IR 05000528/2007005

IR 05000528-07-005, 05000529-07-005, 05000530-07-005 on 10/01/2007 - 12/31/2007 for Palo Verde, Units 1,2, & 3, Integrated Resident and Regional Report Maintenance Effectiveness, Operability Eval., Access Control to Radiological Areas, ALAR

ML080350669
Person / Time
Site:	Palo Verde
Issue date:	02/04/2008
From:	Pruett T W NRC/RGN-IV/DRP/RPB-D
To:	Edington R K Arizona Public Service Co
References
IR-07-005
Download: ML080350669 (79)

Text

February 4, 2008

Randall K. EdingtonSenior Vice President, Nuclear Mail Station 7602 Arizona Public Service Company P.O. Box 52034 Phoenix, AZ 85072-2034

SUBJECT: PALO VERDE NUCLEAR GENERATING STATION - NRC INTEGRATEDINSPECTION REPORT 05000528/2007005, 05000529/2007005, AND 05000530/2007005

Dear Mr. Edington:

On December 31, 2007, the U.S. Nuclear Regulatory Commission (NRC) completed aninspection at your Palo Verde Nuclear Generating Station, Units 1, 2, and 3, facility. The enclosed integrated report documents the inspection findings, which were discussed on January 9, 2008, with you and other members of your staff.The inspection examined activities conducted under your licenses as they relate to safety andcompliance with the Commission's rules and regulations and with the conditions of your licenses. The inspectors reviewed selected procedures and records, observed activities, and interviewed personnel.This report documents four NRC identified findings and two self-revealing findings. Thesefindings were evaluated under the risk significance determination process as having very low safety significance (Green). Because of the very low safety significance of these violations and because they were entered into your corrective action program, the NRC is treating these findings as noncited violations consistent with Section VI.A of the NRC Enforcement Policy.

Five licensee-identified violations, which were determined to be of very low safety significance, are listed in Section 4OA7 of this report. If you contest these noncited violations, you should provide a response within 30 days of the date of this inspection report, with the basis for your denial, to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington DC 20555-0001; with copies to the Regional Administrator, U.S. Nuclear Regulatory Commission Region IV, 611 Ryan Plaza Drive, Suite 400, Arlington, Texas 76011-

4005; the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, Washington DC 20555-0001; and the NRC Resident Inspector at the Palo Verde Nuclear Generating Station, Units 1, 2, and 3, facility.In accordance with 10 CFR 2.390 of the NRC's "Rules of Practice," a copy of this letter, itsenclosure, and your response (if any) will be made available electronically for public inspection Arizona Public Service Company-2-in the NRC Public Document Room or from the Publicly Available Records (PARS) componentof NRC's document system (ADAMS). ADAMS is accessible from the NRC Web site at http://www.nrc.gov/reading-rm/adams.html (the Public Electronic Reading Room).

Sincerely,/RA/

Troy W. Pruett, ChiefProject Branch D Division of Reactor ProjectsDockets: 50-528 50-529 50-530Licenses: NPF-41 NPF-51 NPF-74

Enclosure:

NRC Inspection Report 05000528/2007005, 05000529/2007005, and 05000530/2007005

w/Attachment:

Supplemental Informationcc w/enclosure:Steve Olea Arizona Corporation Commission 1200 W. Washington Street Phoenix, AZ 85007Douglas K. Porter, Senior CounselSouthern California Edison Company Law Department, Generation Resources P.O. Box 800 Rosemead, CA 91770ChairmanMaricopa County Board of Supervisors 301 W. Jefferson, 10th Floor Phoenix, AZ 85003Aubrey V. Godwin, DirectorArizona Radiation Regulatory Agency 4814 South 40 Street Phoenix, AZ 85040Scott Bauer, DirectorRegulatory Affairs Palo Verde Nuclear Generating Station Mail Station 7636 P.O. Box 52034 Phoenix, AZ 85072-2034Mr. Dwight C. MimsVice President, Regulatory Affairs and Performance Improvement Palo Verde Nuclear Generating Station Mail Station 7636 P.O. Box 52034 Phoenix, AZ 85072-2034Jeffrey T. WeikertAssistant General Counsel El Paso Electric Company Mail Location 167 123 W. Mills El Paso, TX 79901 Arizona Public Service Company-3-Eric J. TharpDirector of Generation Los Angeles Department of Water & Power Southern California Public Power Authority P.O. Box 51111, Room 1255 Los Angeles, CA 90051-5700John TaylorPublic Service Company of New Mexico 2401 Aztec NE, MS Z110 Albuquerque, NM 87107-4224Geoffrey M. CookSouthern California Edison Company 5000 Pacific Coast Hwy, Bldg. D21 San Clemente, CA 92672Robert HenrySalt River Project 6504 East Thomas Road Scottsdale, AZ 85251Brian AlmonPublic Utility Commission William B. Travis Building P.O. Box 13326 1701 North Congress Avenue Austin, TX 78701-3326Karen O' ReganEnvironmental Program Manager City of Phoenix Office of Environmental Programs 200 West Washington Street Phoenix, AZ 85003 Matthew BenacAssistant Vice President Nuclear & Generation Services El Paso Electric Company 340 East Palm Lane, Suite 310 Phoenix, AZ 85004Chief, Radiological EmergencyPreparedness Section National Preparedness Directorate Technological Hazards Division Department of Homeland Security 1111 Broadway, Suite 1200 Oakland, CA 94607-4052 Arizona Public Service Company-4-Electronic distribution by RIV:Regional Administrator (EEC)DRP Director (DDC)DRS Director (RJC1)DRS Deputy Director (ACC)Senior Resident Inspector (GXW2)Branch Chief, DRP/D (TWP)Senior Project Engineer, DRP/D (GEW)Team Leader, DRP/TSS (CJP)RITS Coordinator (MSH3)Only inspection reports to the following:DRS STA (DAP)V. Dricks, PAO (VLD)D. Pelton, OEDO RIV Coordinator (DLP)ROPreports PV Site Secretary (PRC)SUNSI Review Completed: _TWP__ADAMS: Yes G No Initials: _TWP

_____ Publicly Available G Non-Publicly Available G Sensitive Non-SensitiveR:\_REACTORS\_PV\2007\PV2007-005RP-GGW.wpdADAMS ML080350669RIV:RI:DRP/DRI:DRP/DRI:DRP/DSRI:DRP/DSPE:DRP/DJFMelfiMCattsJBashoreGGWarnickGEWerner/RA//RA//RA//RA/GEW1/31/081/31/081/31/081/31/081/30/08C:DRS/EB2C:DRS/PSBC:DRS/OBC:DRS/EB1C:DRP/DLJSmithMPShannonRLantzRLBywaterTWPruettCFOKeefe forKEBrooks forTOMcKernon forRLBTWP1/30/081/30/081/30/081/30/082/1/08OFFICIAL RECORD COPYT=Telephone E=E-mail F=Fax Enclosure-1-U.S. NUCLEAR REGULATORY COMMISSION REGION IVDockets:50-528, 50-529, 50-530Licenses:NPF-41, NPF-51, NPF-74 Report:05000528/2007005, 05000529/2007005, 05000530/2007005 Licensee:Arizona Public Service Company Facility:Palo Verde Nuclear Generating Station, Units 1, 2, and 3 Location:5951 S. Wintersburg RoadTonopah, ArizonaDates:October 1 through December 31, 2007 Inspectors:J. Bashore, Resident InspectorM. Bloodgood, Reactor Engineer L. Carson, Senior Health Physics Inspector M. Catts, Resident Inspector G. George, Reactor Inspector, Engineering Branch 1 C. Graves, Health Physics Inspector B. Henderson, Reactor Inspector, Engineering Branch 1 T. McKernon, Senior Operations Inspector, Operations Branch S. Makor, Reactor Inspector, Engineering Branch 1 J. Melfi, Resident Inspector L. Ricketson, P.E., Senior Health Physics Inspector G. Warnick, Senior Resident InspectorApproved By:Troy W. Pruett, Chief, Project Branch DDivision of Reactor Projects Enclosure-2-

SUMMARY OF FINDINGS

IR 05000528/2007005, 05000529/2007005, 05000530/2007005; 10/01/07 - 12/31/07; PaloVerde Nuclear Generating Station, Units 1, 2, and 3; Integrated Resident and Regional Report;

Maintenance Effectiveness, Operability Eval., Access Control to Radiological Areas, ALARA Planning, Identification and Resolution of Problems.This report covered a 3-month period of inspection by resident inspectors and regionalinspectors. The inspection identified six findings. The significance of most findings is indicatedby their color (Green, White, Yellow, or Red) using Inspection Manual Chapter 0609,

"Significance Determination Process." Findings for which the significance determination process does not apply may be Green or be assigned a severity level after NRC management's review. The NRC's program for overseeing the safe operation of commercial nuclear power reactors is described in NUREG-1649, "Reactor Oversight Process," Revision 3, dated July 2000.A.

Cornerstone: Mitigating Systems

Green.

A self-revealing noncited violation of 10 CFR Part 50, Appendix B,Criterion XVI, "Corrective Actions," was identified for the failure of engineering personnel to promptly correct a significant condition adverse to quality.

Specifically, on September 17, 2007, the steam supply to auxiliary feedwater Pump A bypass Valve SGA-UV-138A failed to open as required during the performance of the quarterly surveillance test. The cause of the failure was determined to be foreign material on the valve's internal components. Corrective actions were implemented but the source of the debris was not definitively identified. Subsequently, on October 15, 2007, the valve failed to close. Further investigation indicated that the failure was caused by foreign material on the valve's internal components. This issue was entered into the corrective action program as Condition Report/Disposition Request 3078032.The finding is greater than minor because a failure to open is associated with theequipment performance attribute of the mitigating systems cornerstone and affects the associated cornerstone objective to ensure the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Additionally, a failure to close is associated with the structure, system, and component and barrier performance attribute of the barrier integrity cornerstone and affects the associated cornerstone objective to provide reasonable assurance that physical design barriers protect the public from radionuclide releases caused by accidents or events. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, this finding is determined to have very low safety significance because the finding did not result in a loss of safety function under the mitigating systems cornerstone and did not result in an actual open pathway in the physical integrity of the reactor containment under the containment barrier cornerstone. This finding has Enclosure-4-a crosscutting aspect in the area of human performance associated with workcontrol because the facility did not dedicate the manpower and expertise necessary to coordinate work activities to incorporate actions to support long term equipment reliability and safety system availability H.3(b) (Section 1R12).

Green.

The inspectors identified two examples of a noncited violation of10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures and Drawings," for the failure of operations personnel to follow procedures and adequately evaluate degraded and nonconforming conditions to support operability decision-making. On September 12 and October 29, 2007, operations personnel failed to adequately evaluate degraded and nonconforming conditions to support operability decision-making as described in Procedure 40DP-9OP26. Specifically, operations personnel failed to adequately evaluate the operability of the Unit 2 Train B emergency diesel generator after a lowering turbocharger lube oil pressure indication and the Unit 1 Train A auxiliary feedwater system during a body to bonnet steam leak on manual isolation Valve SGE-V886 (steam supply to auxiliary feedwater Pump A bypass Valve SGA-UV-138A). This issue was entered into the corrective action program as Condition Report/Disposition Request 3068929 and Palo Verde Action Request 3084439.The finding is greater than minor because the degraded turbocharger lube oilfilter is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the associated cornerstone objective to ensure the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Additionally, the steam leak on manual isolation Valve SGE-V886 is associated with the structure, system, and component and barrier performance attribute of the barrier integrity cornerstone and affects the associated cornerstone objective to provide reasonable assurance that physical design barriers protect the public from radionuclide releases caused by accidents or events. Using the Manual Chapter 0609,

"Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance because the finding did not result in a loss of safety function under the mitigating systems cornerstone and did not result in an actual open pathway in the physical integrity of the reactor containment under the containment barriers cornerstone. The example of this finding related to lowering turbocharger lube oil pressure has a crosscuttingaspect in the area of human performance associated with decision-making because the licensee did not use conservative assumptions for operability decision-making when evaluating degraded and nonconforming conditions

H.1(b]). The example of this finding related to the body to bonnet steam leak has a crosscutting aspect in the area of problem identification and resolutionassociated with the corrective action program because the licensee did not properly classify, and thoroughly evaluate the operability for a condition adverse to quality P.1(c) (Section 1R15).

Enclosure-5-

Cornerstone: Barrier Integrity

Green.

The inspectors identified two examples of a noncited violation of10 CFR Part 50, Criterion III, "Design Control," for the failure of engineeringpersonnel to ensure that the design bases of the refueling machine were adequately translated into specifications, drawings, procedures, or instructions.

Specifically, for the first example, between October 27, 2006, and October 25, 2007, the licensee inappropriately changed the facility as described in the Updated Final Safety Analysis Report when a modification to the refueling machine introduced a single failure that could result in a failure of both the underload and overload protection features. This change resulted in more than a minimal increase in the consequences of a malfunction, in that the force limits on a fuel assembly grid strap could be exceeded. For the second example, between initial construction and December 5, 2007, procedures and instructions did not limit the stall torque of the hoist motor for the refueling machine. These issues were entered into the corrective action program as Condition Report/Disposition Requests 3030759 and 3068656.The finding is greater than minor because it would become a more significantsafety concern if left uncorrected in that refueling equipment malfunctions could result in damaged fuel. Manual Chapter 0609, Appendix M, "Significance Determination Process Using Qualitative Criteria," was used since the Significance Determination Process methods and tools were not adequate to determine the significance of the finding. This finding affects the barrier integrity cornerstone and is determined to have very low safety significance by NRC management review because it was a deficiency that did not result in the actual degradation of fuel (Section 4OA2).

Cornerstone: Occupational Radiation Safety

Green.

Two examples of a self-revealing noncited violation of TechnicalSpecification 5.7.1 were identified for the failure to control a high radiation area.

On February 14, 2007, while preparing to perform a remote inspection and boric acid wash down of Unit 2 Letdown Ion Exchange Vessel CHN-D01A, a worker received a dose rate alarm of 141 mr/hr on his electronic dosimeter when he removed the shielded plug from the survey/inspection port. On October 24, 2007, while decontaminating safety injection Tank 2A outlet valve to Loop 2A Valve SIB-UV-614 using a vacuum in the Unit 3 containment, two workers received separate electronic dosimeter alarms of 81 mr/hr and 123 mr/hr approximately 20 minutes apart. The issues were entered into the corrective action program as Condition Report/Disposition Requests 2970612 and 3081978.This finding is greater than minor because it is associated with the occupationalradiation safety program and process attribute and affected the cornerstone objective, in that the failure to post and control a high radiation area had the potential to increase personnel dose. This occurrence involved individual Enclosure-6-workers' unplanned, unintended dose that resulted from actions or conditionscontrary to licensee procedures, radiation work permit, and Technical Specifications, therefore, this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspectors determined that this finding was of very low safety significance because it did not involve: (1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose.

Both examples have a crosscutting as pect in the area of human performanceassociated with work control because work planning did not appropriately plan work activities by incorporating risk insights and job site conditions H.3(a)

(Section 2OS1).*Green. The inspectors identified a noncited violation of 10 CFR 20.1501(a)because the licensee failed to completely evaluate the radiological hazard associated with the decontamination of the temporary reactor head. This failure led to the internal exposure of two workers and personnel contamination of two other nearby individuals. The original apparent cause evaluation determined that the radiation protection technicians' decision not to rinse the underside of the temporary reactor head caused the uptakes and contaminations. Upon NRC documentation review and interviews with staff, the licensee determined that the total effective dose equivalent ALARA evaluation of the radiological conditionsand the use of appropriate protective equipment did not fully consider the job site conditions or process of decontamination of the temporary reactor head. The issue was entered into the corrective action program as Condition Report/Disposition Request 3046953.This finding is greater than minor because it is associated with the occupationalradiation safety program and process attribute and affected the cornerstone objective, in that the failure to evaluate the radiological conditions had the potential to increase personnel dose. This occurrence involved individual worker unplanned, unintended dose that resulted from actions or conditions contrary to licensee procedures, radiation work permit, and Technical Specifications, therefore, this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspectors determined that this finding was of very low safety significance because it did not involve: (1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. This finding has a crosscutting aspect in the area of human performance associated with workcontrol because the work planning did not consider possible risk insights and job sight conditions H.3(a) (Section 2OS1).*Green. The inspectors identified a noncited violation of TechnicalSpecification 5.4.1.a for the failure to follow radiation exposure permit instructions. Specifically, while touring the Unit 3 containment on October 23, 2007, the inspectors questioned six individuals at the pressurizer cubicle on the 120' level. The individuals stated they left their job site and proceeded to a new job site without informing radiation protection and receiving a radiological brief of Enclosure-7-the conditions at the new job site. The workers were coached by the licenseeand the issue was entered into the corrective action program as Palo Verde Action Request 3081935. This finding is greater than minor because it is associated with the occupationalradiation safety program and process attribute and affected the cornerstone objective, in that the noncompliance to a radiation exposure permit instructions had the potential to increase personnel dose. Using the Occupational Radiation Safety Significance Determination Process, the inspectors determined that this finding was of very low safety significance because it did not involve: (1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. This finding has a crosscutting aspect in the area of human performance associated withwork practices because the workers did not use human error prevention techniques such as adequate self and peer checking to appropriately evaluate work conditions [(H.4(a) (Section 2OS1).

