ML21117A352

From kanterella
Jump to navigation Jump to search
TSTF-576, Rev 1, Revise Safety/Relief Valve Requirements Draft
ML21117A352
Person / Time
Site: Technical Specifications Task Force
Issue date: 02/01/2021
From:
Technical Specifications Task Force
To:
Honcharik M, NRR/DSS, 301-415-1774
References
Download: ML21117A352 (57)


Text

TSTF-576, Rev. 1 NUREGs Affected:

Revise Safety/Relief Valve Requirements Technical Specifications Task Force Improved Standard Technical Specifications Change Traveler 1430 1431 1432 1433 1434 Classification: 1) Technical Change Recommended for CLIIP?: Yes Correction or Improvement:

Improvement NRC Fee Status:

Not Exempt Benefit:

Increases Equipment Operability Changes Marked on ISTS Rev 4.0 2194 PWROG RISD & PA (if applicable): N/A,N/A See attached.

Revision History TSTF Revision 0 Revision Status: Closed Original Issue Revision

Description:

Revision Proposed by:

BWROG LC Owners Group Review Information Date Originated by OG:

12-Jul-19 Owners Group Comments Presubmittal meeting held September 12, 2019. Revised traveler distributed to BWROG on October 7.

Date: 02-Aug-19 Owners Group Resolution:

Approved TSTF Review Information TSTF Received Date:

03-Dec-19 Date Distributed for Review 03-Dec-19 TSTF Comments:

A presubmittal meeting was held with the NRC on September 12, 2019. A revised draft was developed and submitted to the NRC on October 21. A presubmittal teleconference was held on December 2. The traveler was finalized addressing the NRC comments.

Date: 12-Dec-19 TSTF Resolution:

Approved NRC Review Information NRC Received Date:

13-Dec-19 A presubmittal meeting was held with the NRC on September 12, 2019. A revised draft was developed and submitted to the NRC on October 21. A presubmittal teleconference was held on December 2. The traveler was finalized addressing the NRC comments and submitted December 13, 2019.

The traveler was revised to reflect responses to the NRC's May 11, 2020 Request for Additional Information.

Superceded by Revision NRC Comments:

Final Resolution:

01-Feb-21 Copyright(C) 2021, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT

TSTF-576, Rev. 1 Affected Technical Specifications TSTF Revision 0 Revision Status: Closed TSTF Revision 1 Revision Status: Active TSTF-576 was revised to reflect responses to the NRC's May 11, 2020 Request for Additional Information.

The traveler justificaion and TS Bases changes were expended to include information provided in the RAI response. There were no changes to the proposed TS.

TSTF-576 was revised to reflect the December 7 audit teleconference and the additional four questions from the NRC.

TSTF-576 was also revised to be based in the completed but not yet published Revision 5 of the Standard Technical Specifications. This did not result in any changes.

Revision

Description:

Revision Proposed by:

BWROG Owners Group Review Information Date Originated by OG:

04-Jan-21 Owners Group Comments (No Comments)

Date: 15-Jan-21 Owners Group Resolution:

Approved TSTF Review Information TSTF Received Date:

18-Jan-21 Date Distributed for Review 18-Jan-21 TSTF Comments:

(No Comments)

Date: 29-Jan-21 TSTF Resolution:

Approved SR 3.3.6.3.7 Bases NUREG(s)- 1433 Only LLS Instrumentation 3.4.3 NUREG(s)- 1433 Only Specification renamed Overpressure Protection System Change

Description:

S/RVs 3.4.3 Bases NUREG(s)- 1433 Only Specification renamed Overpressure Protection System Change

Description:

S/RVs Bkgnd 3.4.3 Bases NUREG(s)- 1433 Only S/RVs S/A 3.4.3 Bases NUREG(s)- 1433 Only S/RVs LCO 3.4.3 NUREG(s)- 1433 Only S/RVs LCO 3.4.3 Bases NUREG(s)- 1433 Only S/RVs 01-Feb-21 Copyright(C) 2021, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT

TSTF-576, Rev. 1 Appl. 3.4.3 Bases NUREG(s)- 1433 Only S/RVs Action 3.4.3.A NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs Action 3.4.3.A Bases NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs Action 3.4.3.B NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs Action 3.4.3.B Bases NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs Action 3.4.3.C NUREG(s)- 1433 Only Revised and renamed "A" Change

Description:

S/RVs Action 3.4.3.C Bases NUREG(s)- 1433 Only Revised and renamed "A" Change

Description:

S/RVs SR 3.4.3.1 NUREG(s)- 1433 Only S/RVs SR 3.4.3.1 Bases NUREG(s)- 1433 Only S/RVs SR 3.4.3.2 NUREG(s)- 1433 Only New Change

Description:

S/RVs SR 3.4.3.2 NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs SR 3.4.3.2 Bases NUREG(s)- 1433 Only Deleted Change

Description:

S/RVs SR 3.4.3.2 Bases NUREG(s)- 1433 Only New Change

Description:

S/RVs Ref. 3.4.3 Bases NUREG(s)- 1433 Only S/RVs Bkgnd 3.3.6.5 Bases NUREG(s)- 1434 Only Relief and LLS Instrumentation 3.4.4 NUREG(s)- 1434 Only Specification renamed Overpressure Protection System Change

Description:

S/RVs 3.4.4 Bases NUREG(s)- 1434 Only Specification renamed Overpressure Protection System Change

Description:

S/RVs Bkgnd 3.4.4 Bases NUREG(s)- 1434 Only S/RVs S/A 3.4.4 Bases NUREG(s)- 1434 Only S/RVs LCO 3.4.4 NUREG(s)- 1434 Only S/RVs LCO 3.4.4 Bases NUREG(s)- 1434 Only S/RVs 01-Feb-21 Copyright(C) 2021, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT

TSTF-576, Rev. 1 Appl. 3.4.4 Bases NUREG(s)- 1434 Only S/RVs Action 3.4.4.A NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs Action 3.4.4.A Bases NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs Action 3.4.4.B NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs Action 3.4.4.B Bases NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs Action 3.4.4.C NUREG(s)- 1434 Only Renamed A Change

Description:

S/RVs Action 3.4.4.C Bases NUREG(s)- 1434 Only Renamed A Change

Description:

S/RVs SR 3.4.4.1 NUREG(s)- 1434 Only S/RVs SR 3.4.4.1 Bases NUREG(s)- 1434 Only S/RVs SR 3.4.4.2 NUREG(s)- 1434 Only S/RVs SR 3.4.4.2 Bases NUREG(s)- 1434 Only S/RVs SR 3.4.4.3 NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs SR 3.4.4.3 Bases NUREG(s)- 1434 Only Deleted Change

Description:

S/RVs Ref. 3.4.4 Bases NUREG(s)- 1434 Only S/RVs 01-Feb-21 Copyright(C) 2021, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.

DRAFT

TSTF-576, Rev. 1 Page 1

1.

SUMMARY

DESCRIPTION The proposed change revises the Safety/Relief Valve (S/RV) Technical Specifications (TS) to align the requirements with the safety limits and the regulations. The proposed change modifies NUREG-1433, "Standard Technical Specifications, General Electric BWR/4 Plants," and NUREG-1434, "Standard Technical Specifications, General Electric BWR/6 Plants."1

2. DETAILED DESCRIPTION 2.1. System Design and Operation The American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code requires the reactor pressure vessel to be protected from overpressure during upset conditions by self-actuated safety valves. The overpressure protection system requirements dictate the size and number of S/RVs that are needed such that peak pressure in the nuclear system will not exceed the ASME Code limits for the reactor coolant pressure boundary (RCPB) under the most severe transients. Section 5.2.2, "Overpressure Protection," of NUREG-0800, "Standard Review Plan,"

describes the typical requirements for the overpressure protection system for boiling water reactor (BWR) plants.

Title 10 of the Code of Federal Regulations (CFR), Part 50, Appendix A, "General Design Criteria," (GDC), criterion 15 "Reactor coolant system design," states, "The reactor coolant system and associated auxiliary, control, and protection systems shall be designed with sufficient margin to assure that the design conditions of the reactor coolant pressure boundary are not exceeded during any condition of normal operation, including anticipated operational occurrences." While many of the operating plants are not committed to the Appendix A GDC, most plants are committed to a similar design requirement as described in their Updated Final Safety Analysis Report (UFSAR).

The overpressure protection system for a BWR utilizes the S/RVs. The S/RVs are located on the main steam lines between the reactor vessel and the first isolation valve within the drywell. The S/RVs can actuate by either of two modes: the safety mode or the relief mode. In the safety mode (or spring mode of operation), the spring loaded disk or pilot valve opens when steam pressure overcomes the spring force holding the valve or pilot valve closed. For S/RVs with pilot valves, opening the pilot valve allows a pressure differential to develop across the main valve piston and opens the main valve. In the relief mode of operation, pneumatic pressure is used to open the valve, initiated by switches located in the control room or by pressure-sensing instrumentation. Some plants credit a percentage of the total installed S/RV capacity operating via the relief mode for overpressure protection, as permitted by the ASME Code.

1 NUREG 1433 is based on the BWR/4 plant design, but is also representative of the BWR/2, BWR/3, and, in this case, BWR/5 designs. NUREG 1434 is based on the BWR/6 plant design.

DRAFT

TSTF-576, Rev. 1 Page 2 2.1.1. S/RV Inservice Testing The S/RVs are tested in accordance with the Inservice Testing (IST) Program, as required by 10 CFR 50.55a(f). Periodic testing is described in Appendix I of the ASME Operations and Maintenance (OM) Code, "Class 1 Main Steam Pressure Relief Valves with Auxiliary Actuating Devices," Section I-3300, "Periodic Testing." This testing is performed during a plant shutdown and aspects are performed as a bench test at nominal operating temperatures and pressures. The inservice test verifies each S/RV opens within the required "as-found" tolerance around the setpoint.

Safety/Relief Valve nominal setpoints, as-left tolerance limits, and as-found tolerance limits are also established and controlled by the ASME OM Code. ASME OM Code Appendix I Section I-1310(e), states, "The Owner, based upon system and valve design basics or technical specification, shall establish and document acceptance criteria for tests required by this Mandatory Appendix." The 2015 edition of the OM Code, section I-1320, "Test Frequencies, Class 1 pressure Relief Valves," paragraph (c), "Requirements for testing additional valves,"

states, "Additional valves shall be tested in accordance with the following requirements: (1) For each valve tested for which the as-found set-pressure (first test actuation) exceeds the greater of either the plus/minus tolerance limit of the Owner-established set-pressure acceptance criteria of sub-para. I-1310(e) or +/- 3% of valve nameplate set-pressure, two additional valves shall be tested from the same valve group." Other editions of the OM Code have similar requirements.

Therefore, additional testing is required by the OM Code if an S/RV fails to open within established acceptance criteria (the owner specified limits or +/-3%) or the as-found tolerance established in the TS.

The ASME Code permits testing 20% of the S/RVs each cycle prior to startup, with the tested population expanded if failures are found. Alternatively, all of the S/RVs or pilot valves may be removed and replaced, and the as-found testing is performed within one year after removal.

Following testing, the S/RVs or pilot valves are refurbished, tested, and certified for use. The valves are set to the "as-left" tolerance, which is typically narrower than the as-found criteria to allow for drift during the period of operation.

If an S/RV fails to open within the IST tolerance during as-found testing, the failure is entered into the Corrective Action Program and, according to licensee procedures, evaluated, corrected, and tracked. The extent of condition is also evaluated. Depending on the nature of the failure, the extent of condition could include an evaluation of the ability of the S/RVs to perform their function in the current cycle.

As an example of evaluation of S/RV performance under the Corrective Action Program, in 2016 Southern Company discovered unexpected damage during testing of the S/RVs for Plant Hatch Unit 1. After examination, it was determined that the damage was similar to damage reported in a previous 10 CFR Part 21 report. Extensive extent of condition evaluations were performed on Unit 1 and Unit 2 (see NRC Reactive Inspection Report 05000321/2016009 dated June 10, 2016), which determined the Hatch S/RVs were suspectable to fretting as described in the 10 CFR Part 21 report. As a result, in May of 2016 Southern Company performed a mid-cycle outage on Plant Hatch Unit 2 to replace all eleven S/RVs and to inspect the main valve internals.

DRAFT

TSTF-576, Rev. 1 Page 3 2.2. Current Technical Specifications Requirements In addition to the ASME Code requirements, the current TS contain multiple specifications that govern the S/RVs depending on the function they are fulfilling.

  • Safety Limit 2.1.2, "Reactor Coolant System Pressure SL," states, "Reactor steam dome pressure shall be 1325 psig." The pressure limit is plant specific. The S/RVs are credited for meeting this safety limit. Safety Limit 2.1.2 limits the reactor steam dome pressure to the lowest transient overpressure allowed in order to ensure the maximum transient pressure allowable in the RCS pressure vessel is less than the ASME Code,Section III, limit of 110%

of design pressure.

