ML20137P417

From kanterella
Jump to navigation Jump to search
Rev 0 to JPN-PSL-SEES-95-034, Safety Evaluation for Provisions to Trip EDG Output Breaker on Cias in Plant Modes 5 & 6
ML20137P417
Person / Time
Site: Saint Lucie NextEra Energy icon.png
Issue date: 10/23/1995
From:
FLORIDA POWER & LIGHT CO.
To:
Shared Package
ML20137M095 List:
References
FOIA-96-485 JPN-PSL-SEES-95, JPN-PSL-SEES-95-034, JPN-PSL-SEES-95-34, NUDOCS 9704090247
Download: ML20137P417 (18)


Text

-- 10-04-1995 08:05M1' St Lucie Ras 2d2nt OH ica 407 451 4622

'P.02' PAGE 1 OF 10

\\

j

.FIORIDA POWER AND LIGHT COMPANY ST. LUCIE UNIT 2 SAFETY EVALUATION FOR TIG PROVISIONS TO TRIP EF AGENCY DIESEL GENERATOR OUTPUT BREAKER ON CIAS IN PLANT MODES 5 AND 6 f

P JPN-PSL-SEES-95-034 REVISION O SAFETY RELATED NUCLRAR ENGINEERING DEPAR7 MENT CUNO BEACH, FLORIDA l

1 h

i 9704090247 970401 7-PDR FOIA SINDER96-485 PDR j

n

10-24-1995-398t*41 it '.c se %s urnt ".,4 s ce

4Cf7 4614522 P.ci e-FaxT ittalMemo e.-c..@ '.are

~ w.scr -

- w------

t e,h/M%'

$6[

". _"' N./..d.. '.

. ~.

w

. w s.

.. y..

fr..'.,

D==

0%.

D=

c-litter Offlee Corc- -iw JPN SPSL-964444 Date:

October 23,1995 Tot S. A. Vatcer Departrnent: JPN/PSL From:

D. J. Denver Nucasar Engineeri ST, LUC 6E UNIT 2 SAPETY EVALUAT10N FOR THE PROVl510NS TO TRIP WAERQENCY DIEEE Sut(ect:

GENERATOR. OUTPUT BREAKER C,N CIAS IN PLANT MODES 5 AND 4 M _=_ -- M_ e nam, o Attachea for your use is safety Evolustion (SE) JPN-PSL-SEES.95 034. Rev. O which evoluetes provis6ons to tr, Emergency Diesel Generator (EDOI output breakere on CtAS in plant mooes 5 and 6 The referenced SE is to be used to support the Jurrper Ld:ed Lead which will be required to f aclitete Urdt 2, EDO testing, during modes 6 and 6. The SE eve 69etes the insteRetaon of jumpers in the ESFA8 cabinets,6n order to tr9 the EDG output toekere rm receipt ci e CIAS signet. The SE le m response to the 2A EDO test failure which occt:rred on October 12 (rof. STAR 9613911 end is en 6nterim EDO protective mesours until a permanent modifeatum oen be implemented.

M you hows any questions, please contact Warren Busch at ext. 7464.

WAs/essert

. I f

cel R. Kuisv6ch (with ett.)

L. A. Rogers C. H. Wood L. J. Boes.nger tite i

T o

~ 10-24 '995 09:06AM

'St Lucie Fes: dent OHice

. 407 461 4622 P.03 o

Sn]-P5L-5Fes-95-034 gsutstou o PMC W IO REVIEW AND APPROVAL RECORD 4

PLMT ST. LUCIE UNIT 2

i i

To 'rnTo r---

-si nTunut nennu1 Ton attrPtrf unwarme j

TITLE wasvIsT. :

j me c u m rv en =T unnus s sun a LEAD DISCIPLINE El ECTRICAL f

ENGINEERING ORGANIZATION PRODUCTTON F mIWFFRING GROUP i

REVIEW / APPROVAL:

J INTERFACE TYPE GROUP PREPARED VERIFIED APPROVED FPL APPROVED

  • i INPLR REVIE N/A l

W

-~

Mmm Mm mm N/A ECH I

h- - M 2

Nd w fM M N/A f

ELECT X

N N/A 1&C I

f N/A CIVIL X

x s

e 9 w.S-Ayev

/KA N/A W

t I

N/A ESI X

N/A NUC FUEL x

~

OTHER X

N/A

)

  • Sor Contretter Evals As Detemined By Projects
    • Review interface As A ftin On All 10CFRSO.59 Evals anc FLAs M

DATE: <c/n/R~

FPL PROJECTS APPROVAL: ____

OTHER INTERFACES I

JPN Fem 24. Rev. 9/92 i

~ 110-24-1995 008 06Af1 -

St Lucie Restdant Gefica

407 461 4622 P.04 JPN-PSL-SEES-95-034 REVISICN 0 PAGE 3 OF 10 T m E Olr CONTENTS P

E SKC.ICIE IITLE 1

Cover 2

Review and Approval Record 3

Table of Contents i

4 Abstract 4

1.0 Purpose and Description 5

2.0 Licensing Requirements 7

3.0 Analysis of Effects on safety 4.0 Failure Modes and Effects Analysis 8

5.0.

Plant Restrictions 8

6.0 Effect on Technical specifications 8

7.0 Unreviewed Safety Question 8

Determination s

S.O Actions Required 10 9.0 Referenceo 10 ATTAC1 DENTS M

g Typical Mcdification Sketch '

1 1

i

24-N.Osr06AW St Lve s, Ris; dant Off ies

. e 461 4622 p,c5 JPBI-PSL-SEES-95-034 REVISION O PAGE 4 OF 10 i

c AESTRACT t

while performing a portion of the safeguards an unexpected l

f on October 12, 1995, testing required by Technical Specification, (EDG) trip occurred.

Review of the Emergency Diesel Generatorrevealed a sequence of events in whic leed to EDG trip signal was blocked creating a scenario that co event l

(without SIAS) was initiated.

This caused the damage.

~

I (load follow / share) to a grid when a CIAS EDG governor mode to switch from " droop"This condition led to a reve fixed frequency reference.

protective relay actuation.

Since the protective signals are J

bypassed under emergency operating conditions, the EDG co lead to term exposure could potentially under long The proposed modification will trip the EDG output run, which d 6 only,.therefore j

degradation.

br,eaker upon CIAs initiation in plant modes 5 anThis change will not elhinating a potential EDG failure mode.

tion affe6c plant operating practices and will enhance EDG J

i

~in modhs,5 and 6 constitute an unreviewed safety question and does not does not require a Technical Specification chango

=d Bamerletian 1.0 Dm =am The purpose of this safety evaluation is to provide basis for a l

plant temporary modification (plant modes 5 and 6 only), invo output i

tripping of an emergency diesel generator (either.2A or/

breaker on a CIAS, I

damage if an actual or a spurious CIAS occurs while the EDG be The CIAs function is required by tested is connected to the grid.

Technical Specification to be operational in all plant modes, including 5 and 6 if core alterations or fuel movement take place.This m The SIAS is not required in plant modes 5 and 6.

  • deenergize to close" CIAS spare involves wiring any convenient(A or B, as required) to trip the EDG contact in the ESFAS cabinet output breaker and prevent the scenario described in the abstract. shows the required connections and typical available

]

contacts.

1 i

1

~

10-24-1995i 08:07AM St Lucie Res: dint Office

4;y; 461 4622

. P.06 JPN-PSL-SEES-95-034 REVISICN O PAGE 5 OF 10

==d namerisselon (cont'd) pu d en l.0 f

in following changes:

The proposed modification will result PROPOSED CEANGE PRESENT C00lF19URATICet AsstaEPTIctis SIAS is blocked. CIAS CIAS trips the EDG e Plent in modes 5 or output breaker and changes the governor 6.

