is necessary f or each reactor core quadrant monitoring channel. Each electrical separation group is comprised of individual thermocouple transducers for each channel; multichannel recorders; and channel selector switches and temperatureindicators. Since redundant electrical separation groups are provided, channel comparison can be accomplished on the backup display in addition to comparison to the primary display computer inf ormation. Plant separation requirements will be providedior these components primarily by the use of structural separation barriersin the mounting panels.
To maximize use of the "in-place" CET cabling, the thermocouple transducers will be locatedin the Computer Room together with the new trend recorders. The present able routing ior the CETs, from the containment penetration rooms to the Cornputer Room, will be upgraded to saf ety related.
2.2.2 Modifications in the Containment Building To meet redundancy requirements f or monitoring each core quadrant and to maintain as much as practical the plant electrical separation requirements f or redundant channels, approximately half of each reactor core quadrant CET circuits will be rerouted f rom the reactor in-core detector probe assembly via the electrical cable platform to the opposite electrical separation group refueling pool interf ace panel (Q-panel). This is typical o'f each reactor core quadrant.
Due to environme' tal qualification concerns with upgrading the in-core instrumentation n
cable assembly connectors, the containment cable assemblies from the reactor probe to the electrical penetrations will be replaced with qualified assemblies. In addition, the CET circuit portion only of the multi-conductor cable assembly will be rerouted from the existing electrical penetration to an environmentally qualified electrical penetration.
New feedthrough modules will be provided as required for the respective qualified electrical penetrations.
2.2.3 Electrical Design Safety related Class IE,110V, single ph. 60 Hz. approximately 200 VA, power will be fed to each of the two channel thermocouple transducer / recorder panels. Power will be fed from the safety related distribution panels at Motor Control Centers within the plant.
In case of a toss of off-site power, there will be a short (10 seconds) interruption in power supply, bef ore it is resumed af ter the buses are connected to"on-site" diesel power.
Devices powered f rom these Class IE sources will be the thermocouple transducers, the multi-point recorders and the digital indicators.
Isolation f rom the non-Class IE equipment will be provided by the thermocouple isolation transducers.
The primary display Plant Computer system for CET will be powered by UPS systems and backed-up by instrument AC systems via automatic transf er switches.
(2)
1 Hardware included up to the isolation devices (safety-related): (See Exhibit C).
In-Core Instrum ent Assembly (Type K thermocouple)- Unpowered Cable Assemblies and Connectors - Unpowered Interf ace Panels (Q-panels)- Unpowered Containment penetrations - Unpowered
-Isolation Thermocouple Transducers (dual output)- Powered Hardware included beyond the isolation devices (saf ety-related, backup display system):
-(See Exhibit C)
Trend Recorder (multi-point) with Shunt Resistor - Powered
. S elector S witch, with Shunt R esistors - Unpowered Digital Indicator - Powered Hardware included beyond the isolation devices (non-saf ety related primary display system): (See Exhibit C)
DAS Multiplexer - Powered DAS Data Processor -Powered Plant Computer and SPDS Processor - Powered 2.2.4 Environmental Qualification The CET modified system will satisf y the seismic and environment qualification criteria of NUREG-0737 item II. F. 2.
All new equipment being purchased for this modification as well as those items being upgraded to saf ety related, will be qualified to the applicable NUREG andIEEE standards under the Baltimore Gas and Electric Company's environmental qualification program for the respective plant area conditions. Major new equipment / hardware which isincludedin this category are:
o Thermocouple Isolation Transducer o Containment Multiconductor Cable Assemblies and Connectors o Containment Penetration Feedthrough Modules o Probe Assembly Mating Connectors Major items which are in the upgrading category are:
o ReactorIn-coreInstrument Assembly o Original Thermocouple Cable f rom the Containment Penetration to the Computer Room The Seismic Class IE evaluations can be divided into four (4) primary categories:
A. Main Control Board Modifications B. Temperature Transducer / Recorder Panel Mounting Analysis C. Electrical Raceway Support Design Original CET system raceways which are being upgraded will be walked down and evaluatedior saf ety related Class IE considerations. Any modifications determined necessary will be detailed or noted f or field implementation.
(3)
+
t New CET system raceway will be installed consistent with the plant standards and the established approach ior any new Cable Spreading Room conduits.
D. Miscellaneous This category encompasses such items as review of component specifications for seismic Class IE requirements and review / evaluation for upgradng the refueling pool electrical interf ace panels (Q-panel). No seismic evaluations are presently considered necessary for the refueling pool electrical platforms or the containrnent electrical penetrations.
'3.0 SYSTEM TESTING The CET modification will undergo a f unctional testing phase af ter installation completion. Calibration procedures will be developed and/or revised toinclude the new instruments, and surveillance procedures established per BG&E approved practices.
Environmental qualification will be accomplished under BG&E's ongoing environmental qualification program and will conf orm to IEEE 323, 344 and NUREG-0588 requirements, as applicable.
4.0 DISPLA Y S YSTEMS 4.1 Primary Display The primary display system will be accomplished using the new plant computer system which includes the Saf ety Param eter Display System (SPDS) as one of its elements.
