ML19092A081

2 to Updated Safety Analysis Report, Chapter 8, Electric Power

ML19092A081
Person / Time
Site:	Wolf Creek
Issue date:	03/11/2019
From:	Wolf Creek
To:	Office of Nuclear Reactor Regulation
Shared Package
ML19092A099	List: ML19092A060 ML19092A061 ML19092A062 ML19092A063 ML19092A064 ML19092A066 ML19092A068 ML19092A070 ML19092A071 ML19092A072 ML19092A073 ML19092A074 ML19092A075 ML19092A076 ML19092A077 ML19092A080 ML19092A081 ML19092A082 ML19092A083 ML19092A084 ML19092A085 ML19092A086 ML19092A087 ML19092A088 ML19092A089 ML19092A090 ML19092A091 ML19092A092 ML19092A093 ML19092A094 ML19092A097 ML19092A125 ML19092A126 ML19092A128 ML19092A129 ML19092A131 ML19092A132 ML19092A133 ML19092A134 ML19092A135 ML19092A142 ML19092A143 ML19092A146 ML19092A148 ML19092A149 ML19092A150 ML19092A152 ML19092A153 ML19092A154 ML19092A155 ... further results
References
WO 19-0010
Download: ML19092A081 (140)

Text

WOLF CREEK CHAPTER 8.0 TABLE OF CONTENTS ELECTRIC POWER Section Title Page

8.1 INTRODUCTION

8.1-1 8.1.1 UTILITY GRID DESCRIPTION 8.1-1 8.1.2 ONSITE POWER SYSTEM DESCRIPTION 8.1-2 8.1.3 SAFETY-RELATED LOADS 8.1-3 8.1.4 DESIGN BASES 8.1-3 8.1.4.1 Offsite Power System 8.1-3 8.1.4.2 Onsite Power System 8.1-4 8.1.4.3 Design Criteria, Regulatory Guides, IEEE Standards and IE Bulletins 8.1-5 8.

1.5 REFERENCES

8.1-27 8.2 OFFSITE POWER SYSTEM 8.2-1 8.

2.1 DESCRIPTION

8.2-1 8.2.1.1 Transmission Network 8.2-2 8.2.1.2 Switchyard and Connection to the Onsite Distribution System 8.2-4 8.2.1.3 Compliance with Design Criteria and Standards 8.2-6 8.2.2 ANALYSIS 8.2-9 8.3 ONSITE POWER SYSTEMS 8.3-1 8.3.1 AC POWER SYSTEMS 8.3-1 8.3.1.1 Description 8.3-1 8.3.1.2 Analysis 8.3-25 8.3.1.3 Physical Identification of Safety-Related Equipment 8.3-25 8.3.1.4 Independence of Redundant Systems 8.3-27 8.3.2 DC POWER SYSTEMS 8.3-36 8.3.2.1 Description 8.3-36 8.3.2.2 Analysis 8.3-38 8.3.3 FIRE PROTECTION FOR CABLE SYSTEMS 8.3-45 8.

3.4 REFERENCES

8.3-45 8.0-i Rev. 29

WOLF CREEK TABLE OF CONTENTS (Continued)

LIST OF TABLES Table No. Title App. 8.3A STATION BLACKOUT 8.3A.1 INTRODUCTION 8.3A-1 8.3A.2 STATION BLACKOUT GENERAL CRITERIA AND ASSUMPTION 8.3A-2 8.3A.3 WOLF CREEK BLACKOUT DURATION 8.3A-2 8.3A.4 Procedures for SBO 8.3A-5 8.3A.5 Summary for SBO Coping Assessment 8.3A-5 8.3A.6 REFERENCES 8.3A-7 8.3-1 Class IE DC System Loads 8.3-2 125 V DC Class IE Battery Loading Cycle (Amperes Required per Time Interval per Battery After Loss of AC Power) Subsystems 1 and 4 8.3-3 125 V DC Class IE Battery Loading Cycle (Amperes Required per Time Interval per Battery After Loss of AC Power) Subsystems 2 and 3 8.3-4 Failure Modes and Effects Analysis 8.3-5 Minimum Separation Distance Analysis Required by Regulatory Guide 1.75 and IEEE 384-74 8.0-ii Rev. 26

WOLF CREEK CHAPTER 8 - LIST OF FIGURES

• Refer to Section 1.6 and Table 1.6-3. Controlled drawings were removed from the USAR at Revision 17 and are considered incorporated by reference.

Figure #

Sheet Title Drawing #*

8.1-1 0

Southwest Power Pool Transmission System and MoKan Companies Service Area (Historical) 8.2-1 0

345 kV System in MoKan Area (Historical) 8.2-2 0

161 kV and Below KG&E Transmission System Near Wolf Creek Plant 8.2-3 0

Wolf Creek Substation General Plan KD-7750 8.2-4 0

One-Line Diagram KD-7496 8.2-5 0

Electrical One-Line Diagram of Wolf Creek 345 kV Switchyard and Adjacent Subs 8.3-1 1

Main Single Line Diagram E-11001 8.3-1 2

Single Line Diagram, Essential Service Water System E-K1001 8.3-1 3

Single Line Diagram Site Area Loads E-1001 8.3-2 0

List of Loads Supplied by the Emergency Diesel Generator E-11005 8.3-3 0

Logic Diagram Standby Generation Excitation Control E-12NE01 8.3-4 0

Logic Diagram Standby Generator System Protection E-12NE02 8.3-5 0

Logic Diagram Standby Generator Engine and Governor Control E-12KJ01 8.3-6 1

DC Main Single Line Diagram E-11010 8.3-6 2

DC Auxiliary Power System 8.3-7 0

DC Main Single Line Diagram (PK03 and PK04 Bus)

E-11010A 8.0-iii Rev. 32

WOLF CREEK CHAPTER 8.0 ELECTRIC POWER

8.1 INTRODUCTION

8.1.1 UTILITY GRID DESCRIPTION The generator unit is connected to the respective transmission systems. The transmission system voltage is 345 kV for Wolf Creek. The utility has integrated transmission networks and interconnections with neighboring systems.

The Southwest Power Pool is the regional reliability council of which Kansas City Power & Light Company (KCPL) and Westar, Evergy companies are members. It is made up of 38 member systems, extending throughout an area covering the states of Arkansas, Louisiana, Kansas, Oklahoma and portions of Mississippi, Missouri, New Mexico and Texas. The Southwest Power Pool is highly interconnected with transmission lines of many voltages, including 345 and 500-kV. Figure 8.1-1 is a map of the Southwest Power Pool, showing its extensive transmission facilities as of January, 1979.

Kansas Electric Power Cooperative (KEPCo) is a member of the Southwest Power Pool with limited (peaking) generating capacity.

8.1-1 Rev. 32

WOLF CREEK 8.1.2 ONSITE POWER SYSTEM DESCRIPTION The onsite power system is provided with preferred (offsite) power from the offsite system through two independent and redundant sources of power. One preferred circuit from the switchyard supplies power to a three-winding startup transformer. This startup transformer feeds two medium-voltage 13.8-kV busses and a 13.8/4.16-kV ESF transformer. The second preferred (offsite) circuit is connected to the second 13.8/4.16-kV ESF transformer. Each transformer normally supplies its associated medium voltage 4.16-kV Class 1E bus. Refer to Figure 8.3-1.

The two 13.8-kV busses supply power to the nonsafety-related auxiliary loads of the unit. The 13.8-kV busses are also connected to a three-winding unit auxiliary transformer, in addition to the startup transformer. The unit auxiliary transformer is connected to the main generator through an isolated phase bus duct.

Two 4.16-kV non-Class 1E busses are supplied power from two 13.8-kV busses through two 13.8/4.16-kV station service transformers.

Non-Class 1E low-voltage 480-V loads are supplied power from two 13.8-kV busses through 480-V load centers and 480-V motor control centers.

The onsite power system is divided into two separate load groups, each load group consisting of an arrangement of busses, transformers, switching equipment, and loads fed from a common power supply. Power is supplied to auxiliaries at 13.8 kV, 4.16 kV, 480 V, 480/277 V, 208/120 V, 120 V ac, 250 V dc, and 125 V dc.

The onsite standby power system includes the Class 1E ac and dc power for equipment used to maintain a cold shutdown of the plant and to mitigate the consequences of a DBA.

Class 1E ac system loads are separated into two load groups which are powered from separate ESF transformers or two independent diesel generators (one per load group). Each load group distributes power by a 4.16-kV bus, 480-V load centers, and 480-V motor control centers.

The Class 1E dc system provides four separate 125-V dc battery supplies for Class 1E controls, instrumentation, power, and control inverters. Refer to Figure 8.3-6, sheet 1.

8.1-2 Rev. 32

WOLF CREEK The Station Blackout Diesel Generator (SBO DG) system consists of three (3) non-safety related diesel generators that are capable of supplying essential loads on bus NB001 or bus NB002 required to reliably and safely shut down the unit following a station blackout event. The SBO DG system is also capable of supplying power to the non-safety auxiliary feedwater pump (NSAFP). Station blackout means the complete loss of alternating current (ac) electric power to the essential and nonessential switchgear buses in a nuclear power plant (i.e.,

loss of offsite electric power system concurrent with turbine trip and unavailability of the onsite emergency ac power system).

The SBO DG system is not credited for coping with a station blackout per NRC Regulatory Guide 1.155 and NUMARC 87-00, but is instead installed to provide plant MSPI/PRA margin.

The SBO DGs are located with a missile barrier designed to limit the average wind speed downstream of the barrier entrance to less than or equal to 150 mph during a 230 mph tornado event in accordance with NRC Regulatory Guide 1.76, Rev. 1.

8.1.3 SAFETY-RELATED LOADS Refer to Figure 8.3-2 for a listing of loads supplied by the Class IE ac system. Refer to Table 8.3-1 for a list of loads supplied by the Class IE dc system. Specific safety related loads and safety functions are identified in Table 8.3-4.

8.1.4 DESIGN BASES 8.1.4.1 Offsite Power System 8.1.4.1.1 Safety Design Bases SAFETY DESIGN BASIS ONE - Electrical power from the power grid to the plant site is supplied by two physically independent circuits designed and located so as to minimize the likelihood of simultaneous failure.

SAFETY DESIGN BASIS TWO - Each of these independent circuits has the capability to safely shut down the unit. The first preferred circuit, which is connected to the startup transformer, has the capacity to supply the startup and all the auxiliary loads (both group 1 and group 2 simultaneously) of the unit.

SAFETY DESIGN BASIS THREE - The second preferred power circuit, which supplies power to the ESF transformer, has the capacity to supply all the safety-related loads of the unit.

SAFETY DESIGN BASIS FOUR - The loss of the nuclear unit or the most critical unit on the grid will not result in the loss of offsite power to the Class IE busses.