  • BWR/4 and BWR/6 TS 3.6.1.6, "Low-Low Set (LLS) Valves," requires the S/RVs operating in relief mode to be operable. In the LLS mode, a subset of the S/RVs are signaled to open at a lower pressure than the relief or safety mode pressure setpoints and to stay open longer, so that reopening more than one S/RV is prevented on subsequent actuations. The LLS function prevents excessive short duration S/RV cycles with valve actuation at the relief setpoint.
  • BWR/4 TS 3.3.6.3, "Low-Low Set (LLS) Instrumentation," and BWR/6 TS 3.3.6.5, "Relief and Low-low Set (LLS) Instrumentation," provide instrumentation requirements that support the S/RVs in the LLS mode of operation. For plants that credit S/RVs in relief mode to prevent overpressurization, the LLS Instrumentation TS also provide the instrumentation requirements to support that function.
  • BWR/4 TS 3.4.3 and BWR/6 TS 3.4.4, both titled, "Safety/Relief Valves," require the S/RVs to prevent RCPB overpressurization. For most plants, the most severe pressurization transient is the closure of all main steam isolation valves (MSIVs), followed by reactor scram on high neutron flux (i.e., failure of the direct scram associated with MSIV position). For most BWR/2, BWR/3, BWR/4, and BWR/5 plants, the S/RVs in the safety mode ensure the Safety Limit is not exceeded during normal operation and Anticipated Operational Occurrences (AOOs). For BWR/6 plants and two non-BWR/6 plants (Dresden 2 and 3 and Quad Cities 1 and 2), some S/RVs in relief mode in addition to the S/RVs in safety mode are credited to ensure the ASME Code overprotection limit is protected.

The BWR/4 TS 3.4.3 S/RV LCO typically states, "The safety function of XX S/RVs shall be operable," with the required number of S/RVs (XX) corresponding to the minimum number needed to accommodate the limiting pressure transient without exceeding the Safety Limit DRAFT

TSTF-576, Rev. 1 Page 4 using only the safety mode of operation. The LCO may specify fewer S/RVs than are installed in the plant.

The BWR/6 TS 3.4.4 LCO (which is also applicable to two non-BWR/6 plants) requires the safety function of XX S/RVs and the relief function of YY additional S/RVs to be operable.

The required number of S/RVs in the safety mode (XX) and relief mode (YY) varies by plant and may specify fewer S/RVs than are installed.

BWR/4 Surveillance Requirement (SR) 3.4.3.1 and BWR/6 SR 3.4.4.1 require verification of the safety function lift setpoints of the required S/RVs. These SRs reflect the performance of the ASME Code inservice testing and also state the number of valves required to open within a specified tolerance (typically 3%) of the given setpoint. The SRs also specify the as-left tolerance (typically 1%) after testing.

BWR/6 SR 3.4.4.2 requires verification that each relief function S/RV actuates on an actual or simulated automatic initiation signal. The two Non-BWR/6 plants that credit the S/RV relief mode have a similar SR.

BWR/4 SR 3.4.3.2 and BWR/6 SR 3.4.4.3 verify that each S/RV opens when manually actuated.

2.3. Reason for the Proposed Change The S/RV LCO is written in terms of individual valves. However, the specified safety function is based on the combined pressure relieving capacity of a group of the S/RVs. The failure of some valves to open within the SR tolerance typically would not result in the inability of the S/RVs as a group to perform the specified safety function. Therefore, the LCO should be revised to align with the specified safety function.

Testing of the safety mode of each S/RV is required by the IST Program, which is required by 10 CFR 50.55a(f). It is unnecessary to duplicate this regulatory requirement in the TS when the result of any individual valve test is not required to meet the specified safety function of the system.

A review of Licensee Event Reports over the last ten years found over forty events in which S/RVs failed to lift within the SR lift pressure tolerance when bench tested. In all cases in which the SR was not met due to setpoint drift, the Licensee Event Reports concluded that the S/RVs as a group would have retained the capability to protect Safety Limit 2.1.2. This represents an unnecessary reporting burden on the licensees for failures that did not affect the ability to perform the specified safety function.

2.4. Description of the Proposed Change The proposed changes are based on the completed but not yet published Revision 5 of the Standard Technical Specifications, NUREG-1433 and NUREG-1434.

The proposed change renames BWR/4 TS 3.4.3 and BWR/6 TS 3.4.4 from "Safety/Relief Valves (S/RVs)" to "Overpressure Protection System (OPS)." This title change requires revision to the DRAFT

TSTF-576, Rev. 1 Page 5 Table of Contents and a reference in the Bases of BWR/4 TS 3.3.6.3, "Low-Low Set (LLS)

Instrumentation," and BWR/6 TS 3.3.6.5, "Relief and Low-low Set (LLS) Instrumentation."

The proposed change revises the S/RV LCO to require the Overpressure Protection System (OPS) to be operable. The LCO Bases describes an operable OPS as being capable of preventing reactor steam dome pressure from exceeding Safety Limit 2.1.2.

BWR/4 LCO 3.4.3 is revised to state (deletions are struck through; insertions are in italics):

The OPS safety function of the [11] S/RVs shall be OPERABLE.

BWR/6 LCO 3.4.4 is revised to state:

The OPS safety function of the [seven] S/RVs shall be OPERABLE, AND The relief function of [seven] additional S/RVs shall be OPERABLE.

BWR/4 SR 3.4.3.1 is revised to state:

Verify the OPS has the capability to prevent reactor steam dome pressure from exceeding Safety Limit 2.1.2.


NOTE------------------------------

[2] [required] S/RVs may be changed to a lower setpoint group.

Verify the safety function lift setpoints of the [required] S/RVs are as follows:

Number of Setpoint S/RVs (psig)

[4]

[1090 +/- 32.7]

[4]

[1100 +/- 33.0]

[3]

[1110 +/- 33.3]

Following testing, lift settings shall be within +/- 1%.

BWR/6 SR 3.4.4.1 is revised to state:

Verify the OPS has the capability to prevent reactor steam dome pressure from exceeding Safety Limit 2.1.2.


NOTE------------------------------

[2] [required] S/RVs may be changed to a lower setpoint group.

DRAFT

TSTF-576, Rev. 1 Page 6 Verify the safety function lift setpoints of the [required] S/RVs are as follows:

Number of Setpoint S/RVs (psig)

[8]

[1165 +/- 34.9]

[6]

[1180 +/- 35.4]

[6]

[1190 +/- 35.7]

Following testing, lift settings shall be within +/- 1%.

The current frequency has three options: In accordance with the Inservice Testing Program, [18]

months, or in accordance with the Surveillance Frequency Control Program. The [18] month and Surveillance Frequency Control Program options are deleted.

BWR/6 SR 3.4.4.2 is revised to state:

Verify each [required] relief function safety/relief valve acting in the relief mode S/RV actuates on an actual or simulated automatic initiation signal.

The revised BWR/6 SR 3.4.4.2 is added to the BWR/4 STS as optional surveillance SR 3.4.3.2 to be consistent with the existing TS for the two non-BWR/6 plants that credit S/RVs in relief mode.

BWR/4 SR 3.4.3.2 and BWR/6 SR 3.4.4.3, which state, "Verify each [required] S/RV opens when manually actuated," are deleted.

The changes to the LCO and SRs result in changes to the TS Actions.

BWR/4 and BWR/6 Condition A, "One [or two] [required] S/RV[s] inoperable," and "One

[required] S/RV inoperable," respectively, are deleted as the LCO and SRs no longer contain requirements on individual S/RVs.

Condition B, the default action when the Condition A Required Action and associated Completion Time is not met, is no longer required after deletion of Condition A.

BWR/4 and BWR/6 Condition C, "[Three] or more [required] S/RVs inoperable," and "[Two] or more [required] S/RVs inoperable," respectively, are replaced with a new Condition, "OPS inoperable." The new Condition retains the existing Required Actions to be in Mode 3 in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in Mode 4 in 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

The TS Bases are revised to reflect the changes to the TS. The regulation at Title 10 of the Code of Federal Regulations (10 CFR), Part 50.36, states, "A summary statement of the bases or reasons for such specifications, other than those covering administrative controls, shall also be included in the application, but shall not become part of the technical specifications." A licensee may make changes to the TS Bases without prior NRC review and approval in accordance with DRAFT

TSTF-576, Rev. 1 Page 7 the Technical Specifications Bases Control Program. The proposed TS Bases changes are consistent with the proposed TS changes and provide the purpose for each requirement in the specification consistent with the Commission's Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors, dated July 2, 1993 (58 FR 39132).

Therefore, the Bases changes are provided for information and approval of the Bases is not requested.

A model application is attached. The model may be used by licensees desiring to adopt the traveler following NRC approval.

3. TECHNICAL EVALUATION Specification Name Change.

As discussed in Section 2.2, there are several specifications which provide requirements on the S/RVs. It is confusing to title the specification "Safety/Relief Valves," because that name implies it is the only specification that governs the equipment. Just as TS 3.5.1 refers to the "Automatic Depressurization System (ADS)" function of the S/RVs, it is more appropriate to title BWR/4 TS 3.4.3 and BWR/6 TS 3.4.4 "Overpressure Protection System (OPS)," to represent the functional capability required by the specification. Renaming the specifications is consistent with the STS convention that an LCO requires a system to be operable and the LCO Bases describe what is required for the system to capable of performing its specified safety function. The term "overpressure protection system," is not new. The NRC Standard Review Plan (NUREG-0800), Section 5.2.2, is titled, "Overpressure Protection," and many BWR plants have a similar Updated Final Safety Analysis Report (UFSAR) section. In addition, the existing BWR/4 TS 3.4.3 and BWR/6 TS 3.4.4 "Applicable Safety Analysis" section of the Bases begins, "The overpressure protection system must accommodate the most severe pressurization transient." As a result, referring to the S/RV overpressure protection function as the "Overpressure Protection System (OPS)," is a clearer representation of the requirement.

LCO Changes The current S/RV Limiting Condition for Operation (LCO) is overly restrictive based on the relevant regulations. Title 10 of the CFR, Paragraph 50.36(c)(2)(i) states, "Limiting conditions for operation are the lowest functional capability or performance levels of equipment required for safe operation of the facility." The existing S/RV LCO is written in terms of individual valves, but the specified safety function is based on the combined pressure relieving capacity of the credited S/RVs (which may be less than the installed complement of valves). The failure of a particular valve or valves to open within the SR tolerance may not (and based on historical performance, is unlikely to) result in the inability of the S/RVs as a group to perform the specified safety function. Given that the existing LCO does not represent the lowest functional capability or performance level of equipment required for safe operation of the facility, it is revised to be consistent with 10 CFR 50.36(c)(2)(i).

TSTF-GG-05-02, "Writers Guide for Plant-Specific Improved Technical Specifications,"

(ADAMS Accession No. ML070660229) Section 4.1.4, "Chapter 3 LCO Content," states, "The LCO describes as simply as possible the lowest functional capability or performance levels of DRAFT

TSTF-576, Rev. 1 Page 8 equipment required for safe operation of the facility.... It is acceptable to generically refer to the system, subsystem, component or parameter which is the subject of the LCO and provide the specific scope/boundaries in the Bases." Following this guidance, the BWR/4 TS 3.4.3 and BWR/6 TS 3.4.4 LCOs are revised to require the OPS to be operable. The LCO Bases are revised to state, "The OPS is OPERABLE when it can ensure that the ASME Code limit on peak reactor pressure, as stated in Safety Limit 2.1.2, will be protected using the safety mode of the S/RVs [and the relief mode of additional S/RVs]. OPERABILITY of the OPS is only dependent on the capability of the S/RVs to open to relieve excess pressure and may credit less than the full complement of installed S/RVs."

The phrase "and the relief mode of additional S/RVs" is bracketed (i.e., plant-specific) in the BWR/4 TS Bases since it is applicable to only two plants. The phrase is not bracketed in the BWR/6 TS since it is applicable to all BWR/6 plants.

The terms "safety function" and "relief function" are used in the existing BWR/4 LCO 3.4.3 and BWR/6 LCO 3.4.4. However, the TS Bases, "Background" section uses the terms "safety mode" and "relief mode." For example, the Bases state, "The S/RVs can actuate by either of two modes: the safety mode or the relief mode," and "The S/RVs that provide the relief mode are the low-low set (LLS) valves and the Automatic Depressurization System (ADS) valves." The term "safety function" could be easily confused with the term "specified safety function" used in the definition of operability. For clarity and for consistency, the TS and Bases are revised to use the terms "safety mode" and "relief mode." This is an administrative change with no change in intent.

The LCO is revised to no longer specify the number of credited operable S/RVs. As stated previously, the overpressure protection function is provided by the collective action of the credited S/RVs, not individual S/RVs. This change is consistent with the required function and the 10 CFR 50.36 requirement that the LCO represent the lowest functional capability required for safe operation of the facility.