B.Licensee-Identified Violations

Violations of very low safety significance which were identified by the licensee havebeen reviewed by the inspectors. Corrective actions taken or planned by the licensee have been entered into the licensee's corrective action program. The violations and corrective actions are listed in Section 4OA7 of this report.

Enclosure-8-

REPORT DETAILS

Summary of Plant StatusUnit 1 operated at full power until October 22, 2007, when the unit was shutdown to repair theauxiliary feedwater system (AFW) Train A steam supply valves. The unit returned to full power on November 5. On November 23, the unit was shutdown to repair the Train A balance of plant engineered safety feature actuating system (BOP ESFAS) load sequencer. The unit returned to full power on December 1. On December 6, power was reduced to approximately 73 percent to repair a fault in the Train A heater drain system. The unit returned to full power on December 8 and remained there for the duration of the inspection period.Unit 2 operated at full power until October 6, 2007, when the unit was manually tripped due tohigh sodium levels in secondary water systems. The unit returned to full power on October 14 and remained there for the duration of the inspection period.Unit 3 was shut down for the entire inspection period for a refueling and steam generator (SG)replacement outage.1.REACTOR SAFETYCornerstones: Initiating Events, Mitigating Systems, Barrier Integrity1R01Adverse Weather Protection (71111.01)

a. Inspection Scope

Readiness for Seasonal SusceptibilitiesThe inspectors completed a review of the licensee's readiness of seasonalsusceptibilities involving impending low temperatures. The inspectors: (1) reviewed plant procedures, the Updated Final Safety Analysis Report (UFSAR), and TechnicalSpecifications (TSs) to ensure that operator actions defined in adverse weather procedures maintained the readiness of essential systems; (2) walked down portions ofthe four systems listed below to ensure that adverse weather protection features (heattracing, space heaters, weatherized enclosures, temporary chillers, etc.) were sufficientto support operability, including the ability to perform safe shutdown functions; (3) evaluated operator staffing levels to ensure the licensee could maintain the readiness of essential systems required by plant procedures; and (4) reviewed the corrective action program (CAP) to determine if the licensee identified and corrected problems related to adverse weather conditions. *December 3, 2007, Unit 1, essential spray pond system Train A*December 3, 2007, Unit 2, essential spray pond system Trains A and B

• December 3, 2007, Unit 1, essential cooling water system Trains A and B

• December 4, 2007, Unit 3, nuclear cooling water temporary modification

-9-Documents reviewed by the inspectors are listed in the attachment.The inspectors completed one sample.

b. Findings

No findings of significance were identified.

1R04 Equipment Alignment (71111.04)

a. Inspection Scope

Partial WalkdownThe inspectors: (1) walked down portions of the three below listed risk importantsystems and reviewed plant procedures and documents to verify that critical portions ofthe selected systems were correctly aligned; and (2) compared deficiencies identified during the walk down to the licensee's UFSAR and corrected action program (CAP) to ensure problems were being identified and corrected. *October 17, 2007, Unit 3, essential cooling water and pool cooling Train B whileTrain A was out of service*December 4-5, 2007, Unit 1, AFW system Train A

• December 20, 2007, Unit 3, shutdown cooling (SDC) system Train B Documents reviewed by the inspectors are listed in the attachment.The inspectors completed three samples.

b. Findings

No findings of significance were identified.

1R05 Fire Protection (71111.05)

a. Inspection Scope

Quarterly InspectionThe inspectors walked down the six below listed plant areas to assess the materialcondition of active and passive fire protection features and their operational lineup and readiness. The inspectors: (1) verified that transient combustibles and hot work activities were controlled in accordance with plant procedures; (2) observed the condition of fire detection devices to verify they remained functional; (3) observed fire suppression systems to verify they remained functional and that access to manual

-10-actuators was unobstructed; (4) verified that fire extinguishers and hose stations wereprovided at their designated locations and that they were in a satisfactory condition; (5) verified that passive fire protection features (electrical raceway barriers, fire doors, fire dampers, steel fire proofing, penetration seals, and oil collection systems) were in a satisfactory material condition; (6) verified that adequate compensatory measures were established for degraded or inoperable fire protection features and that the compensatory measures were commensurate with the significance of the deficiency; and (7) reviewed the UFSAR to determine if the licensee identified and corrected fire protection problems. *October 10-11, 2007, Unit 3, containment, 80-foot, 100-foot, 120-foot, and140-foot elevations*November 7, 2007, Unit 1, fire pump house, 100-foot elevation

• November 7, 2007, station black out gas turbine generators

• November 10, 2007, Unit 3, condensate storage pump house and tunnel

• December 3, 2007, Unit 1, main steam (MS) support structure, 80-foot, 100-foot,120-foot, and 140-foot elevations*December 6, 2007, Unit 2, MS support structure, 80-foot, 100-foot, 120-foot, and140-foot elevationsDocuments reviewed by the inspectors are listed in the attachment.

The inspectors completed six samples.

b. Findings

No findings of significance were identified.

1R06 Flood Protection Measures (71111.06)

a. Inspection Scope

Semi-annual Internal Flooding The inspectors: (1) reviewed the UFSAR, the flooding analysis, and plant procedures toassess seasonal susceptibilities involving internal flooding; (2) reviewed the UFSAR and CAP to determine if the licensee identified and corrected flooding problems; (3)inspected underground bunkers/manholes to verify the adequacy of (a) sump pumps, (b) level alarm circuits, (c) cable splices subject to submergence, and (d) drainage for bunkers/manholes; (4) verified that operator actions for coping with flooding canreasonably achieve the desired outcomes; and (5) walked down the five below listedareas to verify the adequacy of: (a) equipment seals located below the floodline,

-11-(b) floor and wall penetration seals, (c) watertight door seals, (d) common drain linesand sumps, (e) sump pumps, level alarms, and control circuits, and (f) temporary or removable flood barriers.

• December 6, 2007, Unit 2, control building, 74-foot, 100-foot, 120-foot, 140-foot,and 160-foot elevationsDocuments reviewed by the inspectors are listed in the attachment.

The inspectors completed one sample.

b. Findings

No findings of significance were identified.

1R08 Inservice Inspection (ISI) Activities

02.01Inspection Activities Other Than SG Tube Inspection, PWR Vessel Upper HeadPenetration (VUHP) Inspections, Boric Acid Corrosion Control

a. Inspection Scope

The inspection procedure requires review of two or three types of nondestructiveexamination (NDE) activities and, if performed, one to three welds on the reactor coolantsystem (RCS) pressure boundary. Also review one or two examinations with recordableindications that have been accepted by the licensee for continued service.The inspectors directly observed the following NDEs:SystemComponent/Weld IDExam Type AFW62-12ultrasonic test(UT)/dyepenetrant test(PT)AFW62-13UT/PT AFW13-AF-018-H-002Visual TestLevel 3 AFW13-AF-018-H-003Visual Test 3The inspectors reviewed records for the following NDEs:SystemComponent/Weld IDExam Type

-12-SG1 Hot Leg 1RCS1radiography test(RT)High Pressure SafetyInjection (HPSI) Line(3")1SI14 RTRCS Cold Leg 1RCS4 RT MS2MS2 RTSafety Injection (SI)(16")1SI3 RT MS1MS8 RTFeedwater (FW)2FW8 RT FW2FW4 RTSG2 RCS Cold Leg "B" 2RCS5 RTSG2 RCS Cold Leg "A" 2RCS3 RTDowncomer Blowdown2DB14 (Elbow-Pipe)

RTDowncomer Blowdown2DB24 (Elbow-Elbow)

RTDowncomer Blowdown2DB1R2 (Nozzle-Reducer)

RTSG1 RCS Cold Leg "B"1RCS5 (Elbow-Pipe)

RTSG1 RCS Cold Leg "A"1RCS3 (Elbow-Pipe)

RTDuring the review and observation of each examination, the inspectors verified thatactivities were performed in accordance with American Society of Mechanical Engineers(ASME) Boiler and Pressure Vessel Code requirements and applicable procedures. The qualifications of all NDE technicians performing the inspections were verified to becurrent.The inspectors reviewed records for one NDE examination with a recordable indicationthat was accepted by the licensee for continued service as listed below. The licensee'sacceptance was in accordance with ASME code requirements.System/ComponentWeld ID/Comp IDExam Type ResultSDC Heat Exchanger75-79 UTIndicationAcceptableRecords from 16 examples of welding on the RCS pressure boundary were examinedas follows:

-13-SystemComponent/Weld Identification SI3PSIBV1026/2866117-1, 2, 3, 5, and 6SG1 Hot Leg 1RCS1HPSI Line (3")1SI14RCS Cold Leg 1RCS4 MS2MS2SI (16" )1SI3 MS1MS8 FW2FW8 FW2FW4SG2 RCS Cold Leg "B" 2RCS5SG2 RCS Cold Leg "A" 2RCS3Downcomer Blowdown2DB14 (Elbow-Pipe)Downcomer Blowdown2DB24 (Elbow-Elbow)Downcomer Blowdown2DB1R2 (Nozzle-Reducer)SG1 RCS Cold Leg "B"1RCS5 (Elbow-Pipe)SG1 RCS Cold Leg "A"1RCS3 (Elbow-Pipe)Welding procedures and NDE of the welding repair conformed to ASME Coderequirements and licensee requirements.The inspectors verified, by review, that the welding procedure specifications and thewelders had been properly qualified in accordance withe ASME Code,Section IX,requirements. The inspectors also verified, through observation and record review, thatessential variables for the gas tungsten arc welding process (machine and manual) andthe shielded metal arc welding process were identified, recorded in the procedurequalification record, and formed the bases for qualification of the welding procedurespecifications.The inspectors completed one sample under Section 02.01.

b. Findings

No findings of significance were identified.

-14- 02.02VUHP Inspection Activities

a. Inspection Scope

The licensee performed NDE of 100 percent of reactor VUHPs. The inspector directlyobserved a sample of the examinations as listed below: SystemComponent/Weld IdentificationExaminationMethodControl Element DriveMechanism (CEDM)CEDM 12VT2 CEDMCEDM 17VT2 CEDMCEDM 28VT2 CEDMCEDM 45VT2 CEDMCEDM 62VT2 CEDMCEDM 64UT, eddy currenttest (ET)CEDMCEDM 84UT, ET CEDMCEDM 86UT, ETThe inspectors reviewed the following sample of examinations in which defects weredetected and accepted for continued service using stored electronic data or review ofprinted records:SystemExamination Method ResultCEDM 30ET, UT, PTIndications determined to benot primary water stresscorrosion cracking(PWSCC) CEDM 39ET, UT, PTIndications determined to benot PWSCCCEDM 50ET, UT, PTIndications determined to benot PWSCCThe NDE inspections were performed in accordance with the requirements of NRCOrder EA-03-009. The inspectors completed one sample under Section 02.02.

-15-

b. Findings

No findings of significance were identified.02.03Boric Acid Corrosion Control Inspection Activities

a. Inspection Scope

Resident inspectors observed a sample of boric acid corrosion control activities andverified that visual inspections emphasized locations where boric acid leaks can causedegradation of safety significant components.The ISI inspector reviewed three instances where boric acid deposits were found on RCSsystem piping components:Component NumberDescriptionAction Request3PSIAV105Containment Spray (CS) Pump SIA-P03 Norm Suction Valve 30052923PSIEV214Safety Injection Tank (SIT) "2A"Sample Isolation Valve 2934501 3PRCNV715Reactor Coolant Pump (RCP) "2B"Pump Casing Vent Valve 2890601The condition of the all the components was appropriately entered into the licensee'sCAP, and corrective actions taken were consistent with ASME code requirements. Noengineering evaluations were required for any of the instances where leaks wereidentified during walkdowns.The inspectors completed one sample under Section 02.03.

b. Findings

No findings of significance were identified.02.04SG Tube Inspection Activities

a. Inspection Scope

Unit 3 replaced SGs during this outage and SG tubes were not inspected.

b. Findings

No findings of significance were identified.

-16-02.05 Identification and Resolution of Problems

a. Inspection scope

.The inspection procedure requires review of a sample of problems associated within-service inspections documented by the licensee in the CAP for appropriateness of the corrective actions.The inspector reviewed nine corrective action reports which dealt with in-serviceinspection activities and found the corrective actions were appropriate. Action requests reviewed are listed in the documents reviewed section. From this review the inspectors concluded that the licensee has an appropriate threshold for entering ISI issues into the CAP and has procedures that direct a root cause evaluation when necessary. The licensee also has an effective program for applying industry operating experience.

b. Findings

No findings of significance were identified.

1R11 Licensed Operator Requalification Program

Annual Inspection

a. Inspection Scope

The inspectors reviewed the annual operating examination test results for 2007. Sincethis was the first half of the biennial requalification cycle, the licensee was not required toadminister a written examination. These results were assessed to determine if they wereconsistent with NUREG 1021, "Operator Licensing Examination Standards for PowerReactors," guidance and Manual Chapter 0609, "Significance Determination Process,"Appendix I, "Operator Requalification Human Performance Significance DeterminationProcess," requirements. This review included the test results for a total of 20 crewscomposed of 91 licensed operators, which included: shift-standing senior operators, staffsenior operators, shift-standing reactor operators, and staff reactor operators. There wasone crew failure and four individual failures on the simulator scenario portion of the test. There were no individual failures on the job performance measure portion of the test. Allfailures were remediated following the examination.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed one sample.

b. Findings

No findings of significance were identified.

-17-Quarterly Inspection

a. Inspection Scope

The inspectors observed testing and training of senior reactor operators and reactoroperators to identify deficiencies and discrepancies in the training, to assess operator performance, and to assess the evaluator's critique. The below listed evaluated scenarios were observed. The training scenarios involved: (1) a loss of offsite powerand station blackout; and (2) an inadvertent AFW system actuation, anticipated transient without a scram, and loss of coolant accident.*October 16, 2007, Scenario SES-0-08-F-00, "LOP/LOOP/Blackout"*October 16, 2007, Scenario SES-0-03-T-00, "Inadvertent AFAS/ATWS/LOCA"Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed two samples.

b. Findings

No findings of significance were identified.

1R12 Maintenance Effectiveness (71111.12)

a. Inspection Scope

The inspectors reviewed the two below listed maintenance activities to: (1) verify theappropriate handling of structure, system, and component (SSC) performance or condition problems; (2) verify the appropriate handling of degraded SSC functional performance; (3) evaluate the role of work practices and common cause problems; and (4) evaluate the handling of SSC issues reviewed under the requirements of the maintenance rule, Appendix B of 10 CFR Part 50, and the TSs. *August 18, 2007, Unit 2, failure of Quality Safety Parameter Display System(QSPDS), heated junction thermocouples, and core exit temperature thermocouples, resulting in inoperability of QSPDS Train A*October 17 - 18, 2007, Unit 1, steam supply to AFW Pump A bypassValve SGA-UV-138ADocuments reviewed by the inspectors are listed in the attachment.

The inspectors completed two samples.

-18-

b. Findings

Introduction:

A self-revealing Green noncited (NCV) of 10 CFR Part 50, Appendix B,Criterion XVI, "Corrective Actions," occurred as a result of engineering personnel's inadequate corrective actions following the September 17, 2007, failure of steam supply to AFW Pump A bypass Valve SGA-UV-138A.Description: On September 17, 2007, Valve SGA-UV-138A failed to open as requiredduring the performance of the quarterly surveillance test, per Procedure 73ST-9AF02, "AFA-P01 Inservice Test," Revision 39. Valve SGA-UV-138A is a 1-inch, stainless steel, single pilot assisted, 125 Vdc solenoid operated valve that provides the initial motive force to AFW Pump A. This valve opens to accelerate the turbine from rest to approximately 900 rpm prior to steam supply Valve SGA-UV-138 opening. This arrangement precludes the turbine from tripping on over speed during startup and functions to prime and lubricate the hydraulic control subsystems. This valve set supplies steam from SG 2. A redundant set of valves (SGA-UV-134A and SGA-UV-134)provide steam from SG 1. Either set of valves is capable of supplying sufficient steam to fulfill the AFW system's safety function. Both sets of valves receive power from Class 125 Vdc Bus PKA-M41.The valve failure was initially entered into the CAP on September 17, 2007, as PaloVerde Action Request (PVAR) 3064151. Significant Condition Report/Disposition Request (CRDR) 3064675 was written on September 18. An investigation conducted by engineering personnel discovered that the valve internal assembly was mechanically bound inside the bonnet due to the presence of an iron oxide coating on the plunger.