The SPDS will contain a page on the CRT dsplay which will include inadequate Core Cooling inf orm ation as f ollows:
(a)
The highest four individual CET for each reactor core quadrant (Range 200 - 1800 F as statedin NUREG-0737 Item II.F.2 Attachment 1). Actual current design is a range of 31 ~2000 F.
(b)
The reactor core subcooled margin based on CET and pressurizer pressure input (Range 0 - 250 F).
. (c)
Reactor vessel level above the fuel alignment plate based on the new Heated 3 unction Thermocouple installation (Range 0 - 185 inches in eight steps).
(d)
Loop subcooled margin based on the installed subcooled margin instruments. (Range 0 - 250 F).
It is not planned to utilize a core map display to portray CET temperature readings.
Rather a listing of CET readngs will be available from the plant computer which can be manually related to individual CET locations as necessary.
The alarm system f or the plant computer is consistent with operator procedure requirements. The alarm task works with data tables and alarm tables to inf orm the operator of any abnormal conditions. All analog and digital alarm points are classified and displayed according to priority levels established when the plant computer sof tware is generated.
I (4)
,=s e-,~w-
-e%-.y-
, ---y.
.,~- -.,-,,, - -, -,. -..,. ~,,.
,y,,,-w
,---.-,-e v.-,,,-,--%,,ww,-%.-e-n.,,
.,,.,.., _, -m,,--
,,v--wr---s,-y
i Each priority level is associated with a specific color, and the point name, priority number, or other fields or areas appearin color or in a reverse video state. Specific fields or areas are made to blinkif an alarm occurs.
The plant computer alarm capabilities andits display system are used by the SPDS to ensure that the dsplayed information is readily perceived and comprehended by the operator. Specifically the Hum an Factors Program is discussed in Ref erence C. Within the letter BG&E responses to Questions 2 and 3 deal with the Human Factor Program and Data Validation respectively and with the handling of Critical Saf ety Function Alarms.
A typical page of the current design of the SPDS with a legend ior format design is in Exhibit D. Typical SPDS f orm at methodology is explained in the attached Exhibit E, and the current design of the inadequate core coolinginf ormation display is shown in Exhibit F.
4.2 Backup Display The backup CET display will consist of digital indicators (capable of displaying each CET with a range of 200 to 2300 F located on the Reactivity Controls and Protective System Control Board (CO3)in the Main Control Room. The dgital indicators will be grouped in an overall human engineered inadequate Core Cooling modification f or the main control board. The inadequate Core Cooling instrumentation displays included in this area are the Subcooled Margin Monitor digital displays, the Reactor Vessel Level light displays, and the CET digital indicators. A typical design is included as Exhibit G.
As recommended in CEN-152, general direction is providedin each emergency operating procedure requiring the use of at least two independent indications where available to evaluate and corroborate specific plant conditions. This action helps ensure the operability of any one indication. For a CET temperature Thot and TCold instrumentation, subcooled margin based on Thot/Tcold, and multiple CET displays are available to perf orm the operability check. The saf ety f unction status checks in each procedure ensure these parameters are reviewed periodically during an event. CEN-152 provides additional information on the safety iunction cheeks.
4.3 Use of the CET Displays The following uses are identified for the core exit temperature monitoring:
- Prior to entry into shutdown cooling (SDC), the Reactor Coolant Pumps (RCPs) are secured. During the period prior to SDC initiation reactor coolant system temperatures are trended using CET to ensure stable core temperatures.
- Once through cooling (f eed and bleed using power operated relief valves)is being addedin the emergency operating procedures. A core exit temperature of 560 F is the proposed initiation criterion. Af ter once through coolingis established CET are used to monitor core temperatures. During once through cooling, subcooled margin (SCM)is maintained up to 200 F based on CET. Use of CET for this purpose is recommended in the emergency procedure guidelines (CEN-152) developed by Combustion Engineering for the owners group. To meet CEN-152, the operator will be directed to check CET subcooling as an alternate action to determining Thot/Tcold subcooling. The CET subcoolingis on the primary display; and as a backup to that, the emergency operating procedures willinclude a pressure (5)
r t
temperature graph to centain all pertinent operating curves. With CET backup display and reactor coolant system pressure available on the main control board, the operator can determine the position with respect to the subcooled curves and ensure subcooling based on CET is satisfactory.
- During natural circulation conditions, subcooled margin is maintained between 30 F and 200 F based on CET. Use of CET f or this purpose is recommended in the emergency procedure guidelines (CEN-152) developed by Combustion Engineering f or the owners group. To meet CEN-152, the operator will be directed to check CET subcooling as an alternate action to determine Thot/Tcold subcooling.
The new emergency operating procedures specify the use of CET temperature and subcooled margin in accordance with direction f rom CEN-152. Training on these procedures is currently in progress and is being accomplished as described in Reierence D.