The BWR/6 LCO requires relief mode of operation for a subset of S/RVs. These plant designs permit crediting some of the pressure relieving capability of electrically operated pressure relief valves in the overpressure analysis. Two non-BWR/6 plants, Dresden 2 and 3 and Quad Cities 1 and 2, also credit electrically operated pressure relief valves and changes are proposed to accommodate that design. The revision to the LCO to require the OPS to be operable includes a change to the LCO Bases to describe the role of the S/RVs in relief mode. The LCO Bases are revised to specify that the S/RVs credited for the relief mode cannot also be credited for meeting the safety mode portion of the LCO, consistent with the term "additional" which appears in the current LCO.

BWR/4 SR 3.4.3.1 and BWR/6 SR 3.4.4.1 Changes Paragraph 10 CFR 50.36(c)(3) states, "Surveillance requirements are requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions for operation will be met." While the existing test of each S/RV assures the necessary quality of the components is maintained, the testing is duplicative of the IST Program, which is required by regulation (10 CFR 50.55a(f)). The existing SR does not meet the regulatory guidance that the SR will assure that facility operation will be within safety limits, as the SR requirements on each S/RV are overly conservative for that purpose. The existing SR verifies that the existing LCO is DRAFT

TSTF-576, Rev. 1 Page 9 met, but as discussed above, the LCO is also overly restrictive with respect to the regulatory requirements.

The existing SR verifies each S/RV lifts within the tolerance around the specified setpoint. As previously discussed, the specified safety function is based on the collective capability of the credited S/RVs to relieve pressure, not the ability of each S/RV to lift within a specified tolerance. As discussed above, the LCO requirement that the S/RVs be operable is replaced with a requirement that the Overpressure Protection System be operable. Therefore, the SR is replaced with a requirement to verify the OPS has the capability to prevent reactor steam dome pressure from exceeding Safety Limit 2.1.2.

The SR Bases are revised to discuss the relationship between the SR and the inservice testing of the S/RVs required by the ASME Code. The proposed Bases state:

This Surveillance verifies that the OPS has the capability to prevent the reactor steam dome pressure from exceeding Safety Limit 2.1.2. The testing of the S/RV safety mode lift settings is performed during shutdown, since this is a bench test, to be done in accordance with the Inservice Testing Program. The measured S/RV mechanical lift values tested in accordance with the Inservice Testing Program are reviewed and compared to the overpressure analysis to verify that the collective performance of the credited S/RVs will ensure Safety Limit 2.1.2 is protected. Should one or more of the credited S/RVs not actuate within the assumed tolerance, the actual lift values will be used to evaluate the affected overpressure analyses to determine whether the Safety Limit is protected. In this case, the SR consists of a combination of testing and calculation.

The description of the OPS in the LCO Bases includes the safety mode of the S/RVs and, when necessary, the relief mode of additional S/RVs. Therefore, when the SR requires verification that the OPS will protect the Safety Limit, it includes the relief mode when credited in the overpressure protection analysis. Therefore, it is not necessary to call out S/RVs operating in the relief mode in the SR.

The proposed change to the SR no longer specifies the number of S/RVs set at each lift setpoint and the as-found tolerance around the setpoint. This information is controlled by the ASME OM Code, which is required to be followed by 10 CFR 50.55a. Appendix I of the ASME OM Code provides S/RV testing requirements, including establishment of setpoints, as-found tolerances, and as-left tolerances. ASME OM Code requirement I-1310(e), states, "The Owner, based upon system and valve design basics or technical specification, shall establish and document acceptance criteria for tests required by this Mandatory Appendix." Therefore, the acceptance criteria will be specified in the licensee-controlled documents.

The 2015 edition of the OM Code, section I-1320, "Test Frequencies, Class 1 pressure Relief Valves," paragraph (c), "Requirements for testing additional valves," states, "Additional valves shall be tested in accordance with the following requirements: (1) For each valve tested for which the as-found set-pressure (first test actuation) exceeds the greater of either the plus/minus tolerance limit of the Owners-established set-pressure acceptance criteria of sub-para. I-1310(e) or +/-3% of valve nameplate set-pressure, two additional valves shall be tested from the same valve group." Section I-1310(e), "Acceptance Criteria," states, "The Owner, based upon system DRAFT

TSTF-576, Rev. 1 Page 10 and valve design basics or technical specification, shall establish and document acceptance criteria for tests required by this mandatory Appendix." Other editions of the OM Code have similar requirements.

Under the proposed change, the S/RV testing acceptance criteria that are based on the technical specifications are removed. Therefore, the Owner-established acceptance criteria applies, or

+/- 3% if the Owner has not established a tolerance. With the removal of the S/RV setpoints and tolerances from the TS and basing the TS on the OPS capability, there is no incentive for a licensee to justify a wider testing tolerance for the inservice test and it is expected that S/RV testing and maintenance will continue to be based on +/-3% or the tolerance currently in the TS.

Under the proposed change, the licensee may justify under 10 CFR 50.59 a representative set of S/RV setpoints and tolerances based on historical plant operation to be used as inputs to the overpressure analysis. Doing so will not affect the ASME OM Code testing acceptance criteria and the required testing and associated maintenance.

Periodic testing of S/RVs will still be performed as required by Appendix I of the ASME OM Code, "Class 1 Main Steam Pressure Relief Valves with Auxiliary Actuating Devices," Section I-3300, "Periodic Testing." Title 10 of the CFR, Part 50, paragraph 55a, "Codes and standards,"

requires licensees to follow the ASME OM Code. The results of the OM Code-required testing will be used to evaluate S/RV performance under the proposed BWR/4 SR 3.4.3.1 and BWR/6 SR 3.4.4.1.

The number of S/RVs required at each setpoint and the as-found and as-left setpoints are not specified in the LCO Bases of the proposed change, as inclusion of that information would inappropriately tie individual valve performance to operability of the OPS.

The S/RV safety mode lift setpoints and tolerances are also inputs to the accident analyses. The licensee may set the number of S/RVs at each lift setpoint, and the as-found and as-left tolerances, as specified by the OM Code, and verify that the overpressure and accident analyses provide acceptable results using NRC-approved methods. The S/RV lift setpoints and tolerances used in accident analyses will be maintained in licensee-controlled documents subject to the 10 CFR 50.59 change controls, similar to other analysis assumptions.

The proposed approach is similar to other SRs that require analysis to evaluate whether the SR is met. For example, BWR/4 SR 3.7.5.1 states, "Verify each [control room AC] subsystem has the capability to remove the assumed heat load." As discussed in the associated Bases, performance of the SR consists of a combination of testing and calculation, just as the proposed S/RV SR will require a combination of testing and calculation to verify the SR is met.

The S/RV relief mode setpoints will continue to be specified in BWR/6 TS 3.3.6.5, "Relief and Low-low Set (LLS) Instrumentation," and in some plant-specific TS not based on the STS.

Under the proposed SR, the results of the Inservice Testing Program individual valve testing will be reviewed to verify that the collective performance of the S/RVs will ensure Safety Limit 2.1.2 is protected. If all of the required S/RVs actuate within the assumed tolerance, the SR is met.

If the as-found individual S/RV performance is not within the inputs and assumptions of the previous cycle RLA, the previous cycle overpressure RLA is reevaluated using revised inputs DRAFT

TSTF-576, Rev. 1 Page 11 considering the as-found test results and the NRC-approved methodology for the licensee. The purpose of the evaluation is to determine if the RLA of the previous cycle bounded the actual plant performance and the SR was met. This reevaluation may be performed by the licensee or a vendor. The reevaluation is performed using the measured S/RV lift settings for tested S/RVs and the upper limits of the ASME Code testing allowance for any S/RVs that were not tested.

Any S/RV that was required to be tested but that could not be tested, or if the results cannot be determined, is assumed to be out-of-service.

The previous cycle RLA reevaluation may result in one of the following outcomes:

i.

If the previous cycle RLA reevaluation demonstrates that the calculated overpressure is less than or equal to the RLA calculated peak overpressure for the limiting event (i.e., the RLA results were bounding), then the SR was met and the OPS was operable during the previous cycle. It can be assumed that the current cycle RLA inputs and assumptions contain adequate conservatism to account for the as-found S/RV performance. No further action is required.

ii. If the previous cycle RLA reevaluation does not demonstrate that the calculated overpressure is less than or equal to the RLA calculated peak overpressure for the limiting event (i.e., the RLA results are not bounding), the previous cycle overpressure analysis was not consistent with actual plant performance and the issue will be entered into the Corrective Action Program (as required by 10 CFR 50, Appendix B, Criterion XVII, "Corrective Actions,"). The previous cycle performance will be evaluated for reportability under 10 CFR 50.72 and 10 CFR 50.73.

If the previous cycle RLA reevaluation determines the RLA overpressure analysis did not bound actual plant performance, the current cycle overpressure RLA must be reevaluated as part of the Corrective Action Program extent of condition consideration.

The current cycle RLA reevaluation will use the licensee's NRC-approved methodology but the inputs and assumptions will be updated as needed considering the previous cycle test results.

The nature of the changes to the inputs will depend on the cause of the as-found failures and the similarities or differences between the previous cycle and the current cycle. An evaluation of the cause of the as-found failures may result in changes to the S/RV tolerances or other assumptions in the reevaluation. If it is determined that the OPS is not operable, the TS Actions require a plant shutdown.

Safety/Relief Valves fall under 10 CFR 50.65 (the Maintenance Rule). Licensee Maintenance Rule programs require establishing performance criteria, monitoring and trending performance, determining the cause of failures, and taking corrective action. Those activities are available for NRC inspection.

The Boiling Water Reactor Owners' Group (BWROG) has been working to improve S/RV performance for many years and has trended the performance of problematic two-stage S/RVs.

The BWROG plans to continue to monitor and improve S/RV performance across the BWR fleet.

DRAFT

TSTF-576, Rev. 1 Page 12 Safety/Relief Valves that are removed from the plant for testing are refurbished, certified, and reset to within the as-left tolerance prior to reinstallation in accordance with the ASME Code.

In summary, the proposed BWR/4 SR 3.4.3.1 and BWR/6 SR 3.4.4.1 will verify that the Overpressure Protection System, which represents the collective function of the S/RVs, will perform the specified safety function, and will confirm that facility operation will be within the safety limits. The requirements on individual S/RVs will be adequately controlled by 10 CFR 50.55a, the ASME OM Code, 10 CFR 50.65, and 10 CFR 50.59, and do not need to appear in the TS.

BWR/6 SR 3.4.4.2 Changes and BWR/4 SR 3.4.3.2 Addition BWR/6 SR 3.4.4.2 states, "Verify each [required] relief function S/RV actuates on an actual or simulated automatic initiation signal." The SR is revised to refer to the "safety/relief valve acting in the relief mode" instead of the "relief function" as previously discussed. The brackets around the word "required" are removed. Brackets indicate a plant-specific option. The equivalent SR in all four BWR/6 plants contains the word "required." Therefore, the brackets are unnecessary and are removed to make the STS consistent with the plant TS.

An optional [i.e., bracketed] NUREG-1433 SR 3.4.3.2 is added to reflect the current TS requirements for some plants. Two BWR/3 plants (Dresden 2 and 3 and Quad Cities 1 and 2) are permitted to credit a portion of the S/RV capacity in relief mode in their overpressure analysis.

The current TS for those plants contains an SR similar to NUREG-1434 SR 3.4.4.2, including the Note that excludes valve actuation. The optional SR is added to the NUREG-1433 STS to make the STS more consistent with the BWR fleet TS. Plants that do not currently have the SR in their TS would not adopt the optional SR. Thus, the change has no effect on any plant TS.

The existing BWR/6 SR Note and the SR Note in the added BWR/4 SR states that S/RV actuation is not required when verifying that the S/RV will open on an actual or simulated automatic initiation signal. Most plants perform the SR by removing the actuator from the S/RV to avoid opening the S/RV. Opening of an S/RV after installation is avoided because it can lead to inadequate seating and seat leakage.

BWR/4 SR 3.4.3.2 and BWR/6 SR 3.4.4.3 Elimination The existing SRs verify that each S/RV opens when manually actuated. The Bases for the SRs state that a manual actuation is performed to verify that, mechanically, the valve is functioning properly, and no blockage exists in the valve discharge line. This SR is removed from the TS.

There is no safety analysis assumption that the S/RVs can open manually to limit overpressure.

As a result, the ability to open manually is not required to demonstrate that the valve is functioning properly. This is supported by the existing SR Bases statement, "If a valve fails to actuate due only to the failure of the solenoid but is capable of opening on overpressure, the safety function of the S/RV is considered operable." TS SR 3.0.1 states that when an SR is not met, the associated LCO is not met (i.e., the system is inoperable). However, the existing TS Bases are contrary to SR 3.0.1 and state that the LCO is met even if the manual actuation SR isn't met. The manual actuation SR is removed to be consistent with the TS requirements.

DRAFT

TSTF-576, Rev. 1 Page 13 BWR/4 SR 3.4.3.2 and BWR/6 SR 3.4.4.3 are not needed to verify the S/RVs are mechanically functioning properly. The as-left test of the S/RVs verifies each valve is functioning properly.