EDG remains running mode to isochronous.

  • Off-site power EDG breaker remains awaiting manual available e EDG in test mode closed resulting in a operator action.

No e EDG Connected to reverse power or an potential for over current equipment damage, power Grid e CIAS Generated condition.

  • Plant in modes 5 or EDG breaker does not CIAS trips output trip and the CIAS breaker, bus sheds 6.

e Loss of Off-site loads are loaded loads, EDG breaker immediately, re-closes in Power Event.

approximately 1.2 "

e EDG powering an seconds and LOOP /CIAS isolated bus.

loading sequence is e CIAS Generated initiated.

" This delay is not a concern because under the analyzed loss of offsite power scenario the EDG does not reach full speed and begins the loading sequence until 10 seconds af ter receiving a CIAS or other start signal.

2.0 Lic===:4me Emernir -

en St. Lucie Unit 2 FSAR, section 8.3.1.1.1.f, makes following statements oncerning the BDG operational performance:

The diesel generator sets start upon loss of voltage in the

  • 1) safety 4.16 KV buses or actuation of the engineered safety features actuation signals from the ESFAS which are safety in-jection actuation signal (SIAS), containment isolation actuation signal (CIAS) or containment spray actuation signal (CSAS).

2)

Upon loss of voltage on the 4.16 kV safety busen, these buses are automatically separated from the nonasafety supply buses.

10-24-1995 ' 088 07AM St Lecte Residmt OH ice

" 407 461 4622 P.07 i

JPN-PSL-SEES-95-034 l

REVISION 0

{

PAGE F OF 10 2. 0 Lie=== %==auir --a ta (Cont'd)

After each diesel generator set has_ attained normal frequency 3) breaker closes if preferred ac and voltage, the respective power has been lost, thus immediately starting all loads block for which " starting required" belonging to the first(from ESFAS) or from circuit condit$ons signals are present indicating th&t they were previously running. If preferred ac the diesel generator breaker does not power is still present, close but the set remains at full frequency and voltage until manual actions are taken.

The starting of subsequent loads are delayed by tir.ing relays 4) with three or five second intervals between them.

5)

If preferred ac power is lost but no Engineered Safety i

Features actuation signal is present, only the loads shown under the column " Loss of Offsite Power" in Table 8.3-2 are automatically started.

above an SIAS appears, all If,, while operating as per step (5) 6)

loads are stripped and loading is perfomed per Table 8.3-2.

Means are provided for periodic testing of the diesel 7) generator sets under load when preferred bus supply is from the unit aux'iliary transformer. If preferred ac power.ir Tost or an accident occurs during this

testing, the diesel generator breaker is opened and the sequence returns to step (3)."

FSAR section 8.3.1.1.2k (ii) :

  • If the diesel is started as a result of an SIAS, CIAS, CSAS or loss of offsite power, all but two of the diesel generator lockout signals Those which remain functional are engine over speed are overridden.

and generator differential,...This rationale is in accordance with the intent of BTP EICSB 17, " Diesel' Generator Protective Trip Circuit Bypass"."

These commitments compey with Regulatory Guide 1.9 and IEEE 387 and are reflected in the present plant design.

FSAR section 15.7.4.1.2 discusses fuel handling accidents and bounds all in-containment accidents' radiological consequences by an accident of dropping a fuel element in a spent fuel pool (Fuel Handling Building).

4

~

. ~

, 407 4'61 4622 P.08

~

10-24-;995' as m -

p JPN-PSL-SEES-95-034 REVISION O PAGE 7.0F 10 2.0. tie=== 4 ne meeruir--tm - (Cont ' d) d The' CIFiMivotes a minimum contingent - of loads, ~ namely ' a Shiel f

Control Room Isolation Building Ventilation fans (HVE-6A and'68),

Should these loads be 3

fans (HVE-13A and 13B) andla few valves.

required-to start with offsite power available or with EDG powering I

an isolated bus, they would start instantaneously.