The foreign material was evaluated and found to be primarily iron based material with trace amounts of chromium, nickel, and other material. Although multiple sources of the material were postulated, no definitive conclusion was reached as to the actual source.

Work on an upstream valve during Refueling Outage 1R13 was attributed as the most probable source for the material. On September 18, the valve internals were replaced and the valve was reassembled. The valve was retested on September 19. Later on September 19, both Valves SGA-UV-134A and SGA-UV-138A were disassembled and inspected and identified no concerns. Following this inspection, both valves werereassembled and retested on September 20. On September 21, 2007, following all postmaintenance and surveillance testing, the AFW steam supplies were declared operable.As documented in the prompt operability determination (OD) dated September 28, 2007,Revision 0, the licensee considered the failure a one time occurrence isolated to Valve SGA-UV-138A that had been corrected. In addition, it was expected that the condition would not recur absent maintenance activities that involve breaching the valve or piping. However, since the root cause of the failure had not yet been determined, a potential degraded condition existed with possible transportability to both bypass steam supply valves for the turbine driven AFW pump. Consequently, a corrective action was implemented to increase the frequency of stroking Valve SGA-UV-138A from quarterly to monthly. Completion of the investigation for Significant CRDR 3064675 was expected to establish a basis for returning to normal testing.

-19-On October 15, 2007, Valve SGA-UV-138A failed to close while performing the increasedfrequency testing. The valve was disassembled and the internals were removed and inspected. An iron oxide coating was observed on the plunger. An analysis of the material determined that it was the same consistency as the sample analyzed from the September 17, 2007, failure. In both events, accumulation of iron oxide on the internal plunger created frictional forces between the plunger and the interior surfaces of the bonnet. On October 22, 2007, the unit was shutdown when the TS allowed outage time expired.The source of the debris was not definitively determined during the investigation followingthe October 15, 2007, failure. However, additional corrective actions were implemented to preclude recurrence. Inspections were performed on both Valves SGA-UV-134A andSGA-UV-138A, downstream check Valve SGE-V-888, steam trap isolationValve SGB-UV-1134, and all associated piping. The inspections did not identify thepresence of foreign material. Additionally, the valve body for Valve SGA-UV-138A wasdye penetrant tested during this inspection with no abnormalities observed. The slope ofthe 1-inch steam line upstream of Valve SGA-UV-138A was determined to benonconforming with the design, in that, the piping sloped toward the valve instead ofaway from the valve. The piping upstream of Valve SGA-UV-138A was reworked tocorrect the slope. The slope of the same line in Unit 2 was evaluated and determined to be in conformance with design. The slope of the same line in Unit 3 was evaluated and determined to be nonconforming with the design. The piping in Unit 3 was reworked during Refueling Outage 3R13. A flushing plan was developed and implemented for the piping associated withValve SGA-UV-138A. The line was flushed three times and the valve internals inspected after each flush. The first flush produced a small amount of oxide residue on the valve's internal components. The second flush produced much less residue and a third flush produced no residue on the valve's internal components. Valve SGA-UV-138A was then reassembled with new internals and retested and returned to service on October 29, 2007. Since the return to service, Valve SGA-UV-138A has been successfully stroke tested eight times. In addition, it has been disassembled and inspected on November 4, November 27, and on December 27, 2007. During an inspection on November 27, 2007, a slight residue of red dust was observed on the valve's internal components. The dust was easily wiped off. There was no other evidence of foreign material on the valve's internal components during these inspections. Future corrective actions will be based on stroke test and inspection results.Analysis: The performance deficiency associated with this finding was the failure ofengineering personnel to implement adequate corrective actions following the September 17, 2007, valve failure. The finding is greater than minor because a failure to open is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the associated cornerstone objective to ensure the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Additionally, a failure to close is associated with the SSC and barrier performance attribute of the barrier integrity cornerstone and affects the associated cornerstone objective to provide reasonable assurance that physical design

-20-barriers protect the public from radionuclide releases caused by accidents or events. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, this finding is determined to have very low safety significance because the finding did not result in a loss of safety function under the mitigating systems cornerstone and did not result in an actual open pathway in the physical integrity of the reactor containment under the containment barrier cornerstone. This finding has a crosscuttingaspect in the area of human performance associated with work control because the facility did not dedicate the manpower and expertise necessary to coordinate work activities to incorporate actions to support long term equipment reliability and safety system availability H.3(b).Enforcement: 10 CFR Part 50, Appendix B, Criterion XVI, "Corrective Action," states, inpart, that measures shall be established to assure that conditions adverse to quality are promptly identified and corrected. In the case of significant conditions adverse to quality, the measures shall assure that the cause of the condition is determined and corrective actions taken to preclude repetition. Contrary to the above, between September 17 and October 15, 2007, measures to assure that the cause of the failure of steam supply to AFW Pump A bypass Valve SGA-UV-138A was determined and corrective actions taken to preclude repetition of a significant condition adverse to quality were inadequate.

Specifically, on September 17, 2007, Valve SGA-UV-138A failed to open as required during performance of the quarterly surveillance test. The cause of the failure was determined to be foreign material on the valve's internal components. Corrective actions were implemented but the source of the debris was not definitively identified.

Subsequently, on October 15, 2007, the valve failed to close. Subsequent investigation indicated that the failure was caused by foreign material on the valve's internal components. Because this finding is of very low safety significance and has been entered into the licensee's CAP as CRDR 3078032, this violation is being treated as an NCV consistent with Section VI.A of the Enforcement Policy: NCV 05000528/2007005-01, "Failure to Take Adequate Corrective Actions to Prevent Recurrence of a Significant Condition Adverse to Quality."1R13Maintenance Risk Assessments and Emergent Work Control (71111.13)

a. Inspection Scope

Risk Assessment and Management of RiskThe inspectors reviewed the below listed assessment activity to verify: (1) performanceof risk assessments when required by 10 CFR 50.65 (a)(4) and licensee procedures priorto changes in plant configuration for maintenance activities and plant operations; (2) the accuracy, adequacy, and completeness of the information considered in the risk assessment; (3) that the licensee recognizes, and/or enters as applicable, the

-21-appropriate licensee-established risk category according to the risk assessment resultsand licensee procedures; and (4) the licensee identified and corrected problems related to maintenance risk assessments.*December 5, 2007, Unit 1, risk assessment and management during scheduledemergency diesel generator (EDG) Train B outageDocuments reviewed by the inspectors are listed in the attachment.The inspectors completed one sample.

Emergent Work ControlThe inspectors: (1) verified that the licensee performed actions to minimize theprobability of initiating events and maintained the functional capability of mitigating systems and barrier integrity systems; (2) verified that emergent work-related activities such as troubleshooting, work planning/scheduling, establishing plant conditions, aligning equipment, tagging, temporary modifications, and equipment restoration did not place the plant in an unacceptable configuration; and (3) reviewed the UFSAR to determine if the licensee identified and corrected risk assessment and emergent work control problems. *September 18 - 28, 2007, Unit 1, troubleshooting efforts associated with thesteam supply to AFW Pump A bypass Valve SGA-UV-138A

• October 15, 2007, Unit 1, troubleshooting efforts associated with the steamsupply to AFW Pump A bypass Valve SGA-UV-138A as described in correctivemaintenance work order (WO) 3076750

• November 13 - 14, 2007, Unit 1, EDG Train B fuel injection pump replacement

• November 26, 2007, Unit 1, BOP ESFAS sequencer Train A troubleshooting andrepairDocuments reviewed by the inspectors are listed in the attachment.The inspectors completed four samples.

b. Findings

No findings of significance were identified.

-22-1R15Operability Evaluations (71111.15)

a. Inspection Scope

The inspectors: (1) reviewed plant status documents such as operator shift logs,emergent work documentation, deferred modifications, and night orders to determine if an operability evaluation was warranted for degraded components; (2) referred to the UFSAR and design basis documents to review the technical adequacy of licensee operability evaluations; (3) evaluated compensatory measures associated with operability evaluations; (4) determined degraded component impact on any TSs; (5) used the Significance Determination Process to evaluate the risk significance of degraded or inoperable equipment; and (6) verified that the licensee has identified and implemented appropriate corrective actions associated with degraded components.*September 12, 2007, Unit 2, EDG turbocharger lube oil (LO) filter clogging asdescribed in PVAR 3061932*October 30, 2007, Unit 1, steam leak from bonnet of manual isolationValve SGE-V886 for the steam supply to AFW Pump A bypass Valve SGA-UV-138A as described in PVAR 3084439*December 14, 2007, Unit 3, impact of desicant dropped in reactor vessel to corereload and shutdown operations as described in deficiency WO 3107411

• December 14, 2007, Unit 2, operability assessment associated with shutdowncooling suction isolation Valve SIA-UV-651 vibration as described in PVAR 3109083Documents reviewed by the inspectors are listed in the attachment.The inspectors completed four samples.

b. Findings

Introduction:

The inspectors identified two examples of a Green NCV of 10 CFR Part 50,Appendix B, Criterion V, "Instructions, Procedures and Drawings," for the failure of operations personnel to follow procedures and adequately evaluate degraded and nonconforming conditions to support operability decision-making.Description: The first example occurred on September 12, 2007, when the Unit 2 EDGTrain B was started for a surveillance test per Procedure 40DP-9OP08, "Diesel Generator Test Record," Revision 44. The auxiliary operator noted that the pressure for the turbocharger LO indicated low in the normal band, and informed the shift manager (SM) of the readings. The SM and shift technical advisor reviewed log readings for the turbocharger LO pressure for the period including January 2006 through September 12, 2007, and noted a lowering trend. Based on the lowering trend, the standby filter in the duplex filter arrangement was selected. The turbocharger LO

-23-pressure indication increased when the standby filter was selected. PVAR 3061932 wasinitiated to investigate the lowering turbocharger LO pressure indication. However, the OD process was not entered since the SM determined that a degraded condition did not exist once the standby filter was selected. Additionally, the SM believed that the clogged filter only constituted a material condition since filters can be swapped while the EDG is running. The condition associated with the cause of the filter clogging was not considered in the initial operability assessment as a condition that could impact operability of the EDG. The inspectors questioned the SM's decision-making to determine that the OD processas described in Procedure 40DP-9OP26, "Operability Determination and Functional Assessment," Revision 18, was not applicable to the lowering turbocharger LO pressure condition. The inspectors expressed concern that a degraded condition may exist that called into question the ability of the EDG to perform its safety function, in that, the cause of the filter clogging had not been identified and corrected. The inspectors observed that operations personnel failed to consider both the degrading filter condition and the degrading/erratic oil pressure indication as conditions that could challenge the ability of the EDG to perform its safety function. On October 5, 2007, PVAR 3061932 documented a prompt OD for the EDG Train B degrading turbocharger LO pressure condition. The prompt OD concluded that there was an adequate basis to support a reasonable expectation of operability for EDG Train B since the apparent filter fouling rate, and the ability to select the standby filter while the EDG was running, was such that the EDG could function for its entire 7-day mission time. The licensee initiated CRDR 3068929 to evaluate and correct the failure to perform an OD when the lowering LO pressure condition was initially identified.On October 11, 2007, the prompt OD was revised to incorporate information developedduring the CRDR investigation. The extent of condition review identified a declining trend for the pressure indication for turbocharger LO on Unit 2 EDG Train A. The review determined that if the degradation continued to progress linearly, the ability of the EDG to perform its safety function to operate for the mission time could be challenged. The revision to the prompt OD concluded that there was an adequate basis to support a reasonable expectation of operability for EDG Train A since the calculated filter fouling rate, and the ability to select the standby filter while the EDG was running, was such that the EDG could function for its entire 7-day mission time. The apparent cause evaluation documented in CRDR 3062419 determined that the lowering turbocharger LO pressure trend was attributed to filter plugging. The filter plugging occurred, in part, since the wrong filter size rating for the turbocharger bearings were installed. The installed filter elements had a "nominal rating" of 5 microns, whereas, the vendor technical manual states that the filters were 10 microns. It appears that the installed turbocharger filters were too fine a rating for the turbocharger bearing application. Additionally, the licensee determined that the preventive maintenance associated with changing the filters and LO was not at the optimal frequency. The licensee has initiated actions to replace the installed 5 micron filters with filters of a nominal rating of 10 microns and to optimize the preventive maintenance frequency.The second example occurred on October 29, 2007, at approximately 5:15 a.m., when a

-24-body to bonnet steam leak was observed by the inspectors on Valve SGE-V886. Thisvalve is the sole upstream manual isolation for Valve SGA-UV-138A. The inspectors were informed by site personnel that the control room was aware of the leak. At this time, the steam leak had not been entered into the CAP. Control room shift personnel stated that the steam leak was a material condition and not a degraded condition.

Consequently, the licensee did not view the issue as an operability concern. This position was documented in an Operations Decision Making Issue/Emergent Condition Checklist dated October 29, 2007.At approximately 9 a.m. on October 29, 2007, the inspectors observed that thecharacteristics of the leak had changed and appeared to be getting worse. In addition, the inspectors noted that the direction and size of the plume had changed, causing a concern with the impact to nearby equipment. The inspectors raised additional questions regarding AFW operability and containment isolation with operations shift personnel and operations management. At 12:10 p.m. on October 29, 2007, the issue was entered into the CAP, however, the steam leak was still not considered an operability issue. Operations Department Practices 16, Revision 8, states, in part, that if the potentialexists to impact a TS SSC, then perform an operability evaluation per the OD procedure.

Procedure 40DP-9OP26 required the OD process be entered when a TS SSC or TS Support SSC safety function is called into question. The immediate OD is typically performed in the order of 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />. A more rigorous prompt OD is typically performed in the order of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.In the afternoon of October 29, 2007, the inspectors continued to ask additionalquestions regarding operability of fire suppression, containment isolation, and AFW systems. On October 30, 2007, an immediate OD was performed and approved by the SM at 5:54 a.m. The OD addressed operability of the steam driven AFW pump, environmental qualifications of equipment in the room, fire suppression system operability, room habitability, and containment isolation issues. The prompt OD was subsequently performed on October 31, 2007, and provided additional operability justification details. On November 1, 2007, seal weld repairs were completed to isolate the steam leak.Analysis: The failure to adequately implement the OD process was a performancedeficiency. The finding is greater than minor because the degraded turbocharger LOfilter is associated with the equipment performance attribute of the mitigating systemscornerstone and affects the associated cornerstone objective to ensure the availability,reliability, and capability of systems that respond to initiating events to preventundesirable consequences. Additionally, the steam leak on manual isolationValve SGE-V886 is associated with the SSC and barrier performance attribute of thebarrier integrity cornerstone and affects the associated cornerstone objective to providereasonable assurance that physical design barriers protect the public from radionuclidereleases caused by accidents or events. Using the Manual Chapter 0609, "SignificanceDetermination Process," Phase 1 Worksheets, the finding is determined to have very lowsafety significance because the finding did not result in a loss of safety function under themitigating systems cornerstone and did not result in an actual open pathway in the

-25-physical integrity of the reactor containment under the containment barriers cornerstone. The example of this finding related to lowering turbocharger lube oil pressure has acrosscutting aspect in the area of human performance associated with decision-makingbecause the licensee did not use conservative assumptions for operabilitydecision-making when evaluating degraded and nonconforming conditions H.1(b). Theexample of this finding related to the body to bonnet steam leak has a crosscuttingaspect in the area of problem identification and resolution associated with the correctiveaction program because the licensee did not properly classify, and thoroughly evaluatethe operability for a condition adverse to quality P.1(c).Enforcement: 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures andDrawings," requires that activities affecting quality shall be prescribed by instructions,procedures, or drawings, and shall be accomplished in accordance with thoseinstructions, procedures, and drawings. The assessment of operability of safety-relatedequipment needed to mitigate accidents was an activity affecting quality and wasimplemented by Procedure 40DP-9OP26, "Operability Determination and FunctionalAssessment," Revision 18. Procedure 40DP-9OP26, Step 3.1.1, requires entry into theOD process upon discovery of circumstances where the operability of any SSC described in TSs is called into question upon discovery of degraded conditions. Contrary to the above, between September 12 and October 5, 2007, and between October 29 and October 30, 2007, operations personnel failed to enter the OD process upon discovery of degraded conditions that called into question the operability of a SSCs described in TSs.