Following installation in the plant, the actuator is usually tested again with the actuator disengaged. This test not only verifies operability of the actuator, but also verifies the pneumatic and electric connections. The actuators are then re-engaged to the valve with appropriate independent verification and sign-offs to verify the S/RV will function properly.

The SR is not needed to verify the downstream piping is unobstructed. Licensees have robust Foreign Material Exclusion (FME) programs to ensure systems are not contaminated during maintenance. Those programs are routinely inspected under NRC Inspection Manual Procedure 71111.20. Further, the NRC staff has previously agreed that an SR to verify that S/RV downstream piping is not obstructed is unnecessary because of licensee FME controls. In the staff's safety evaluation for license amendment 116 for the Hope Creek Generating Station, dated February 10, 1999, the staff stated:

Another difference between the current TS-required stroking and the licensee's proposal is that, when performing the testing in-situ as required by the current TS, the testing verifies that the SRV discharge line is not blocked. However, the licensee stated that there is a Foreign Material Exclusion Program in place at the plant which minimizes the potential of debris blocking the discharge lines such that the possibility of blockage is extremely remote. The staff agrees that there is a very small possibility of blockage of an SRV discharge line as demonstrated by operational history and finds that the licensee has acceptably addressed this concern.

There is no industry operational history of S/RV downstream piping being obstructed by foreign material and the staff's conclusion is equally applicable to the proposed generic change. Manual operation of the S/RV valves in the relief mode will continue to be tested by BWR/4 SR 3.5.1.12 and BWR/6 SR 3.5.1.7, "Verify each ADS valve opens when manually actuated," and BWR/4 and BWR/6 SR 3.6.1.6.1, "Verify each LLS valve opens when manually actuated."

Action Changes Existing BWR/4 TS 3.4.4, Condition A, applies when one or two [required] S/RVs are inoperable. The Action requires the inoperable S/RV(s) to be restored within 14 days, followed by a plant shutdown. The proposed TS does not include such an Action and S/RVs may be nonfunctional indefinitely as long as the Overpressure Protection System is operable. This relaxation is acceptable because the purpose of the LCO is to protect the overpressure Safety Limit and if the LCO can be met, it is unnecessary to limit continued plant operation due to the unavailability of one or two S/RVs. However, should it be determined that an S/RV is unavailable, an evaluation under the Corrective Action Program would be required to determine whether the Overpressure Protection System is operable. Availability of the S/RVs will also be assessed under 10 CFR 50.65 (the Maintenance Rule).

While NUREG-1433 and NUREG-1434 contain an Action for one inoperable safety mode S/RV, only one BWR plant TS based on the STS contains that action. Almost all BWR plant TS require an immediate shutdown if one required safety mode S/RV is inoperable and the proposed change does not alter the current requirements. The existing BWR/6 TS 3.4.4 Actions are not DRAFT

TSTF-576, Rev. 1 Page 14 consistent with the plant TS of the four BWR/6 plants. TS 3.4.4 for the BWR/6 plants (River Bend, Grand Gulf, Perry, and Clinton) contains a single action for one or more required safety mode or relief mode S/RVs inoperable, and it requires being in Mode 3 in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in Mode 4 in 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />, which is consistent with the proposed change.

Under the proposed change the TS LCO requires the OPS to be operable. The OPS is operable when it can ensure that the ASME Code limit on peak reactor pressure, as stated in Safety Limit 2.1.2, will be protected. The LCO and SRs do not place requirements on individual S/RVs.

Therefore, there is no condition in which the OPS could be inoperable (i.e., the LCO would not be met and the Actions apply) but the remaining S/RVs could be capable of providing the necessary overpressure protection to protect the Safety Limit as stated in the current Action Bases. The only appropriate Action when the proposed LCO is not met is to shut down the unit.

Existing BWR/4 TS 3.4.4, Condition B, applies when the Required Action and associated Completion Time of Condition A is not met. As Condition A is deleted, Condition B is no longer needed and is also deleted.

Existing BWR/4 TS 3.4.4, Condition C, applies when [three] or more [required] S/RVs are inoperable. The Condition is renumbered Condition A and revised to state, "OPS inoperable."

The existing Required Actions to be in Mode 3 in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and Mode 4 in 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> are retained.

Testing to verify that the OPS is operable is typically performed during a shutdown when the LCO is not applicable. Therefore, it is worthwhile to consider how the Actions would be applied at power. As an example, consider a unit operating at 100% power. A vendor bulletin is received that identifies several installed S/RVs have faulty parts that could reduce the S/RV's relief capacity by 10%. Under the Corrective Action Program, the licensee must evaluate whether the Overpressure Protection System is operable. An evaluation is performed to determine if the reduction in relief capacity in the affected S/RVs would render the OPS incapable of protecting Safety Limit 2.1.2 in the limiting event. If the remaining relief capacity is capable of protecting the Safety Limit, the OPS is operable. If not, the OPS is inoperable, and Action A would require a plant shutdown. Even though the proposed LCO and SRs do not specify the number of required S/RVs or their setpoints, there is no change in the need to ensure the ability to protect Safety Limit 2.1.2 when a condition is identified that could affect the S/RVs. As an additional example, consider a unit operating at 100% power. During the previous outage, all of the S/RVs were removed for testing and replaced with refurbished S/RVs.

The ASME Code testing of the removed S/RVs is completed and the as-found lift settings for some of the S/RVs is not within the tolerance. If an evaluation of the deficient condition performed under the Corrective Action Program determines that the collective S/RV performance did not support the previous cycle RLA overpressure analysis, an evaluation will assess the OPS operability for the current cycle. The nature of the evaluation will depend on a number of factors, such as the number of S/RVs that were tested, the number of S/RVs that did not open within tolerance, any known cause of the difference in S/RV performance, the difference between the actual and assumed lift pressure, and any differences between the tested valves and the currently installed valves. The results of the evaluation could result in a spectrum of actions, such as trending and monitoring, revising the RLA overpressure analysis, supplemental S/RV testing, or replacement of the installed valves. If the evaluation determines that the OPS is not operable, the TS Actions require a plant shutdown.

DRAFT

TSTF-576, Rev. 1 Page 15

4. REGULATORY EVALUATION 4.1. Applicable Regulatory Requirements/Criteria Section IV, "The Commission Policy," of the "Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors" (58 Federal Register 39132), dated July 22, 1993, states in part:

The purpose of Technical Specifications is to impose those conditions or limitations upon reactor operation necessary to obviate the possibility of an abnormal situation or event giving rise to an immediate threat to the public health and safety by identifying those features that are of controlling importance to safety and establishing on them certain conditions of operation which cannot be changed without prior Commission approval.

[T]he Commission will also entertain requests to adopt portions of the improved STS, even if the licensee does not adopt all STS improvements.

The Commission encourages all licensees who submit Technical Specification related submittals based on this Policy Statement to emphasize human factors principles.

In accordance with this Policy Statement, improved STS have been developed and will be maintained for [BWR designs]. The Commission encourages licensees to use the improved STS as the basis for plant-specific Technical Specifications.

[I]t is the Commission intent that the wording and Bases of the improved STS be used to the extent practicable.

As described in the Commissions "Final Policy Statement on Technical Specifications Improvements for Nuclear Power Reactors," recommendations were made by NRC and industry task groups for new STS that include greater emphasis on human factors principles in order to add clarity and understanding to the text of the STS, and provide improvements to the Bases of STS, which provides the purpose for each requirement in the specification. Improved vendor-specific STS were developed and issued by the NRC in September 1992.

The regulation at Title 10 of the Code of Federal Regulations (10 CFR) Section 50.36(a)(1) requires an applicant for an operating license to include in the application proposed TS in accordance with the requirements of 10 CFR 50.36. The applicant must include in the application a "summary statement of the bases or reasons for such specifications, other than those covering administrative controls." However, per 10 CFR 50.36(a)(1), these technical specification bases "shall not become part of the technical specifications." The Final Policy Statement provides the following description of the scope and the purpose of the Technical Specification Bases:

Appropriate Surveillance Requirements and Actions should be retained for each LCO

[limiting condition for operation] which remains or is included in the Technical Specifications. Each LCO, Action, and Surveillance Requirement should have supporting Bases. The Bases should at a minimum address the following questions and DRAFT

TSTF-576, Rev. 1 Page 16 cite references to appropriate licensing documentation (e.g., FSAR, Topical Report) to support the Bases.

1.

What is the justification for the Technical Specification, i.e., which Policy Statement criterion requires it to be in the Technical Specifications?

The proposed change does not alter the applicable Policy Statement criterion and justifies that the specification satisfies Criterion 3.

2.

What are the Bases for each LCO, i.e., why was it determined to be the lowest functional capability or performance level for the system or component in question necessary for safe operation of the facility and, what are the reasons for the Applicability of the LCO?

The proposed change alters the LCO. The proposed Bases justify why the LCO represents the lowest functional capability or performance level for the system. The proposed change does not alter the Applicability and the Bases continue to justify the Applicability.

3.

What are the Bases for each Action, i.e., why should this remedial action be taken if the associated LCO cannot be met; how does this Action relate to other Actions associated with the LCO; and what justifies continued operation of the system or component at the reduced state from the state specified in the LCO for the allowed time period?

The Actions in the proposed change require a plant shutdown if the LCO is not met. The Bases justify that Action and the Completion Time and describe why continued operation in that condition is not permitted.

4.

What are the Bases for each Safety Limit?

The proposed change does not alter any Safety Limits or their associated Bases.

5.

What are the Bases for each Surveillance Requirement and Surveillance Frequency; i.e., what specific functional requirement is the surveillance designed to verify? Why is this surveillance necessary at the specified frequency to assure that the system or component function is maintained, that facility operation will be within the Safety Limits, and that the LCO will be met?

The proposed change alters the Surveillance Requirements. The proposed associated Bases describe the functional requirement (protecting the overpressure Safety Limit) and why the specified Frequency is appropriate.

Note: In answering these questions the Bases for each number (e.g., Allowable Value, Response Time, Completion Time, Surveillance Frequency), state, condition, and definition (e.g., operability) should be clearly specified. As an example, a number might DRAFT

TSTF-576, Rev. 1 Page 17 be based on engineering judgment, past experience, or PSA [probabilistic safety assessment] insights; but this should be clearly stated.

Additionally, 10 CFR 50.36(b) requires:

Each license authorizing operation of a utilization facility will include technical specifications. The technical specifications will be derived from the analyses and evaluation included in the safety analysis report, and amendments thereto, submitted pursuant to [10 CFR] 50.34 ["Contents of applications; technical information"]. The Commission may include such additional technical specifications as the Commission finds appropriate.

The categories of items required to be in the TS are provided in 10 CFR 50.36(c). As required by 10 CFR 50.36(c)(2)(i), the TS will include LCOs, which are the lowest functional capability or performance levels of equipment required for safe operation of the facility. Per 10 CFR 50.36(c)(2)(i), when an LCO of a nuclear reactor is not met, the licensee shall shut down the reactor or follow any remedial action permitted by the TS until the condition can be met.

The regulation at 10 CFR 50.36(c)(3) requires TS to include items in the category of SRs, which are requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the LCOs will be met.

Per 10 CFR 50.90, whenever a holder of a license desires to amend the license, application for an amendment must be filed with the Commission, fully describing the changes desired, and following as far as applicable, the form prescribed for original applications.

Per 10 CFR 50.92(a), in determining whether an amendment to a license will be issued to the applicant, the Commission will be guided by the considerations which govern the issuance of initial licenses to the extent applicable and appropriate.

The NRC staffs guidance for the review of TS is in Chapter 16, "Technical Specifications," of NUREG-0800, Revision 3, "Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants" (SRP), dated March 2010 (ADAMS Accession No. ML100351425). As described therein, as part of the regulatory standardization effort, the NRC staff has prepared Standard Technical Specifications for each of the light-water reactor nuclear designs.

4.2. Conclusions In conclusion, based on the considerations discussed above, the proposed revision does not alter the current manner of operation and (1) there is reasonable assurance that the health and safety of the public will not be endangered by continued operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the approval of the proposed change will not be inimical to the common defense and security or to the health and safety of the public.

DRAFT

TSTF-576, Rev. 1 Page 18

5. REFERENCES None.

DRAFT

TSTF-576, Rev. 0 Model Application DRAFT

TSTF-576, Rev. 0 Page 1

[DATE]

10 CFR 50.90 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001 PLANT NAME DOCKET NO. 50-[xxx]

SUBJECT:

Application to Revise Technical Specifications to Adopt TSTF-576, "Revise Safety/Relief Valve Requirements" Pursuant to 10 CFR 50.90, [LICENSEE] is submitting a request for an amendment to the Technical Specifications (TS) for [PLANT NAME, UNIT NOS.].

[LICENSEE] requests adoption of TSTF-576, "Revise Safety/Relief Valve Requirements." The proposed change revises the Safety/Relief Valve (S/RV) TS to align the requirements with the safety limits and the regulations.