4.4 H um an Factors En gineering in order to ensure that Human Factors Engineering principles are applied in the design of the inadequate core cooling displays, the preliminary design of the displays has been reviewed by the Detailed Control Room Design Review (DCRDR) Team. In addition, the ICC instrum entation system will be included in the Inform ation and Control Characteristics Review (ICCR) to be incorporated into the DCRDR. The ICCR is being developed by Combustion Engineering f rom the Emergency Procedures Guidelines (CEN-152) as an alternative to task analysis.
(6)
iI lll1 8
[
R N
L J
G REACTOR CC;C MAP P
M N
H UNIT NO. I 8' tant g_
s ze 2
F E
NORTH T
S 37 20 20 o
W v
89 35
,36 is C
w I
17 18 38 se is e
x 87 34 15 16 19
'T 8
is 14 3
4 20 is gg A
I (3
y 1
85 3
2..
- 2. 1..
p
'5 e.
o g g4 I
n s 22 4e is is g ;;; $
z 3.2 12 1.0 1
.5 2.3 5
8 o
gg
,o 39 to gg>
_.ta-11 6
s qg z
z' r
31 7
24 40 at y
A
.o 5 Y
B E
s 30 9
8 s
~
m s
29 26 25 41 s
x a
- 45 28 27
- s 43 42 3
m rs=
V D
2 8
4.4
,c.
,i, 1
5 V
E i
i
- 9 M
N N
R N
L J
G t
a P
A J,
i d
C C
2 R
O O
T N
C T
A I
E N
R U
s 7
s i
e a,
9-
" y 3 -
S 7
3 s
8 x
1 0
4 1,
4 2"
4 2
W 0
8 w
3 2-2 s
3 i
2.
V y
2 4
5.
4 o
3.
2 2
t z
6, 2
T 9
7,
T 3
1,
4 3
S S
. 5 82 i
R 8
6 R
1
. P P
4 4
7 M
N
. M M
7.
8
,L 7.,
3 2.
L 1,
. K K
J 6,
u J
2 "
1 1
H H
9.
2.
8.
1 G
0 2
8 6,
0,
. P F
3, 1.
9 4.
. u 2
4.
E 5
. 4.
E 1
1 o
r 5,
. 3 2
ot D
3
. 1 "
1 s
3 0
5.
i
. C 3
4 C
4 o 4
2.
. e, 1
. 3 3
. 3 s
s s
T i
3.
i A
^
3 e
o i
s y
s i
3 QW
[
Easi"
- i:
E ng" iU ymo68gm "5
M=:"
p N
ge g pdoz*' ge g~N T"
NT Aa Lo PN
' $m >s,,
8
E F
p D
G p
N
[
p'=
1 g
8
^
b i
l l.
-m n G
\\
/
c e w r:
Aur awc,
@m 5' aoM
?I s +%KL
&G A. RANT COMPT)TER !?.50 X GotnWCatMR709,5 DG B. 75P THERMOCo@tE Ty!E K-Growy L. MdSE M8LY A*
C. ELEc7PcnLkse!?.7YM3E u,
y D. EdECTmtAL1%WE.7YM3C, E. COVTAMMEMr F. Mt.7)covDUC7be CA6tEASSEMBLY
-CETAwo SMp G 73P,$pvo Owy N. AMtNENOL CowMWODt I. ELEcFMKAL AAT/a~ en J '/NTEtfACEM*GL-Q s'
=
e.
!@gi r
,,n ;
6 d
~i y
- gs y
e a.
gh gr d
2 i
a b
E i na:
5 8
8 i!B
,3 I
l o
N u
wy Il f
h E f
[
ik 5"I 51l
~
l--
1, r.
u l
'o yM 2s s !..!.h.i! a
-i v
e 9
e 1
k.
r I
o I
g 3
?
rI, cs i
- f.. t (,
jl 4
0
~
r g t.
W D,
o-Eg* j;
>j
- 1 {.e
,4 8
- I e
! < "N y al f
p^
gi: T-g I
E 55 5
75 1
Yr */
I
?
E EXHIBIT B UNIT 1 CET ORIGINAL SYSTEM Page B-2
}
)
5 ir. rig._.in i
e
\\
g q
Ig8Eg5 L
L If~
I b
5 Er-I C-gb g
5@8 5
E lil i'
e d
g y
< =
N u
g{
t 6 g i!
k kl Ib 2
j l
r Ro pa~.,
i d
8; f
[ b jj F g 's
}'~
r.5' gd w-
=
1 5
5 11 8
- i g
- >i iI@E 8;
d
[
Ea a
AE 52 a
b hkI I
a d
b l[4 o o o]g EXHIBIT B UNIT 2 CET ORIGINAL SYSTEM Page B-3
1
~
E I
O F
f s '[ -
l h
N P
Q A
v b
/
~
\\
/
(,r M l[
s 4,
(
i G
Al& ToK Cc.~.K Aux.slgn s i. uc y
y A. DAIA ACQutSITWul5ys y,py7ggypcg gg.q nGG
- 0. TSP THERP10CDUPLE TYPE M g, ygy (0vggcyo,s C. E 7
huC TYPCSE 86 A M3ty h
D. Ettcrrgsc pixL 7YPE SC M. ELECTRIC 4L 7VM A%CRV8 E. courAixstEnr M. AEWcA%YrFM07hhvocd5-fENE.yA E NewMutricaviocrogcaetc 0"' Y.