Specifically, operations personnel failed to adequately evaluate the operability of the Unit 2 EDG Train B during a lowering turbocharger LO pressure condition and the Unit 1 AFW system Train A steam supply during a body to bonnet steam leak on Valve SGE-V886. Because the finding is of very low safety significance and has been entered into the CAP as CRDR 3068929 and PVAR 3084439, this violation is being treated as an NCV, consistent with Section VI.A of the Enforcement Policy: NCV 05000528;05000529/2007005-02, "Two Examples of a Failure to Properly Implement the Operability Determination Process."1R17Permanent Plant Modifications (71111.17)

a. Inspection Scope

Annual ReviewThe inspectors reviewed key affected parameters associated with energy needs,materials/replacement components, timing, heat removal, control signals, equipment protection from hazards, operations, flowpaths, pressure boundary, ventilation boundary, structural, process medium properties, licensing basis, and failure modes for the two modifications listed below. The inspectors verified that: (1) modification preparation, staging, and implementation did not impair emergency/abnormal operating procedure actions, key safety functions, or operator response to a loss of key safety functions; (2)post-modification testing maintained the plant in a safe configuration during testing by verifying that unintended system interactions will not occur, SSC performance characteristics still meet the design basis, the appropriateness of modification design

-26-assumptions, and the modification test acceptance criteria has been met; and (3) thelicensee has identified and implemented appropriate corrective actions associated with permanent plant modifications. *October 15 - December 12, 2007, Unit 3, relocation of Valve SIA-UV-651 perdesign modification WO 2914420 *October 24, 2007, Unit 1, installation of manual isolation valves downstreamValves SGA-UV-134A and SGA-UV-138A per design modification WO 3054112Documents reviewed by the inspectors are listed in the attachment.The inspectors completed two samples.

b. Findings

No findings of significance were identified.

1R19 Post-Maintenance Testing (71111.19)

a. Inspection Scope

The inspectors selected the five below listed post maintenance test activities of risksignificant systems or components. For each item, the inspectors: (1) reviewed theapplicable licensing basis and/or design-basis documents to determine the safety functions; (2) evaluated the safety functions that may have been affected by the maintenance activity; and (3) reviewed the test procedure to ensure it adequately tested the safety function that may have been affected. The inspectors either witnessed or reviewed test data to verify that acceptance criteria were met, plant impacts were evaluated, test equipment was calibrated, procedures were followed, jumpers were properly controlled, the test data results were complete and accurate, the test equipment was removed, the system was properly re-aligned, and deficiencies during testing were documented. The inspectors also reviewed the UFSAR to determine if the licensee identified and corrected problems related to postmaintenance testing.

• October 19, 2007, Unit 1, AFW system steam supply pipe flush perProcedure 40OP-9AF01, "Essential Auxiliary Feedwater System," Revision 38

• November 14, 2007, Unit 1, EDG Train B fuel injection pump replacement

• November 26, 2007, Unit 1, BOP ESFAS sequencer Train A

• December 3, 2007, Unit 3, vortex test following relocation of Valve SIA-UV-651per Procedure 40TI-9ZZ07, "Shutdown Cooling Vortex Test," Revision 5

-27-*December 12-13, 2007, Unit 3, recalibration of refueling water (vessel) levelindication system following relocation of Valve SIA-UV-651, perProcedure 32MT-3RC03, "Refueling Water Level Indicating System InstrumentCalibration - Train A," Revision 15Documents reviewed by the inspectors are listed in the attachment.The inspectors completed five samples.

b. Findings

No findings of significance were identified.

1R20 Refueling and Other Outage Activities (71111.20)

a. Inspection Scope

Unit 2 Forced Outage for High Sodium In Secondary Water SystemsThe inspectors reviewed the following risk significant refueling items or outage activitiesto verify defense in depth commensurate with the outage risk control plan, compliance with the TSs, and adherence to commitments in response to Generic Letter 88-17, "Loss of Decay Heat Removal": (1) the risk control plan, (2) decay heat removal, (3) reactivity control, (4) heatup and coldown activities, (5) restart activities, and (6) licensee identification and implementation of appropriate corrective actions associated with outage activities.Unit 1 Forced Outage for Valve SGA-UV-138A FailureThe inspectors reviewed the following risk significant refueling items or outage activitiesto verify defense in depth commensurate with the outage risk control plan, compliance with the TSs, and adherence to commitments in response to Generic Letter 88-17, "Loss of Decay Heat Removal": (1) the risk control plan, (2) tagging/clearance activities, (3) decay heat removal, (4) reactivity control, (5) containment closure, (6) heatup and coldown activities, (7) restart activities, and (8) licensee identification and implementation of appropriate corrective actions associated with outage activities. The inspectors' containment inspections included observations of the containment sump for damage and debris; and supports, braces, and snubbers for evidence of excessive stress, water hammer, or aging.Unit 1 Forced Outage for BOP ESFAS Train A Sequencer FailureThe inspectors reviewed the following risk significant refueling items or outage activitiesto verify defense in depth commensurate with the outage risk control plan, compliance with the TSs, and adherence to commitments in response to Generic Letter 88-17, "Loss of Decay Heat Removal": (1) the risk control plan, (2) decay heat removal, (3) reactivity control, (4) containment closure, (5) heatup and coldown activities, (6) restart activities,

-28-and (7) licensee identification and implementation of appropriate corrective actionsassociated with outage activities. The inspectors' containment inspections included observations of the containment sump for damage and debris; and supports, braces, and snubbers for evidence of excessive stress, water hammer, or aging.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed three samples.

b. Findings

No findings of significance were identified.

1R22 Surveillance Testing

(71111.22)

a. Inspection Scope

The inspectors reviewed the UFSAR, procedure requirements, and TSs to ensure thatthe two below listed surveillance activities demonstrated that the SSCs tested were capable of performing their intended safety functions. The inspectors either witnessed or reviewed test data to verify that the following significant surveillance test attributes were adequate: (1) preconditioning; (2) evaluation of testing impact on the plant; (3) acceptance criteria; (4) test equipment; (5) procedures; (6) jumper/lifted lead controls; (7) test data; (8) testing frequency and method to demonstrate TS operability; (9) test equipment removal; (10) restoration of plant systems; (11) fulfillment of ASME Code requirements; (12) updating of performance indicator (PI) data; (13) engineering evaluations, root causes, and bases for returning tested SSCs not meeting the test acceptance criteria were correct; (14) reference setting data; and (15) annunciators and alarms set points. The inspectors also verified that the licensee identified and implemented any needed corrective actions associated with the surveillance testing. *October 5, 2007, Unit 3, local leak rate testing of containment Penetration 42Bper Section 8.21 of Procedure 73ST-9CL01, "Containment Leakage Type 'B' and

'C' Testing," Revision 30*October 29, 2007, Unit 1, inservice test of turbine driven AFW pump perProcedure 73ST-9AF02, "AFA-P01 Inservice Test," Revision 39Documents reviewed by the inspectors are listed in the attachment.The inspectors completed two samples.

b. Findings

No findings of significance were identified.

-29-1R23Temporary Plant Modifications (71111.23)

a. Inspection Scope

The inspectors reviewed the UFSAR, plant drawings, procedure requirements, and TSsto ensure that the two below listed temporary modifications were properly implemented.

The inspectors: (1) verified that the modifications did not have an effect on system operability/availability, (2) verified that the installation was consistent with modification documents, (3) ensured that the postinstallation test results were satisfactory and that the impact of the temporary modifications on permanently installed SSCs were supported by the test, (4) verified that the modifications were identified on control room drawings and that appropriate identification tags were placed on the affected drawings, and (5) verified that appropriate safety evaluations were completed. The inspectors verified that the licensee identified and implemented any needed corrective actions associated with temporary modifications. *October 12 - 18, 2007, Unit 3, temporary alternate cooling to nuclear coolingwater Train B via Procedures 31MT-9WP02, "Installation and Removal of Temporary Cooling Towers to NC Heat Exchanger for PW System Outage,"

Revision 7, and 40OP-9PW01, "Plant Cooling Water," Revision 29*October 15, 2007, Unit 3, temporary power installation for support of Class 1EBus E-PBA-SO3Documents reviewed by the inspectors are listed in the attachment.The inspectors completed two samples.

b. Findings

No findings of significance were identified.2.RADIATION SAFETYCornerstone: Occupational Radiation Safety2OS1Access Control to Radiologically Significant Areas (71121.01)

a. Inspection Scope

This area was inspected to assess the licensee's performance in implementing physicaland administrative controls for airborne radioactivity areas, radiation areas, high radiation areas, and worker adherence to these controls. The inspector used the requirements in 10 CFR Part 20, the TSs, and the licensee's procedures required by TSs as criteria for determining compliance. During the inspection, the inspector interviewed the radiation

-30-protection manager, radiation protection supervisors, and radiation workers. Theinspector performed independent radiation dose rate measurements and reviewed the following items:*PI events and associated documentation packages reported by the licensee in theOccupational Radiation Safety Cornerstone*Controls (surveys, posting, and barricades) of radiation, high radiation, or airborneradioactivity areas*Conformity of electronic personal dosimeter alarm set points with surveyindications and plant policy; workers' knowledge of required actions when their electronic personal dosimeter noticeably malfunctions or alarms*Barrier integrity and performance of engineering controls in airborne radioactivityareas*Radiation Exposure Permits, procedures, engineering controls, and air samplerlocations*Physical and programmatic controls for highly activated or contaminated materials(nonfuel) stored within spent fuel and other storage pools. *Self-assessments, audits, licensee event reports (LERs), and special reportsrelated to the access control program since the last inspection (Sample #8)*Corrective action documents related to access controls

• Radiation Exposure Permit briefings and worker instructions

• Adequacy of radiological controls, such as required surveys, radiation protectionjob coverage, and contamination control during job performance *Dosimetry placement in high radiation work areas with significant dose rategradients*Controls for special areas that have the potential to become very high radiationareas during certain plant operations *Posting and locking of entrances to all accessible high dose rate - high radiationareas and very high radiation areas*Radiation worker and radiation protection technician performance with respect toradiation protection work requirements *Adequacy of the licensee's internal dose assessment for any actual internalexposure greater than 50 millirem committed effective dose equivalent

-31-*Licensee actions in cases of repetitive deficiencies or significant individualdeficiencies The inspectors completed 20 of the required 21 samples.

b. Findings

.1Failure to Post and Control High Radiation AreasIntroduction: The inspectors identified two examples of a Green self-revealing NCV ofTS 5.7.1 resulting from radiation protection personnel failures to control high radiation areas.Description: The first example occurred on February 14, 2007. While preparing toperform a remote inspection and boric acid wash down of Unit 2 Letdown Ion Exchange Vessel CHN-D01A, a worker received a dose rate alarm on his electronic dosimeter when he removed the shielded plug from the survey/inspection port. The radiation protection technician covering the job had handed the worker the tool to remove the plug from a survey port and turned his attention to preparing for an air sample. The worker used the tool and removed the plug without the radiation protection technician's knowledge and received a dose rate alarm of 141 mr/hr. The individuals were working on a radiation exposure permit which did not allow access to a high radiation area and the dose rate alarm setpoint was 75 mr/hr. All work was stopped and the plug reinstalled. Prior to the start of the job, the radiation protection section leader conducting the job briefwas unaware of the current ion exchanger status (i.e., recent usage and dose rates) and minimal discussion on risk insights and contingency plans was held. Also, the removal tool for the survey port was approximately 6 inches in length placing the worker in close proximity to streaming radiation. For corrective actions, the individuals involved were coached about proper planning, controls, and communications during work activities.

Also, the licensee initiated a corrective action to evaluate producing a longer tool handle to move personnel further away from the plane of the survey port.The second example occurred on October 24, 2007. While decontaminating SI Tank 2Aoutlet valve to Loop 2A Valve SIB-UV-614 using a vacuum, two workers received electronic dosimeter alarms. The first worker received a dose rate alarm of 81 mr/hr, but did not hear it due to noise from the vacuum, and did not take the required actions upon receiving an alarm. Work continued for approximately 20 minutes and a second worker received a dose rate alarm of 123 mr/hr. The second alarm was heard and work was stopped and put into a safe condition. The radiation protection technician covering the job performed a survey and found that the vacuum hose had a dose rate reading of 150 mr/hr at 30 centimeters, constituting a high radiation area. All the individuals were working on a radiation exposure permit which did not allow access to a high radiation area and the dose rate alarm setpoint was 75 mr/hr.

-32-Analysis: The failure to post and control high radiation areas was a performancedeficiency. This finding is greater than minor because it is associated with the occupational radiation safety program and process attribute and affected the cornerstone objective, in that the failure to post and control a high radiation area had the potential to increase personnel dose. This occurrence involved individual workers' unplanned, unintended dose that resulted from actions or conditions contrary to licensee procedures, radiation work permit, and TSs; therefore, this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspectors determined that this finding was of very low safety significance because it did not involve:

(1) an as low as is reasonably achievable (ALARA) planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. Both examples have crosscutting aspects in the area of humanperformance associated with work control component because the work planning did not appropriately plan work activities by incorporating risk insights and job site conditions

H.3(a).The finding was self-revealing because the licensee was made aware of both highradiation area conditions following an individuals' electronic dosimeter alarm.

Enforcement:

TS 5.7.1 requires, in part, that the licensee barricade and conspicuouslypost high radiation areas in lieu of the requirement of 10 CFR 20.1601(a). Pursuant to 10 CFR 20.1003, "high radiation area" means an area, accessible to individuals, in which radiation levels from radiation sources external to the body could result in an individualreceiving a dose equivalent in excess of 0.1 rem in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> at 30 centimeters from the radiation source or 30 centimeters from any surface that the radiation penetrates.

Contrary to the above, on February 14, 2007, and on October 24, 2007, the licensee failed to adequately post and control access to high radiation areas resulting in three workers receiving electronic dosimeter high dose rate alarms. Because this violation was of very low safety significance and has been entered into the licensee's CAP as CRDRs 2970612 and 3081978, it is being treated as an NCV, consistent with Section VI.A of the NRC Enforcement Policy: NCV 05000529/2007005-03, "Two Examples of a Failure to Post and Control High Radiation Areas.".2Failure to Evaluate the Radiological Hazard Caused From DecontaminationIntroduction: The inspectors identified a self-revealing Green NCV of 10 CFR 20.1501(a)because radiation protection personnel failed to completely evaluate the radiological hazard of decontaminating the temporary reactor head, leading to internal exposure of two workers and personnel contamination of two other nearby individuals.Description: During Refueling Outage 1R13, the temporary reactor head was to bemoved to the top of the pressurizer cubicle for decontamination. The prejob brief included instructions that the temporary reactor head should be completely rinsed including the underside. The temporary reactor head was lifted from the refuel pool and the top rinsed. The temporary reactor head was moved to the north side of the cavity where maintenance personnel removed services and rigging, and the radiation protection technician performed surveys which included one smear of the underside of the

-33-temporary reactor head indicating 1,000,000 dpm/100cm

2. The radiation protectiontechnician decided the underside did not need to be rinsed even though the prejob brief

included rinsing the underneath of the temporary reactor head. The temporary reactor head was moved to the pressurizer cubicle where it sat and dried longer than normal prior to decontamination. Subsequently, two workers received an internal exposure of 9 mrem and 5 mrem, and two other workers were contaminated.The draft apparent cause evaluation determined that the radiation protection technicians'decision not to rinse the underside of the temporary reactor head was the apparent cause with contributing factors such as using somewhat volatile chemicals during decontamination, containment ventilation being secured, and the temporary reactor head being allowed to dry longer than normal. Based on further NRC documentation review and interviews with staff, the licensee subsequently determined that their total effective dose equivalent ALARA evaluation of the radiological conditions and the use ofappropriate protective equipment did not fully consider the job site conditions or process of decontaminating the temporary reactor head. The licensee reopened the corrective action document and was re-evaluating the apparent cause and corrective action for this occurrence.

Analysis:

This finding is greater than minor because it is associated with theoccupational radiation safety program and process attribute and affected the cornerstone objective, in that not completely evaluating the radiological conditions had the potential to increase personnel dose. This occurrence involved individual worker unplanned, unintended dose that resulted from actions or conditions contrary to licensee procedures, radiation work permit, and TSs; therefore, this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspector determined that this finding was of very low safety significance because it did not involve:

(1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. This finding has a crosscutting aspect in the area of human performance associated with work controlbecause the work planning did not consider possible risk insights and job sight conditions H.3(a).The finding is self-revealing because the licensee became aware of the condition whenworkers personnel contamination monitors alarmed.