The enclosure provides a description and assessment of the proposed changes. Attachment 1 provides the existing TS pages marked to show the proposed changes. Attachment 2 provides revised (clean) TS pages. Attachment 3 provides the existing TS Bases pages marked to show revised text associated with the proposed TS changes and is provided for information only.

[LICENSEE] requests that the amendment be reviewed under the Consolidated Line Item Improvement Process (CLIIP). Approval of the proposed amendment is requested within six months of acceptance. Once approved, the amendment shall be implemented within [30] days.

There are no regulatory commitments made in this submittal.

In accordance with 10 CFR 50.91, a copy of this application, with attachments, is being provided to the designated [STATE] Official.

[In accordance with 10 CFR 50.30(b), a license amendment request must be executed in a signed original under oath or affirmation. This can be accomplished by attaching a notarized affidavit confirming the signature authority of the signatory, or by including the following statement in the cover letter: "I declare under penalty of perjury that the foregoing is true and correct.

Executed on (date)." The alternative statement is pursuant to 28 USC 1746. It does not require notarization.]

DRAFT

TSTF-576, Rev. 0 Page 2 If you should have any questions regarding this submittal, please contact [NAME, TELEPHONE NUMBER].

Sincerely,

[Name, Title]

Enclosure:

Description and Assessment Attachments: 1.

Proposed Technical Specification Changes (Mark-Up)

2.

Revised Technical Specification Pages

3.

Proposed Technical Specification Bases Changes (Mark-Up) - For Information Only

[The attachments are to be provided by the licensee and are not included in the model application.]

cc:

NRC Project Manager NRC Regional Office NRC Resident Inspector State Contact DRAFT

TSTF-576, Rev. 0 Page 3 ENCLOSURE DESCRIPTION AND ASSESSMENT

1.0 DESCRIPTION

[LICENSEE] requests adoption of TSTF-576, "Revise Safety/Relief Valve Requirements." The proposed change revises the Safety/Relief Valve (S/RV) Technical Specifications (TS) to align the requirements with the safety limits and the regulations.

2.0 ASSESSMENT

2.1 Applicability of Safety Evaluation

[LICENSEE] has reviewed the safety evaluation for TSTF-576 provided to the Technical Specifications Task Force in a letter dated [DATE]. This review included a review of the NRC staffs evaluation, as well as the information provided in TSTF-576. [As described herein,]

[LICENSEE] has concluded that the justifications presented in TSTF-576 and the safety evaluation prepared by the NRC staff are applicable to [PLANT, UNIT NOS.] and justify this amendment for the incorporation of the changes to the [PLANT] TS.

2.2 Optional Changes and Variations

[LICENSEE is not proposing any variations from the TS changes described in TSTF-576 or the applicable parts of the NRC staffs safety evaluation dated [DATE].] [LICENSEE is proposing the following variations from the TS changes described in TSTF-576 or the applicable parts of the NRC staffs safety evaluation: describe the variations]

[The [PLANT] TS utilize different [numbering][and][titles] than the Standard Technical Specifications on which TSTF-576 was based. Specifically, [describe differences between the plant-specific TS numbering and/or titles and the TSTF-576 numbering and titles.] These differences are administrative and do not affect the applicability of TSTF-576 to the [PLANT]

TS.]

[The [PLANT] TS contain requirements that differ from the Standard Technical Specifications on which TSTF-576 was based but are encompassed in the TSTF-576 justification. [Describe differences and why TSTF-576 is still applicable.))

3.0 REGULATORY ANALYSIS

3.1 No Significant Hazards Consideration Analysis

[LICENSEE] requests adoption of TSTF-576, "Revise Safety/Relief Valve Requirements." The proposed change revises the Safety/Relief Valve (S/RV) Technical Specifications (TS) to align the requirements with the safety limits and the regulations. The Limiting Condition for Operation (LCO) and Surveillance Requirements (SRs) are revised to replace requirements on each credited S/RV with a requirement that the Overpressure Protection System (OPS) be operable. Operability of the OPS is defined as the capability to prevent an overpressure event DRAFT

TSTF-576, Rev. 0 Page 4 from exceeding Safety Limit 2.1.2, "Reactor Coolant System Pressure." An SR that tests the ability of the S/RVs to be capable of manual operation is removed as that capability is not credited in any safety analysis. [An SR that verifies the ability of credited S/RVs acting in the relief mode is revised to be consistent with the revised LCO.] The TS Actions are revised to be consistent with the changes to the LCO and SRs. Administrative changes are made to the TS for clarity and consistency.

[LICENSEE] has evaluated if a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below:

1.

Does the proposed amendment involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No The proposed change revises the S/RV TS to align the requirements with the safety limits and the regulations. The overpressure protection system must accommodate the most severe pressurization transient. Evaluations have determined that the most severe transient is the closure of all main steam isolation valves (MSIVs), followed by reactor scram on high neutron flux (i.e., failure of the direct scram associated with MSIV position). The proposed change does not affect the MSIVs and would have no effect on the probability of the MSIVs closing or generation of a reactor scram signal on MSIV position. Therefore, the probability of the event is unaffected. The consequences of the accident are based on the peak reactor pressure vessel pressure. Both the current and proposed TS ensure the overpressure Safety Limit is not exceeded. The accident analyses consider the aggregate operation of the credited S/RVs, not the performance of individual valves. The proposed change moves the S/RV setpoints and tolerances to licensee control, to be governed by the Inservice Testing Program, which is required by Title 10 of the Code of Federal Regulations, part 50.55a. Altering the control process for these values has no effect on the accident evaluations. As a result, the consequences of the accident are not changed.

Therefore, the proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

2.

Does the proposed amendment create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No The proposed change revises the S/RV TS to align the requirements with the safety limits and the regulations. The proposed change does not alter the design function or operation of the S/RVs. The proposed change does not create any new credible failure mechanisms, malfunctions, or accident initiators not already considered in the design and licensing basis.

DRAFT

TSTF-576, Rev. 0 Page 5 Therefore, the proposed change does not create the possibility of a new or different kind of accident from any accident previously evaluated.

3.

Does the proposed amendment involve a significant reduction in a margin of safety?

Response: No The proposed change revises the S/RV TS to align the requirements with the safety limits and the regulations. The proposed change ensures that the S/RVs can protect Safety Limit 2.1.2. Although the setpoints and tolerances of specific S/RVs are moved to licensee control, the safety margin provided by the aggregate S/RV capability, which ensures the Safety Limit is protected, is not changed. The conservatisms in the evaluation and the analysis are described in the NRC-approved methods for each licensee, which are not altered by the proposed change. The proposed change does not alter a design basis limit or a safety limit, and, therefore, does not reduce the margin of safety.

Therefore, the proposed change does not involve a significant reduction in a margin of safety.

Based on the above, [LICENSEE] concludes that the proposed change presents no significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, a finding of "no significant hazards consideration" is justified.

3.2 Conclusion In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

4.0 ENVIRONMENTAL EVALUATION A review has determined that the proposed amendment would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, or would change an inspection or surveillance requirement. However, the proposed amendment does not involve (i) a significant hazards consideration, (ii) a significant change in the types or a significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure.

Accordingly, the proposed amendment meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed amendment.

DRAFT

TSTF-576, Rev. 0 Technical Specifications and Bases Changes DRAFT

General Electric BWR/4 STS vi Rev. 5.0 TABLE OF CONTENTS Page 3.3 INSTRUMENTATION (continued) 3.3.5.1 Emergency Core Cooling System (ECCS) Instrumentation......................... 3.3.5.1-1 3.3.5.2 Reactor Pressure Vessel (RPV) Water Inventory Control Instrumentation....................................................................................... 3.3.5.2-1 3.3.5.3 Reactor Core Isolation Cooling (RCIC) System Instrumentation................. 3.3.5.3-1 3.3.6.1 Primary Containment Isolation Instrumentation........................................... 3.3.6.1-1 3.3.6.2 Secondary Containment Isolation Instrumentation....................................... 3.3.6.2-1 3.3.6.3 Low-Low Set (LLS) Instrumentation............................................................. 3.3.6.3-1 3.3.7.1

[ Main Control Room Environmental Control (MCREC) ] System Instrumentation....................................................................................... 3.3.7.1-1 3.3.8.1 Loss of Power (LOP) Instrumentation.......................................................... 3.3.8.1-1 3.3.8.2 Reactor Protection System (RPS) Electric Power Monitoring...................... 3.3.8.2-1 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.1 Recirculation Loops Operating........................................................................ 3.4.1-1 3.4.2 Jet Pumps....................................................................................................... 3.4.2-1 3.4.3 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)........ 3.4.3-1 3.4.4 RCS Operational LEAKAGE........................................................................... 3.4.4-1 3.4.5 RCS Pressure Isolation Valve (PIV) Leakage................................................. 3.4.5-1 3.4.6 RCS Leakage Detection Instrumentation........................................................ 3.4.6-1 3.4.7 RCS Specific Activity....................................................................................... 3.4.7-1 3.4.8 Residual Heat Removal (RHR) Shutdown Cooling System - Hot Shutdown.................................................................................................. 3.4.8-1 3.4.9 Residual Heat Removal (RHR) Shutdown Cooling System - Cold Shutdown.................................................................................................. 3.4.9-1 3.4.10 RCS Pressure and Temperature (P/T) Limits............................................... 3.4.10-1 3.4.11 Reactor Steam Dome Pressure.................................................................... 3.4.11-1 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS), RPV WATER INVENTORY CONTROL, AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM 3.5.1 ECCS - Operating........................................................................................... 3.5.1-1 3.5.2 RPV Water Inventory Control.......................................................................... 3.5.2-1 3.5.3 RCIC System................................................................................................... 3.5.3-1 3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment.................................................................................... 3.6.1.1-1 3.6.1.2 Primary Containment Air Lock...................................................................... 3.6.1.2-1 3.6.1.3 Primary Containment Isolation Valves (PCIVs)............................................ 3.6.1.3-1 3.6.1.4 Drywell Pressure.......................................................................................... 3.6.1.4-1 3.6.1.5 Drywell Air Temperature............................................................................... 3.6.1.5-1 3.6.1.6 Low-Low Set (LLS) Valves........................................................................... 3.6.1.6-1 TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.3 General Electric BWR/4 STS 3.4.3-1 Rev. 5.0 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.3 Overpressure Protection System (OPS) Safety/Relief Valves (S/RVs)

LCO 3.4.3 The OPS safety function of [11] S/RVs shall be OPERABLE.

APPLICABILITY:

MODES 1, 2, and 3.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. [ One [or two] [required]

S/RV[s] inoperable.

A.1 Restore the [required]

S/RV[s] to OPERABLE status.

14 days

[OR In accordance with the Risk Informed Completion Time Program] ]

B. [ Required Action and associated Completion Time of Condition A not met. ]

B.1


NOTE--------------

LCO 3.0.4.a is not applicable when entering MODE 3.

Be in MODE 3.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> AC.

OPS inoperable[Three] or more [required] S/RVs inoperable.

AC.1 Be in MODE 3.

AND AC.2 Be in MODE 4.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> 36 hours TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.3 General Electric BWR/4 STS 3.4.3-2 Rev. 5.0 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.3.1 Verify the OPS has the capability to prevent reactor steam dome pressure from exceeding Safety Limit 2.1.2.


NOTE------------------------------

[2] [required] S/RVs may be changed to a lower setpoint group.

Verify the safety function lift setpoints of the

[required] S/RVs are as follows:

Number of Setpoint S/RVs (psig)

[4]

[1090 +/- 32.7]

[4]

[1100 +/- 33.0]

[3]

[1110 +/- 33.3]

Following testing, lift settings shall be within +/- 1%.

[ In accordance with the INSERVICE TESTING PROGRAM OR

[ [18] months]

OR In accordance with the Surveillance Frequency Control Program ]

[ SR 3.4.3.2


NOTE------------------------------

Valve actuation may be excluded.

Verify each required safety/relief valve acting in the relief mode actuates on an actual or simulated automatic initiation signal.

[ [18] months OR In accordance with the Surveillance Frequency Control Program ))

SR 3.4.3.2


NOTE------------------------------

Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reactor steam pressure and flow are adequate to perform the test.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.3 General Electric BWR/4 STS 3.4.3-3 Rev. 5.0 SURVEILLANCE FREQUENCY Verify each [required] S/RV opens when manually actuated.