If the loss of off-site power occurs at'approximately same time as CIAS, these loads coordinated with the other are picked up in a loading sequence required loads.

that the ESFAS CIAS function be Specification requires of irradiated fuel Technical operational during core alterations or movementThe high radiation CIA is reset within the containment.

to a lower value in mode 6.

anfaty

    • =1 vain af Effeats an i

3.0 4

have the same effect The proposed temporary change will make the CIAS that is, if on the RDG in modes 5 and 6 as SIAS in modes 1 through 4, theEDGikoperationalandconnectedtothegrid,upon; if loss of power occurs, the EDG breaker will'close manual action and, and the loading sequence will he initiated.

Since the proposed change will result in a system response bounded by condition, it is concluded that this the previously analyzed. SIAS temporary mcdification is acceptable.

==d affneta a==1vala 4.0 patiura +Ama The proposed. modification will eliminate an existing failure mode of The creating a potentially damaging operating condition for the EDG.

they proposed changes will noc create any new failure modes since will result in EDG response identical to SIAS in modes 1 through 4.

5.0 M ant m*=tricti-=

This temporary modification shall be implemented only in plant modes l

5 and 6.

l-l l

6.O mefact on Tech =4 cal namelftencians f

There is no effect on any existing Technical Specifications.

i I

F

j N 03:0941 et 1.scs, ge8* cent Offs:e i 407 (=51 t.622 p,y j

JPN-PSL-SEES-95-034 4

REVISION O PAGE 8 OF 10 onenti e nat=c=3nati n I

unravie==d safety (1) f 7.0 As defined in 10 CFR 50.59, an unreviewed safety questica exists; if the probability of occurrence or the censequences of an accident or malfunction of equipment importent to safety previously evaluated in the safety Analysis Report (SAR) may be increased; or (ii) if a possibility of an accident or malfunction of a different type than any if the margin previously evaluated in the SAR may be created; or (iii)o reduced.

the fellowing evaluation serves to In accordance with 10CFR50.59, determine whether the temporary modification of tripping the EDG output breaker upcn CIAS actuation in plant modes 5 and 6 addressed in this safety evaluation constitutes an unreviewed safety question:

Does the proposed activity increase the probability of occurrence of an accident previously evaluated in the SAR?

7.1 The scope of the proposed codification, to make the ef fects of CIAS on the EDG same as SIAS, do not increase the probability of an occurrence of an accident previously evaluated in the EDG start / trip are not accident initiating events.

SAR.

consequences of an Does the proposed activity increase the a

7.2 accident previously evaluated in the SAR7 The proposed modification will not increase the consequences Tripping cf of an accident previously analysed in the SAR.

the ED3 under test in the event of any ESFAS actuation results in a return to an analyzed leading sequence and therefore do not affect the accident analysis.

the probability of an 7.3 Does the proposed activity increase important to safety cecurrence of a malfunction of equtpment previously evaluated in the SAK7 The proposed modification will not increase the probability of cecunence of malfunction of equipment important to safety The modification of the EDG previously evaluated in the SAR. breaker trip circuit - additzon of normal operatienal parameters for the EDG and its output

breaker,

15-24-1975 00 @

St Lscle %s tcent Offs:3

c.;51 4622 F.;0

,v

,e A5-03*

.a.6 ggyISION 0 FAGE 9 0F M (cone'd) of d consequencespreviously h *

  • ity j increase the safety to iv ilmportant Does the proposed actequipment 7.0 change the basic of ralfunction SAR7 7,4 were evaluated in the difications do not modificacionsbility nor the The The proposed physical moequipment affected. increase the p output or its vent
  • EDG of the do not of the will Tre functionsanalyzed and they a tnalfunctiCndtenporarym0dification of f"**4uencesetikQ'gopose a an sec.