Asscasty-CETANOSPNO P l5'WWCIN'AN30tXE4 G TSPSrso outy 9 ' '"'*"Me
"'A6LC-NSe knUf H. NEWqueiine coxse.rors A '#S**DVTATM"CA6LE-St Aunuy T. ELEcTt'ssit PLATfcog S. REconoex
~T. Maincurant,q'am cismy syS s'
?
EXHIBIT D PLANT COMPUTER TYPICAL SPDS FORMAT DESIGN Page D-1
LEGEND FOR FORMAT DESIGN The following explanations are correlated to the appropriate designations on Page D-4:
1.
Format border and all separation lines - low contrast CYAN.
A.
Title of format - Low contrast CYAN.
B.
Month, Date, and Year - High contrast CYAN.
C.
Hour, Minutes, and Seconds - High contrast CYAN.
D.
' Unit' - Low contrast CYAN.
E.
Unit Designator ('l' or '2') - High contrast CYAN.
F.
'Page of Pages' - Low contrast CYAN.
G.
Page Numbers - High contrast CYAN.
H.
RBG - Red, Blue, Green - Reverse Video.
I.
All the Critical Safety Function (CSF) blocks are reverse video -
Green (Low Contrast). Yellow (High Contrast), Red (High Contrast),
or Magenta (High Contrast).
J.
All titles for the parameters - Low contrast CYAN.
K.
All Parameter Scales - Low contrast CYAN.
L.
All vertical bars - High contrast YELLOW or RED - Low contrast GREEN.
M.
All digitals below vertical bars - Low contrast GREEN and High contrast YELlDW or RED. Trend indication - plus (+), minus (-), or blank (static) and no change are Low contrast CYAN.
N.
Identification of valve, system, or equipment - Low contrast CYAN.
O.
Status of Valves, systems, or equipment - High contrast GREEN, RED or white.
P.
This type of indication is not found on all of the display pages.
' Source' designates the source being used for the 'CHG PUMP FLOW'.
' SOURCE' is in Low contrast CYAN.
Q.
This is the space to designate the ' SOURCE'. The ' SOURCE' can be ' BAST',
These are displayed in High contrast CYAN.
Page D-2
R.
' ALARM / INDICATION' - This poke point, or touch point for touch CRTs, is for immediate access to the alarm / indication listing for this particular CSF.
' ALARM / INDICATION' is static but it is displayed in High contrast CYAN.
S.
Paging poke points or touch points for CRTs with touch screens.
These are static (e.g., the labels do not' change). Because of their importance these are in High contrast CYAN. The abbrevi-ations used are consistent with those found on the keyboard.
Page D-3
P A
n e
anmne
- e ua tag g 1
2 I
gre.T
[Fg-:=tgg e
L a sum l
LIIIE4R LOG IVE TCOLE EOFOll EaIT CH3 HFI!
Fi4F FliF C 0110 L E*.'E L F UllF FLOli 11 12 11 12 FLOli 200 -
700 2000 1E0 1E0 1E00 200 t
LEO 4
4 E00 100 100 7EO 100
-4 1000 10 2
-E I"
" f' F' EO 37E O
-5 0
10
-1 212 0
0 0
0 0.000 F 060 000 FFl! 0000 Ill 000 000 GFil 600 0000 000 h 6 000
- Il 00
!!0C 0 00 I'd 11 ! ~8
!?
6 IDEtIT ITATV5 Q
ALwFil/
F A G FilD
.ey CHG FF IOUFCE l'
[EAIT) Q W
IllD I C t.T I Oli
[ 0F Elli 0" ele EXE h 9
[IHUT1 F AG ECE C'8 k
4
~
EXHIBIT E PLANT COMPUTER TYPICAL SPDS DISPLAY FORMAT METHODOLOGY Page E-1
e e
CALVERT CLIFFS DISPLAY HIERARCHY AND METHODOLOGY 1.
SPDS Display Hierarchy Each Critical Safety Function (CSF) has one or more pages associated with it.
The SPDS user can call up any CSF display by depressing a fixed key. Once the user is in the CSF, he can page forward (PAG FRD) or page backwards (PAG BCK) within a CSF set.
2.
CSF Points A tabular display page is provided for each CSF to present all the I/O signals associated with that CSF. The status of the signal is also noted on that tabular display page.
3.
CSF Methodology and Response Prioritization The CSFs at the top of every display, present the user with status of the CSF on all levels of the display hierarchy at all times.
The CSFs and alarm conditions are prioritized with higher priority function towards the left.
User addresses highest alarms first (e.g. red over yellow, left over right). If a higher priority alarm comes in, the user should cease actions on a lower level safety function / alarm to address the higher level alarm.
4'.
Critical Safety Functions (CSF) Boxes Green (Low Contrast) - Safety margins and safety limits being maintained.