[ [18] months [on a STAGGERED TEST BASIS for each valve solenoid OR In accordance with the Surveillance Frequency Control Program ] ]

TSTF-576, Rev. 1 DRAFT

General Electric BWR/4 STS vi Rev. 5.0 TABLE OF CONTENTS Page B 3.3 INSTRUMENTATION (continued)

B 3.3.6.1 Primary Containment Isolation Instrumentation......................................... B 3.3.6.1-1 B 3.3.6.2 Secondary Containment Isolation Instrumentation..................................... B 3.3.6.2-1 B 3.3.6.3 Low-Low Set (LLS) Instrumentation........................................................... B 3.3.6.3-1 B 3.3.7.1 [ Main Control Room Environmental Control (MCREC) ]

System Instrumentation.............................................................................. B 3.3.7.1-1 B 3.3.8.1 Loss of Power (LOP) Instrumentation........................................................ B 3.3.8.1-1 B 3.3.8.2 Reactor Protection System (RPS) Electric Power Monitoring.................... B 3.3.8.2-1 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.1 Recirculation Loops Operating................................................................... B 3.4.1-1 B 3.4.2 Jet Pumps.................................................................................................. B 3.4.2-1 B 3.4.3 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)... B 3.4.3-1 B 3.4.4 RCS Operational LEAKAGE...................................................................... B 3.4.4-1 B 3.4.5 RCS Pressure Isolation Valve (PIV) Leakage............................................ B 3.4.5-1 B 3.4.6 RCS Leakage Detection Instrumentation................................................... B 3.4.6-1 B 3.4.7 RCS Specific Activity.................................................................................. B 3.4.7-1 B 3.4.8 Residual Heat Removal (RHR) Shutdown Cooling System

- Hot Shutdown.......................................................................................... B 3.4.8-1 B 3.4.9 Residual Heat Removal (RHR) Shutdown Cooling System

- Cold Shutdown........................................................................................ B 3.4.9-1 B 3.4.10 RCS Pressure and Temperature (P/T) Limits............................................ B 3.4.10-1 B 3.4.11 Reactor Steam Dome Pressure................................................................. B 3.4.11-1 B 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS), RPV WATER INVENTORY CONROL, AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM B 3.5.1 ECCS - Operating...................................................................................... B 3.5.1-1 B 3.5.2 RPV Water Inventory Control..................................................................... B 3.5.2-1 B 3.5.3 RCIC System.............................................................................................. B 3.5.3-1 B 3.6 CONTAINMENT SYSTEMS B 3.6.1.1 Primary Containment.................................................................................. B 3.6.1.1-1 B 3.6.1.2 Primary Containment Air Lock.................................................................... B 3.6.1.2-1 B 3.6.1.3 Primary Containment Isolation Valves (PCIVs).......................................... B 3.6.1.3-1 B 3.6.1.4 Drywell Pressure........................................................................................ B 3.6.1.4-1 B 3.6.1.5 Drywell Air Temperature............................................................................. B 3.6.1.5-1 B 3.6.1.6 Low-Low Set (LLS) Valves......................................................................... B 3.6.1.6-1 TSTF-576, Rev. 1 DRAFT

LLS Instrumentation B 3.3.6.3 General Electric BWR/4 STS B 3.3.6.3-9 Rev. 5.0 BASES SURVEILLANCE REQUIREMENTS (continued)


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

SR 3.3.6.3.7 The LOGIC SYSTEM FUNCTIONAL TEST demonstrates the OPERABILITY of the required actuation logic for a specified channel.

The system functional testing performed in LCO 3.4.3, "Overpressure Protection System (OPS) Safety/Relief Valves(S/RVs)" and LCO 3.6.1.8, "Low-Low Set (LLS) Safety/Relief Valves (S/RVs)," for S/RVs overlaps this test to provide complete testing of the assumed safety function.

[ The Frequency of once every 18 months for SR 3.3.6.3.7 is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown these components usually pass the Surveillance when performed at the 18 month Frequency.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

REFERENCES

1.

FSAR, Figure [ ].

2.

FSAR, Section [5.5.17].

3.

GENE-770-06-1, "Bases for Changes to Surveillance Test Intervals and Allowed Out-of-Service Times for Selected Instrumentation Technical Specifications," February 1991.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-1 Rev. 5.0 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.3 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)

BASES BACKGROUND The Overpressure Protection System (OPS) prevents overpressurization of the nuclear system by discharging reactor steam to the suppression pool. This action protects the reactor coolant pressure boundary (RCPB) from failure which could result in the release of fission products (Ref. 1).

The American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code (Ref. 2) requires the reactor pressure vessel be protected from overpressure during upset conditions by self-actuated safety valves. As part of the nuclear pressure relief system, tThe size and number of safety/relief valves (S/RVs) are selected such that peak pressure in the nuclear system will not exceed the ASME Code limits for the reactor coolant pressure boundary (RCPB).

The S/RVs are located on the main steam lines between the reactor vessel and the first isolation valve within the drywell. Each S/RV discharges steam through a discharge line to a point below the minimum water level in the suppression pool.

The S/RVs can actuate by either of two modes: the safety mode or the relief mode. In the safety mode (or spring mode of operation), the spring loaded pilot valve opens when steam pressure at the valve inlet overcomes the spring force holding the pilot valve closed. Opening the pilot valve allows a pressure differential to develop across the main valve piston and opens the main valve. The safety mode is credited for overpressure protection. This satisfies the Code requirement.

[ In the relief mode (or power actuated mode of operation), a pneumatic piston or cylinder and mechanical linkage assembly are used to open the valve by overcoming the spring force, even with the valve inlet pressure equal to 0 psig. The pneumatic operator is arranged so that its malfunction will not prevent the valve disk from lifting if steam inlet pressure reaches the spring lift set pressures.

In the relief mode, valves may be opened manually or automatically at the selected preset pressure. Some S/RVs operating in the relief mode are also credited for overpressure protection.]

[ Some of the S/RVs providing the relief function also provide the low-low set relief function, specified in LCO 3.6.1.6, "Low-Low Set (LLS) Valves," and the Automatic Depressurization System, specified in LCO 3.5.1, "ECCS - Operating." The instrumentation associated with the relief valve function and low-low set relief function is discussed in the Bases for LCO 3.3.6.3, "Low-Low Set TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-2 Rev. 5.0 (LLS) Instrumentation," and instrumentation for the ADS function is discussed in LCO 3.3.5.1, "Emergency Core Cooling Systems (ECCS) Instrumentation."]

Each S/RV discharges steam through a discharge line to a point below the minimum water level in the suppression pool. The S/RVs that provide the relief mode are the low-low set (LLS) valves and the Automatic Depressurization System (ADS) valves. The LLS requirements are specified in LCO 3.6.1.6, "Low-Low Set (LLS) Valves," and the ADS requirements are specified in LCO 3.5.1, "ECCS - Operating."

APPLICABLE The OPS overpressure protection system must accommodate the most SAFETY severe pressurization transient. Evaluations have determined that the ANALYSES most severe transient is the closure of all main steam isolation valves (MSIVs), followed by reactor scram on high neutron flux (i.e., failure of the direct scram associated with MSIV position) (Ref. 1). The S/RV discharge piping is designed to accommodate forces resulting from relief action including interactions with the suppression pool and is supported for reactions due to flow at maximum S/RV discharge capacity so that system integrity is maintained. For the purpose of the overpressure protection analyses, (Ref. 1) [six11] S/RVs are assumed to operate in the safety mode of operation [and [seven] S/RVs are assumed to operate in the relief mode]. The analysis results demonstrate that the design S/RV capacity is capable of maintaining reactor pressure below the ASME Code limit of 110% of vessel design pressure (110% x 1250 psig = 1375 psig). This LCO helps to ensure that the acceptance limit of 1375 psig is met during the Design design Basis basis Eventevent.

From an overpressure standpoint, the design basis events are bounded by the MSIV closure with flux scram event described above.

Reference3 2 discusses additional events that are expected to actuate the S/RVs.

The OPS satisfies S/RVs satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-3 Rev. 5.0 BASES LCO The OPS is OPERABLE when it can ensure that the ASME Code limit on peak reactor pressure, as stated in Safety Limit 2.1.2, will be protected using the safety mode function of the [11] S/RVs [and the relief mode of additional S/RVs]. are required to be OPERABLE to satisfy the assumptions of the safety analysis (Refs. 1 and 2). The requirements of this LCO are applicable only toOPERABILITY of the OPS is only dependent on the capability of the S/RVs to mechanically open to relieve excess pressure and may credit less than the full complement of installed S/RVs. when the lift setpoint is exceeded (safety function).

The S/RV setpoints are established to ensure that the ASME Code limit on peak reactor pressure is satisfied. The ASME Code specifications require the lowest safety valve setpoint to be at or below vessel design pressure (1250 psig) and the highest safety valve to be set so that the total accumulated pressure does not exceed 110% of the design pressure for overpressurization conditions. The transient evaluations in the FSAR are based on these setpoints, but also include the additional uncertainties of +/- 1% of the nominal setpoint drift to provide an added degree of conservatism.

An inoperable OPS Operation with fewer valves OPERABLE than specified, or with setpoints outside the ASME limits, could result in a more severe reactor response to a transient than predicted, possibly resulting in Safety Limit 2.1.2 the ASME Code limit on reactor pressure being exceeded.

APPLICABILITY In MODES 1, 2, and 3, the OPS all S/RVs must be OPERABLE, since there may be considerable energy may be in the reactor core and the limiting design basis transients are assumed to occur in these MODES.

The OPS S/RVs may be required to provide pressure relief to discharge energy from the core until such time that the Residual Heat Removal (RHR) System is capable of dissipating the core heat.

In MODE 4, decay heat is low enough for the RHR System to provide adequate cooling, and reactor pressure is low enough that the overpressure limit is unlikely to be approached by assumed operational transients or accidents. In MODE 5, the reactor vessel head is unbolted or removed and the reactor is at atmospheric pressure. The OPS S/RV function is not needed during these conditions.

ACTIONS

[ A.1 With the safety function of one [or two] [required] S/RV[s] inoperable, the remaining OPERABLE S/RVs are capable of providing the necessary overpressure protection. Because of additional design margin, the ASME Code limits for the RCPB can also be satisfied with two S/RVs inoperable. However, the overall reliability of the pressure relief system is reduced because additional failures in the remaining OPERABLE S/RVs could result in failure to adequately TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-4 Rev. 5.0 relieve pressure during a limiting event. For this reason, continued operation is permitted for a limited time only.

BASES ACTIONS (continued)

The 14 day Completion Time to restore the inoperable required S/RVs to OPERABLE status is based on the relief capability of the remaining S/RVs, the low probability of an event requiring S/RV actuation, and a reasonable time to complete the Required Action. [Alternatively, a Completion Time can be determined in accordance with the Risk Informed Completion Time Program.] ]

B.1


REVIEWERS NOTE ----------------------------------

Adoption of a MODE 3 end state requires the licensee to make the following commitments:

1.

[LICENSEE] will follow the guidance established in Section 11 of NUMARC 93-01, "Industry Guidance for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants," Nuclear Management and Resource Council, Revision [4F].

2.

[LICENSEE] will follow the guidance established in TSTF-IG-05-02, Implementation Guidance for TSTF-423, Revision 2, "Technical Specifications End States, NEDC-32988-A," November 2009.

If the safety function of the inoperable required S/RVs cannot be restored to OPERABLE status within the associated Completion Time of Required Action A.1, the plant must be brought to a MODE in which overall plant risk is minimized. To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 3) and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short. However, voluntary entry into MODE 4 may be made as it is also an acceptable low risk state.

Required Action B.1 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 3. This Note prohibits the use of LCO 3.0.4.a to enter MODE 3 during startup with the LCO not met. However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 3, and establishment of risk management actions, if appropriate. LCO 3.0.4 is TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-5 Rev. 5.0 BASES ACTIONS (continued) not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

The allowed Completion Time is reasonable, based on operating experience, to reach required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

AC.1 and AC.2 If the OPS is inoperable, [three] or more [required] S/RVs are inoperable, a transient may result in the violation of the ASME Code limit on reactor pressure. The plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE SR 3.4.3.1 REQUIREMENTS This Surveillance verifies that the OPS has the capability to prevent the reactor steam dome pressure from exceeding Safety Limit 2.1.2requires that the [required] S/RVs will open at the pressures assumed in the safety analysis of Reference 1. The testing of the demonstration of the S/RV safety mode safe lift settings is must be performed during shutdown, since this is a bench test, [to be done in accordance with the INSERVICE TESTING PROGRAM]. The measured S/RV mechanical lift pressures determined in accordance with the INSERVICE TESTING PROGRAM are reviewed and compared to the overpressure analysis to verify that the collective performance of the credited S/RVs will ensure Safety Limit 2.1.2 is protected.

Should one or more of the credited S/RVs not actuate within the assumed tolerance, the actual lift values will be used to evaluate the affected overpressure analyses to determine whether the Safety Limit is protected. In this case, the SR consists of a combination of testing and calculation. The lift setting pressure shall correspond to ambient conditions of the valves at nominal operating temperatures and pressures. The S/RV setpoint is +/- [3]% for OPERABILITY; however, the valves are reset to +/- 1% during the Surveillance to allow for drift. [A Note is provided to allow up to [two] of the required [11] S/RVs to be physically replaced with S/RVs with lower setpoints. This provides operational flexibility which maintains the assumptions in the over-pressure analysis.]


REVIEWERS NOTE-----------------------------------

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-6 Rev. 5.0 If the testing is within the scope of the licensee's INSERVICE TESTING PROGRAM, the Frequency "In accordance with the INSERVICE TESTING PROGRAM" should be used. Otherwise, the periodic Frequency of 18 months or the reference to the Surveillance Frequency Control Program should be used.