8.1.4.1.2 Power Generation Design Bases POWER GENERATION DESIGN BASIS ONE - The switchyard power circuit breaker control is designed with duplicate and redundant systems, i.e., two independent battery systems, two trip coils per breaker, and two independent protective relay schemes.

8.1-3 Rev. 30

WOLF CREEK 8.1.4.2 Onsite Power System 8.1.4.2.1 Safety Design Bases SAFETY DESIGN BASIS ONE - The onsite power system includes a separate and independent Class IE electric power system (GDC-17).

SAFETY DESIGN BASIS TWO - The onsite Class IE electric power system is divided into two independent load groups, each with its own power supply, busses, transformers, loads, and associated 125-V dc control power. Each load group is independently capable of maintaining the plant in a cold shutdown (GDC-17).

SAFETY DESIGN BASIS THREE - One independent diesel generator is provided for each Class IE ac load group.

SAFETY DESIGN BASIS FOUR - No provisions are made for automatic transfer of load groups between redundant power sources.

SAFETY DESIGN BASIS FIVE - No portion (ac or dc) of the onsite standby power systems is shared with another unit (GDC-5).

SAFETY DESIGN BASIS SIX - The Class IE electric systems are designed to satisfy the single failure criterion (GDC-17).

SAFETY DESIGN BASIS SEVEN - For each of four protection channels, one independent 125-V dc and one 120-V vital ac power source are provided.

Batteries are sized for 240 minutes of operation without the support of battery chargers.

SAFETY DESIGN BASIS EIGHT - Raceways are not shared by Class IE and non-Class IE cables. However, associated cables connected to Class IE busses are treated as Class IE cables with regard to separation and identification and are run in their related Class IE raceway system.

SAFETY DESIGN BASIS NINE - Special identification criteria are applied for Class IE equipment, including cabling and raceways. Refer to Section 8.3.1.3.

SAFETY DESIGN BASIS TEN - Separation criteria are applied which establish requirements for preserving the independence of redundant Class IE load groups or power systems. Refer to Section 8.3.1.4.1.

SAFETY DESIGN BASIS ELEVEN - Class IE equipment is designed with the capability of being tested periodically (GDC-18).

8.1-4 Rev. 9

WOLF CREEK SAFETY DESIGN BASIS TWELVE - Two physically and electrically independent ESF transformers are provided to supply the Class IE ac electric power system.

8.1.4.2.2 Power Generation Design Bases POWER GENERATION DESIGN BASIS ONE - A separate non-Class IE dc system is provided for non-Class IE controls and dc motors.

8.1.4.3 Design Criteria, Regulatory Guides, IEEE Standards and IE Bulletins The onsite power system is generally designed in accordance with IEEE Standards 279, 308, 317, 323, 334, 344, 379, 382, 383, 384, 387, 450, and 484.

Compliance with Regulatory Guides 1.6, 1.9, 1.22, 1.29, 1.30, 1.32, 1.40, 1.41, 1.47, 1.53, 1.62, 1.63, 1.68, 1.73, 1.75, 1.81, 1.89, 1.93, 1.100, 1.106, 1.108, 1.118, and 1.131 and IEEE Standards 323-1974, 338-1971, 344-1975, 384-1974, 387-1984, 308-1974, and 317-1976 are discussed below:

Refer to Appendix 3A for the applicable revision dates on regulatory guides.

Compliance with General Design Criteria 17 and 18 is discussed in Section 3.1.

REGULATORY GUIDE 1.6, INDEPENDENCE BETWEEN REDUNDANT STANDBY (ONSITE) POWER SOURCES AND BETWEEN THEIR DISTRIBUTION SYSTEMS - The Class IE system is divided into redundant load groups so that loss of any one group does not prevent the minimum safety functions from being performed. Figure 8.3-1 shows this arrangement.

Each ac load group has connections to two preferred (offsite) power supplies and to a single diesel generator. Each diesel generator is exclusively connected to a single Class IE 4.16-kV load group and has no automatic connection to the redundant load group.

For a discussion of this regulatory guide, with respect to the Class IE dc system, refer to Section 8.3.2.2.1.

No provisions exist for automatic transfer of loads between redundant onsite power supplies.

The diesel generator of one load group cannot be automatically paralleled with the diesel generator of the redundant load group.

8.1-5 Rev. 27

WOLF CREEK Interlocks are provided to assure that a single operator error would not parallel the standby power sources of redundant load groups. Refer to Section 8.3.1.1.3.

There is no interconnection of load groups.

REGULATORY GUIDE 1.9, SELECTION, DESIGN, QUALIFICATION, and TESTING OF EMERGENCY DIESEL GENERATOR UNITS USED AS CLASS 1E ONSITE ELECTRIC POWER SYSTEMS AT NUCLEAR POWER PLANTS WCGS was initially licensed to Regulatory Guide 1.108 and Regulatory Guide 1.9, Revision 1 with regard to the original design and qualification of the emergency diesel generators. Regulatory Guide 1.9, Revision 1 was essentially an endorsement of IEEE Standard 387-1977 with a number of provisions specified in the Regulatory Position of the regulatory guide.

For ongoing testing of the emergency diesel generators, WCGS conforms to the Technical Specifications and with exceptions (as described in the Technical Specification 3.8.1 Bases) to the test recommendations of Regulatory Guide 1.9, Revision 3. Revision 3 of Regulatory Guide 1.9 integrates the pertinent guidance previously addressed in Revisions 1 and 2 of Regulatory Guide 1.9 and the guidance of Revision 1 of Regulatory Guide 1.108. Regulatory Guide 1.9, Revision 3 endorses IEEE 387-1984 with respect to design, qualification and periodic testing of diesel generator units, subject to the supplemental design considerations specified in Section C.1 and the diesel generator testing provisions specified in Section C.2 of the Regulatory Guide.

In accordance with Amendment No. 101, the ESW pump starting transient during the LOCA sequencing test will be demonstrated to be within a minimum voltage of 3120 Vac and recover to 3680 Vac within 3 seconds and to be within a maximum voltage of 4784 Vac and recover to 4320 Vac within 2 seconds.

Load requirements are listed in Figure 8.3-2.

The following exception applies to Regulatory guide 1.9, Revision 3, Regulatory Position C.1.3:

The predicted loads for short-time operation are less than the diesel generator short-time load rating and the predicted loads for continuous operation are less than the diesel generator continuous load rating.

The diesel generators are designed as follows:

a. To start and accelerate to rated speed, in the sequence shown in Figure 8.3-2, all the needed engineered safety features and emergency hot shutdown loads.

b. So that at no time during the loading sequence do the frequency and voltage decrease to less than 95 percent of 60 Hz (when operating at nominal 60Hz) and 75 percent of 4.16 kV, respectively. Calculations demonstrate that if the diesel generators are operating at the lower end of the Technical Specification frequency band and if the frequency momentarily dips below 95 percent of 60 Hz, that the equipment will still perform its safety function with no equipment damage. (Reference 1) 8.1-6 Rev. 27

WOLF CREEK

c.

Frequency is restored to within 2 percent of nominal in less than 60 percent of each load-sequence interval for step load increase and in less than 80 percent of each load sequence interval for disconnection of the single largest load, and voltage is restored to within 10 percent of nominal within 60 percent of each load-sequence time interval. (A greater percentage of the time interval may be used if it can be justified by analysis. However, the load-sequence time interval should include sufficient margin to account for the accuracy and repeatability of the load-sequence timer.) During recovery from transients caused by the disconnection of the largest single load, the speed of the diesel generator unit does not exceed the nominal speed plus 75 percent of the difference between nominal speed and the over-speed trip setpoint of 115 percent of nominal, whichever is lower.

Furthermore, the transient following the complete loss of load does not cause the speed of the unit to attain the overspeed trip setpoint.

The suitability of each diesel generator is confirmed by the manufacturer's prototype qualification test data and preoperational tests.

REGULATORY GUIDE 1.22, PERIODIC TESTING OF PROTECTION SYSTEM ACTUATION FUNCTIONS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.29, SEISMIC DESIGN CLASSIFICATION - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.30, QUALITY ASSURANCE REQUIREMENTS FOR THE INSTALLATION, INSPECTION, AND TESTING OF INSTRUMENTATION AND ELECTRIC EQUIPMENT - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.32, CRITERIA FOR SAFETY-RELATED ELECTRIC POWER SYSTEMS FOR NUCLEAR POWER PLANTS - Compliance with IEEE Standard 450-1995 and the dc power requirements of IEEE Standard 308-1974 is discussed in Section 8.3.2.2.1. (See Appendix 3A for discussion of compliance to Regulatory Guide 1.32 in relation to IEEE Standard 450)

Compliance with ac power requirements of IEEE Standard 308-1974 is as follows:

The Class 1E ac power system is designed to ensure that any design basis event, as listed in Table 1 of IEEE 308, does not cause either (1) loss of electric power to a number of engineered safety features, surveillance, or protection system device sufficient to jeopardize the safety of the unit or (2) loss of electric power to equipment that could result in a reactor power transient capable of causing significant damage to the fuel or the reactor coolant system.

The Class 1E power system is capable of performing its function when subjected to the effects of any of the design basis events. The Class 1E loads are designed to perform their functions adequately for the design variations of voltage and frequency in the Class 1E system.

Circuit breaker control is provided in the control room and on the circuit breakers of the preferred power supplies and diesel generator supplies to the 4.16-kV busses of the Class 1E system. Controls are provided in each diesel generator room for local operation of the diesel generator.

Class 1E equipment and associated design, operating, and maintenance documents are distinctly identified as described in Section 8.3.1.3.

8.1-7 Rev. 27

WOLF CREEK Each type of Class 1E equipment is qualified by analysis, by successful use under similar conditions, or by actual test to demonstrate its ability to perform its function under applicable design basis events.

A failure modes and effects analysis is performed. Refer to Section 8.3.1.2.1.

Supplementary design criteria of IEEE 308 are addressed in the applicable sections describing specific Class 1E equipment.

The surveillance requirements of IEEE 308 are followed in the design, installation, and operation of Class 1E systems and consist of the following:

a. Preoperational equipment tests and inspections were performed in accordance with the procedures described in Chapter 14.0 with all components installed.

b. Preoperational system tests were performed in accordance with the procedure described in Chapter 14.0 with all components installed.

c. Periodic equipment tests are performed at the scheduled intervals to detect deterioration of the system toward an unacceptable condition and to demonstrate that the standby power equipment and other components that are not running during normal operation of the station are operable.

d. Surveillance system tests referred to in item c above are performed at scheduled intervals to demonstrate the operational readiness of the system.