Yellow (High Contrast) - CSF margins decreased - attention is necessary.
Red (High Contrast) - CSF margin substantially decreased - action is required.
Magenta (but is overriden by Red / Yellow) - One or more gates in the algorithm for that CSF are invalid due to missing data or failed sensor.
Magenta (small solid box at right hand corner of CSF) - Parameter in that CSF is invalid but the algorithm gate is still functional.
5.
Parameter Vertical Bars and Digital Readouts The parameter vertical bars change color to agree with the alarm condition for that parameter. The color code is as follows:
Page E-2
r e
e Cyan - Not applicable to SPDS parameters Green (Low Contrast) - No decreased margins detected - Vertical bars, digital values, and minus (-) or plus (+) signs change color.
Yellow (High Contrast) - parameter margin decreased - vertical bars, digital values, and minus (-) or plus (+) signs change color.
Red (High Contrast) - Parameter limit exceeded - Vertical bars, digital values, and minus (-) or plus (+) signs change color.
The Alarm Scale found in Part III of each format description relates to this color code. A BG&E SPDS I/O List presents the alarm scale for each parameter in a particular CSF.
6.
Reverse Video This technique is used to get the SPDS user's attention. All the CSF windows at the top of each display page are reverse video in green, yellow, red, or magenta, depending on the CSF alarm condition.
If the digital value below the vertical bar is invalid, it too will be in reverse video.
7.
SPDS Display Format Descriptions The basic display set consists of seven top level displays. Each display format is divided into four parts. Part I is the title block, Part 11 is the Critical Safety Function Blocks, Part III is the data block, and Part IV is for system status information or presents information aids to the user.
The Plant Operating Summary display presents the seven Critical Safety Functions (CSFs). Five of these CSFs are defined in NUREG-0737 Supplement 1.
The summary display and successive CSF displays make use of vertical bars and digital values of the displayed parameter.
The initial seven CSFs form the basis for the titles of the second and third level displays The seven critical safety functions displays are:
Reactivity RCS Press & Inventory Core /RCS Heat Removal Containment Environment Containment Isolation Radiation Control Vital Auxiliaries The following are support displays for the CSFs. They do display CSF status at the top of each display format CEA Bottom Limit Relay Status Matrix Press / Temp Plot Display Page RCS Press & Inventory P&ID Display Page I
Page E-3
Electrical Buses Tabular display pages for the points and values and alarm status of all the signals for the associated CSF.
8.
Normal Up Display f
I When the SPDS is turned on or " booted", the display page that will appear on the SPDS is the ' Plant Operating Summary' display format.
i f
l 1
i b
l I
l-r i
l i
e Page E-4
y s
t l
EXHIBir F l'LANT COMPUTER SPDS INADE,quATE CORE COOLING INFORMATION DISPLAY f
0
}
Page F-1
CORE AND RCS IIEAT RENlts.dL-ALARN/ INDICATION I.
TITLE IlLOCK Common to all displays, the title block is located across the top of the display format.
The following are contained.
A-Display name 11 - Month, date, year C - Ilour, minute, seconds D - Unit designator E-Page number F-Indication of color gun status II.
FUNCTION OLOCK Common to all displays, the function block is located below the title block and contains the seven CSPs.
The CSPs are:
A - REACTIVITY (Reactivity Control) u - itCS PRESS & INVENTORY (RCS Pressure and Inventory)
C - CORE /RCS Ileat Removal D - Containment Environment E - Lontainment Isolation F - Radiation Control G - VITAL AUX (Vital Auxiliaries) 5g NOTE:
ALL CSF BLOCKS AHE POKE POINTS AND TOUCil POINTS ON TOUCil SCREEN CRTs.
y h
. CORB/RCS tlEAT REMOVMk DISPLAY ( PAGE 2)
III.
PAltAM ETEltS IV.
SUBSYSTEM STATUS PARAMETER, S C A I.E, UNITS ALARM SCALE ID STATUS A - SG PRESS, 0-1200, PSIA GREEN - > 880 and < 920 PSIA RCP
[ON/OFF]
YELI.OW - > 920 and < 880 PSIA RED - > 985 and < 703 PSIA V.
ALARM / INDICATION MENU Poke point to access lower 11 - PZR PRESS, 0-3000, PSIA GREEN - > 1900 and < 2300 PSIA level pages for tables with:'
YELLOW - > 2'300 and < 1900 PSIA RED - > 2400 and < 1740 PSIA a) algorithm alarm gate status C - LOOP Sull CLD MARGIN, GREEN - > 30 and < 200*F 0-250*F YELLOW - < 30*F VI.
PAGING POKE POINTS RED - > 2'60 and < 10*F A - PAG PWD ( Page Forward)
D - VESSEL LEVEL ( DKR STATUS),
GREEN - NO VOID DETECTED B - PAG BCK ( Page 11ackward)
NOTE 1 YELLOW - N/A RED - VOID DETECTED E - ColtE T/C STATUS, 31-2000,*F GREEN - < 625'F YEI. LOW - > 625*F
~
ItED - > 650*F F - COltE SUB CLD MARGIN 0-250*F GREEN - > 30 and < 200*F YELLOW - < 30*F RED - > 2'60 and < 10*F NOTE 1:
VESSEL LEVEL INDICATION IS INVALID IF ANY RCP IS RUNNING OR A TROUllLE CilANNEL TRIP.