[ The 18 month Frequency was selected because this Surveillance must be performed during shutdown conditions and is based on the time between refuelings.

BASES SURVEILLANCE REQUIREMENTS (continued)

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

[ SR 3.4.3.2 The OPS assumes that the required relief mode S/RVs actuate automatically upon receipt of specific initiation signals. A system functional test is performed to verify the mechanical portions of the automatic relief mode operate as designed when initiated either by an actual or simulated initiation signal. The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.6.3.7 overlaps this SR to provide complete testing of the relief mode function.

[ The [18 month] Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown these components usually pass the SR when performed at the [18 month] Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-7 Rev. 5.0


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

This SR is modified by a Note that excludes valve actuation. The SR may be performed by removing the actuator and verifying its operation. This prevents an RPV pressure blowdown. ]

SR 3.4.3.2 A manual actuation of each [required] S/RV is performed to verify that, mechanically, the valve is functioning properly and no blockage exists in the valve discharge line. This can be demonstrated by the response of the turbine control valves or bypass valves, by a change in the measured steam flow, or by any other method suitable to verify steam flow.

Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve. Also, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the S/RVs divert steam flow upon opening.

Sufficient time is therefore allowed after the required pressure and flow are achieved to perform this test. Adequate pressure at which this test is to be performed is [920] psig (the pressure recommended by the valve manufacturer). Adequate steam flow is represented by [at least 1.25 turbine bypass valves open, or total steam flow 106 lb/hr]. Plant startup is allowed prior to performing this test because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME Code requirements, prior to valve installation. Therefore, this SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reactor steam pressure and flow are adequate to perform the test. The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed for manual actuation after the required pressure is reached is sufficient to achieve stable conditions for testing and provides a reasonable time to complete the SR. If a valve fails to actuate due only to the failure of the solenoid but is capable of opening on overpressure, the safety function of the S/RV is considered OPERABLE.

[ The [18] month on a STAGGERED TEST BASIS Frequency ensures that each solenoid for each S/RV is alternately tested. The 18 month Frequency was developed based on the S/RV tests required by the ASME Boiler and Pressure Vessel Code (Ref. 4). Operating experience has shown that these components usually pass the Surveillance when TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.3 General Electric BWR/4 STS B 3.4.3-8 Rev. 5.0 BASES SURVEILLANCE REQUIREMENTS (continued) performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

REFERENCES

1.

FSAR, Section [5.2.2.2.4].

24. ASME Code for Operation and Maintenance of Nuclear Power Plants.
32. FSAR, Section [15].
3.

NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002.

4.

ASME Code for Operation and Maintenance of Nuclear Power Plants.

TSTF-576, Rev. 1 DRAFT

General Electric BWR/6 STS vi Rev. 5.0 TABLE OF CONTENTS Page 3.3 INSTRUMENTATION (continued) 3.3.5.1 Emergency Core Cooling System (ECCS) Instrumentation......................... 3.3.5.1-1 3.3.5.2 Reactor Pressure Vessel (RPV) Water Inventory Control Instrumentation....................................................................................... 3.3.5.2-1 3.3.5.3 Reactor Core Isolation Cooling (RCIC) System Instrumentation................. 3.3.5.3-1 3.3.6.1 Primary Containment Isolation Instrumentation........................................... 3.3.6.1-1 3.3.6.2 Secondary Containment Isolation Instrumentation....................................... 3.3.6.2-1 3.3.6.3 Residual Heat Removal (RHR) Containment Spray System Instrumentation....................................................................................... 3.3.6.3-1 3.3.6.4 Suppression Pool Makeup (SPMU) System Instrumentation....................... 3.3.6.4-1 3.3.6.5 Relief and Low-Low Set (LLS) Instrumentation............................................ 3.3.6.5-1 3.3.7.1

[Control Room Fresh Air (CRFA)] System Instrumentation.......................... 3.3.7.1-1 3.3.8.1 Loss of Power (LOP) Instrumentation.......................................................... 3.3.8.1-1 3.3.8.2 Reactor Protection System (RPS) Electric Power Monitoring...................... 3.3.8.2-1 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.1 Recirculation Loops Operating........................................................................ 3.4.1-1 3.4.2 Flow Control Valves (FCVs)............................................................................ 3.4.2-1 3.4.3 Jet Pumps....................................................................................................... 3.4.3-1 3.4.4 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)........ 3.4.4-1 3.4.5 RCS Operational LEAKAGE........................................................................... 3.4.5-1 3.4.6 RCS Pressure Isolation Valve (PIV) Leakage................................................. 3.4.6-1 3.4.7 RCS Leakage Detection Instrumentation........................................................ 3.4.7-1 3.4.8 RCS Specific Activity....................................................................................... 3.4.8-1 3.4.9 Residual Heat Removal (RHR) Shutdown Cooling System - Hot Shutdown.................................................................................................. 3.4.9-1 3.4.10 Residual Heat Removal (RHR) Shutdown Cooling System - Cold Shutdown................................................................................................ 3.4.10-1 3.4.11 RCS Pressure and Temperature (P/T) Limits............................................... 3.4.11-1 3.4.12 Reactor Steam Dome Pressure.................................................................... 3.4.12-1 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS), RPV WATER INVENTORY CONTROL, AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM 3.5.1 ECCS - Operating........................................................................................... 3.5.1-1 3.5.2 RPV Water Inventory Control......................................................................... 3.5.2-1 3.5.3 RCIC System................................................................................................... 3.5.3-1 3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment.................................................................................... 3.6.1.1-1 3.6.1.2 Primary Containment Air Locks.................................................................... 3.6.1.2-1 3.6.1.3 Primary Containment Isolation Valves (PCIVs)............................................ 3.6.1.3-1 TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.4 General Electric BWR/6 STS 3.4.4-1 Rev. 5.0 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.4 Overpressure Protection System (OPS) Safety/Relief Valves (S/RVs)

LCO 3.4.4 The OPS The safety function of [seven] S/RVs shall be OPERABLE.,

AND The relief function of [seven] additional S/RVs shall be OPERABLE.

APPLICABILITY:

MODES 1, 2, and 3.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. [ One [required] S/RV inoperable.

A.1 Restore [required] S/RV to OPERABLE status.

14 days

[OR In accordance with the Risk Informed Completion Time Program] ]

B. [ Required Action and associated Completion Time of Condition A not met. ]

B.1


NOTE--------------

LCO 3.0.4.a is not applicable when entering MODE 3.

Be in MODE 3.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> AC.

OPS inoperable[Two] or more [required] S/RVs inoperable.

AC.1 Be in MODE 3.

AND AC.2 Be in MODE 4.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> 36 hours TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.4 General Electric BWR/6 STS 3.4.4-2 Rev. 5.0 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.4.1 Verify the OPS has the capability to prevent reactor steam dome pressure from exceeding Safety Limit 2.1.2.


NOTE------------------------------

[2] [required] S/RVs may be changed to a lower setpoint group.

Verify the safety function lift setpoints of the

[required] S/RVs are as follows:

Number of Setpoint S/RVs (psig)

[8]

[1165 +/- 34.9]

[6]

[1180 +/- 35.4]

[6]

[1190 +/- 35.7]

Following testing, lift settings shall be within +/- 1%.

[ In accordance with the INSERVICE TESTING PROGRAM OR

((18] months]

OR In accordance with the Surveillance Frequency Control Program ]

SR 3.4.4.2


NOTE------------------------------

Valve actuation may be excluded.

Verify each [required] safety/relief valve acting in the relief mode relief function S/RV actuates on an actual or simulated automatic initiation signal.

[ [18] months OR In accordance with the Surveillance Frequency Control Program ]

TSTF-576, Rev. 1 DRAFT

OPSS/RVs 3.4.4 General Electric BWR/6 STS 3.4.4-3 Rev. 5.0 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.4.4.3


NOTE------------------------------

Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reactor steam pressure and flow are adequate to perform the test.

Verify each [required] S/RV opens when manually actuated.

[ [18] months on a STAGGERED TEST BASIS for each valve solenoid OR In accordance with the Surveillance Frequency Control Program ]

TSTF-576, Rev. 1 DRAFT

General Electric BWR/6 STS vi Rev. 5.0 TABLE OF CONTENTS Page B 3.3 INSTRUMENTATION (continued)

B 3.3.6.1 Primary Containment Isolation Instrumentation......................................... B 3.3.6.1-1 B 3.3.6.2 Secondary Containment Isolation Instrumentation..................................... B 3.3.6.2-1 B 3.3.6.3 Residual Heat Removal (RHR) Containment Spray System Instrumentation........................................................................................... B 3.3.6.3-1 B 3.3.6.4 Suppression Pool Makeup (SPMU) System Instrumentation..................... B 3.3.6.4-1 B 3.3.6.5 Relief and Low-Low Set (LLS) Instrumentation.......................................... B 3.3.6.5-1 B 3.3.7.1 [Control Room Fresh Air (CRFA)] System Instrumentation........................ B 3.3.7.1-1 B 3.3.8.1 Loss of Power (LOP) Instrumentation........................................................ B 3.3.8.1-1 B 3.3.8.2 Reactor Protection System (RPS) Electric Power Monitoring.................... B 3.3.8.2-1 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.1 Recirculation Loops Operating................................................................... B 3.4.1-1 B 3.4.2 Flow Control Valves (FCVs)....................................................................... B 3.4.2-1 B 3.4.3 Jet Pumps.................................................................................................. B 3.4.3-1 B 3.4.4 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)... B 3.4.4-1 B 3.4.5 RCS Operational LEAKAGE...................................................................... B 3.4.5-1 B 3.4.6 RCS Pressure Isolation Valve (PIV) Leakage............................................ B 3.4.6-1 B 3.4.7 RCS Leakage Detection Instrumentation................................................... B 3.4.7-1 B 3.4.8 RCS Specific Activity.................................................................................. B 3.4.8-1 B 3.4.9 Residual Heat Removal (RHR) Shutdown Cooling System

- Hot Shutdown......................................................................................... B 3.4.9-1 B 3.4.10 Residual Heat Removal (RHR) Shutdown Cooling System

- Cold Shutdown....................................................................................... B 3.4.10-1 B 3.4.11 RCS Pressure and Temperature (P/T) Limits............................................ B 3.4.11-1 B 3.4.12 Reactor Steam Dome Pressure................................................................. B 3.4.12-1 B 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS), RPV WATER INVENTORY CONTROL, AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM B 3.5.1 ECCS - Operating...................................................................................... B 3.5.1-1 B 3.5.2 RPV Water Inventory Control..................................................................... B 3.5.2-1 B 3.5.3 RCIC System.............................................................................................. B 3.5.3-1 B 3.6 CONTAINMENT SYSTEMS B 3.6.1.1 Primary Containment.................................................................................. B 3.6.1.1-1 B 3.6.1.2 Primary Containment Air Locks.................................................................. B 3.6.1.2-1 B 3.6.1.3 Primary Containment Isolation Valves (PCIVs).......................................... B 3.6.1.3-1 B 3.6.1.4 Primary Containment Pressure.................................................................. B 3.6.1.4-1 B 3.6.1.5 Primary Containment Air Temperature....................................................... B 3.6.1.5-1 B 3.6.1.6 Low-Low Set (LLS) Valves......................................................................... B 3.6.1.6-1 B 3.6.1.7 Residual Heat Removal (RHR) Containment Spray System...................... B 3.6.1.7-1 TSTF-576, Rev. 1 DRAFT

Relief and LLS Instrumentation B 3.3.6.5 General Electric BWR/6 STS B 3.3.6.5-1 Rev. 5.0 B 3.3 INSTRUMENTATION B 3.3.6.5 Relief and Low-Low Set (LLS) Instrumentation BASES BACKGROUND The safety/relief valves (S/RVs) prevent overpressurization of the nuclear steam system. Instrumentation is provided to support two modes of S/RV operation - the relief function (all valves) and the LLS function (selected valves). Refer to LCO 3.4.4, "Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)," and LCO 3.6.1.6, "Low-Low Set (LLS) Safety/Relief Valves (S/RVs)," for Applicability Bases for additional information of these modes of S/RV operation. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored by the Safety/Relief valve instrumentation, as well as LCOs on other reactor system parameters, and equipment performance.

Technical Specifications are required by 10 CFR 50.36 to include LSSS for variables that have significant safety functions. LSSS are defined by the regulation as "Where a LSSS is specified for a variable on which a safety limit has been placed, the setting must be chosen so that automatic protective actions will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytical Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that an SL is not exceeded. Any automatic protection action that occurs on reaching the Analytical Limit therefore ensures that the SL is not exceeded. However, in practice, the actual settings for automatic protection channels must be chosen to be more conservative than the Analytical Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.


REVIEWER'S NOTE-----------------------------------

The term "Limiting Trip Setpoint" [LTSP] is generic terminology for the calculated trip setting (setpoint) value calculated by means of the plant specific setpoint methodology documented in a document controlled under 10 CFR 50.59. The term [LTSP] indicates that no additional margin has been added between the Analytical Limit and the calculated trip setting.