Enforcement:

10 CFR 20.1501(a), requires that each licensee make or cause to bemade surveys that may be necessary for the licensee to comply with the regulations in 10 CFR Part 20 and that are reasonable under the circumstances to evaluate the extent of radiation levels, concentrations or quantities of radioactive materials, and the potential radiological hazards that could be present. Pursuant to 10 CFR 20.1003, a "survey" means an evaluation of the radiological conditions and potential hazards incident to the production, use, transfer, release, disposal, or presence of radioactive material or other sources of radiation. 10 CFR 20.1201(a), states, in part, that the licensee shall control the occupational dose to individual adults to specified limits. Contrary to the above, on June 14, 2007, radiation protection personnel failed to completely evaluate the radiological hazard of decontamination of the temporary reactor head. Consequently,

-34-two workers were internally exposed and two additional workers were contaminated. Because the violation is of very low safety significance and has been entered into the licensee's CAP as CRDR 3046953, this violation is being treated as an NCV, consistentwith Section VI.A of the NRC Enforcement Policy: NCV 05000528/2007005-04, "Failure to Evaluate the Radiological Hazard Caused from Decontamination.".3Failure to Follow Procedural Guidance and Radiation Work InstructionsIntroduction: The inspectors identified a Green NCV of TS 5.4.1.a for the failure to followprocedural guidance and radiation exposure permit instructions.Description: While touring the Unit 3 containment on October 23, 2007, the inspectorsquestioned six individuals at the pressurizer cubicle on the 120' level. The individualsstated they entered to perform a job on the 90' level but were redirected by their supervisor to a job at the pressurizer cubicle. The individuals stated they left their job site and proceeded to the new job site without informing radiation protection and receiving a radiological brief or reviewing current survey data of the conditions at the new job site. The lead worker knew the general area radiation levels and stated that he knew the radiological conditions of the area because he installed scaffolding in the area the previous week. The workers were coached by the licensee. Based on questioning of other individuals by the inspectors and the licensee, it was determined that this was an isolated event.Analysis: The failure to follow procedural guidance and radiation exposure permitinstructions is a performance deficiency. This finding is greater than minor because it is associated with the occupational radiation safety program and process attribute and affected the cornerstone objective, in that the noncompliance to a procedure had the potential to increase personnel dose. This occurrence involved individual worker unplanned, unintended dose that resulted from actions or conditions contrary to licensee procedures, radiation work permit, and TSs; therefore, this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspector determined that this finding was of very low safety significance because it did not involve:

(1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. This finding has a crosscutting aspect in the area of human performance associated with work practicesbecause the six individuals did not perform adequate self and peer checking to appropriately evaluate work conditions (H.4(a)).The finding was NRC identified because the licensee was made aware of the situationthrough questioning of workers by the NRC inspector.Enforcement: TS 5.4.1 requires procedures be established, implemented, andmaintained covering the applicable procedures recommended in Regulatory Guide 1.33, Revision 2, Appendix A, February 1978. Appendix A recommends, in Section 7, procedures for access control to radiation areas including a radiation work permit system.

Implementing Procedure 75DP-9RP01, "Radiation Exposure and Access Control,"

Revision 10, Section 3.6.2.1, states, in part, that by signing a radiation exposure permit,

-35-individuals have indicated they read and understood the radiation exposure permitrequirements and will comply with them. Radiation Exposure Permit 3-3508J, "In Service Inspections and Associated Work," Task 2, stated, in part, for the individuals to review current radiological survey data for the work area prior to entry. Contrary to the above, on October 23, 2007, six individuals did not review current radiological survey data forthe work area prior to entry to their job site. Because this violation was of very low safety significance and has been entered into the licensee's CAP as PVAR 3081935, it is being treated as a NCV, consistent with Section VI.A of the NRC Enforcement Policy:

NCV 05000530/2007005-05, "Failure to Follow Procedural Guidance and Radiation Work

Instructions."2OS2ALARA Planning and Controls (71121.02)

a. Inspection Scope

The inspectors assessed licensee performance with respect to maintaining individual andcollective radiation exposures ALARA. The inspector used the requirements in 10 CFR Part 20 and the licensee's procedures required by TS as criteria for determining compliance. The inspectors interviewed licensee personnel and reviewed:*Integration of ALARA requirements into work procedure and radiation work permit(or radiation exposure permit) documents*Use of engineering controls to achieve dose reductions and dose reductionbenefits afforded by shielding*Workers' use of the low dose waiting areas

• Radiation worker and radiation protection technician performance during workactivities in radiation areas, airborne radioactivity areas, or high radiation areas *Corrective action documents related to the ALARA program and follow-upactivities, such as initial problem identification, characterization, and tracking*ALARA work activity evaluations, exposure estimates, and exposure mitigationrequirements*Intended verses actual work activity doses and the reasons for anyinconsistencies*Person - hour estimates provided by maintenance planning and other groups tothe radiation protection group with the actual work activity time requirements*Method for adjusting exposure estimates, or re-planning work, when unexpectedchanges in scope or emergent work were encountered

-36-*Exposure tracking system*Exposures of individuals from selected work groups

• Records detailing the historical trends and current status of tracked plant sourceterms and contingency plans for expected changes in the source term due to changes in plant fuel performance issues or changes in plant primary chemistry*Source - term control strategy or justification for not pursuing such exposurereduction initiatives*Specific sources identified by the licensee for exposure reduction actions andpriorities established for these actions, and results achieved against since the last refueling cycle*Declared pregnant workers during the current assessment period, monitoringcontrols, and the exposure resultsThe inspector completed 7 of the required 15 samples and 8 of the optional samples.

b. Findings

No findings of significance were identified.4.OTHER ACTIVITIES

4OA1 Performance Indicator Verification

a. Inspection Scope

Cornerstone: Mitigating Systems The inspectors sampled licensee data for the Mitigating System(s) PerformanceIndex (MSPIs) listed below for the period from April 1, 2006, through September 30, 2007, for Units 1, 2, and 3. The definitions and guidance of Nuclear Energy Institute (NEI) 99-02, "Regulatory Assessment Performance Indicator Guideline," Revision 5, were used to verify the licensee's basis for reporting unavailability and unreliability in order to verify the accuracy of PI data. The inspectors reviewed operating logs, Limiting Condition for Operation logs, CRDRs, and the maintenance rule database to verify that the licensee properly accounted for planned and unplanned unavailability as part of the assessment. The inspectors sampled data to verify that the licensee: (1) accurately documented the actual unavailability hours for the MSPI systems, and (2) accurately

-37-documented the actual unreliability information for each MSPI monitored component. Inaddition, the inspectors interviewed licensee personnel associated with PI data collection and evaluation.*MSPI - Residual Heat Removal System*MSPI - Heat Removal System

• MSPI - Cooling Water SystemsDocuments reviewed by the inspectors are listed in the attachment.

The inspectors completed nine samples.

Cornerstone:

Occupational Radiation Safety Occupational Exposure Control EffectivenessThe inspector reviewed licensee documents from January 1 through November 30, 2007.The review included corrective action documentation that identified occurrences in locked high radiation areas (as defined in the licensee's TSs), very high radiation areas (asdefined in 10 CFR 20.1003), and unplanned personnel exposures (as defined in NEI 99-02, "Regulatory Assessment Indicator Guideline," Revision 5). Additional recordsreviewed included ALARA records and whole body counts of selected individual exposures. The inspector interviewed licensee personnel that were accountable for collecting and evaluating the PI data. In addition, the inspector toured plant areas to verify that high radiation, locked high radiation, and very high radiation areas wereproperly controlled.

PI definitions and guidance contained in NEI 99-02, Revision 5, wereused to verify the basis in reporting for each data element.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed one sample.Cornerstone: Public Radiation SafetyRadiological Effluent Technical Specification/Offsite Dose Calculation Manual Radiological Effluent Occurrences The inspector reviewed licensee documents from January 1 through November 30, 2007.Licensee records reviewed included corrective action documentation that identified occurrences for liquid or gaseous effluent releases that exceeded PI thresholds and those reported to the NRC. The inspector interviewed licensee personnel that were accountable for collecting and evaluating the PI data. PI definitions and guidance contained in NEI 99-02, Revision 5, were used to verify the basis in reporting for each data element.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed one sample.

-38-

b. Findings

No findings of significance were identified.4OA2Identification and Resolution of Problems (71152).1Routine Review of Identification and Resolution of ProblemsThe inspectors performed a daily screening of items entered into the licensee's CAP. This assessment was accomplished by reviewing daily summary reports for PVARs, and attending corrective action review and work control meetings. The inspectors: (1)verified that equipment, human performance, and program issues were being identified by the licensee at an appropriate threshold and that the issues were entered into the CAP; (2) verified that corrective actions were commensurate with the significance of the issue; and (3) identified conditions that might warrant additional follow-up through other baseline inspection procedures.

.2 Selected Issue Follow-up Inspection

a. Inspection Scope

In addition to the routine review, the inspectors selected the four below listed issues for a more in-depth review. The inspectors considered the following during the review of the licensee's actions: (1) complete and accurate identification of the problem in a timely manner; (2) evaluation and disposition of operability/reportability issues; (3) consideration of extent of condition, generic implications, common cause, and previous occurrences; (4) classification and prioritization of the resolution of the problem; (5) identification of root and contributing causes of the problem; (6) identification of corrective actions; and (7) completion of corrective actions in a timely manner. *September 24 - December 7, 2007 Units 1, 2, and 3, design issues with refuelingmachine as noted in PVAR 3048775*October 15 - December 13, 2007, Units 1, 2, and 3, design adequacy of masonrywall in control room as noted in PVAR 3102815*October 26, 2007, Unit 3, valve technicians opened the wrong unit circuitbreakers for HPSI motor-operated valves as described in CRDR 3087295*December 3, 2007, Unit 1, engineered safety feature pump room exhaust aircleanup system (PREACS) declared inoperable due to propping Door Y-1-06open when routing a hose through the door for maintenance as noted in

PVAR 3103619Documents reviewed by the inspectors are listed in the attachment.

-39-The inspectors completed four samples.

b. Findings

Introduction:

The inspectors identified two examples of a Green NCV of 10 CFR Part 50,Criterion III, "Design Control," for the failure of engineering personnel to ensure that thedesign bases of the refueling machine were adequately translated into specifications, drawings, procedures, or instructions.Description: The first example occurred on October 27, 2006, for Unit 2, and onJune 17, 2007, for Unit 1, when the licensee upgraded the respective refueling machines.

The upgrade included a new programmable logic controller (PLC) that provided protection during fuel movements. These protection features included, in part, independent underload and overload functions.The basis for the overload and underload hoist limits described in CombustionEngineering Specification SYS80-486-0880, "General Engineering Specification for Reactor Servicing Equipment," Revision 5, designates a band of +/-180 pounds from the nominal fuel weight. Exceeding the +/-180-pound limit could cause grid strap damage and potential damage to the fuel due to fretting wear on the fuel cladding. The overload and underload limits are set to a band of +/-150 pounds from the nominal fuel weight to ensure that the +/-180 pound limits noted in Specification SYS80-486-0880 are not exceeded.Section 9.1.4 of the UFSAR describes the fuel handling system, including the refuelingmachine. Section 9.1.4.1.2 states that, "No single interlock failure will result in damaging or dropping of the fuel. Where results are considered possible, redundant switches, mechanical restraints, and physical barriers are employed as well as limiting the hoist stall torque and loading capability to values below those which would result in damage to the fuel."On June 19, 2007, the licensee initiated CRDR 3030759 to document a failure of thehoist latch pivot block that occurred during the Unit 1 core reload. The latch limit switch remained actuated which caused the input to the PLC to block the 150-pound underload and overload protection features function. The inspectors noted that a single failure of the hoist latch pivot block ultimately disabled both interlocks. The licensee did not recognize the single failure design requirement concern during the development and installation of the new refueling machines for Units 1 and 2, or during the troubleshooting and repair efforts for the Unit 1 pivot block failure until identified by the inspectors after the Unit 1 core reload was completed.Following the inspectors' review, the licensee completed an additional assessment anddetermined no other single failure vulnerabilities existed. Condition Report Action Item (CRAI) 3083132 was initiated on October 25, 2007, to ensure that the PLC logic for the Units 1 and 2 refueling machines was modified to preclude the failure of the 150-pound underload and overload protection features. This action item is scheduled to be completed prior to the next fuel handling activities in Units 1 and 2. The design upgrade for the Unit 3 refueling machine was completed on December 7, 2007, which

-40-incorporated the correct design associated with the PLC logic.The second example occurred during review of the modifications and upgrades to therefueling machine, the inspectors noted that the stall torque of the refueling bridge hoist motor was referenced in Section 9.1 of the UFSAR, Combustion Engineering Specification SYS80-486-0880, "General Engineering Specification for Reactor Servicing Equipment," Revision 5, and the Fuel Handling Design Basis Manual. The documents stated that the stall torque of the motor was limited to ensure that the fuel assembly tensile loads were not exceeded. This feature was in addition to the underload and overload protection features provided by the refueling machine hoist weight system.

UFSAR, Section 9.1.4.1.2, specified that, for the refueling machine hoist overload interlock, no single failure will result in damaging or dropping fuel. Additionally, the hoist stall torque is limited to values below which would result in damage to fuel. Table 9.1-4 of the UFSAR discusses the failure mode analysis of fuel handling equipment, and notes that for a failure of the hoist indicating system, the maximum stall torque of the hoist motors will not damage a fuel bundle.The inspectors determined that the licensee did not have a record, procedure, orspecification that limited the tensile force generated by the hoist motor at stall torque conditions. Because the power supply to the hoist motor is common to the entire refueling bridge, the current drawn by the hoist motor at stall torque conditions was less than the refueling machine supply breaker trip setpoint. Therefore, the tensile force generated by the hoist motor could reach, or exceed, the maximum stall force. This condition was corrected when the licensee installed new refueling bridge controls and hoist motors on all three units.

Analysis:

The performance deficiency associated with this finding involved the failure ofengineering personnel to translate design requirements into specifications, drawings, procedures, or instructions for the refueling machine interlocks and refueling bridge hoist motor. The finding is greater than minor because it would become a more significant safety concern if left uncorrected in that refueling equipment malfunctions could result in damaged fuel. Manual Chapter 0609, Appendix M, "Significance Determination Process Using Qualitative Criteria," was used since the Significance Determination Processmethods and tools were not adequate to determine the significance of the finding. This finding affects the barrier integrity cornerstone and is determined to have very low safety significance by NRC management review because it was a deficiency that did not result in the actual degradation of fuel.Enforcement: 10 CFR Part 50, Criterion III, "Design Control," states, in part, thatmeasures shall be established to assure that applicable regulatory requirements and the design basis be translated into specifications, drawings, procedures, and instructions. Contrary to this, between October 27, 2006, and October 25, 2007 (first example), and prior to December 5, 2007 (second example), the licensee did not ensure the design basis was translated into specifications, drawings, procedures, or instructions.

Specifically, the new refueling machines for Units 1 and 2 were modified such that a single interlock failure could result in a failure of both the underload and overload protection features. Additionally, procedures and instructions did not limit the stall torque

-41-of the hoist motor for the refueling machine. Because this issue is of low safetysignificance and has been entered into the licensee's CAP as CRDRs 3030759 and 3068656, this violation is being treated as an NCV, consistent with Section VI.A of the Enforcement Policy: NCV 05000528; 05000529;05000530/2007005-06, "Two Examples of Inadequate Design Controls for Refueling Machine.".3Semiannual Trend Review

a. Inspection Scope

The inspectors completed a semi-annual trend review of repetitive or closely relatedissues that were documented in corrective action documents to identify trends that might indicate the existence of more safety significant issues. The inspectors reviewed corrective action documents for Refueling Outage 3R13 and the Unit 1 SG replacement outage.*A review of an adverse trend associated with fires during replacement SGRefueling Outage 3R13, as noted in CRDRs 3078329, 3082305, 3083184, 3086462, and 3102290 Documents reviewed by the inspectors are listed in the attachment.

Inspectors completed one sample.

b. Findings

No findings of significance were identified..4Multiple/Repetitive Degraded Cornerstone Column and Crosscutting Issues FollowupActivitiesThe NRC performed the Inspection Procedure 95003 supplemental inspection and heldthe final exit meeting on December 19, 2007. Results of the inspection will be documented in NRC Inspection Report 05000528; 05000529; and 05000530/2007012.

The licensee submitted their performance improvement plan to the NRC on December 31, 2007..5Cross-References to Problem Identification and Resolution Observations and FindingsDocumented ElsewhereSection 1R15.1 describes a finding where operations personnel had an inappropriatelyhigh threshold for identifying material conditions as a degraded condition.The inspector evaluated the effectiveness of the licensee's problem identification andresolution process with respect to the following inspection areas:*Access Control to Radiologically Significant Areas (Section 2OS1)

-42-*ALARA Planning and Controls (Section 2OS2)4OA3Follow-up of Events and Notices of Enforcement Discretion (71153)Event Follow Up

a. Inspection Scope

The inspectors reviewed the five below listed events and degraded conditions for plantstatus and mitigating actions to: (1) provide input in determining the appropriate agency response in accordance with Management Directive 8.3, "NRC Incident Investigation Program"; (2) evaluate performance of mitigating systems and licensee actions; and (3) confirm that the licensee properly classified the event in accordance with emergency action level procedures and made timely notifications to NRC and state/governments, as required.*October 16 - 19, 2007, Unit 1, SG 2 steam supply to Valve AFA-P01 bypassValve SGA-UV-138A failure to open during surveillance testing*On October 16, 2007, the Unit 3 refueling canal level was noted to slowlyincrease about 1 inch while spent fuel pool (SFP) level slowly decreased about 3 inches. The levels equalized between the SFP and RCS. The licensee determined that the SFP gate to the transfer canal was leaking slightly. The licensee inspected and reset the SFP gate and did not identify any degradation.