With regard to Section 7 of IEEE 308 and Regulatory Guide 1.93, The Technical Specifications discuss operating alternatives under degraded Class IE ac system conditions.

Section 8 of IEEE 308 describes multiunit considerations and is not applicable to WCGS.

The electrical and physical independence between redundant standby (onsite) power sources is discussed in the responses to Regulatory Guides 1.6 and 1.75.

Connection of non-Class 1E equipment to Class 1E systems is discussed in the response to Regulatory Guide 1.75.

Diesel generator set capacity is discussed in the response to Regulatory Guide 1.9.

REGULATORY GUIDE 1.40, QUALIFICATION TESTS OF CONTINUOUS-DUTY MOTORS INSTALLED INSIDE THE CONTAINMENT OF WATER-COOLED NUCLEAR POWER PLANTS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.41, PREOPERATIONAL TESTING OF REDUNDANT ONSITE ELECTRIC POWER SYSTEMS TO VERIFY PROPER LOAD GROUP ASSIGNMENTS - The onsite electric power systems, designed in accordance with Regulatory Guides 1.6 and 1.32, were tested as part of the preoperational testing program and also after major modifications. The tests were performed in accordance with the 8.1-8 Rev. 27

WOLF CREEK procedures outlined in Chapter 14.0. These tests verify the independence between the redundant onsite power sources and their load groups.

The Class IE power system is isolated from the preferred (offsite) transmission network by direct actuation of the Class IE undervoltage relays monitoring the Class IE busses, resulting in tripping of the supply breakers.

The Class IE power system is tested functionally, one load group at a time, by allowing one load group to be powered only by its associated diesel generator while the bus is disconnected from the preferred power source. The redundant load group remains completely disconnected from its associated diesel generator and preferred power source.

An engineered safety features actuation signal (ESFAS) is simulated to start the diesel generators and initiate automatic sequencing. Functional performance of the loads is checked. Each test is of sufficient duration to achieve stable operating conditions and thus permit the onset and detection of adverse conditions which could result from improper assignment of loads.

During testing of one Class IE load group, the busses of the redundant load groups not under test are monitored to verify absence of voltage on these busses and loads, indicating no interconnection of load groups.

Refer to Section 8.3.2.2.1 for a discussion of this regulatory guide with respect to dc systems.

REGULATORY GUIDE 1.47, BYPASSED AND INOPERABLE STATUS INDICATION FOR NUCLEAR POWER PLANT SAFETY SYSTEMS - A detailed description of the engineered safety features status panel is provided in Section 7.5. A section of this panel is devoted to providing indication of the configuration and, therefore, the operability of the Class IE ac power distribution system.

REGULATORY GUIDE 1.53, APPLICATION OF THE SINGLE FAILURE CRITERION TO NUCLEAR POWER PLANT PROTECTION SYSTEMS - Refer to Section 7.3 for the response to this regulatory guide.

REGULATORY GUIDE 1.62, MANUAL INITIATION OF PROTECTIVE ACTIONS - Refer to Appendix 3A, Responses to Regulatory Guides.

REGULATORY GUIDE 1.63, ELECTRIC PENETRATION ASSEMBLIES IN CONTAINMENT STRUCTURES FOR LIGHT-WATER-COOLED NUCLEAR POWER PLANTS - The electric penetration assemblies conform to IEEE Standard 317-1976.

8.1-9 Rev. 0

WOLF CREEK The electrical penetration assemblies do not incorporate self-fusing characteristics. They are designed to withstand the maximum possible fault current versus time conditions (which could occur because of single random failures of circuit overload protection devices) for any electrical fault external to the penetration within the two leads of any one single-phase circuit or the three leads of any one three-phase circuit.

In accordance with Regulatory Guide 1.63, the following system features are provided to ensure compliance with this requirement of the regulatory guide.

a. Medium Voltage System For medium voltage circuits feeding loads (e.g. RCPs) in the reactor building, the primary protection is provided by the individual load circuit breakers, which are backed up by the main bus feeder breaker. Spatial separation is achieved by locating the primary (load breaker) and backup (bus feeder breaker) relays in separate switchgear cubicles on a given bus. Primary and backup circuit protection for control power are supplied from two separate dc sources. The penetration withstands the maximum available fault current for the respective durations which are characteristic of both the primary and backup protection. The switchgear is located in the turbine building. Separate non-Class IE battery sources are provided for the primary and backup protection and circuit breaker control. (No 4.16-kV loads are located within the reactor building).

b. Low Voltage Load Center Loads

1. Class IE Loads For low voltage Class IE load centers feeding loads in the reactor building, the primary and backup protection is provided by a fuse or a MCC breaker in series with the individual load center load circuit breakers respectively.

Spatial separation is achieved, since the primary (fuse or MCC breaker) and backup (load center breaker) protective devices are in separate physical locations. The penetration withstands the available range of fault current and time duration for the load center breaker trip. No battery sources are necessary, since the breaker trip units are direct acting.

8.1-10 Rev. 28

WOLF CREEK

2. Non-Class IE load center loads are few in number, and are treated on an individual basis as follows:

(a) Containment Polar Crane and Non-Class IE MCC The containment polar crane and MCC are powered from their respective non-class IE load centers located in the auxiliary building. For the non-Class IE MCC, primary and backup protection is provided in a manner similar to that described for Class IE load center loads in Item 1. The primary and backup protection is provided by the individual load circuit breaker and the associated load center main feeder breaker, respectively. For the containment polar crane, primary and backup protection is provided by the individual load center feeder breaker and properly rated fuses, respectively. The penetration will withstand the range of fault current and the time duration which is characteristic of the primary and backup protection devices.

(b) Pressurizer Backup Heaters The pressurizer backup heaters are supplied from non-Class IE load centers, which are located in the auxiliary building. Individual 480-V molded case circuit breakers feeding the heaters provide the primary protection. Fuses in series with these circuit breakers provide backup protection. The fuses are located in a different vertical section than the molded case circuit breakers. The penetrations will withstand the range of fault current and the time duration which is characteristic of the primary and backup protection devices.

(c) Pressurizer Control Group Heaters The pressurizer control group heaters are supplied from a non-Class IE load center through an SCR controller and a bank of molded case circuit breakers. Since the SCR controller is fused, the primary protection is provided by the molded case circuit breakers, and the backup protection is provided by the fuses in the SCR controller. The penetration withstands the range of fault current and time duration which are characteristic of the primary and backup devices.

8.1-11 Rev. 0

WOLF CREEK c.Low Voltage Motor Control Center Loads

1. General MCC loads The 480-V loads within the reactor building are supplied power from Class IE or non-Class IE MCCs (as applicable) which are located in the auxiliary building. In this case, the primary protection is provided by the combination of a molded case circuit breaker (instantaneous only) and the thermal overload relays in the starter, for motor loads. The pri-mary protection is provided by a thermal-magnetic circuit breaker in the case of feeder tap breakers.

In both cases, backup protection is provided by introducing properly rated fuses in each cubicle between the breaker and the load. Although the primary (circuit breaker) and backup (fuse) protection are located within the same MCC compartment, these two protection means are diverse in their fault clearing mechanisms. There are two exceptions. First, primary protection in non Class 1E MCCs may be provided by fused disconnect switches equipped with current limiting fuses having circuit protection characteristics equal to or better than molded case circuit breakers in similar applications.

An exception also occurs in the case of large feeder tap breakers and larger motors connected to the MCCs.

In this case, where the penetration is relatively large and can practicably be coordinated with the MCC incoming breaker, the fuses are not used. In all cases, the penetration withstands the available current and time duration which are characteristic of the primary and backup devices.

2. Motor-Operated Valves Class 1E motor-operated valves (MOVs), similar to the 480-V motor loads previously discussed, require properly rated fuses to be added to the individual motor starter cubicles for backup protection. However, the Class 1E motor-operated valves have their thermal overload (TOL) relays in the control circuit bypassed in order to ensure run to failure. Eliminating the TOL relays removes a portion of their primary protection. Complete primary protection for the MOV circuits is maintained using one of two methods, as follows:

(a) The typical method uses a magnetic-only molded-case circuit breaker with an adjustable trip setting (vertical intercept) that provides the primary protection. The trip setting is set low enough to stay below the thermal limit of the penetration (considering the upper limit of the breaker tripping tolerance band), and high enough to avoid nuisance tripping of the MOV during starts (considering the lower limit of the breaker tripping tolerance band).

Although the primary (circuit breaker) and backup (fuse) protection are located within the same MCC compartment, these two protection means are diverse as to their sensing and fault clearing mechanisms.

8.1-12 Rev. 30

WOLF CREEK (b) The alternate method uses a second set of fuses to complement and complete the primary protection, as a magnetic-only molded-case circuit breaker with an adjustable trip setting may not be fully coordinated with the penetrations thermal limits as described above in (a). The molded-case circuit breaker trip setting is set high enough to avoid nuisance tripping of the MOV during starts (considering the lower limit of the breaker tripping tolerance band). The primary protection fuses are sized such that they actuate prior to the backup protection fuses. Although the primary (circuit breaker and fuse) and backup (fuse) protection may be located within the same MCC compartment, these three protection means are diverse as to their sensing and fault clearing mechanisms. In addition, the primary and backup fuses are of a different type, which reduces the potential for the fuses to have a common failure mode.

In all cases, the penetrations are sized such that their thermal limits are greater than the time-current curves of both the primary and backup protection devices.

d. Low Voltage Control Systems Primary protection is provided by a fuse in the control circuit. Backup protection is provided by fuses in the control power transformer primary. The penetrations will withstand the range of fault current and the time duration which is characteristic of the primary and backup protection devices.

e. Instrument Systems The energy levels in the instrument systems are sufficiently low so that no damage occurs to the electric penetration.

f. DC Loads Primary and backup fuses are provided with the penetrations withstanding the available fault current and time duration which are characteristic of those devices.

REGULATORY GUIDE 1.68, INITIAL TEST PROGRAMS FOR WATER-COOLED NUCLEAR POWER PLANTS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.73, QUALIFICATION TESTS OF ELECTRIC VALVE OPERATORS INSTALLED INSIDE THE CONTAINMENT OF NUCLEAR POWER PLANTS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.75, PHYSICAL INDEPENDENCE OF ELECTRIC SYSTEMS - This regulatory guide sets forth criteria for the separation of circuits and electric equipment. These circuits and equipment either comprise or are associated with the Class IE power systems, the protection system, systems actuated or controlled by the protection system, and auxiliary or supporting systems that are essential to the operation of these systems. The separation criteria are discussed in Section 8.3.1.4.1 and meet the recommendations of Regulatory Guide 1.75. The following discussion supplements and clarifies 8.1-13 Rev. 30

WOLF CREEK several of the items presented in the guide. Paragraph numbers herein correspond to paragraph numbers in IEEE 384-1974.