?
?u
F 0
- 0
- F E
0 E
0 G
2 G
5 N
N 2
A 1
A R
3 R
0
='
D F
l C
i E
F E
E G
=
T 9999 9999 G
G A
=
F 2322 3223 A
A F
5l v
2112 2221 F
F 1111 1111 3
n ll
.i F
=
30i1 39EE i
=
01l1 11 11 G
0 D 00O0 0O00 F
I 00O0 0O00 A
2 C
T CCCC CCCC t
4 t
r E
/
F TTTT TTTT O
D I
T 1
2l E
00
- T M,
L 0C F -
E 0 00
- C F
L!
0 1
0 O'
0
=
C 1
4 C
E' T
9999 9999 E
r i
F 3232 3323 U FF I
1
. d
=
3 2121 2711 E
1111 1111 A
E
'=
1139 E675 F
T y
0000 0000 O
I n
U, D 0000 0000 C
l i
I 0000 0000 L
T 0CCC 0CCC F
TTTT TTTT e
}
L
}
EL EE l
E '-
l EE
'L l
l l
O 00 L l 0
00 Cl 2 a
Ei1 IG 00 p=-
F 00 FA1 -
0t 1
0 L11
=
0 0
0
'I L
l J
m 5
is FF 3
2 D
y E
00 I
00 B
g F. E 03 ZF 00 F
FF T
0 O0 E
0C I
0 E0 1
00 A
0 10 7
30 0C U
E 00 T
]
m w
't1 1
11 2
00 A
l F
f 00 T
S
'a I
[
I 00
+
K i-E1 s
l 00 I1 C0 p
~_
E
/
=
n GF1 -
1 00
=.
sa 0
0 0
0 s't TI t
g
=
IF1 E
D F
F E.
0 0
0 lI 2
3 9
iI C
F 1
I tlj[ a !
Y&
m$to c
[S A
As A
h.k.$-
M Mr G.
h&p.a -
YhWTT>&
\\
=M :
-wwm m 1.->m1wm ius I
.c W k P4fft n._. ~ + -ad G
W yn EE.U.a_+]3C"5
"~
N t.,.g.-
,C E T 's
{}p.
~
- e..
RvLHS
~
w
/
cas -
um U
l
/
I 3
C-
"F-
'_ NElk l
h 8[
!" %==
l LJ I.
I i !.- 9_.-
1 1
+A 0
r
~
n,. M
~_I 1
We l
b h
L l
h l
I I
g E
4
{
M H=
' I l
i n-1
_;.- Q.
7 pl
- =
g P.
BAu h
h
'r.=>
~-
~
NI r
- q
.b P'N 11 i l
I memune enumen summme IEast II 1A1 g g g g i 31.11.11 1
.2
'yd[4M. 8.
EEI2ikt=+Mi i uuuu q! !ymq,l N u
it M -1 y
i j u t.,i
_E!529.y e iL.Lt w
_i gas an=
e;p
_.EEERS 6 ui y,!
m!m 4-3 I
. !.:3 3
Em-u O'N8 l
l i
- m u
R L:
YT
~
aL,' fr TTT n
e_
~
emm/
.~
f fi EXIIIBIT C TYPICAL INADEQUATE CORE COOLING DISPLAY MAIN CONTROL BOARD SECTION 2C05 Page G-1
e e o ATTAOBENT 1 Page 1 NRC GENERIC LETTER 82-28 CHECKLIST NUREG-0737, ITEM 11.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM For:
Calvert Cliffs Nuclear Power Plant, Units 1 & 2 Docket N os.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company R ef erence (Sections ref er to this Item report)
Devis Jo_ns Schedule o
- 1. Description of the proposed system including:
- a. a final design description Section 2.2 Yes Com plete of additionalinstrumen-tation and displays;
- b. detalled description of Section 2.1 No Com plete existing instrumentation systems;
- c. description of completed Section 2.2 Yes Com plete or planned modifications.
- 2. A design analysis and evalu-A No Com plete ation of inventory trendin-strumentation and test data to support design in item 1.
- 3. Description of tests planned Section 3 No Com plete and results of tests completed for evaluation, qualification, and calibration of additional instrum entation. -
- 4. Provide a table or description See attached Yes Com plete covering the evaluation of table conf ormance with NUREG-0737; ll.F.2, Attachment I and Appendix B (to be reviewed on a plant specific basis) s
ATTACHENT 1 Page 2 NRC GENERIC LETTER 82-28 CHECKLIST NUREG-0737, ITEM ll.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM For:
Calvert Cliffs Nuclear Power Plant, Units 1 & 2 Docket Nos.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company Reierence (Sections ref er to this Item report)
Deviations Schedule
- 5. Describe computer, sof tware Sections 2.2 Yes Com plete and display f unctions and 4.1 associated withICC monitor-ingin the plant.