No further water transfer events occurred following placement of the SFP gate.*November 2, 2007, Units 1, 2, and 3 notice of unusual event declaration fordetection of a credible threat when an explosive device was detected during a vehicle search at the site access check point as described in Event Notification 43764. This event was retracted based upon investigations performed by law enforcement personnel and Palo Verde Security Department, which determined that there was no explicit nor credible threatened action as described in 10 CFR 73.71, Appendix G, Paragraph I.*November 22-25, 2007, Unit 1, failure of BOP ESFAS load sequencer Train A,that led to a unit shutdown as described in PVARs 3099500 and 3099679*On October 6, 2007, Unit 2 manual trip from 100 percent power due to high SGsodium concentrations. The control room supervisor diagnosed an uncomplicated reactor trip. The SM and shift technical advisor reviewed Procedure EPIP-99 and determined no event classification was required. The sodium ingress was due to a leak in the condenser air removal Pump D seal water cooler.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed five samples.

-43-

b. Findings

No findings of significance were identified.LER Report Reviews

a. Inspection Scope

The inspectors reviewed the below listed LER and related documents to assess: (1) theaccuracy of the LER, (2) the appropriateness of corrective actions, (3) violations of requirements, and (4) generic issues.(Closed) LER 05000528/2006004-00, "Technical Specification Required Shutdown onFailure of Class Pressurizer Heaters to be Able to Meet Their Mission Time"Following the twelfth Unit 1 refueling outage, in which the pressurizer heaters werereplaced, the licensee observed several failures of individual heaters due to electrical shorts or degradations in electrical insulation resistance and began an enhanced monitoring program for these heaters. On September 18, 2006, during the increased monitoring of the Unit 1 pressurizer heaters, the megger results were low on the Class 1E pressurizer heaters. The licensee determined that the Class 1E pressurizer heaters may not meet their mission time, declared both banks of pressurizer heaters inoperable, and shutdown the reactor to replace the heater elements. The vendor evaluation concluded that the heaters failed from stress corrosion cracking due to a manufacturing defect. An additional concern involved some heaters operating at a voltage higher than originally specified and that this may have caused the heater sheath to exceed its design temperature limit of 800°F. The vendor issued Nuclear Services Advisory Letter 07-8 on exceeding the design temperature limit. The inspectors reviewed this LER and no findings of significance were identified and no violation of NRC requirements occurred. The licensee documented the failed pressurizer heaters in CRDR 2914478. This LER is closed.

b. Findings

No findings of significance were identified.Personnel Performance

a. Inspection Scope

The inspectors: (1) reviewed operator logs, plant computer data, and/or strip charts forthe below listed evolutions to evaluate operator performance in coping with nonroutineevents and transients, (2) verified that operator actions were in accordance with theresponse required by plant procedures and training, and (3) verified that the licensee hasidentified and implemented appropriate corrective actions associated with personnelperformance problems that occurred during the nonroutine evolutions sampled.

-44-*On October 30, 2007, Unit 2, a loss of letdown occurred due to a high letdownheat exchanger outlet temperature. This high temperature resulted in the closure of containment letdown isolation Valve CHB-UV-0523. Operations personnel appropriately implemented abnormal operating Procedure 40AO-9ZZ05, "Loss of Letdown," Revision 18, to restore pressurizer level to the required band and recover the letdown system. The chemical volume and control system operated within design specifications following restoration of the letdown subsystem.

Troubleshooting efforts were unable to determine the cause of the high letdown heat exchanger outlet temperature and subsequent loss of letdown event. This event was documented in CRDR 3086159.*On December 3, 2007, the Unit 3 RCS level increased due to an unintentionaltransfer of 8000 gallons from the refueling water tank while restoring containment spray Train B. Control room personnel were also performing a shutdown cooling system vortex test on low pressure SI Train A. Operations personnel ensured that the suction paths were closed on containment spray Train B, but did not recognize that a gravity flowpath existed from the refueling water tank into the RCS. Investigation of ongoing evolutions by control room personnel identified the gravity flowpath and closed refueling water tank to Train B SI pumps suction Valve 3-CHB-530 to stop the water transfer and stabilize RCS level. There was no fuel in the reactor at the time of the event. This event was documented in

CRDR 3105078.*On November 22, 2007, Unit 1 experienced a loss of the BOP ESFAS loadsequencer Train A. Erroneous indications at the BOP ESFAS cabinet included the EDG Train A running with the output breaker closed and the exhaust fan running. Operations personnel verified indications at the control panel, and locally, to determine that EDG Train A was not running and that the output breaker was open. The EDG Train A room exhaust fan was not running, but should have been for the observed sequencer status. The exhaust fan was subsequently determined to have tripped due to an invalid load shed signal from the malfunctioning sequencer. The malfunctioning load sequencer also caused the essential spray pond Pump A to start. Operations personnel appropriately identified affected equipment, diagnosed the event, and entered the applicable TS. Troubleshooting efforts determined the cause of the failure to be a failed relay and suppression diode in the circuitry. This event was documented in

PVAR 3099500.Documents reviewed by the inspectors are listed in the attachment.

The inspectors completed three samples.

b. Findings

No findings of significance were identified.

-45-4OA5Other Activities Temporary Instruction 2515/166, "Pressurized Water Reactor Containment SumpBlockage," Palo Verde Units 1 and 3 (Closed)Temporary Instruction 2515/166 was performed at Palo Verde Nuclear GeneratingStation, Unit 1, during May 2007, and documented in NRC Inspection Report 05000528; 05000529; and 05000530/2007003. Subsequent inspection of Unit 1, along with Unit 3, is documented in this report. The inspection phase of Temporary Instruction 2515/166 for Units 1 and 3 are complete. Temporary Instruction 2515/166 will be performed on Palo Verde Unit 2 during the Spring 2008 refueling outage.The inspectors observed the physical installation of the sump strainers as committed toin the licensee's response to Generic Letter 2004-02, "Potential Impact of Debris Blockage on Emergency Recirculation during Design Basis Accidents at Pressurized-Water Reactors." No concerns with the physical modifications were identified. In addition, the inspectors completed a walkdown of the containment area tags, labels, and coatings. The inspectors also reviewed the licensee's procedures and programs for accounting for and controlling equipment tags, latent debris, unqualified coatings, and chemicals inside containment. Programs to identify the scope of equipment tags, coatings, debris, and chemicals that have the potential to cause screen blockage were adequate, and the licensee has made needed changes to relevant procedures to control introduction of these items in the future.At the time of the inspection, head loss and downstream effects testing were complete;however, the final evaluation reports for head loss and downstream effects were not available to the inspectors. The evaluation reports were not available because of a number of issues with vendor resources and revisions of the methodologies for performing the tests. Because of the delays, Palo Verde was granted an extended expiration date for the final response on December 27, 2007. The final response to Generic Letter 2004-002 is due June 30, 2008. Listed below are the commitments and actions taken by Palo Verde Units 1 and 3..1Evaluate the recommendations contained in the Westinghouse downstream effectsevaluation for Palo Verde and establish an implementation schedule for appropriate recommendations.Actions TakenThis commitment was completed on December 31, 2005. The licensee reviewed

-46-Westinghouse WCAP-16406-P, June 2005, "Evaluation of Downstream Sump DebrisEffects in Support of GSI-191." Any deviations from this evaluation were documented in 1 of the licensee's September 1, 2005, response to Generic Letter 2004-02.*Perform confirmatory head loss testing of new strainer with plant specific debris toensure an adequate design.Actions TakenHead loss testing, performed by Control Components, Inc. and Sargent and Lundy, werecompleted in March 2007. Currently, the test reports are in review. The testing found that head loss of the strainer is greater than previously evaluated. Although head loss is greater, the preliminary results and further calculations indicate there is a net positive suction head margin of approximately 4 feet at elevated loss of coolant accident temperatures. Final resolution of the increased head loss is expected to be completed before June 30, 2008.*Verify that a capture ratio of 97 percent or higher can be achieved in the finaldesign of the new sump screen to ensure that the fuel evaluation contained in the Westinghouse downstream effects evaluation is bounding.Actions TakenIn the licensee's GL 2004-02 response, it states that a capture ratio of 97 percent mustbe achieved in order to prevent the creation of a thin bed on the underside of the fuel bottom nozzle following a hot leg break loss of coolant accident. A 97 percent capture ratio would ensure that the fuel evaluation in the Westinghouse downstream effects evaluation is bounding. During the March 2007 chemical and downstream effects testing, results of the tests indicate the strainers would achieve a capture ratio of 90 to 95 percent, which is not bounded by the Westinghouse evaluation. The licensee stated that the capture ratio for the sump strainer is lower than expected because there is a low amount of fiber in containment. In addition, testing has confirmed the capture ratio of the strainers will gradually increase when captured debris performs the "capturing" role through the accident duration. The licensee has contracted with Westinghouse for final resolution of the capture ratio issue of the sump strainers. This evaluation is expected to be complete before June 30, 2008.*Perform sump strainer structural evaluation to ensure seismic and operationalintegrity.Actions TakenThe structural evaluation for the new sump strainers was completed on October 31,2006. This evaluation is applicable to Units 1, 2, and 3.*Validate allocated margins for chemical effects in strainer head loss to ensure anadequate design.

-47-Actions TakenValidation of the allocated margin for chemical effects was tested in March 2007. Currently, the results of the test are being reviewed for validity. The review will be completed before June 30, 2008..2Perform a confirmatory containment latent debris walkdown of Units 1 and 3.Actions TakenLatent debris walkdowns for Units 1 and 3 were completed by the licensee on June 30,2006. A walkdown of Units 1 and 3 was completed by the inspectors in May 2007 and December 2007, respectively. The debris and head loss evaluations conservatively use 200 pounds per unit for transportable debris. A walkdown in Unit 2 identified 119 pounds of latent debris using NEI 04-07 sampling methods. Subsequent walkdowns were performed in Units 1 and 3 and identified that latent debris was within the bounds of the evaluations.On October 26, 2007, as part of WO 3034098, the licensee conducted a containmentwalkdown of Unit 1 to quantify and remove susceptible tape and flex conduit. From the walkdown, the licensee preliminarily estimated that 600-square feet of combined tape and conduit, or transient debris, had not been accounted for in the sump loading analysis. The licensee initiated PVAR 3083224 to evaluated the condition. Subsequent evaluation (OD 2508658) determined that the total transient debris was 298-square feet. During testing of the sump strainers, as documented in Control Components, Inc. TestReport title, Chemical Effect Head Loss Specification Palo Verde NPP, the sump strainerarea was reduced by 400-square feet to accommodate miscellaneous debris. Since the total transient debris was bounded by the reduced area during testing, the licensee determined the sump strainers were operable..3Perform a confirmatory containment unqualified coating walkdown of Units 1 and 3.Actions TakenThe containment coating walkdown was completed by the licensee before June 30, 2006. A walkdown of Units 1 and 3 was completed by the inspectors in May 2007 and December 2007, respectively.

All unqualified coatings are maintained in an "unqualified coatings log" per the licensee's procedure. The licensee's debris generation calculation assumes that all coatings in the zone-of-influence are transported to the sump as fine debris..4Review the existing programmatic controls for containment coatings identified in theresponse to GL98-04, "Potential for Degradation of the Emergency Core Cooling System

-48-and the Containment Spray System after a Loss-of-Coolant Accident Because ofConstruction and Protective Coating Deficiencies and Foreign Material in Containment,"

for their adequacy.Actions TakenThe licensee completed the review of programmatic controls for containment coatingsand enhanced the procedure before November 30, 2006. The coatings procedure is applicable to all three units. The inspectors reviewed the procedures. There were no issues identified.

.5 Review the existing programmatic and procedural controls in place to prevent potentiallytransportable debris in the containment building to ensure that the bounding assumptions

in the design of the new strainers will be maintained.Actions TakenThe licensee completed the review of programmatic controls for containment coatingsand enhanced the procedure before November 30, 2006. The coatings procedure is applicable to all three units. The inspectors reviewed the procedures. There were no issues identified.

.6 Implement in Unit 1 changes to programs and procedures to ensure and/or enhance thecontrol of transportable debris in containment.Actions TakenThe licensee has completed changes to programs and procedures to ensure andenhance the control of transportable debris in containment.

The inspectors reviewed the procedures. There were no issues identified. The licensee has added restrictions to their procedures for tags, insulation, and additional debris. If an item has been qualified for continuous use in containment, the licensee's procedure requires the item to be included in the debris loading evaluation. In addition, the description and location of potential debris will be posted outside of containment..7Implement in Unit 2 changes to programs and procedures to ensure and/or enhance thecontrol of transportable debris in containment.Actions TakenThe licensee has completed changes to programs and procedures to ensure andenhance the control of transportable debris in containment. The licensee has added restrictions to their procedures for tags, insulation, and additional debris. If an item has been qualified for continuous use in containment, the licensee's procedure requires the item to be included in the debris loading evaluation. In addition, the description and location of potential debris will be posted outside of containment.

-49-.8Implement in Unit 3 changes to programs and procedures to ensure and/or enhance thecontrol of transportable debris in containment. Actions TakenThe licensee has completed changes to programs and procedures to ensure andenhance the control of transportable debris in containment. The licensee has added restrictions to their procedures for tags, insulation, and additional debris. If an item has been qualified for continuous use in containment, the licensee's procedure requires the item to be included in the debris loading evaluation. In addition, the description and location of potential debris will be posted outside of containment..9Install larger sump strainers in Unit 1.Actions TakenLarger sump strainers were installed in Palo Verde Unit 1 during the May/June 2007refueling outage..10Install larger sump strainers in Unit 2.Actions TakenPalo Verde Unit 2 was granted an extension to implement the sump modifications afterthe December 31, 2007, due date. New sump strainers will be installed during the April/May 2008 refueling outage. Inspectors will complete Temporary Instruction 166 for Unit 2 at a later date.

.11 Install larger sump strainers in Unit 3.Actions TakenLarger sump strainers were installed in Palo Verde Unit 3 during the October/November2007 refueling outage..12Remove installed Fiberfrax insulation in Units 1, 2, and 3.Actions TakenAll Fiberfrax insulation in Palo Verde Units 1, 2, and 3 has been removed..13Remove installed Fiberfrax insulation in Unit 2.Actions TakenAll Fiberfrax insulation in Palo Verde Units 1, 2, and 3 has been removed.

-50-.14Remove installed Fiberfrax insulation in Unit 3.Actions TakenAll Fiberfrax insulation in Palo Verde Units 1, 2, and 3 has been removed..15After plant specific strainer testing has been completed and the Westinghousedownstream effects evaluation for Palo Verde has been evaluated, APS will submit an update to the NRC to report the validation of the allocated margins for chemical effects and identify any recommendations from the Westinghouse evaluation to be implemented.Actions TakenThis report will be submitted no later than June 30, 2008.

-51-4OA6Meetings, Including ExitOn October 26, 2007, the inspectors presented the occupational radiation safetyinspection results to Mr. M. Perito, Plant Manager, Nuclear Operations, and other members of the licensee's management staff who acknowledged the findings. On November 30, 2007, the inspectors presented additional occupational radiation safety inspection results to Mr. R. Bement, Vice President, Nuclear Operations, and other members of the licensee's management staff who acknowledged the findings.On November 29, 2007, the inspectors presented the inspection results of the licensedoperator annual requalification examination with Mr. W. Potter, Training Supervisor. A telephone exit meeting was held with Mr. W. Potter, on November 29, 2007. The licensee acknowledged the findings presented in both the briefing and the final exit meeting.On January 9, 2008, the inspectors presented the resident inspection results toMr. R. Edington, Executive Vice President, Nuclear, and other members of the licensee's management staff who acknowledged the findings presented.The inspectors noted that while proprietary information was reviewed, none would beincluded in this report.4OA7Licensee-Identified ViolationsThe following violations of very low safety significance (Green) were identified by thelicensee and are violations of NRC requirements which meet the criteria of Section VI.A of the NRC Enforcement Policy, NUREG-1600, for being dispositioned as an NCV.*Technical Specification 5.4.1.a requires that written procedures be established,implemented, and maintained covering the activities specified in Regulatory Guide 1.33, Appendix A, February 1978. Regulatory Guide 1.33, Appendix A, Item 9.a, requires, in part, procedures for performing maintenance that can affect the performance of safety-related equipment. Contrary to this requirement, on October 6, 2007, as part of the work for relocating Valve SIA-UV-651 during Refueling Outage 3R13, the operability of SDC Train A was adversely affected.

Bechtel workers, using design implementing WO 2914425, removed Hanger 13-RC-071-H-00E in accordance with the instructions. Design implementing WO 2914425 was authorized to work in Mode 5, 6, or defueled. At the same time, Hanger 3-RC-071-H-00F was inadvertently removed since Hangers 13-RC-071-H-00E and 3-RC-071-H-00F had a common piece of structural steel.