Paragraph 4.1 Two completely separate and independent load groups, each of which is capable of safely shutting down the unit, are provided. Separation between these load groups and between associated circuits and non-Class IE circuits is implemented to an extent commensurate with the hazard potential of the areas in which they are installed. See Section 8.3.1.4.1.

Paragraph 4.2 Equipment and circuits requiring separation are determined and delineated early in the design stage. Distinctive identification on documents and drawings is provided. See Section 8.3.1.3.

Paragraph 4.3 Various means of attaining physical separation of safety-related circuits and equipment include separate cable spreading rooms, separate cable chases, raceways, barriers, and distance. See Section 8.3.1.4.1.

Paragraph 4.4 Section 8.3.1.4.1.1 satisfies this guide paragraph.

Paragraph 4.5 Associated circuits are separated and identified as if safety related.

Associated circuits are not uniquely labeled as such; rather, they are identified as any safety-related circuit of the same separation group would be.

Where non-Class IE circuits are associated by reason of their sharing of Class IE sources, the following specific criteria are followed:

The non-Class 1E loads connected to Class 1E power buses are isolated with an isolation device as described below.

1.

Circuit Breaker tripped by a safety injection signal (SIS).

2.

Starter contactor opened by a safety injection signal (SIS).

3.

Two circuit breakers, two fuses, or a breaker and a fuse in series, both coordinated with an upstream circuit breaker, and the circuit breaker periodically tested.

These power circuit loads are described as follows:

a. Tripped AC Loads Non-Class IE loads which are tripped on occurrence of an SIS are as given below. These circuits beyond the isolation device (Class IE breaker or contactor) are treated per non-Class IE and non-associated criteria.

1. Air compressors

2. Standby ac lighting

3. Battery chargers, 125 V and 250 V 8.1-14 Rev. 30

WOLF CREEK

4. Pressurizer heaters backup groups

5. CRDM cooling fans

6. Boric acid transfer pumps

7. Boric acid heat tracing

8. NPIS Computer Equipment

9. Boric acid filter to charging pump valve

10. ESW unit heaters

11. Deleted

b. Non-Class IE AC Loads not Tripped

1.

Each separation group of the non-class IE instrument ac power system is supplied from a delta-star connected, three phase transformer. In order to assure that the class IE system is not compromised and to eliminate the accidental imposition of 480-Vac on the transformer secondary (120-Vac) circuit, two circuit breakers in series are utilized in the transformer primary circuit of each separation group. For these reasons, the circuits beyond the second circuit breaker are treated per non-class 1E and non-associated criteria. The non-class IE instrument ac power system is not tripped upon the occurrence of an SIS.

2.

Boric acid heat tracing in Room 1311 that is not tripped on SIS.

c. Control Room DC Lighting The 125-V dc system supplies control board emergency lighting from the class IE dc battery. These cables are identified and separated as safety-related.

8.1-15 Rev. 30

WOLF CREEK Paragraph 4.6 Two channels of non-safety-related cables and raceway are associated with the normal plant systems and equipment. These channels require no specific separation. However, they are separated from the four safety-related separation groups by the same criteria that is applied to the separation of the four safety-related separation groups from each other.

All non-safety-related circuits are routed separately from safety-related and associated circuits to the above criteria. The specific separation distance required by Paragraphs 5.1.3, 5.1.4, or 5.6 is complied with.

Paragraph 5.1.1.1 The requirements of this paragraph are met. See Section 8.3.1.4.1.1.

Paragraph 5.1.1.2 Areas in which the only source of fire is electrical are divided into two groups--cable spreading areas and general plant areas. Section 8.3.1.4.1.1 is followed.

Paragraph 5.1.1.3 The separation distances of 1 horizontal and 3 vertical feet in the cable spreading and main control rooms and 3 horizontal and 5 vertical feet in general plant areas are provided, and are described in Section 8.3.1.4.1.1.

Cables and raceways are selected with flame-retardant properties.

Hazards are limited to failures or faults internal to the electrical equipment.

The use of splices in Class IE systems is limited to the following areas:

a. Splices are used in long duct bank runs to site buildings, such as intake structures for ESW systems, where cables are longer than is practical to manufacture and pull. Splices in the long duct bank runs are done in the vicinity of the manholes.

8.1-16 Rev. 0

WOLF CREEK

b. Where small control or instrument devices are supplied with short pigtails, the field cable may be terminated to the pigtail by means of an approved connection, which is adequately insulated, located close to the device, and enclosed in the connecting conduit.

c. Another possible area would be in the event of cable damage in an operating plant where a splice might be preferable over total replacement of the cable. Such instances are resolved on a case-by-case basis.

d. In cases in which field-run cables are incompatible with the terminal size on the devices to which they must terminate, a splice to a short, appropriate pigtail may be made to permit the required termination. Such instances are approved on a case-by-case basis, where the adequacy of the pigtail is confirmed and splices are made with qualified materials and are restricted to enclosures such as MCCs, termination compartments, and panels.

e. Splices made with qualified materials are used within enclosures where specified by design.

f. The 600 volt fire-resistive control and power cables are fitted with termination kits on both ends that are either factory installed or field installed. The termination kits provide transition from solid cable conductors to stranded pigtails suited for making cable terminations. The kits, along with the fire-resistive cables are covered by specification E-057C. Splices for terminating the fire-resisitive cables will be in accordance with paragraphs b, d and e above.

g. The 600 volt fire-resistive control and power cables typically have a maximum manufactured length of 100 feet. Factory installed or field installed splices provide for increased cable length. The splices are covered in the fire-resistive cable specification E-057C, and maintain the fire rating and structural integrity of the cables.

Paragraph 5.1.2 Exposed Class IE raceways are marked in a distinct, permanent manner at intervals not exceeding 15 feet and at points of entry to and exit from enclosed areas.

In addition, separate color identification is provided for each separation group of field wired, safety-related cables.

As stated in reference to Paragraph 4.5, associated circuits are identified the same as their related Class IE circuits, and are, therefore, distinguished from one another as stated above.

See Section 8.3.1.3.

Paragraph 5.1.3 8.1-17 Rev. 24

WOLF CREEK Section 8.3.1.4.1.1 satisfies this paragraph.

Paragraph 5.1.4 Section 8.3.1.4.1.1 satisfies this paragraph.

Paragraph 5.2.1 Sections 8.3.1.1.3 satisfy this paragraph.

Paragraph 5.2.2 Section 8.3.1.1.3 satisfies this paragraph.

Paragraph 5.3.1 Each of the four Class IE batteries is located in a separate room of the control building.

Paragraph 5.3.2 As per Section 8.3.2.1 and 8.3.2.2.1, physical separation, electrical isolation, and redundancy are provided for the entire Class IE dc system, including the battery chargers.

Paragraph 5.4.1 As per Section 8.3.1.1.7, Class IE switchgear of redundant load groups is located in separate rooms in the control building.

Paragraph 5.4.2 As per Section 8.3.1.1.7, Class IE motor control centers of redundant load groups are located in separate rooms within seismic Category I buildings.

Paragraph 5.4.3 Vital distribution switchboards of different separation groups are located in separate rooms in the control building. Each switchboard is located with the vital switchgear of its respective separation group.

Paragraph 5.5 Two separate penetration areas are provided. One area contains cables for separation groups 2 and 4, each group having separate penetration assemblies.

The other area contains cables for separation groups 1 and 3, each group again having separate penetration assemblies. Raceway separation criteria apply to the penetrations. See Section 8.3.1.4.1.1.

Paragraph 5.6.1 Sections 8.3.1.1.6, 8.3.1.3 and 8.3.1.4.1.2 satisfy this guide paragraph.

8.1-18 Rev. 24

WOLF CREEK Paragraph 5.6.2 Separation criteria for wiring internal to control boards are satisfied by Section 8.3.1.4.1.2.

Paragraph 5.6.3 Identification of wiring internal to control boards is provided by separation group designation. See Section 8.3.1.3.

Paragraph 5.6.4 Single control devices to which different separation groups are connected are avoided, wherever practicable. Where single devices are unavoidable, electrical isolation is provided. Where separation by distance is not practicable and internal fire is the only consideration, fire barriers, conduit, or wire duct are used. See Section 8.3.1.4.1.2.

Paragraph 5.6.5 Within control boards and other panels, nonsafety-related wiring is not harnessed with safety-related wiring. Where both types of wiring are contained within the same board or panel, the nonsafety-related wiring is separated from the safety-related wiring by means of barriers or by a distance equal to or greater than 6 inches.

Paragraph 5.6.6 Load Group l and Protection Channels 1 and 3 enter the lower cable spreading room and hence enter from the bottom of the control board. Load Group 2 and Protection Channels 2 and 4 generally enter the upper cable spreading room and hence enter from the top of the control board. The only exception to this is in the console which has channels 2 and 4 brought directly from the channel 2 and 4 vertical shaft via embedded floor raceways into separate openings into the bottom of the console. The scheme meets all requirements of Paragraph 5.1.3. See Section 8.3.1.4.1.1.

Paragraph 5.7 Class IE instruments of different separation groups are generally precluded from occupying the same cabinet. Where this is not practicable, such instruments are located in separate compartments of the cabinet, or are adequately separated by barriers.

8.1-19 Rev. 0

WOLF CREEK Paragraph 5.8 Section 7.3 satisfies the requirements of this paragraph.

Paragraph 5.9 Location of Class 1E actuated equipment is evaluated to ensure that adequate separation for redundant equipment is implemented.

REGULATORY GUIDE 1.81, SHARED EMERGENCY AND SHUTDOWN ELECTRIC SYSTEMS FOR MULTI-UNIT NUCLEAR POWER PLANTS - Wolf Creek is a one unit site.

REGULATORY GUIDE 1.89, QUALIFICATION OF CLASS 1E EQUIPMENT FOR NUCLEAR POWER PLANTS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.93, AVAILABILITY OF ELECTRIC POWER SOURCES - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.100, SEISMIC QUALIFICATION OF ELECTRIC EQUIPMENT FOR NUCLEAR POWER PLANTS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.106, THERMAL OVERLOAD PROTECTION FOR ELECTRIC MOTORS ON MOTOR-OPERATED VALVES - Overload protection for safety-related, motor-operated valves is discussed in Section 8.3.1.1.2. Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.108 - PERIODIC TESTING OF DIESEL GENERATOR UNITS USED AS ONSITE ELECTRIC POWER SYSTEMS AT NUCLEAR POWER PLANTS - The original testing of the emergency diesel generators was performed in conformance with Regulatory Guide 1.108. After final assembly and preliminary startup testing, each diesel generator was tested as described in Section 8.3.1.1.3.