"Nominal Trip Setpoint [NTSP]" is the suggested terminology for the actual setpoint implemented in the plant surveillance procedures where margin has been added to the calculated [LTSP]. The as-found and as-left tolerances will apply to the [NTSP] implemented in the Surveillance procedures to confirm channel performance.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-1 Rev. 5.0 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.4 Overpressure Protection System (OPS)Safety/Relief Valves (S/RVs)

BASES BACKGROUND The Overpressure Protection System (OPS) prevents overpressurization of the nuclear system by discharging reactor steam to the suppression pool. This action protects the reactor coolant pressure boundary (RCPB) from failure which could result in the release of fission products (Ref. 1).

The American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code (Ref. 21) requires the rReactor pPressure vVessel be protected from overpressure during upset conditions by self-actuated safety valves. As part of the nuclear pressure relief system, tThe size and number of safety/relief valves (S/RVs) are selected such that peak pressure in the nuclear system will not exceed the ASME Code limits for the reactor coolant pressure boundary (RCPB).

The S/RVs are located on the main steam lines between the reactor vessel and the first isolation valve within the drywell. Each S/RV discharges steam through a discharge line to a point below the minimum water level in the suppression pool.

The S/RVs can actuate by either of two modes: the safety mode or the relief mode. In the safety mode (or spring mode of operation), the direct action of the steam pressure in the main steam lines will act against a spring loaded disk that will pop open when the valve inlet pressure exceeds the spring force. The safety mode is credited for overpressure protection.

In the relief mode (or power actuated mode of operation), a pneumatic piston or cylinder and mechanical linkage assembly are used to open the valve by overcoming the spring force, even with the valve inlet pressure equal to 0 psig. The pneumatic operator is arranged so that its malfunction will not prevent the valve disk from lifting if steam inlet pressure reaches the spring lift set pressures. In the relief mode, valves may be opened manually or automatically at the selected preset pressure. Some S/RVs operating in the relief mode are also credited for overpressure protection.

Some Six of the S/RVs providing the relief function also provide the low-low set relief function specified in LCO 3.6.1.6, "Low-Low Set (LLS)

Valves,." and Eight of the S/RVs that provide the relief function are part of the Automatic Depressurization System specified in LCO 3.5.1, "ECCS

- Operating." The instrumentation associated with the relief valve function and low-low set relief function is discussed in the Bases for LCO 3.3.6.5, "Relief and Low-Low Set (LLS) Instrumentation," and instrumentation for TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-2 Rev. 5.0 the ADS function is discussed in LCO 3.3.5.1, "Emergency Core Cooling Systems (ECCS) Instrumentation."

APPLICABLE The OPS overpressure protection system must accommodate the most SAFETY severe pressure transient. Evaluations have determined that the most ANALYSES severe transient is the closure of all main steam isolation valves (MSIVs) followed by reactor scram on high neutron flux (i.e., failure of the direct scram associated with MSIV position) (Ref. 12). The S/RV discharge piping is designed to accommodate forces resulting from relief action including interactions with the suppression pool and is supported for reactions due to flow at maximum S/RV discharge capacity so that system integrity is maintained. For the purpose of the overpressure protection analyses (Ref. 1), [six] S/RVs are assumed to operate in the safety mode of operation and [seven]

S/RVs are assumed to operate in the relief mode., [six] of the S/RVs are assumed to operate in the relief mode, and seven in the safety mode.

The analysis results demonstrate that the design S/RV capacity is capable of maintaining reactor pressure below BASES APPLICABLE SAFETY ANALYSES (continued) the ASME Code limit of 110% of vessel design pressure (110% x 1250 psig = 1375 psig). This LCO helps to ensure that the acceptance limit of 1375 psig is met during the design basis event.

From an overpressure standpoint, the design basis events are bounded by the MSIV closure with flux scram event described above. Reference 3 discusses additional events that are expected to actuate the S/RVs.

The OPS satisfies S/RVs satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).

LCO The OPS is OPERABLE when it can ensure that the ASME Code limit on peak reactor pressure, as stated in Safety Limit 2.1.2, will be protected using the safety mode function of the seven S/RVs and the relief mode of additional S/RVs. is required to be OPERABLE in the safety mode, and an additional seven S/RVs (other than the seven S/RVs that satisfy the safety function) must be OPERABLE in the relief mode.

OPERABILITY of the OPS is only dependent on The requirements of this LCO are applicable only to the capability of the S/RVs to mechanically open to relieve excess pressure, and may credit less than the full complement of installed S/RVs. In Reference 2, an evaluation was performed to establish the parametric relationship between the peak vessel pressure and the number of OPERABLE S/RVs. The results show that with a minimum of seven S/RVs in the safety mode and six S/RVs in the relief mode OPERABLE, the ASME Code limit of 1375 psig is not exceeded.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-3 Rev. 5.0 The S/RV setpoints are established to ensure the ASME Code limit on peak reactor pressure is satisfied. The ASME Code specifications require the lowest safety valve be set at or below vessel design pressure (1250 psig) and the highest safety valve be set so the total accumulated pressure does not exceed 110% of the design pressure for conditions.

The transient evaluations in Reference 3 are based on these setpoints, but also include the additional uncertainties of +/- 1% of the nominal setpoint to account for potential setpoint drift to provide an added degree of conservatism.

An inoperable OPS Operation with fewer valves OPERABLE than specified, or with setpoints outside the ASME limits, could result in a more severe reactor response to a transient than predicted, possibly resulting in Safety Limit 2.1.2 the ASME Code limit on reactor pressure being exceeded.

APPLICABILITY In MODES 1, 2, and 3, the OPS specified number of S/RVs must be OPERABLE since there may be considerable energy in the reactor core and the limiting design basis transients are assumed to occur in these MODES. The OPS S/RVs may be required to provide pressure relief to discharge energy from the core until such time that the Residual Heat Removal (RHR) System is capable of dissipating the core heat.

BASES APPLICABILITY (continued)

In MODE 4, decay heat is low enough for the RHR System to provide adequate cooling, and reactor pressure is low enough that the overpressure limit is unlikely to be approached by assumed operational transients or accidents. In MODE 5, the reactor vessel head is unbolted or removed and the reactor is at atmospheric pressure. The OPS S/RV function is not needed during these conditions.

ACTIONS A.1 With the safety function of one [required] S/RV inoperable, the remaining OPERABLE S/RVs are capable of providing the necessary overpressure protection. Because of additional design margin, the ASME Code limits for the RCPB can also be satisfied with two S/RVs inoperable. However, the overall reliability of the pressure relief system is reduced because additional failures in the remaining OPERABLE S/RVs could result in failure to adequately relieve pressure during a limiting event. For this reason, continued operation is permitted for a limited time only.

The 14 day Completion Time to restore the inoperable required S/RVs to OPERABLE status is based on the relief capability of the remaining S/RVs, the low probability of an event requiring S/RV actuation, and a reasonable time to complete the Required Action. [Alternatively, a TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-4 Rev. 5.0 Completion Time can be determined in accordance with the Risk Informed Completion Time Program.]

B.1


REVIEWERS NOTE ----------------------------------

Adoption of a MODE 3 end state requires the licensee to make the following commitments:

1.

[LICENSEE] will follow the guidance established in Section 11 of NUMARC 93-01, "Industry Guidance for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants," Nuclear Management and Resource Council, Revision [4F].

2.

[LICENSEE] will follow the guidance established in TSTF-IG-05-02, Implementation Guidance for TSTF-423, Revision 2, "Technical Specifications End States, NEDC-32988-A," November 2009.

If the inoperable required S/RV cannot be restored to OPERABLE status within the associated Completion Time of Required Action A.1, the plant must be brought to a MODE in which overall plant risk is minimized. To BASES ACTIONS (continued) achieve this status, the plant must be brought to at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 4) and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short. However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.

Required Action B.1 is modified by a Note that states that LCO 3.0.4.a is not applicable when entering MODE 3. This Note prohibits the use of LCO 3.0.4.a to enter MODE 3 during startup with the LCO not met.

However, there is no restriction on the use of LCO 3.0.4.b, if applicable, because LCO 3.0.4.b requires performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering MODE 3, and establishment of risk management actions, if appropriate. LCO 3.0.4 is not applicable to, and the Note does not preclude, changes in MODES or other specified conditions in the Applicability that are required to comply with ACTIONS or that are part of a shutdown of the unit.

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-5 Rev. 5.0 The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

AC.1 and AC.2 If the OPS is inoperable, [two] or more [required] S/RVs are inoperable, a transient may result in the violation of the ASME Code limit on reactor pressure. The plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE SR 3.4.4.1 REQUIREMENTS This Surveillance verifies that the OPS has the capability to prevent the reactor steam dome pressure from exceeding Safety Limit 2.1.2.

demonstrates that the [required] S/RVs will open at the pressures assumed in the safety analysis of Reference 2. The testing of the demonstration of the S/RV safety mode function lift settings is must performed during shutdown, since this is a bench test[, to be done and in accordance with the INSERVICE TESTING PROGRAM]. The measured S/RV mechanical lift pressures determined in accordance with the INSERVICE TESTING PROGRAM are reviewed and compared to the overpressure analysis to verify that the collective performance of the credited S/RVs will ensure Safety Limit 2.1.2 is protected.

Should one or more of the credited S/RVs not actuate within the assumed tolerance, the actual lift values will be used to evaluate the affected overpressure analyses to determine whether the Safety Limit is protected. In this case, the SR is met by a combination of testing and calculation.

The lift setting pressure shall BASES SURVEILLANCE REQUIREMENTS (continued) correspond to ambient conditions of the valves at nominal operating temperatures and pressures. The S/RV setpoint is +/- [3]% for OPERABILITY; however, the valves are reset to +/- 1% during the Surveillance to allow for drift. [A Note is provided to allow up to [two] of the required [11] S/RVs to be physically replaced with S/RVs with lower setpoints. This provides operational flexibility which maintains the assumptions in the over-pressure analysis.]


REVIEWERS NOTE-----------------------------------

If the testing is within the scope of the licensee's INSERVICE TESTING PROGRAM, the Frequency "In accordance with the INSERVICE TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-6 Rev. 5.0 TESTING PROGRAM" should be used. Otherwise, the periodic Frequency of 18 months or the reference to the Surveillance Frequency Control Program should be used.

[ The [18 month] Frequency was selected because this Surveillance must be performed during shutdown conditions and is based on the time between refuelings.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

SR 3.4.4.2 The OPS assumes that tThe [required] relief function mode S/RVs are required to actuate automatically upon receipt of specific initiation signals.

A system functional test is performed to verify the mechanical portions of the automatic relief function mode operate as designed when initiated either by an actual or simulated initiation signal. The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.6.5.4 overlaps this SR to provide complete testing of the relief mode safety function.

BASES SURVEILLANCE REQUIREMENTS (continued)

[ The [18 month] Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown these components usually pass the SR when performed at the [18 month]

Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-7 Rev. 5.0 Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

This SR is modified by a Note that excludes valve actuation. The SR may be performed by removing the actuator and verifying its operation. This prevents an RPV pressure blowdown.

SR 3.4.4.3 A manual actuation of each [required] S/RV is performed to verify that, mechanically, the valve is functioning properly and no blockage exists in the valve discharge line. This can be demonstrated by the response of the turbine control valves or bypass valves, by a change in the measured steam flow, or any other method suitable to verify steam flow. Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve. Also, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the S/RVs divert steam flow upon opening.

Sufficient time is therefore allowed after the required pressure and flow are achieved to perform this test. Adequate pressure at which this test is to be performed is 950 psig (the pressure recommended by the valve manufacturer). Adequate steam flow is represented by [at least 1.25 turbine bypass valves open, or total steam flow 106 lb/hr]. Plant startup is allowed prior to performing this test because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME requirements, prior to valve installation. Therefore, this SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reactor steam pressure and flow are adequate to perform the test. The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed for manual actuation after the required TSTF-576, Rev. 1 DRAFT

OPSS/RVs B 3.4.4 General Electric BWR/6 STS B 3.4.4-8 Rev. 5.0 BASES SURVEILLANCE REQUIREMENTS (continued) pressure is reached is sufficient to achieve stable conditions for testing and provides a reasonable time to complete the SR. If the valve fails to actuate due only to the failure of the solenoid but is capable of opening on overpressure, the safety function of the S/RV is considered OPERABLE.

[ The [18] month on a STAGGERED TEST BASIS Frequency ensures that each solenoid for each S/RV is alternately tested. The 18 month Frequency was developed based on the S/RV tests required by the ASME (Ref. 1). Operating experience has shown that these components usually pass the Surveillance when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.


REVIEWERS NOTE-----------------------------------

Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.


]

REFERENCES

1.

FSAR, Section [5.2.5.5.3].

21. ASME Code for Operation and Maintenance of Nuclear Power Plants.
2.

FSAR, Section [5.2.5.5.3].

3.

FSAR, Section [15].

4.

NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002.

TSTF-576, Rev. 1 DRAFT