Po the proposed activity create the possibility of an Does 7.5 accident of a different type than any previously evaluated in the SAR7 The proponer2 modifications will result in the EDG res W ag to a CIAS the same way it responds to SIAs, which has been previously analyzed. The EDG or its breaker are not accident initiators, therefor the modification can not create the possibility of an accident of a different type than previously evaluated in t.he SAR.

7.6 Does the proposed activity create the possibility of a malfunction of equipment important to safety of a different type than any previously evaluated in the SAR?

Since the basic functions of the EDG syotem remain unchanged, the m;difAcation proposed does not create the possibility of a malfunction et equipmant important to safety of a different type than any previously evaluated in the SAR.

7.7 Doco the propoond activity reduce the margin of safsty as dofined in the basis for any Technical Specification?

The temporary modification preposed will increase the overall margin of safety for the plant by eliminating the potential fmilure mode ci operating the EDG connected to the grid with its protective featurco bypassed and trip conditions almost certainly generated by such an eparation.

As demonstrated above, the proposed modification la bounded by previously anslyzed TSAR scenarica.

.- w ag:N St Lucie Pes: dent Offtee

. 07 461 4622 p,.1 JPN-PSL-SEES-95-034 REVISION O PAGE 10'OF 10 d

let W =.Enquisad 4.O t

CIAS shall be incorporated into the trip circuit.of the EDG outpu '

breaker by wiring any available "deenergize to close" spare CIAS contacts in parallel with the SIAS contact as shown in Attachment 1.

contact of which will be used, should be, verified to be operational prior to implementation of the modification.

The relay,

+

a CIAS A contact is used for A train logic and Ensure that is used for B train logic, CIAs E contact Verify by test that the CIAS contact provides an EDG breaker

+

trip signal.

9.0 mafaramatas 9.1 STAR 951391 Rev.17 control Wiring Disgram 2998-B-327, Sh.757, 9.2 Sh.967, Rev.14 Control Wiring Diagram 2998-B-327, 9.3 9

Lucie Unit 2 FSAR, Amendment 9.4 St.

Lucie Unit 2 Technical Specification, Amendment 78 9.5 St.

9.6 Instruction Manual 2998-15662. Rev.5 9.7 Regulatory Guide 1.9 i

9/10 IEEE Standard 387 e

e

~~ ~ l ~1h24'995 00810Ari St ' t ete Resident Off ace

' 407 461'4622 P.*2 i.e oxc. us. 4,45.7i7 S ti'$,7'ei) i 76,..,

Tesgi usy i 2*$254 sfi-st-cs IIIt(*5 geig

!st As ; ! stat

}esAs g( g k

A l

a N.g 9

L-rn$t 18H14 16sts t ot6528 it V d ' L li $ *W= c..

Yspuucrn 9 3

st/

  • J

-s 85 os.g A s

if,6$sW 996 gf n

~

m nksA IXIOT MG--

n ESC '.s(-4941. 4941,717 S 7179,7161)

[~

T' t

itcweeAR,At

~~'1 E,

i...ibt TMhvi Tsint 16StM 1ssaa u r o

1 --

y.g g,g%,

!cis
csAs
EsiAs sistAs]-

Cl5

,4 s

,g ts,$t Tem 4

$65154 <

U-ktS A

d i o

I M@* I

'.d R1) f,$'2 *st/ A ft,g Y

.u.a s A gc_

E nksA f

MODIFIED REFERENCE : 2998-B.327, SH. 957 REV.17 i

2988.B.~,27, SH.967, REV.14 f

TYPICAL SPARE CONTACTS

.sA sa -

B540(10.111 TB637(7 ti RECOMMENDED TB539(3,4)

TB642(1,2 )

TB 539(6,7)

TB639(10,ll)

TB541(6,7)

TB636(10.111 JPN-PSL-SEEP-95-034 ATTACHMENT 1 REV.0

10-24-1995 0831 Oft 1 St Luc a Sea:aint Offsee 4C"7 461 4622 A.13 4

i The test was exited prior to completing steo B.5 and resume step 8.6.