Ongoing, periodic surveillance testing of the diesel generators is performed in accordance with the plant Technical Specifications. The testing requirements in the plant Technical Specifications are based on Regulatory Guide 1.9, Revision 3. The testing guidance of Regulatory Guide 1.108 was largely incorporated into Regulatory Guide 1.9, Revision 3. Refer to Appendix 3A for additional information regarding Regulatory Guide 1.108.

8.1-20 Rev. 27

WOLF CREEK REGULATORY GUIDE 1.118, PERIODIC TESTING OF ELECTRIC POWER AND PROTECTION SYSTEMS - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.131, QUALIFICATION TESTS OF ELECTRIC CABLES, FIELD SPLICES, AND CONNECTIONS FOR LIGHT-WATER-COOLED NUCLEAR POWER PLANTS - The requirements of IEEE Standard 383, 1974 have been used for the qualification of cables, field splices, and connections.

The cable, field splices, and connections are qualified to the environmental conditions and all design basis events (e.g., steam line break) by testing and/or analysis.

Type tests for design basis event conditions consist of subjecting nonaged and aged cables, field splices, and connections to a sequence of environmental extremes that simulate the most severe postulated conditions of a design basis event and specified conditions of installation. Type tests demonstrate margin by application of multiple transients or increased level. Electrical and physical performance of the cable is measured during and following the environmental cycle. All environmental conditions are enveloped by the qualification program. However, the factors for margin given in Section 6.3.1.5 of IEEE 323 are not used.

Testing data is provided to establish the long-term performance of the insulation. Data is evaluated using the Arrhenius technique, using a minimum of three data points including 136 C and two others at least 10 C apart in temperature. No on-going qualification is used.

The recommendations of Regulatory Guide 1.89 are discussed later in this section.

Vertical tray flame testing is performed in accordance with IEEE 383, Paragraph 2.5. However, aged samples are not used.

No field splices are used in the cable trays.

Fire tests are performed with the vertical tray perpendicular to the plane of the horizon.

A gas burner flame source releasing approximately 70,000 Btu/hr is used.

The ribbon gas burner flame source is mounted in accordance with the requirements of the regulatory guide, except that the flame is directed from the back side of the cable tray.

The 600 volt fire-resistive control and power cables are type tested to 1925 F to verify 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and 3 hour3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> fire ratings, and to verify environmental qualifications in accordance with NRC Generic Letter 86-10, Supplement 1. The fire testing requirements of NRC Generic Letter 86-10, Supplement 1, exceed the flame test requirements of IEEE 383.

Oil or burlap as an alternate flame source is not used.

The requirements outlined in Regulatory Guide Position 13 are met.

IEEE 323-1974 IEEE STANDARD FOR QUALIFYING CLASS IE EQUIPMENT FOR NUCLEAR POWER GENERATING STATIONS - Environmental qualification of Class IE electric equipment and the extent of compliance with IEEE 323 are discussed in Section 3.11(B) and 3.11(N).

8.1-21 Rev. 27

WOLF CREEK IEEE 338-1971 CRITERIA FOR THE PERIODIC TESTING OF NUCLEAR POWER GENERATING STATION PROTECTION SYSTEMS - Refer to Table 7.1-2 for application of this standard to various systems.

IEEE 344-1975 SEISMIC QUALIFICATION OF CLASS IE ELECTRIC EQUIPMENT FOR NUCLEAR POWER GENERATING STATIONS - Seismic qualification of Class IE electric equipment and the extent of compliance with IEEE 344 are discussed in Section 3.10(B) and 3.10(N).

IEEE 387-1984 CRITERIA FOR DIESEL GENERATOR UNITS APPLIED AS STANDBY POWER SUPPLIES FOR NUCLEAR POWER GENERATING STATIONS - The original design and testing of the emergency diesel generators conformed to Regulatory Guide 1.9, Revision 1 and Regulatory Guide 1.108. Regulatory Guide 1.9, Revision 1 endorsed IEEE Standard 387-1977, and original compliance was demonstrated based on the design criteria as stated below. The following demonstrates compliance with design criteria of IEEE 387:

a. Service Environment The diesel generator unit provides power to appropriate ventilation equipment to maintain an acceptable environment within the diesel generator rooms.

b. Starting, Loading, and Design Load Profile The diesel generator unit is capable of starting, accelerating, being loaded, and carrying the design load described in Section 8.3.1.1.3. The unit energizes its cooling equipment within an acceptable time.

c. Quality of Power Refer to previous discussions in this section on Regulatory Guide 1.9 concerning frequency and voltage limits.

d. Ratings Refer to previous discussions in this section on Regulatory Guide 1.9 concerning the basis for the continuous rating of the diesel generator.

Periodic, in-service testing of the diesel generators is performed in accordance with the plant Technical Specifications and the test recommendations of Regulatory Guide 1.9, Revision 3. Regulatory Position C.2 of Regulatory Guide 1.9, Revision 3 endorses requirements of IEEE Standard 387-1984 with respect to Section 3, Definitions, Section 6, Testing, and Section 7, Qualification Requirements, subject to the supplemental design considerations specified in Section C.1 and the diesel generator testing provisions specified in Section C.2 of the Regulatory Guide. Differences between the test requirements of the plant Technical Specifications and the recommendations of the Regulatory Guide are due to the Standard Technical Specifications and/or approved changes to the plant Technical Specifications.

8.1-22 Rev. 27

WOLF CREEK

e. Interactions Refer to previous discussions in this section for an analysis per Regulatory Guide 1.6 for assurance that independence is provided between redundant diesel generators and the Class IE electric system. Mechanical systems are designed so that a single failure affects the operation of only a single diesel generator.

f. Qualification Refer to Section 3.11(B) for the extent of compliance to IEEE 323.

g. Design and Application Considerations Design conditions such as vibration, torsional vibration, and overspeed are considered in accordance with the requirements of IEEE 387.

h. Governor and Voltage Regulator Operation Governor and voltage regulator manually actuated droop modes are automatically reset in the isochronous modes in the event of the loss of offsite power.

i. Control The diesel generator is provided with control systems permitting automatic and manual control. The start-diesel signal is functional, except in the local (repair and maintenance) mode. The capability is provided at each diesel generator for restricted manual starting in the event of a control room emergency. Refer to previous discussions in this section for a further description of the control systems.

j. Surveillance Voltage, current, frequency, and power metering are provided in the control room to permit assessment of the operating condition of each diesel generator.

Surveillance instrumentation is provided in accordance with IEEE 387, as described in Sections 9.5.4 through 9.5.8.

8.1-23 Rev. 0

WOLF CREEK

k. Testing Tests are conducted on each diesel-generator unit in accordance with IEEE 387, as listed in Section 8.3.1.1.3.

IEEE 317-1976 IEEE STANDARD FOR ELECTRICAL PENETRATION ASSEMBLIES IN CONTAINMENT STRUCTURES FOR NUCLEAR POWER GENERATING STATIONS - Electrical penetration assemblies are used for all electrical cables that pass through the reactor building. These assemblies are designed and tested in accordance with IEEE Standard 317.

Principal design criteria for these assemblies include the following:

a. The mechanical design, materials, fabrication, examination, and testing of the pressure-retaining boundary of the electrical penetration assembly, excluding electrical conductors, feed-through connectors, insulation, potting compounds, and gaskets, are in accordance with the requirements of the ASME Boiler and Pressure Vessel Code,Section III, Subsection NE, for Class MC components.

b. The electrical penetration assembly is designed to meet all the electrical requirements for the specified service environment without dielectric breakdown or overheating.

c. The electrical penetration assembly is designed to have a total gas leakage rate through its pressure-retaining boundary exclusive of the aperture seal not greater than 1 x 10-6 standard (20 C at one atmosphere of pressure) cubic centimeters per second of dry helium (or equivalent means of measurement) at the maximum specified containment design pressure.

d. A leak test is performed on each penetration assembly following installation. The test is capable of detecting a leakage rate of 10-2 cubic centimeters per second or less of dry nitrogen with maximum containment pressure applied across the penetration assembly pressure barrier seal at ambient temperature.

e. Each penetration room has a continuous nitrogen supply system manifolded to each penetration assembly. The design and installation of the system facilitates periodic individual penetration assembly gas leak rate testing after installation.

8.1-24 Rev. 12

WOLF CREEK

f. The electrical penetration assembly design is such that safety-related channel separation is maintained.

g. The penetration assembly design is qualified by testing for the intended service within the service and DBE environment.

IEEE 317-1983 IEEE STANDARD FOR ELECTRICAL PENETRATION ASSEMBLIES IN CONTAINMENT STRUCTURES FOR NUCLEAR POWER GENERATING STATIONS - An Electrical penetration assembly is used for all fiber optic cables that pass through the reactor building. This assembly is designed and tested in accordance with the applicable portions (non-electrical) of IEEE Standard 317.

Principal design criteria for this assembly include the following:

a. The mechanical design, materials, fabrication, examination, and testing of the pressure-retaining boundary of the electrical penetration assembly used for fiber optic cables, excluding the fiber conductors, fiber covering/sealant and spare port plugs/ferrule assemblies, are in accordance with the requirements of the ASME Boiler and Pressure Vessel Code,Section III, Subsection NE, for Class MC components.

b. The electrical penetration assembly used for fiber optic cables is designed to have a total gas leakage rate through its pressure-retaining boundary exclusive of the aperture seal not greater than 1 x 10-3 standard cubic centimeters per second of dry nitrogen (@20 C + 15 C) at the maximum specified containment design pressure.

c. A leak test is performed on the Electrical penetration assembly used for fiber optic cables, following installation. A post installation leakage test is conducted in accordance with Appendix J requirements.

d. The electrical penetration assembly used for fiber optic cables does not incorporate O-rings and does not require constant nitrogen pressurization in order to provide the pressure boundary seal. The design facilitates periodic penetration assembly gas leak rate testing after installation.

IE BULLETIN 79-27 Power for the vital reactor instrumentation and protection systems is provided by the Class 1E instrument ac power system. This system is composed of four independent 120-volt ac power supplies to provide power for the four channels of the vital reactor protection and instrumentation systems. With one channel inoperable, the remaining three channels are capable of monitoring the vital reactor parameters continuously and safely shutting down the reactor.

Each essential power panel is fed from a dedicated Class 1E inverter, which, in turn, is fed from one of four independent Class 1E batteries. Each essential power panel is fed from a dedicated Class 1E inverter, which, in turn, is fed from one or four independent Class 1E batteries. Each inverter has a 125 VDC supply and a separate 120VAC supply to an internal constant voltage transformer. In the event of a failure of the inverter DC rectifier section, the inverter internal constant voltage transformer will supply the 120VAC power panel until the swing (backup) inverter can be placed in service to replace it.

Each battery has an associated charger that is fed from a diesel generator backed bus. Each battery has an associated charger that is fed from a diesel generator backed bus.