Design implementing WO 2914425 specified that Hangar 3-RC-071-H-00F was to be removed only when the reactor was defueled. This condition was discovered by an engineer on October 6, 2007, when there was fuel in the reactor and SDC Train A was in service. Nonconformance Report 25030-U3-040 was generated when the condition was identified. Approximately 14 hours1.62037e-4 days <br />0.00389 hours <br />2.314815e-5 weeks <br />5.327e-6 months <br /> later, PVAR 3072732 was generated on this issue, and went to the control room for review. Following review of the PVAR, SDC Train A was declared inoperable. An evaluation

-52-determined that SDC Train A was operable with Hanger 3-RC-071-H-00Fremoved. CRDR 3080110 was written for the lack of timeliness between the identification of the adverse condition and the notification to the Unit 3 control room. Findings associated with the untimely notification of this condition to the affected control room are documented in Inspection Report 05000528; 05000529; 05000530/2007012. This finding is determined to have very low safety significance because the finding does not result in noncompliance with low temperature over pressure protection TSs, nor does it degrade the ability of containment to remain intact following an accident. Additionally, the finding does not degrade the licensee's ability to terminate a leak path, add RCS inventory, recover decay heat removal once it is lost, or establish an alternate core cooling path. Lastly, the finding does not increase the likelihood of a loss of RCS inventory, decay heat removal, or offsite power.

• Technical Specification 5.4.1.a requires written procedures be established,implemented, and maintained covering the activities specified in RegulatoryGuide 1.33, Appendix A, February 1978. Regulatory Guide 1.33, Appendix A,Item 9.a, requires, in part, procedures for performing maintenance that can affectthe performance of safety-related equipment. Procedure 40DP-9ZZ17, "Controlof Doors, Hatches, and Floor Plugs," Revision 40, Appendix A, Step 2, states that"[In Table 8] a "Yes" appearing in a column identifies the barrier as a controlledbarrier. All identified Responsible Organization(s) shall be contacted forcompensatory measures and authorization prior to blocking open or removing thebarrier." Contrary to this requirement, on December 3, 2007, during shiftlyrounds, security personnel found a hose routed through Door Y-1-06 formaintenance, with no compensatory measures established. Procedure 40DP-9ZZ17, Appendix A, Table 8, identifies Door Y-1-06 as acontrolled barrier requiring operations personnel to be contacted forcompensatory measures and authorization prior to blocking open this door. Bothtrains of engineered safety feature PREACS were declared inoperable inaccordance with TS 3.7.13. This condition was immediately corrected and PREACS was restored to operable status on December 3, 2007. The licensee entered this item into the CAP as PVAR 3103619. After further evaluation and testing by engineering personnel, routing a hose through Door Y-1-06 would not have rendered PREACS inoperable, and the system would have been able to perform its design function to maintain the auxiliary building envelope, below the 100 foot elevation, under a measurable negative pressure. This finding is determined to have very low safety significance because it does not represent a loss of system safety function and the finding does not screen as risk significant due to a seismic, flooding, or severe weather initiating event. The failure to follow Procedure 40DP-9ZZ17 to provide compensatory measures for blocked opendoors is a reoccurring event documented in LER 05000530/2006001-00, "Two Independent Trains of Auxiliary Feedwater Inoperable,"

LER 05000529/2006002-00, "Two Independent Trains of Auxiliary Feedwater Inoperable Due to a SingleCause," and as a licensee-identified finding in NRC Inspection Report 05000528; 05000529; and 05000530/2006004

.

-53-*Technical Specification 5.4.1.a requires procedures be established, implemented,and maintained covering the applicable procedures recommended in Regulatory Guide 1.33, Revision 2, Appendix A, February 1978. Appendix A recommends, in Section 7, procedures for access control to radiation areas including a radiation work permit system. Implementing Procedure 75DP-9RP01, "Radiation Exposure and Access Control," Revision 10, Section 2.1.6, required that workers read the applicable radiation exposure permit for their specific job or task, and obey all instructions and requirements. Radiation Exposure Permit 3-6016A required individuals to receive a prejob brief by radiation protection and review current radiological survey data for the work area prior to entry during radiography operations. Contrary to the above, on October 30, 2007, the licensee identified that an individual had entered a posted radiography area boundary without receiving a prejob brief by radiation protection and reviewing current radiological survey data prior to entering the work area. The licensee documented the occurrence in CRDR 3086532. The violation is determined to have very low safety significance because it was not associated with ALARA planning or work controls issues, there was no overexposure or a substantial potential for an overexposure, and the ability to assess dose was not compromised.

• Technical Specification 5.4.1.a requires procedures be established, implemented,and maintained covering the applicable procedures recommended in Regulatory Guide 1.33, Revision 2, Appendix A, February 1978. Appendix A recommends, in Section 7, procedures for access control to radiation areas including a radiation work permit system. Implementing Procedure 75DP-9RP01, "Radiation Exposure and Access Control," Revision 10, Section 2.1.6, required that workers read the applicable radiation exposure permit for their specific job or task, and obey all instructions and requirements. Radiation Exposure Permit 3-3415A, "Perform Pressurizer and RCS Nozzle Weld Overlays," Task 2 required, in part, that workers have operating electronic dosimeters while working on the lower pressurizer. Contrary to the above, on November 16, 2007, a radiation protection technician found that a worker's electronic dosimeter was not turned on and therefore not operating as required by radiation exposure permit. The licensee documented the occurrence in CRDR 3095065. The violation is determined to have very low safety significance because it was not associated with ALARA planning or work controls issues, there was no overexposure or a substantial potential for an overexposure, and the ability to assess dose was not compromised.*Technical Specification 5.4.1.a requires procedures be established, implemented,and maintained covering the applicable procedures recommended in Regulatory Guide 1.33, Revision 2, Appendix A, February 1978. Appendix A recommends, in Section 7, procedures for access control to radiation areas including a radiation work permit system. Implementing Procedure 75DP-9RP01, "Radiation Exposure and Access Control," Revision 10, Section 2.1.6, required that workers read the applicable radiation exposure permit for their specific job or task, and obey all instructions and requirements. Radiation Exposure Permit 3-35021, "Valve, Flange, and Pump Maintenance and Inspection," Task 2 states, in part, that

-54-contaminated system breaches require continuous radiation protection coverage. Contrary to the above, on November 19, 2007, a radiation protection technician found that workers had cut into and breached a contaminated system to remove a valve without notifying radiation protection for continuous coverage as required by Radiation Exposure Permit 3-3502I. The licensee documented the occurrence in CRDR 3101678. The violation is determined to have very low safety significance because it was not associated with ALARA planning or work controls issues, there was no overexposure or a substantial potential for an overexposure, and the ability to assess dose was not compromised.ATTACHMENT:

SUPPLEMENTAL INFORMATION

KEY POINTS OF CONTACT

Licensee Personnel

G. Andrews, Director, Performance Improvement

S. Bauer, Department Leader, Regulatory Affairs

J. Bayless, Senior Engineer

R. Bement, Vice President, Nuclear Operations

P. Borchert, Director, Operations

P. Brandjes, Department Leader, Maintenance

R. Buzard, Senior Consultant, Regulatory Affairs

D. Carnes, Director, Nuclear Assurance

P. Carpenter, Department Leader, Operations

R. Cavalieri, Director, Outages

K. Chavet, Senior Consultant, Regulatory Affairs

D. Coxon, Unit Department Leader, Operations

R. Eddington, Executive Vice President, Nuclear

D. Elkington, Consultant, Regulatory Affairs

T. Engbring, Senior Engineer

J. Gaffney, Director, Radiation Protection

T. Gray, Department Leader, Radiation Protection

K. Graham, Department Leader, Fuel Services

M. Grigsby, Unit Department Leader, Operations

D. Hautala, Regulatory Affairs

D. Hansen, Senior Consulting Engineer

R. Henry, Site Rep., Salt River Project

J. Hesser, Vice President, Engineering

R. Indap, Senior Engineer

M. Karbasian, Director, Engineering

W. Lehman, Senior Engineer

S. McKinney, Department Leader, Operations Support

E. O<NeilProperty "Contact" (as page type) with input value "E. O" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process., Department leader, Emergency Preparedness

M. Perito, Plant Manager, Nuclear Operations

F. Poteet, Senior Inservice Inspection Engineer

M. Radspinner, Section Leader, Systems Engineering

T. Radtke, General Manager, Emergency Services and Support

H. Ridenour, Director, Maintenance

F. Riedel, Director, Nuclear Training Department

J. Scott, Section Leader, Nuclear Assurance

M. Shea, Director, Safety Culture/Impact

E. Shouse, Representative, El Paso Electric

M. Sontag, Department Leader, Performance Improvement

K. Sweeney, Department Leader, Systems Engineering

J. Taylor, Nuclear Project Manager, Public Service of New Mexico

J. Taylor, Unit Department Leader, Operations

AttachmentA-2D Vogt, Section Leader, Shift Technical Advisors, Operations

T. Weber, Section Leader, Regulatory Affairs

J. Wood, Department Leader, Nuclear Training Department

NRC Personnel

M. Runyan, Senior Reactor Analyst, Region IV

LIST OF ITEMS OPENED, CLOSED, AND DISCUSSED

Opened and

Closed

05000528/FIN-2007005-01NCVFailure to Take Adequate Corrective Actions to PreventRecurrence of Significant Condition Adverse to Quality

(Section 1R12)

05000528;

05000529/FIN-2007005-02NCVTwo Examples of a Failure to Properly Implement theOperability Determination Process (Section 1R15)

05000528/FIN-2007005-03NCVTwo Examples of a Failure to Post and Control a HighRadiation Area (Section 2OS1)

05000528/FIN-2007005-04NCVFailure to Evaluate the Radiological Hazard Caused byDecontamination (Section 2OS1)

05000530/FIN-2007005-05NCVFailure to Follow Procedural Guidance and Radiation WorkInstructions (Section 2OS1)05000528;

05000529;

05000530/FIN-2007005-06NCVTwo Examples of Inadequate Design Controls for RefuelingMachine (Section 4OA2)

Closed

05000528/FIN-2007005-01NCVFailure to Take Adequate Corrective Actions to PreventRecurrence of Significant Condition Adverse to Quality

(Section 1R12)

05000528;

05000529/FIN-2007005-02NCVTwo Examples of a Failure to Properly Implement theOperability Determination Process (Section 1R15)

05000528/FIN-2007005-03NCVTwo Examples of a Failure to Post and Control a HighRadiation Area (Section 2OS1)

05000528/FIN-2007005-04NCVFailure to Evaluate the Radiological Hazard Caused byDecontamination (Section 2OS1)

05000530/FIN-2007005-05NCVFailure to Follow Procedural Guidance and Radiation WorkInstructions (Section 2OS1)05000528;

05000529;

05000530/FIN-2007005-06NCVTwo Examples of Inadequate Design Controls for RefuelingMachine (Section 4OA2)

Discussed

None

LIST OF DOCUMENTS REVIEWED

In addition to the documents called out in the inspection report, the following documents wereselected and reviewed by the inspectors to accomplish the objectives and scope of the inspection and to support any findings:

AttachmentA-3

Section 1R01: Adverse Weather ProtectionProceduresNUMBERTITLEREVISION40OP-9ZZ17 Cold Weather Protection3241OP-1OP01Manual Operation of Air Operated Valves Appendix H2942OP-2OP01Manual Operation of Air Operated Valves Appendix H26

PVARs294705829533673089256Miscellaneous

UFSAR

Section 1R04: Equpiment AlignmentProceduresNUMBERTITLEREVISION40ST-9AF07Auxiliary Feedwater Pump

AFA-P01 Monthly Valve Alignment4

40ST-9AF08Auxiliary Feedwater Pump

AFB-P01 Monthly Valve Alignment3

40OP-9AF01Appendix A, Essential Auxiliary Feedwater System ElectricalAlignment List

3940OP-9AF01Appendix B, Essential Auxiliary Feedwater System ValveAlignment List

3940OP-9AF01Appendix C, Essential Auxiliary Feedwater System ControlBoard Alignment List

3940OP-9AF01Appendix D, Essential Auxiliary Feedwater System InstrumentAlignment List

39DrawingsNUMBERTITLEREVISION13-M-AFP-001P&I Diagram, Auxiliary Feedwater System34

13-M-CTP-001P&I Diagram, Condensate Storage and Transfer20

01-M-SGP-001P&I Diagram, Main Steam System56

AttachmentA-403-M-SIP-001P&I Diagram, Safety Injection & Shutdown Cooling System3103-M-PCP-001P&I Diagram, Fuel Pool Cooling and Cleanup System23

03-M-NCP-002P&I Diagram, Nuclear Cooling Water System8

03-M-NCP-001P&I Diagram, Nuclear Cooling Water System7MiscellaneousUFSAR, Section 10.4.9, Auxiliary Feedwater System, Revision 14Design Basis Manual, Revision 16

System Health Report, January 1, 2007, through June 30, 2007

Section 1R05:

Fire ProtectionProceduresNUMBERTITLEREVISION30DP-9WP11Scaffolding Instructions18

30DP-9WP11Scaffolding Instructions 5

30DP-9WP11Scaffolding Instructions 6

14DP-0FP31Fire System Impairment12

14DP-0FP33Control of Transient Combustibles15

14FT-9FP42Monthly Portable Fire Extinguisher Inspection 914FT-9FP13Fire Hose Station Operational and hydrostatic Test 814FT-9FP12Fire Hose Station Inspection, 9DrawingsNUMBERTITLEREVISION13-VTD-P115-0008Peerless Miscellaneous Drawings and Parts List - DieselDriven Fire Pump

CRDRs

3075291 PVARs

2978177

3010313 307224230893813105292

AttachmentA-5MiscellaneousPre-Fire Strategies Manual, Revision 18Fire System Component Condition Records

3038447 and 3045163

Technical Requirements Manual 3.11, Revision 39

Specification 13-CN-0380, Installation Specification For Seismic Category IX andNon-Seismic Scaffolding, Revision 9Arizona Public Services History Report, Unit 1 Extinguishers Engineering Evaluation Request 91-FP-011, dated December 24, 1991National Fire Protection Association 1962, Standard for the Inspection, Care, and Use of FireHose, Couplings, and Nozzles and the Service Testing of Fire Hoses, 2003 EditionPVNGS Pre-Fire Strategies Manual, Revision 19UFSAR Appendix 9B, Fire Protection Evaluation Report

UFSAR Section 9.5.1, Fire Protection Evaluation Report

Section 1R06: Flood Protection MeasuresProceduresNUMBERTITLEREVISION14FT-9FP70 Appendix R and Former Technical Specification PenetrationSeal Surveillance

731MT-9ZZ12 Replacement/Rework of Penetration and Internal Conduit Seals 781DP-0ZZ01 Civil System, Structure, and Component Monitoring Program 12DrawingsNUMBERTITLEREVISION01-M-OWP-003P&I Diagram, Oily Waste and Non-Radioactive WasteSystem (Control Building)

CRDRs284664728821662970134

AttachmentA-6 PVARs 2968359WOs305633730563423056345CRAIs2970135300769230076973007702300770830077103045868MiscellaneousCalculation 13-MC-ZJ-200, "Control Building Flooding," Revision 6NRC Information Notice 2005-30, "Safe Shutdown Potentially Challenged by UnanalyzedInternal Flooding Events and Inadequate Design," dated November 7, 2005NRC Information Notice 2007-01, "Recent Operating Experience Concerning HydrostaticBarriers," dated January 31, 2007 UFSAR, Section 3.4, Water Level (Flood) Design

UFSAR, Section 9.3.3, Equipment and Floor Drainage Systems ProceduresNUMBERTITLEREVISIONWPS 03-08-T-804 BottomWelding Procedure Specification, Pressurizer WeldOverlay, Automated Gas Tungsten Arch Welding

0WPS P1(G2)-T(RA)Bechtel Welding Procedure Specification, RCS 5WPS P1(G2)-T(RA)Bechtel Welding Procedure Specification, RCS Clad070TI-9ZC01Boric Acid Walkdown Leak Detection6RT-ASME/ANSIASME Sec III Class II Welds3

73TI-9ZZ78Visual Examination for Leakage8

73DP-9XI04 Inservice Inspection Program System Pressure TestingAdministrative Requirements

373TI-9ZZ07Penetrant Examination12

AttachmentA-7 CRDRs

2884926 2890601

2894556

2900046

2905368

2920113

2934501

2966039

3005292 3010261DrawingsWelding Diagram, "Auxiliary Feedwater Steam Generator #1," Revision 0

Section 1R11: Licensed Operator Requalification Program

CRDRs307921130792953105121CRAIs30792113079212307929931041443105123

PVARs307732930779203104069MiscellaneousSES-0-08-F-00, LOP/LOOP/Blackout, Licensed Operator Continuing Training SimulatorEvaluation GuideEmergency Plan Implementing Procedure