- 6. Provide a proposed schedule See cover Not Applicable Complete ior installation, testin5, letter and calibration and imple-mentation of any proposed new instrumentation or inf ormation displays.
- 7. Describe guidelines for use A
No Complete of reactor coolantinventory tracking system, and analyses used to develop procedures.
- 8. Operator instructions in Section 4.3 Yes Com plete emergency operating proce-dures for ICC and how these procedures will be modified when final monitoring system is im plem ented.
- 9. Provide a schedule for Not Applicable additional submittals required.
=t ATTAOuENT 2 Pa ge 1 NRC GENERIC LETTER 82-28 CHECKLIST NUREG-0737, ITEM i1.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM For:
Calvert Cliffs Nuclear Power Plant, Units 1 & 2 Docket Nos.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company Evaluation of conformance with NUREG-0737: II.F.2 Attachment 1 Item Reference
- 1. Provide diagram of core exit thermocouple Section 2 locations or reference generic description if appropriate.
- 2. Provide a description of the primary operator displaysincluding:
- a. A diagram of the dsplay panel Section 4.1 layout f or the core map and describe N ote: Section 4.1 how it is implemented, e.g., hardware identifies no core or CRT display.
map on the primary display which is a deviation.
- b. Previde the range of the readouts Section 4.1
- c. Describe the alarm system.
Section 4.1
- d. Describe how the ICC Instrumentation Section 4.1 readouts are arranged with respect to each other.
- 3. Describe the implementation of the backup Section 4.2 display (s) Gncluding the subcooling margin monitors), how the thermocouples are selected, how they are checked f or operability, and the range of the display.
4
- o ATTACHMENT 2 Page 2 NRC GENERIC LETTER 82-28 CHECKLIST NUREG-0737, ITEM ll.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM For:
Calvert Cliffs Nuclear Power Plant, Units 1 & 2 Docket N os.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company item Reference
- 4. Describe the use of the primary and backup Section 4.3 displays. What training will the operators have using the core exit thermocouple instrumentation? How will the op'erator know when to use the core exit thermocouples and when not to use them. Reference appropriate emergency operating guidelines where applicable.
- 5. Confirm completion of control room design Section 2.2 task analysis applicable to ICC instrumen-Section 4.1, 4.2, and tation. Confirm that the core exit thermo-4.4. Note: Section couples meet the criteria of NUREG-0737 4.1 identifies no core Attachment I and Appendix B, or identif y map on the primary and justify deviations.
dsplay which is a deviation.
- 6. Describe what parts of the systems are.
Section 2.2.3 powered from the IE power sources used, and how isolation f rom non-lE equipment is provided. Describe the power supply ior the primary display. Clearly delineate in two categories which hardware is included up to the isolation device and which is not.
- 7. Confirm the environmental qualification of Section 2.2.4 the core exit thermocoupleinstrumentation up to the isolation device.
1 4 *- o ATTACHAENT 3 Page 1 NRC GENERIC LETTER 82-28 CHECKLIST NUREG-0737, ITEM ll.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM For:
Calvert Cliffs Nuclear Power Plant, Units 1 & 2 Docket Nos.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company Response to Appendix B (of NUREG-0737,II.F.2)
Confirm explicitly the conformance to the Appendix B items listed below for the ICC instrumentation, i.e., the core exit thermocouples and the display systems.
Item Reference Deviations
- 1. Environmental qualification Section 2.2.4 None
- 2. Single f ailure analysis Section 2.2 None
- 3. Class IE power source Section 2.2.3 None
- 4. Availability prior to an accident Section 2.2 None S. Quality Assurance B
None
- 6. Continuous indication Section 2.2 None
- 7. Recordng of instrument outputs Section 2.2-None
- 8. Identification of instruments Section 2.2 None
- 9. Isolation Section 2.2.3 None
,.-e-
--.m,
.r
4 *.o NRC GENERIC LETTER 82-28 CHECKLIST N UREG-0737, ITEM ll.F.2., REQUIREMENTS CORE EXIT THERMOCOUPLE SYSTEM F or:
Calvert Cliff s Nuclear Power Plant, Units 1 & 2 Docket Nos.:
50-317 and 50-318 Operated By:
Baltimore Gas and Electric Company REFERENCES (A) L etter f rom A. E. L undvall, J r. (BG&E) to 3. R. Miller (NRC) dated April 10,1984, "Calvert Cliffs Nuclear Power Plant Units Nos.1 & 2; Dockets Nos. 50-317 and 50-318, Reactor Vessel Level Monitoring System".
(B)
BG&E Calvert Cliffs Nuclear Power Plant Units 1 & 2, Updated Final Safety Analysis Report, Section 1 B - Quality Assurance Program.
(C) Letter f rom A. E. Lundvall, Jr. (BG&E) to 3. R. Miller (NRC) dated Februa y 4,1985,"Calvert Cliffs Nuclear Power Plant Units Nos.1 & 2; Docket Nos. 50-317 and 50-318, Safety Parameter Display System (SPDS)".