8.1-25 Rev. 29

WOLF CREEK Power for the four non-Class 1E reactor process control channels is provided by the non-Class 1E ac power system through two non-Class IE uninterruptible power supplies (UPSs). Each power supply train supplies a dedicated UPS that, in turn, supplies two process control cabinets. A backup dc supply is provided to the UPS in the event that the primary source is not available.

The backup dc power source is the non-Class 1E dc system. This system is composed of two station batteries and two battery chargers. Both of the chargers are powered from a diesel generator backed bus.

In the event of loss of power as a result of an inverter failure, two trains of backup power to the process cabinets are provided by manual switches from the non-Class 1E ac system. These trains of ac power are provided with a cross tie for additional reliability.

Power for miscellaneous non-Class 1E instrument loads is provided by the non-Class 1E instrument ac power system. This system is powered from the Class 1E power system through a qualified isolating regulating transformer. One transformer is provided for each train of instrument ac. No cross ties are provided.

The Class IE instrument ac power system is provided with the following alarms in the control room:

a. Inverter Trouble

b. Inverter Static Switch Transfer

c. Loss of switchboard voltage The non-Class IE dc system is provided with the following alarms which are grouped into a summary alarm in the control room:

a. System ground

b. Battery imbalance

c. Charger dc overvoltage

d. Charger ac undervoltage

e. Charger dc undervoltage

f. Charger ac and dc breakers open

g. Charge failure

h. Loss of distribution board voltage

i. Loss of switchboard voltage The non-Class IE instrument ac system is provided with a loss of bus voltage alarm in the control room.

Procedures have been developed that address Action Item No. 2 of IE Bulletin 79-27 (i.e. emergency procedures, administrative procedures, and/or alarm procedures). As a result of the review of IE Bulletin 79-27 and IE Circular 79-02, no design modifications are required. However, the ongoing development of procedures and administrative controls will consider these IE issuances.

8.1-26 Rev. 29

WOLF CREEK 8.

1.5 REFERENCES

1.

Calculation NE-E-001, Rev. 0, Emergency Diesel Transient Loading Analysis 8.1-27 Rev. 27

WOLF CREEK 8.2 OFFSITE POWER SYSTEM 8.

2.1 DESCRIPTION

The WCGS offsite ac power supply for the startup, normal operation, and safe shutdown is supplied from the transmission network. The principal design bases as applied to the offsite power system are described in Section 8.1.4.

The portion of the offsite power system from the startup transformer and ESF transformer XNB01 to the 4.16-kV Class 1E busses is discussed here. The offsite power system from the transmission line network to the startup transformer and ESF transformer XNB01 is discussed in Section 8.2.1.1.

Two physically independent sources of offsite power are brought to the onsite power system. One circuit is fed from ESF transformer XNB01 and supplies power normally to its associated 4.16-kV Class 1E bus.

The other circuit is fed from one secondary winding of the startup transformer, through ESF transformer XNB02, and supplies power normally to its associated 4.16-kV Class lE bus. In addition, each offsite power circuit can be manually aligned to supply power to the opposite or both 4.16-kV Class lE busses, if required. Each of these offsite power circuits is designed to be available in sufficient time to ensure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded following a loss of all onsite power sources and the remaining offsite power circuit.

The two ESF transformers XNB01 and XNB02 are separated by a 3-hour fire wall.

The cables associated with each of these offsite power circuits are routed in separate and distinct raceways. The duct banks and other routing features of the two circuits are shown on drawings E-OR0224, E-OR3321, E-OR3221, and E-1R3211 for the cables for the ESF transformers to the 4.16-kV Class lE busses, on drawings E-1R0223, E-OR4331, E-OR4321, and E-OR0224 for cables from the startup transformer to the 13.8-kV switchgear and from the 13.8-kV switchgear to ESF transformer XNB02.

The offsite power circuits, including the transformers and cables, have been sized to carry their anticipated loads continuously. Each ESF transformer is sized to carry its associated safety-related load group continuously. The secondary feeder cables to the 4.16-kV Class lE busses are sized in excess of that required to carry their maximum load continuously. The startup transformer is sized to carry its anticipated load continuously, but may be slightly overloaded under certain abnormal conditions. For additional details of the sizing of these components, refer to Section 8.3.1.

8.2-1 Rev. 25

WOLF CREEK These two circuits are fully testable. Since they are continuously energized and largely passive, they are continuously tested by their use. When one circuit is shutdown, relays, meters, and other instruments can be tested and calibrated as required.

Control and instrumentation power for these offsite power circuits is provided by the Non-Class lE dc system. A dc power source from separate station batteries is provided to each offsite power circuit for control and relaying purposes.

From the above considerations, it is concluded that the installation, sizing, and control of both of the offsite power circuits are designed so as to minimize the likelihood of their simultaneous failure under operating and accident conditions.

For additional details concerning the compliance of the offsite power system with General Design Criteria, refer to Section 3.1.

The instrumentation associated with the offsite ac power system provides sufficient information to determine the system availability at any time.

Table 1.7-1 of the USAR contains drawings 10466-E-01NB01 and 10466-E-01NB02, Single Line Meter and Relay Diagrams for the Safety-Related 4.16-kV Busses NB01 and NB02. These drawings show the surveillance details of the ESF transformers and their associated 4.16-kV bus. Table 8.3-4 of the USAR, Failure Modes and Effects Analysis, shows the system failure modes and the method of such failure detection.

8.2.1.1 Transmission Network The KG&E and KCPL transmission systems serve as the main outlet and source of offsite power for WCGS. Connection of the station output to the system is achieved via a 345-kV overhead line from the plant yard to the Wolf Creek 345-kV switchyard.

A rather extensive 345-kV network forms the backbone of the KG&E-KCPL and neighboring systems, as can be seen from Figure 8.2-1. This transmission system provides a highly reliable source of continuous power for plant shutdown.

KCPL and KG&E maintains voltage between a maximum and minimum range of +5%, -2%

of nominal. The frequency range is 60 +/-.002 Hertz.

8.2-2 Rev. 32

WOLF CREEK There are three 345-kV lines connecting the Wolf Creek 345-kV Substation to the area transmission system. The three lines are as follows:

a. Wolf Creek-Waverly-LaCygne 345-kV Line:

The Wolf Creek-Waverly-LaCygne line is sectioned into two line sections. The first is a 5 miles long line connecting Wolf Creek to the Waverly Switching Station followed by a 53 miles long line connecting Waverly Switching Station to LaCygne Steam Electric Station which has three additional 345-kV lines.

b. Wolf Creek-Rose Hill 345-kV Line:

98 miles long, connecting to the Rose Hill Substation southeast of Wichita. Rose Hill Substation has three additional 345-kV connections.

c. Wolf Creek-Benton 345-kV Line:

90 miles long, connecting to the Benton Substation northeast of Wichita. Benton Substation has two additional 345-kV lines, one of which is to the Wichita 345-kV Substation, near the Gordon Evans Steam Electric Station.

The above 345-kV lines do not share common rights-of-way, do not have any crossovers, and are not in close proximity of one another, except in the immediate vicinity of the switchyard. In those areas, the design is such as to maintain clearances as required by the National Electric Safety Code (4).

In addition, a 27-mile long 69-kV line connects the Wolf Creek 345-kV switchyard to the Athens Switching Station located south of the Wolf Creek Plant site. The Wolf Creek-Rose Hill 345-kV line crosses over this 69-kV line once approximately 7 miles from the Wolf Creek Plant site. The physical separation of the two lines meets or exceeds the requirements of the National Electric Safety Code (4).

If one of the three 345-kV lines faulted, the breakers located at Wolf Creek Substation would trip, deenergizing the line (in the case of the Wolf Creek-Waverly-LaCygne Line only one segment of the line would normally be deenergized due to the Waverly tap, however, the remaining segment would no longer be credited as a source of power for the plant). Any one of the two remaining incoming 345-kV transmission lines at Wolf Creek Substation (in the case of the Waverly/LaCygne Line both line segments must be in-service) can carry the total ESF load required for safe shutdown by controlled switching of te Wolf Creek substation breakers, providing a separate transmission line feeding each ESF transformer.

The Phillips 69-kV line, Figure 8.2-5, is owned and maintained by the Lyon-Coffey County REC. It is not a supply line for the 69-kV system. Should a fault occur on this line, a 69-kV breaker located in the Wolf Creek Substation would trip, deenergizing the line -- not adversely affecting the 345-kV offsite source.

8.2-3 Rev. 29

WOLF CREEK All line designs are such as to minimize the possibility of conductor vibration and/or galloping. The design of these overhead lines meets or exceeds the requirements of the National Electric Safety Code (4) for heavy loading district, Grade B construction, and is based on a lightning performance of less than one outage per 100 miles per year.

8.2.1.2 Switchyard and Connection to the Onsite Distribution System Figure 8.2-3 shows the physical orientation and separation of the 345-kV and 69-kV switchyards; the main, startup, 345/13.8 kV, 345/69-kV and 67/13.8-kV transformers; the manual throwover switch and the transmission line routing.

Figure 8.2-4 provides a one-line diagram of the electrical distribution on the site. The electrical one-line diagram of the installation showing connections to offsite substations is shown in Figure 8.2-5.

The 345-kV switchyard design includes a breaker-and-a-half arrangement. A 69-kV line and transformers connected to the local transmission system are provided.

The 345-13.8-kV unit startup transformer, through switchyard breaker 345-100 or 345-110, serves one of the two Class IE busses by way of the ESF number two transformer. The No. 7 transformer (also 345/13.8-kV, through switchyard breaker 345-80 or 345-90, is the primary source for the second Class IE bus by way of breaker 13-48, the manual throwover switch and the ESF number one transformer. The No. 7 transformer is an installed spare for the unit startup and would require being moved to the location of the unit startup should it become necessary to replace the unit startup transformer. The unit startup is a physically independent offsite power source from the No. 7 transformer as neither source shares common protective equipment. As an alternate to the No.

7 transformer source, the No. 6 (345/69-kV) transformer (with No. 4 and No. 5 67/13.8-kV transformers) is available to serve the second Class IE bus via the manual throwover switch. This off-site power source does not have open phase detection capability. This alternate power source is also physically independent from the unit startup transformer, as it does not have common protective equipment with the unit startup transformer. Figure 8.2-3 shows the routing of the overhead line from the 345-kV switchyard to the startup transformer, which serves one of the load groups. This figure also shows the underground circuits encased in concrete from the primary 345/13.8-kV source and the alternate 345/69-kV source to the manual throwover switch, then from the manual throwover switch in the 69-kV switchyard via an underground circuit encased in concrete to the ESF number one transformer. Voltage studies have been performed and cables have been sized to assure that either offsite source is capable of supplying the entire Class IE loads should it become necessary.