EPIP-99, Appendices A and P, Revision 16

Simulator Evaluation Summary Sheet, Crew 14, Cycle NLR0705

SES-0-03-T-00, Inadvertent AFAS/ATWS/LOCA, Licensed Operator Continuing TrainingSimulator Evaluation GuideSimulator Evaluation Summary Sheet, Crew 34, Cycle NLR0705

Licensed Operator Continuing Training Program Description, Revision 34

Licensed Operator Continuing Training 2007 - 2008 Two Year Schedule, Revision 4Remedial Training Notification and Action Plans AttachmentA-8

Section 1R12:

Maintenance EffectivenessProceduresNUMBERTITLEREVISION70DP-0MR01Maintenance Rule15

70DP-0MR01Maintenance Rule17

01DP-9ZZ01 Systematic Troubleshooting0

40OP-9AF01 Essential Auxiliary Feedwater System37

73ST-9AF02AFA-P01 Inservice Test39

ODP-1Operations Department Practices, Control Room Monitoring06DrawingsNUMBERTITLEREVISION01-P-AFF-131MSSS Isometric Turbine Driven Pump Auxiliary FeedwaterSystem, Sheets 1 - 41031210-2Target Rock, Solenoid Operated Valve High Temp & PressEnergize to Open (FC) Sizes 3/8" Thru 2", Sheets 1 & 2

E01-M-SGP-001P & I Diagram Main Steam System, Sheets 1 & 256

CRDRs28352452883283302022630646753078032

PVARs3052708306415130701473076744CRAIs3065717306600930738543078033308027530804573083320WOs

2950563 3064157

3076750

3077684 3080749

3080838

3081037 3081153

3083900

3083917

3083918

3083919

AttachmentA-9MiscellaneousJanuary 1 - June 30, 2007, QSPDS System HealthPreliminary Investigation Information Regarding the Failure of Unit 1, SG 2 Steam AdmissionValve to AFW Pump Turbine Valve

SGA-UV-138A, dated September 21, 2007Kepner-Tregoe Problem Analysis Detailed Report, dated October 26, 2007

Significant Root Cause Investigation Report, CRDRs

3064675 and

3078032,Valve

SGA-UV-138A Repeat Failure, Event Dates: dated September 17 and October 15, 2007,Tagging Permits

145596,

145642, 145643

Engineering Game Plan, Level B, Valve

SGA-UV-138A, as documented in

PVAR 3076744 andCMWO

3076750, Revisions 0 through 5

Section 1R13:

Maintenance Risk Assessments and Emergent Work ControlProceduresNUMBERTITLEREVISION70DP-0RA05Assessment and Management of Risk When PerformingMaintenance in Modes 1 and 2

651DP-9OM03Site Scheduling1840DP-9OP02Conduct of Shift Operations37

70DP-9MR01Maintenance Rule17

ODP-15Operations Department Practices173ST-9AF02AFA-P01 Recirculation Flow - Inservice Test4040OP-9DG02EDG B4940ST-9DG02Diesel Generator B Test3440DP-9OP06Operations Department Repetitive Task Program Appendix SA001 9673ST-9AF02AFA-P01 Recirculation Flow - Inservice Test40DrawingsNUMBERTITLEREVISION01-M-DFP-001P & I Diagram - Diesel Fuel Oil and Transfer System1101-M-DGP-001P & I Diagram - Diesel Generator System, Sheet 148

AttachmentA-10ELE 342-0107Sys Intcon Diag-Load Sequencer/Tester Train A, Sheet 17ELD 342-1510Schematic-Relay Module, Sheet 11ELD 342-1500Module Assy-Relay, Sheet 11

ELE 342-5410Schematic - ESF Load Sequencer / Auto Test ModuleSheets 1, 2, and 3

CRDRs

2928626

2950136

3064675 3078032WOs

2969643

2995731

3064157

3076750 3081153

3092613 3099502CRAIs

3066009

3094567 PVARS

2948762

3064151

3070147 307674430926113099500MiscellaneousScheduler's Evaluation for Unit 1, November 13 and 14, and December 4, 2007Technical Specification Component Condition Records

3104228,

3104232, and 3104234

Permits

139330,

139332,

139333,

140135,

141063,

145120,

145121,

145155,

145416, 147541Technical Specification 3.7.5, Auxiliary Feedwater SystemWhite Paper, Preliminary Investigation Information Regarding the Failure of the Unit 1 SG 2Steam Admission Valve to AFW Pump Turbine Valve

SGA-UV-138A, dated September 21, 2007Prompt Operability Determination, Malfunction of Unit 1 A SG 2 Steam Bypass Valve to AFWPump Turbine Valve

SGA-UV-138A, Revision 0Technical Specification 3.8.1, AC Sources - Operating Technical Specification 3.8.3, Diesel Fuel Oil, Lube Oil and Starting Air AttachmentA-11UFSAR, Section 8.3.1, AC Power SystemsAlarm Typer Printout, November 22, 2007, Time 19:18-19:19Engineering Root Cause of Failure Analysis, Level 1, EDG B Flange Leak on 5-L Fuel InjectionPump, February 20, 2007Failure Analysis of Fuel Injection Pump, Revision 0, dated February 5, 2007White Paper, EDG Fluid Leakage and Operability, Revision 1Engine Combustion Report APS Emergency Diesel Generator, November 14, 2007Unit 1 Shift Logs, November 13-14 and 22-25, 2007

Troubleshooting Plan For BOP ESFAS Train A Failure in Unit 1, Revisions 0-4

White Paper, Failure Progressive Mechanism For Diode

Section 1R15:

Operability EvaluationsProceduresNUMBERTITLEREVISION40DP-9OP26Operability Determination and Functional Assessment, 18

40DP-9OP08Diesel Generator Test Record44DrawingsNumberTITLEREVISIONARZ-D-21616G-(2)2"-1500# Carbon Steel Packed Y-Globe Valve

01-M-SGP-001P & I Diagram Main Steam System, Sheet 1 56

CRDR 3110947DFWO 3084550WOs3079030308571431096103111026

AttachmentA-12 PVARs3078055308443310908331094813109607MiscellaneousPalo Verde Design Input Requirements ChecklistPalo Verde Independent Verification Checklist Palo Verde Impact Review Form Palo Verde Environmental Screening Form

S-07-0379, 10

CFR 50.59 Screening Form, Revision 0

Unit 1 Operating Logs, October 28-30, 2007

Operations Department Practices

Section 1R17: Permanent Plant ModificationsProceduresNUMBERTITLEREVISION40TI-9ZZ07 Shutdown Cooling Vortex Test5

DrawingsNUMBERTITLERevision13-Q-ZZP-001EQ Configuration Drawing Limitorque Valve Actuator0

13-E-ZCC-007Containment Bldg Conduit & Tray Plan at El. 80 ft Level AZCAA, ZCAB

2703-M-SIP-002P & I Diagram Safety Injection and Shutdown CoolingSystem 19 PVARs309835031020473103628310382331042193105747

3050727WOs29762193054112MiscellaneousS-07-0329, "10

CFR 50.59 Screening and Evaluation for DMWO

3054112,"Revision 0Unit 3 Reactor Vessel Level Monitoring System flow induced level error dataE-07-011, "10

CFR 50.59 Screening and Evaluation," Revision 0

Design Modification

2541284, "Steam Generator Change Out" AttachmentA-13

Section 1R19: Postmaintenance TestingProceduresNUMBERTITLEREVISION40DP-9OP06Operations Department Repetitive Task Program

Appendix SA001 9640OP-9DG02EDG B4940ST-9DG02Diesel Generator B Test3430DP-9WP04 Post-Maintenance Testing Development 14

30DP-9MP09Preventive Maintenance Processes and Activities20DrawingsNUMBERTITLEREVISIONELE 342-0107System Intcon Diag-Load Sequencer/Tester Train A,Sheet 1 7ELD 342-1510Schematic-Relay Module, Sheet 11ELD 342-1500Module Assy-Relay, Sheet 1

ELE 342-5410Schematic-ESF Load Sequencer / Auto Test ModuleSheets 1, 2, and 3

01-M-DFP-001P & I Diagram - Diesel Fuel Oil and Transfer System1101-M-DGP-001P & I Diagram - Diesel Generator System Sheet 148 PVARs

3099500 3099502WOs29144202939316

2995731MiscellaneousTroubleshooting Plan For BOP ESFAS Train A Failure in Unit 1, Revisions

0 - 4White Paper, Failure Progressive Mechanism For DiodeTechnical Specification 3.8.1, AC Sources - OperatingFailure Analysis of Fuel Injection Pump, Revision 0White Paper, EDG Fluid Leakage and Operability, Revision 1Engine Combustion Report, Emergency Diesel Generator, dated November 14, 2007

S-07-0360, 10

CFR 50.59 Screening and Evaluation, Revision 0

AttachmentA-14

Section 1R20:

Refueling and Other Outage ActivitiesProceduresNUMBERTITLEREVISION70DP-0RA01Shutdown Risk Assessments22

40EP-9EO01Standard Post Trip Actions14

40EP-9EO02Reactor Trip8

40DP-9ZZ01Containment Entry in Modes 1 Thru 426

2OP-9RX01Calculation of Estimated Critical Condition, Appendices A,B, and C 2040OP-9ZZ03Reactor Startup4640OP-9ZZ01Containment Entry in Modes 1 Thru 427

WO 3085473 PVARs30847873086308DFWOs 3085436Permits

137458 139182

139567

139608 139609

2827

143273 143274

143405

143462 143494

145574 146500MiscellaneousPlant Transient Review Assessment, dated October 31, 2007

AttachmentA-15

Section 1R22: Surveillance TestingProceduresNUMBERTITLEREVISION73ST-9AF02

AFA-P01 - Inservice Test39

73DP-9CL02 Containment Leakage Testing Program20

73DP-9CL01Containment Leakage Type "B" and "C" Testing30

WO 3082177MiscellaneousPVNGS Surveillance Test Package Review SheetSurveillance Test Log for Procedure 73ST-9AF02

Section 1R23: Temporary Plant ModificationsProceduresNUMBERTITLEREVISION32MT-9PB02Outage Support Temporary Power for

E-PBA-S0317

81DP-0DC17Temporary Modification Control20

PVAR 3076979MiscellaneousTemporary Modification Request 03-91-CP-023

Section 2OS1:

Access Controls to Radiologically Significant Areas (71121.01)ProceduresNUMBERTITLEREVISION75DP-0RP01Radiation Protection Program Overview6

75DP-0RP02Radiation Contamination Control8

75DP-9RP01Radiation Exposure and Access Control10

75RP-0RP01Radiological Posting and Labeling24

AttachmentA-1675RP-9OP02Control of High Radiation Areas, Locked High RadiationAreas and Very High Radiation Areas

2175RP-9RP07Radiological Surveys and Air Sampling1575RP-9RP10Conduct of Radiation Protection Operations21Radiation Exposure Permits1-8504F3-1365

3-2006F3-3415A3-35021

3-3502G3-3508J3-60073-6016A9-1009D9-1035A CRDRs

2957554 2965089

2970612

3007629

28825

3046953 3056608

3070800

3072542

3077342 3077841

3081935

3081978

3081978 3086532

3095065

3098763

3098867 3101678

3101693MiscellaneousSelf-Assessment Site Work Management System 2956957

Section 2OS2: ALARA Planning and Controls (71121.02)

CRDRs294248230076293021261ProceduresNUMBERTITLEREVISION75DP-0RP01Radiation Protection Program Overview6

75DP-0RP02Radioactive Contamination Control8

75DP-0RP03ALARA Program Overview3

75RP-9RP02Radiation Exposure Permits18

75RP-9RP02Radiation Contamination Control8

73TI-0ZZ13Radiographic Examination14

75RP-9RP01Radiation Exposure and Access Control10

AttachmentA-1775RP-9RP10Conduct of Radiation Protection Operations2473TI-0ZZ23Digital Radiographic Examination0

Section 4OA1: Performance Indicator Verification (71151)

CRDRs30076293056608ProceduresNumberTITLEREVISION75RP-0LC01Performance Indicator Occupational Radiation SafetyCornerstone

275RP-0LC02Performance Indicator Public Radiation Safety Cornerstone2

Section 4OA2: Identification and Resolution of Problems (71152)

CRDRs2852459303075930686553068656CRAIs

3030759 3048819

3048823

3048828 3048831

3048833

3049369 3049379

3049429

3068657

3068659

3083132 PVARs30296193048775

WO 3049272DrawingsNUMBERTITLEREVISION03-E-ZCB-004Elementary Diagram, Containment Building SystemRefueling Service Requirements Cabling Block Diagram

603-E-NHA-028Single Line Diagram 480 Volt Non-Class 1E Power SystemMotor Control Center 3E-NHN-M28

AttachmentA-1803-E-NHA-004Single Line Diagram 480 Volt Non-Class 1E Power SystemMotor Control Center 3E-NHN-M04

6Vendor DrawingsNUMBERTITLEREVISIONC-21813-04-ERefueling Machine Elementary Diagram, Sheet 1 of 49

C-21813-04-ERefueling Machine Elementary Diagram, Sheet 2 of 49

C-21813-04-ERefueling Machine Elementary Diagram, Sheet 3 of 49

C-21813-04-ERefueling Machine Elementary Diagram, Sheet 4 of 49MiscellaneousLicensing Document Change Request 06-F027Fuel Handling Design Basis Manual, Revision 6

S-06-0198, 10

CFR 50.59 screening and evaluation, Revision 1

N001-0503-00629, Refueling Machine Controls Upgrade Project Hoist Drive Assembly Drawingand Bill of Materials, Revision 1N001-0503-00629, SFHM Controls Upgrade Project - Drive and Assembly, Revision 1

Refueling Machine Hoist Motor Namplate Data Egineering Design Change 2007-00596

Section 4OA3:

Follow-up of Events and Notices of Enforcement Discretion (71153)ProceduresNUMBERTITLEREVISION40AO-9ZZ23Loss of Spent Fuel Pool Level or Cooling10

40AO-9ZZ10Condenser Tube Rupture17

40EP-9EO01Standard Post Reactor Trip Actions14

40OP-9ZZ10Mode 3 to Mode 5 Operations54

74DP-9CY04System Chemistry Specifications51

AttachmentA-19 CRDRs

2900393 2904740

2906158

2914478

2925633 2925806

29277

2974523

2984700 2990092

3005058

3033543 3032677

3033623

3074272

3086158 PVARs3077710431012973101442WOs2304865303267530859403099502MiscellaneousUnit 1 Control Room Logs, Units 1, 2, and 3Chemical Volume Control System Temperature Trends Emergency Notification 42847

Emergency Notification 43764

Westinghouse Proprietary Class 2 Root Cause Analysis Report,

CAPs-RCA-06-265.M022, Revision 0NSAL Letter 07-8, High Power Density Pressurizer Heater Sheath Design Temperature

Section 4OA5:

Other ActivitiesProceduresNUMBERTITLEREVISION40ST-9ZZ09Containment Cleanliness Program17

40DP-9OP29Power Block Permit and Tagging32

Section 4OA7:

Licensee-Identified ViolationsProceduresNUMBERTITLEREVISION18FT-9FP31Functional Test of Appendix A Fire Doors - Control Building74', 100', 120', 140', and 160'

840DP-9ZZ17Control of Doors, Hatches, and Floor Plugs40

AttachmentA-20 PVARs3072229309944831018693103619

CRDRs

107242

2837139

2860836

2918716

3075289

3104787 3104879CRAIs305529030752903087995308800431048793104882WOs292232429262392927578MiscellaneousTechnical Specification 3.7.13, Engineered Safety Feature Pump Room Exhaust Air CleanupSystem

LIST OF ACRONYMS

AFWauxiliary feedwaterALARAas low as reasonably achievable

ASMEAmerican Society of Mechanical Engineers

BOPbalance of plant

CAPcorrective action program

CEDMcontrol element drive mechanism

CFRCode of Federal RegulationsCRAIcondition report action item

CRDRcondition report disposition request

EDGemergency diesel generator

ESFASengineered safety features actuation system

ETeddy current test

FWfeedwater

HPSIhigh pressure safety injection

ISIinservice inspection

LERlicensee event report

LOlube oil

LOPloss of power

LOOPloss of offsite power

MSmain steam

MSPImitigating systems performance index

NDEnon-destructive examination

NCVnoncited violation

AttachmentA-21NEINuclear Energy Institute

NRCNuclear Regulatory CommissionODoperability determination

PIperformance indicator

PLCprogrammable logic controller

PREACSpump room exhaust air cleanup system

PVARPalo Verde Action Request

PWSCCprimary water stress corrosion cracking

PTdye penetrant testQSPDSquality safety parameter display system RCSreactor coolant system

RTradiography test

SDCshutdown cooling

SFPspent fuel pool

SGsteam generator

SIsafety injection

SMshift manager

SSCstructure, system, and component

TSTechnical Specifications

UFSARUpdated Final Safety Analysis Report

UTultrasonic test

VTvisual test

VUHPvessel upper head penetration

WO work order