Aligns both 2A and 23 EDGs with offsite power at or near e

full load Initiates a Channel A CIAS then resets Initaties a Channel B CIAS then resets e

.I Initiates a Channel A SIAS then resets e

Initaties a Channel B SIAS then resets Initiates'a Channel A CSAS then resets e

Initaties a Chanrel B CSAS then resets After each ESTAS Channel is actuated individuni component actuations are vertfled, of Nf#

This particular step had been rev1 sed. The previous procedure

-n Iw r

Revision inserted a SIAS Signal Lrc ":teaW the CIAS This did not allow for separate verification of the Signal.

CIAS Signal actuations since the SIAS also generated a CIAS The licensee believed thet changing the Signal by cesign.

crcer would erhance the procedure and ::rovide more detailed ESFAS Signal verifications.

i

!P em $ =

m

~ ~ 10-24-1995 Oe81;At1 St Lsete Reatdint oH ica

407 461 4622-P.14 e

e After the Channel A CIAS Signal was inserted and the component At this time actuations verified. Channel A CIAS was reset.

The test was secured and the 2A EDG tripped on reverse power.

i the 2A EDG declared inoperable.

STAR #951391 was written which identified a design deficiency of the Unit 2 EDGs.

An investigation by the licensee determinea that during the performance of Section 8.6 of'0P 2 0400050. EDG 2A was runnin CIAS-A was parallel to the grid and loaded to >3600kW.

manually initiated in accordance with step 12 of the test Actuation of CIAS inputs to the EDG governor 4

procedure.

circuit to change it from the droop mode (i.e. follows the grid frequency) to an isochronous mode (i.e. reverts to preset The EDG 2A frequency and does not follow the grid frequency).

This preset frequency was lower than that of the grid.

resulted in reducing fuel to sicw the EDG down. leading to sa-reverse 40wer flow and causing the generator to act as a motor (or synchronous capacitor). The ERDADS printout of Bus 2A3 voltage and current and EDG current confirmed a sudden The reverse Cnange at the approximate time CIAS was initiated.

pcMer relay actuated; newever, due to the presence of the CIAS-A signal. the relay trip function was blocked. Upon resetting cf the CIAS-A signal. the reverse power relay trip block was 60 l

+

. 24-1995 ' 08811Gr1 St Lucie Realdint DFfice 1 407 461 4622 P.15 r

=

removed and the EDG tripped. Total time of EDG operating under reverse power was approximately 45 seconds.

A review of the EDG control circuits by engineering found that the EDG starts on SIAS. CSAS or CIAS.and that these signals cause the EDG to change from droop mode to isochronous mode (Ref. CWDs 957 & 958 and Vendor Manual 2998-7434).

Opening the Bus 2A2-2A3 tie breaker will also change the EDG from droop t.

1sochronous modes.

In the case of SIAS and CSAS (CSAS will only occur with SIAS), the EDG circuit breaker will trip if closed, permitting the EDG to run separate from the offsite power source.

However. CIAS without SIAS does not trip the EDG breaker. resulting in the EDG operating in isochronous mode while still connected to offsite power.

EDG 2A was operated in synchronism with the offs e source prior to manual imtiation 6f CIAS A.

The is ronous mode

/

frequencysetpointfor,EOG2Aislowertha hat of the offsite 4

Therefore.,w[eNtheEDG2Agov nor changed from droop source.

tk,

/

to isocnronous

.thehelracks ted to slow the EDG from j

theoffsitesc[cefrequenctot isochronous frequency

')f

)

setpoint.

is resulted in th EDG " motoring" (a reversal of power to tte generator) wi the nerat:or trying to run the p

engine /(Ifthe1sochr ous frequency setDolnt is higher thant that,df tne offsite s rce.theEDGw$i>1dattempttospeedthe load (the grid) up.)