8.2-4 Rev. 32

WOLF CREEK When the ESF No., 1 transformer is fed through the primary offsite power source (345/13.8-kV transformer), the offsite 69-kV system may be connected to the 345-kV system through the 345/69-kV transformer. When the ESF No. 1 transformer is being fed from the 345-kV switchyard through the alternate offsite power source (345/69-kV transformer and two parallel 67/13.8-kV transformers), the offsite 69-kV shall not be connected to the 345-kV system.

The 13.8-kV side of both 67/13.8-kV transformers is connected to five underground circuits. These five circuits feed through metal clad switchgear with drawout type breakers and a transfer bus which serve the ESF No. 1 transformer, one switchyard station power transformer, the site distribution system, and the east and west construction loops.

Three single-phase, one-third size, step-up transformers provided for the unit raise the generator voltage to 345-kV prior to transmission, via an overhead line, to the 345-kV switchyard located approximately 700 feet due north of the turbine building. This overhead line is not carried on the same supporting structures as the line to the unit startup transformer. The design of these overhead lines meets or exceeds the requirements of the National Electric Safety Code (4) for heavy loading district, Grade B construction.

The generating unit is to be synchronized to the system across the generator circuit breakers located in the 345-kV switchyard. Control of these synchronizing breakers and the 13.8-kV breakers is administered from the plant main control room. Control Room indication is provided for all 345-kV breakers and 69-kV feeder breakers. Control of all other transmission breakers in the Wolf Creek switchyard is via supervisory control from the Operating Agent's System Control Center in Topeka.

In addition to status indication of all 345-kV breakers and line disconnect switches, the 69-kV feeder breakers and the 13.8-kV breakers, eight main control board annunciator windows are provided to alert the operator to any failure which could result in loss of availability of either preferred offsite source to perform its intended function. These alarms include the following:

345-kV Trouble 345-kV Supervisory Trouble 345-kV Battery Trouble SL2 Buss 13-40 Breaker Trip 69-kV Trouble No.4/No.5 Transformers not Parallel No. 1 Switchgear Breaker Trip 13-48 Breaker Trip 8.2-5 Rev. 32

WOLF CREEK A partial breakdown of many of these alarms is provided on the plant computer alarm listing with a further breakdown on the local annunciator panel in the switchyard buildings and equipment cabinets. A voltmeter is provided on the main control board for monitoring the voltage on the 13.8-kV busses SL7 and SL8 and breaker 13-48.

The 345/13.8 kV transformer is equipped with Open Phase Detection (OPD) equipment. The purpose of the OPD equipment is to detect an Open Phase Condition (OPC) event. An OPC is created when there is not proper circuit continuity for one or more phases of an offsite source.

No failure causing a loss of function of one offsite source can occur without alarming on the Main Control Board in some manner. The main switchyard bus and interconnections between various switchyard components are comprised of rigid aluminum bus.

8.2.1.3 Compliance with Design Criteria and Standards The offsite power systems are capable of providing reliable sources of power to the Class IE systems in compliance with GDC 17 and 18 of 10 CFR Part 50 and Regulatory Guide 1.32. Design of the offsite power systems for Wolf Creek exceeds the minimum requirements cited in the above documents as demonstrated by the following analysis.

Criterion 17 - Electric Power Systems In addition to the features detailed in Sections 8.2.1.1 and 8.2.1.2, compliance with Criterion 17 is further demonstrated by the following:

a. In the event any one of the overhead 345-kV transmission lines were to be interrupted, either one of the remaining two lines is capable (in the case of the Waverly/LaCygne Line both line segments must be in-service) of carrying the total ESF load required for post-accident and post-fire safe shutdown.

Controlled switching of the Wolf Creek substation breakers, providing a separate transmission line feeding each ESF transformer, based on grid conditions, is an acceptable means of maintaining acceptable voltage to carry the ESF load required for post-accident and post-fire safe shutdown.

b. The two 345-kV transmission lines from the plant yard to the switching station are supported on their own individual structures. Structural design and circuit separation are such as to eliminate the possibility of a structural collapse causing an outage of both 345-kV transmission lines.

c. The 345-kV system is protected from lightning and switching surges by lightning protective equipment and by overhead static lines.

8.2-6 Rev. 30

WOLF CREEK

d. The design of all overhead lines meets or exceeds the requirements of the National Electric Safety Code (4) for heavy loading district, Grade B construction, and is based on a lightning performance of less than one outage per 100 miles per year. Design of switchyard components is in accordance with the latest standards of the IEEE, ANSI and NEMA.

e. The design of the 125-V dc system for the 345-kV portion of the switchyard consists of two independent dc systems. Each of the two systems consists of a separate 125-V dc battery, battery charger, and distribution system. Cable separation is maintained between the two systems. A single failure caused by a malfunction of either of the two 125-V dc systems will not affect the performance of the other system. The ability of the switchyard to supply offsite power to the plant will not be affected by the loss of one of the two 125-V dc systems. The surveillance of battery charger operation and battery voltage for each battery system is provided by individual alarms monitored in the switchyard control building. Alarms are also monitored in the plant control room. The 69-kV portion of the switchyard has its own 125-Vdc battery for relaying. There is no dc tie between the switchyard batteries and those in the power block.

f. Two isolated 13.8-kV supplies from separate sources are provided to the switchyard. One supply is from the offsite 13.8-kV bus and the other is from a site 13.8-kV bus. Each supply serves a station power transformer which is capable of supplying the total ac load of the station. Loss of the normal source will initiate automatic throwover of all load to the standby transformer.

Subsequent loss of the standby source will initiate automatic throwover to a standby diesel generator.

g. For reliability and operating flexibility, the 345-kV switchyard design includes a breaker-and-a-half arrangement for each circuit. Along with breaker failure backup protection. Each 345-kV breaker has two trip coils on separate isolated dc control circuits. The above provisions permit the following:

1. Any transmission line can be cleared under normal or fault conditions without affecting any other transmission line.

2. Any 345-kV circuit breaker can be isolated for maintenance without interrupting the power or protection to any circuit.

3. Short circuits on a section of bus can be isolated without interrupting service to any circuit other than that connected to the faulted bus section.

h. Both offsite sources from the 345-kV switchyard are separate and independent. The failure or structural collapse of one will not affect the other.

8.2-7 Rev. 30

WOLF CREEK

i. The offsite sources from the startup and the primary 345/13.8-kV transformers to the ESF transformers and associated switchgear are independently and separately routed. The offsite sources from the startup and the alternate 345/69-kV, 67/13.8-kV transformers to the ESF transformers and associated switchgear are independently and separately routed.

j. Two physically independent circuits are provided to supply offsite power to the onsite distribution system.

The offsite sources from the 345-kV switchyard are each normally connected to their own individual ESF transformers, and are both immediately available following a LOCA to supply components important to safety.

Criterion 18 - Inspection and Testing of Electric Power Systems The 345-kV and 69-kV circuit breakers are inspected, maintained and tested on a routine basis. This can be accomplished without removing the generators, transformers or transmission lines from service.

Transmission line protective relays are tested on a routine basis. This can be accomplished without removing the transmission lines from service. The OPD equipment includes abnormal condition alarms and can be functionality tested with the system online. Generator, main, startup and standby transformer relays are tested on a routine basis when the generator is off line.

Regulatory Guide 1.32 As described in the paragraph above, the two offsite sources are immediate access circuits from the transmission network.

This design conforms to the preferred design as outlined in Regulatory Guide 1.32.

Industry Standards The design complies with the following industry standards and recommendations:

1. Institute of Electrical Electronics Engineers, Inc (IEEE)

2. American National Standards Institute (ANSI)

3. National Electrical Manufacturers Association (NEMA)

4. American Institute Steel Construction (AISC)

5. American Concrete Institute (ACI) 8.2-8 Rev. 30

WOLF CREEK

6. American Society for Testing and Materials (ASTM)

7. American Welding Society (AWS)

8. Steel Structures Painting Council (SSPC)

9. National Environmental Systems Contractors (NESC)

10. National Electrical Code (NEC)

11. American Society of Civil Engineers (ASCE)

12. Underwriters Laboratory, Inc (UL)

13. Local Building Codes

14. American Iron and Steel Institute (AISI)

15. Metal Building Manufacturers Association (MBMA)

16. Sheet Metal and Air Conditioning Contractors National Association (SMACNA) 8.2.2 ANALYSIS The 345-kV system to which the WCGS is connected is quite extensive with several major interconnections to other regions. One major benefit to be derived from such a system is that, through proper design, the system continues to function properly on loss of a generating unit, loss of a heavily loaded circuit, or various other contingency conditions.

Analysis of conditions during plant operation demonstrate the following regarding the Wolf Creek 345-kV Substation and its associated lines:

1. The system can successfully withstand loss of the Wolf Creek unit when fully loaded.

2. With all 345-kV lines in service and the Wolf Creek unit fully loaded, the system can successfully withstand loss of any one 345-kV line from Wolf Creek Substation under three-phase fault conditions with the fault cleared in normal clearing sequence.

3. With all 345-kV lines in service and the Wolf Creek unit fully loaded, the system can successfully withstand loss of any two elements caused by a single phase fault being cleared by back-up breaker operation in back-up clearing sequences.

8.2-9 Rev. 0

WOLF CREEK

4.

Any one 345-kV line, when energized from the remote end (in the case of the Waverly/LaCygne 345kV Line both line segments must be energized), can successfully carry the total ESF load required for post-accident and post-fire safe shutdown should it become necessary to do so.

Controlled switching of the Wolf Creek substation breakers, providing a separate transmission line feeding each ESF transformer, based on grid conditions, is an acceptable means of maintaining acceptable voltage to carry the ESF load required for post-accident and post-fire safe shutdown.

5. All of the above comments apply on both a transient stability and a steady state basis.

The analyses of the WCGS demonstrate that the transmission system is fully capable of delivering the output from WCGS and of providing adequate power for safe operation of WCGS.

A transmission system analysis has shown the frequency decay rate to be below 5.0 Hz/sec, therefore, the reactor coolant pump motor breakers are not required to be safety grade.

Transmission grid availability of the KG&E and KCPL systems has historically been very high with no recorded incidents of system islanding within the twenty year period prior to licensing. During the period 1942 to the mid-sixties, KG&E and KCPL established multiple 138 and 161-kV interconnections with their neighboring utilities, significantly strengthening the reliability of the bulk power systems. Grid availability has been further strengthened by multiple 345-kV lines constructed in this and surrounding areas since 1966.