(D) L etter f rom A. E. Lundvall, J r. (BG&E) to 3. R. Miller (NRC) dated March 14.1984, "Calvert Cliffs Nuclear Power Plant Units Nos.1 & 2; Dockets Nos. 50-317 and 50-313, Em ergency Operating Procedures Upgrade".
eo Enclosure (2) to BG&E Letter to NRC dated July 1,1985 DESIGN DESCRIPTION AND EVALUATION OF SUBCOOLED MARGIN MONITOR TO NUREG-0737, APPENDIX B CRITERIA
===1.
System Description===
The Combustion Engineering Subcooled Margin Monitor (Model 001) is a microcomputer based instrument which uses reactor coolant process signals to continuously display the subcooled margin to saturation. The purpose of the system is to relieve the plant operator of the task of using steam tables along with reactor coolant pressure and temperature observations to determine the margin to saturation during abnormal or emergency operating conditions. The subcooled margin can be displayed in either temperature or pressure units on demand.
The SMM consists of temperature and pressure sensors and associated cabling inside containment, and a SMM calculator, display module and associated cabling outside containment. The display and calculator modules are shown in Figure 1.
A system functional diagram is provided in Figure 2.
The display modules are located on main control board panel 1/2 C05.
Temperature input is provided by redundant RCS cold leg and hot leg RTDs. The temperature sensors have an output range of 212 - 705 F. Pressure ir.put is provided by redundant pressurizer pressure transmitters with an output range of 15 - 3208 psia.
The SMM calculator is a dedicated digital process computer which selects the highest temperature and lowest pressure outputs to calculate margin to saturation, using steam tables. The display module has a range of 0 - 100 F of subcooling with an accuracy of 3.lcF. An automatic alarm will 0
occur when subcooled margin drops below 50 F.
2.0 Evaluation of Subcooled Margin Monitor to NUREG-0737, Appendix B: Design and Qualification Criteria NRC Generic Letter 82-28 requested an evaluation of the SMM for conformance with Criteria 1 through 9 of NUREG-0737, Appendix B. The following paragraphs discuss the conformance of the SMM with these criteria.
2.1 Environmental Qualification The SMM is environmentally qualified in accordance with 10 CFR 50.49 to function before, durng and after all design basis events for which it is required.
2.2 Single Failure The SMM consists of two redundant instrument looos. No single failure of instrumentation, auxiliary equipment, or power source will result in a loss of subcooled margin information to the operator.
2.3 Class IE Power Source Power for each SMM instrumentation loop is supplied from separate inverter fed, battery backed safety-grade sources.
c
u. -a 2.4 Availability Prior to An Accident Technical Specification 3/4.3.3.6, Post-Accident Monitoring Instrumentation, establishes availability requirements for the SMM.
2.5 Quality Assurance The SMM is classified as safety-related an conforms with the requirements of the BG&E Quality Assurance Program as described in Section IB of the Updated FSAR.
2.6 Continuous Indication Displays are continuous on demand for either temperature or pressure margin.
2.7 Recording of Instrument Outputs SMM output is recorded for trending purposes by the Technical Support Center (TSC) Computer. This information can be used by emergency response personnel assigned to the TSC to advise the control room operators on the approach to or recovery from inadequate core cooling conditions.
2.8 Identification of Instruments on Control Board The Subcooled Margin Monitor is clearly identified on the main control
-board. Use of this instrumentation by operators following an accident is reviewed as part of periodic operator training.
2.9 Isolation Devices Signal transmission to non-safety grade instrumentation for other uses is through qualified isolation devices.
F##un^'"'
+
b w
4 3' 5
d m
\\
Power Panel Display Qnnector interconnection k
input / Output Connector g
x
.s l SUBCOOLED MARGIN MONITOR
-_! l_l 1_1I tll l
l_t t_I I_1l 7
PRES
%%powgmsy,Teus PANEL DISPLAY MODULE FIGURE i SUBC00 LED MARGIN MONITOR D
3-3
/
r
be b N f
D MARGIN m
+
METER Dimy
~JL i'
TEMPERATURE OR PRESSURE PRESSURE MARGIN P
PROCESS SIGNALS g
P1 ANALOG pSAT PRESET TO I
p
P2 m @NVERTER W SELECT ALARM MARGIN I
T MARGIN T
TEMPERATURE 327 PROCESS I
C SIGNALS Xit A T1 COLD,
JLfl P
"JL 4
4 Up E CONTACT T2 COLD [
ANALOG 9
T1 HOT,"
oggghgg f
T g,
g SELECT T2 HOT CONVERTER v
U M
D;GITAL DATA LOG TO O
q 4 ;)UTPtJT ANALOG pgAg7 NVERTER COMPUTER DIG!TAL DATA LOG TO OUTPUT I
N 4 TO STRIP ANALOG UART CONVERTER RECORDER f
i l
l FIGURE 2 GENERALIZED FUNCTIONAL DIAGRAM S
3-5 I
l I
!k.
... J!, A _J_