61

' ~ 10-24 '995 08 1.r41 s*, Luc 1o Res2d:nt off es.

407.461 4622 P. 6 The situation described above could only occur with the EDG running in parallel with the offsite source and an actuation of J

the CIAS relay without SIAS. This condition is not expecteo during normal operation or any design basis event recuiring the EDGs.

)

J l

4 Following the trip of the 2A EDG due to the reverse power i

relay, the testing was halted. The 2A EDG voltage regulator j

was visually inspected with Satisfactory results and the 2A E[iG 4

was started and loaded successfully as an operability check.

+

The current drawn by the EDG 2A generator during the reverse power incident was approximately 330 amps, as shown by the ERCADS printout. From the ERDADS Printout the licensee determined that the 2A EDG output current of 477.54 amps reversed to 330.38 amps for a net change of 807.84 amps which was sufficient to actuate the reverse power relay. Concurrent with this. Bus 2A3 voltage changed from 4331.7 volts to 4360.2 as a result of the generator producing additional MVARS, i.e.,

acting as a synchronous capacitor with a high power factor.

This value is well within the 660 amp continuous,ratg capacity; of the generator windings. Based on the abov 4 DG 2A "M

w

= & M te n damageo by the incident.

Further, performance of the regular 18 month preventative maintenance 2-22000 g g-M-00180) sc % 1 e to (Maintenance Procedures PC & Y thorough inspectien on the Qg1}5/{-

EDG e M g-1d e " 1.J.J. M any damage p c M %. b 62

~ ;0-24-;995 '08:12AM St Lucie Restdint Office

407 461 4622 F.;7

~

e EDG 2B has not been tested with a manual CIAS actuation, therefore its operability was not affected.

The Unit 1 EDGs governor control design is different from the Unit 2 EDGs. The Unit 1 EDGs have been successfully tested using an essentially identical ESFAS test procedure.

Therefore, there is no operability concern fron the Unit 1 EDGs.

b Based on the above, the EDGs A# considered operable.

The Inspector reviewed the above assessment and noted that Wile actuation of the CIAS relay without SIAS is not expected during normal operation both Unit 2 EDGs are tested monthly and operated a minimum of 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> eseh':;aralleled 10 the offsjte,g a.,JW M -

L power source. Ocuid air tuation of CIAS occur, abste,~.ai 4

p s/

!N camage to the EDG,1; pes;,Lic 4

M The Inspector was concerned by several aspects relateo to tttts--

design deficiency identified during testing:

outA.6L P' 1.

Integrated Safeguards testin ad, received a high level of management and technical support attention due to the licensee's misinterpretation of testing requirements particularly rela ad to swing bus components. The current i

h revision r the test sequence for initiating f

'E3 P

~

_ ~..

' 10-PA-1995 Der 12AM.

St Lucie Pes: dint Offica

407 461 4622 P.18 CIAS/SIAS/CSAS Signals in step 8.6 as a procedural Although tgsggsgsgugcjsgugy p enhancement.

performed earlier on Unit 1[lt was not~ reviewed in sufficient detail to assess the impact upon equipment or system operation on Unit 2.

2.

This condition has existed since initial construction.

There was no liceps e identii'ication of this failure mode, i.e. receiving aids Signal while paralleled to an offsite power source.

3.

The 2A EDG was operated for approximately 45 seconds with a reverse power trip blocked. A review of the CIEs determined that a local reverse power alars occurred which the licensee believes also generated a control room alars.

y jff Since operators were either unaware or did not question these alarms, it's dubious whether operator actions would have prevented damage if the CIAS had not been reset unblocking the reverse power trip.

Zh The licensee has placed a temporary hold on EDG testing pending resolution of their STAR. Options being considered include:

e Plant Change / Modification (Long Tenn)

Jumper / Lifted Lead 1solating the effected relay (Short Term)

?

s 64 i

ToTCL P.10

-