The area's historical outage rate prior to licensing for 345-kV circuits is below 1.0 per 100 circuit miles/year for outages of over 15 minutes duration and less than 2.0 per 100 circuit miles/year for all outages including momentary interruptions. This compares favorably with the historical performance of other 345-kV transmission systems. These outages are caused primarily by lightning, wind and ice.

In view of the applied system design, and based on past performance of the transmission system, uninterrupted transmission grid availability to meet all requirements is projected over the life of WCGS.

8.2-10 Rev. 29

IOWA T 0 MrNNE APOLIS TO DES MOINES

\\.. - -..

TO OMAHA'-

TO LINCOLN

\\

NEBRASKA KANSAS TO OKLAHOMA CITY OKLAHOMA HOYT STRANGER CREEK TO TULSA MISSOURI TO TO ST. LOUIS TO ST. LOUIS 1\\

• WIND POWER

~ STATION e SUBSTATION POWER STATION 345 KV TRANSMISSION LINE

---STATE BORDER Rev. 32 WOIJF1 CREEK UPDATElD fiAFElmY ANALYf!I REPORT Figure 8.2-1 345 KV SYSTEM (Historical)

6

TO WICHITA..........----.......

345KV BENTON 345KV TO WAVERLY WIND FARM COLLECTOR SUB 345KV TO BENTON

~O MILES 5 MILES

~

WAVERLY 345KV TO 138KV SWITCH YARD TO TO 138KV SWITCH YARD 13 8 K V ______....

SWITCH YARD TO 138KV...,..___...

SWITCH YARD TO l38KV~

SWITCH YARD 14 MILES ROSEHILL 345KV TO SOONER AREA OF CHANGE 345KV TO WAVERLY 5 MILES WOLF CREEK 345KV 345KV TO~---~

ROSEHILL 98 MILES LATHAM 345/69KV XFMR 69KV TO ATHENS 27 MILES REC 69KV TO PHILLIPS

,......,.,........ 67/13.8KV XFMR I

I

~- -------- -*-------....J POWER BLOCK

,---.---______,.... TO WEST GARDNER I CRAIG 0----3 ')--------,

,...-------~~0 STILWELL UNIT 2

~-~-~To NEOSHO 345KV TO LACYGNE 53 MILES 345/13.8KV XFMR REV.32 WOLF CREEK UPDATED SAFETY ANALYSIS REPORT Figure 8.2-5 ELECTRICAL ONE LINE DIAGRAM OF WOLF CREEK 345KV SWITCHYARD AND ADJACIENT SUBS

WOLF CREEK 8.3 ONSITE POWER SYSTEMS The onsite power system is comprised of a standardized portion within the power block which uses the same design as Callaway and a nonstandardized portion outside of the power block.

8.3.1 AC POWER SYSTEMS 8.3.1.1 Description The onsite ac power system includes a Class IE system and a non-Class IE system.

8.3.1.1.1 Non-Class IE System 8.3.1.1.1.1 Non Class IE Site Auxiliary Power System A single-line diagram of the AC auxiliary power system is shown in Figure 8.3-1, sheet 3.

Site auxiliary power is supplied at 13.8-kV from two independent sources within the power block: Buses PA01 and PA02. Neither of these is a Class IE power bus. Two air circuit breakers at each source (four total) deliver power to the site through underground feeder cables. Controls, metering, instrumentation and protective relaying for each site feeder are provided within the power block.

One of the site feeders serves the makeup water screenhouse and makeup water discharge structure. At the makeup water discharge structure, the feeder is tapped to supply a 480-volt unit substation through a 13.8-kV-480V transformer for the raw water pumps. At the screenhouse, the feeder supplies 4.16-kV switchgear through a 13.8/4.16-kV transformer. The transformer is rated 5.0 MVA, OA, and is equipped for automatic tap changing under load. The 4.16-kV switchgear supplies the makeup water pumps and a 480-volt unit substation for various auxiliaries.

One site feeder from each of the power block buses serves the non-Class IE circulating water screenhouse. At the screenhouse, each feeder supplies 13.8-kV switchgear through a manually operated, normally closed disconnect. A normally open disconnect between the two switchgears permits manual interconnection of the buses, but mechanical interlocks prevent interconnection of the independent site feeders. Each of the site feeders is sized to carry the entire screenhouse in the event the other feeder is disabled. Each 13.8-kV switchgear supplies circulating water pumps, a 480-volt unit substation for auxiliaries, and a 4.16-kV switchgear through a 13.8/4.16-kV transformer rated 5.0 MVA, OA. Electrically operated circuit breakers at the 4.16-kV switchgear permit interconnection of the buses, but electrical interlocks prevent 8.3-1 Rev. 13

WOLF CREEK parallel operation of the 13.8/4.16-kV transformers. Each transformer is sized to carry the entire 4.16-kV screenhouse load in the event the other transformer is disabled. The 4.16-kV switchgear supplies the service water pumps and the motor-driven fire pump.

The remaining site feeder serves 13.8-kV switchgear located in the shop building. This switchgear supplies standby station power for the 345-kV switchyard, an emergency feed for the town of Burlington, Kansas, and 480-volt unit substations for auxiliaries at the shop building, administration building, main warehouse, auxiliary warehouse, technical support center, guardhouse, and Water Treatment Building North.

Electrical interlocks, or administrative controls, prevent interconnection of the onsite auxiliary power system with the Burlington normal source or the switchyard station power normal source.

The selection, application, and design of the equipment used in the onsite auxiliary power system is compatible with that of the power block and is in compliance with applicable standards and regulations.

8.3.1.1.1.2 Non-Class IE Powerblock Power System The non-Class IE ac system is that part of the power system outside the broken-line enclosures indicated in Figure 8.3-1, sheet 1. The non-Class IE ac system distributes power at 13.8 kV, 4.16 kV, 480 V, and 208/120 V ac for all nonsafety-related loads. The non-Class IE ac system also supplies preferred (offsite) power to the Class IE ac system through two ESF transformers. One ESF transformer is supplied power directly, by one of the preferred power circuits, from the offsite power system. The second ESF transformer is supplied power from one of the secondary windings of the startup transformer.

This startup transformer is supplied power from the second preferred power circuit from the offsite power system. Routing of cables from the ESF transformers to the Class IE switchgear is shown on drawings E-0R0224, E-0R3321, E-OR3221, and E-1R3211. Routing of cables from the startup transformer to the 13.8-kV switchgear and from the 13.8-kV switchgear to ESF transformer XNB02 is shown on drawings E-1R0223, E-0R4331, E-0R4321, and E-OR0224. Feeds to ESF transformer XNB01 and the startup transformer are described in Section 8.2.1.2.

The unit auxiliary transformer and the startup transformer each have two secondary windings rated at 13.8 kV.

Two 13.8-kV busses supply power to nonsafety-related loads. Each 13.8-kV bus is connected to a secondary winding of the startup transformer and also to a secondary winding of the unit auxiliary transformer. During starting of the unit, both 13.8-kV busses are 8.3-2 Rev. 19

WOLF CREEK supplied power from the startup transformer. The busses are later transferred to the unit auxiliary transformer, during power generation, by a manually initiated transfer. Automatic transfer of the 13.8-kV busses from the unit auxiliary transformer to the startup transformer is provided.

a. The bus transfer is performed immediately after electrical faults where the generator/network can no longer supply power to the reactor coolant pumps.

b. The bus transfer is performed approximately three seconds after generator vital trips (trips initiated by a turbine trip due to a mechanical fault) where the generator/network can no longer supply power to the reactor coolant pumps. Generator vital trips are initiated by turbine trips on low vacuum, thrust bearing wear, low bearing oil pressure and high vibration.

c. The bus transfer is performed approximately 33 seconds after generator non-vital trips (trips not involving electrical or turbine faults).

The turbine generator remains connected to the switchyard during the delay to allow the switchyard to supply power to the reactor coolant pump busses for at least 30 seconds before any transfer is made.

The startup transformer has the capacity to supply both non-Class IE and both Class IE load groups simultaneously. Refer to Section 8.1.2 for a definition of load group. Figure 8.3-1 shows the transformers, feeders, busses, and their connections. It also lists all loads directly supplied from each 13.8-kV and 4.16-kV bus.

Two feeders from each of the two 13.8-kV busses supply power to non-Class IE site loads located outside the power block. Loads and power distribution systems for WCGS are described in detail in Section 8.3.1 of the USAR.

The startup transformer is equipped with two secondary windings, each rated at 13.8 kV, 50 MVA FOA.

The startup transformer, ESF transformers, and their associated feeder cables have all been sized to carry their expected loads continuously. During normal system operation, transformer loads are below the manufacturer's FOA design limitations. Under abnormal system configurations, such as when ESF No. 2 or a station service transformer have lost their normal feeds, loads may be transferred to the alternate startup transformer secondary winding. (NOTE:

The previous statement is for very limited conditions of plant operation which include as stated, abnormal or complicated scenarios. Refer to USAR Fig. 8.2-4 for a better description of actual system configuration.) Provisions exist for the automatic transfer of busses PB03/PB04 to their alternate source. Under these conditions, additional loads may be placed on a startup transformer secondary winding.

8.3-3 Rev. 27

WOLF CREEK Analyses have been performed to evaluate the maximum bus and transformer loadings that may result from these transformer failures. These loads represent the maximum credible loads that may be achieved during abnormal system operation.

Using the guidelines of ANSI C57.92-1962, operation of oil-immersed power transformers in an overloaded condition is permissible. Measurable loss of transformer life occurs if the overload is allowed to persist for extended periods of time.

The protective relays associated with the startup transformer are set above these maximum overload values.

The continuous ampacity of the feeder cables from the startup transformer to the 13.8 kV switchgear PA02 and ESF transformer XNB02 is not exceeded under any loading condition described above.

8.3.1.1.1.3, Station Blackout Diesel Generators The Station Blackout Diesel Generator (SBO DG)System consists of a missile barrier located outside of the Protected Area (PA) that contains the necessary equipment required to provide reliable power to 4.16 kV Class 1E bus NB001 or NB002 during a station blackout event, and to the non-safety auxiliary feedwater pump (NSAFP).

This equipment includes three diesel generators (DGs) and one power equipment center (PEC). The PEC includes nine 4.16 kV switchgear sections, four control panels and one 125 VDC battery system in addition to other auxiliary equipment required to support the operation of the system.

One control panel is also located in each of the ESF Switchgear Rooms to allow operation of the SBO DG system without the need for plant personnel to be present in the missile barrier.

Each diesel generator is housed within its own enclosure which contains all equipment necessary to start the DGs. Starting of the SBO DGs must be initiated by an operator, from any of the following locations:

1) Engine control panels located within the diesel generator enclosure.

2) Local control panel located inside the PEC. The diesel generators can be started simultaneously through a Human-Machine Interface (HMI) touchscreen. They can also be started individually through the HMI touchscreen or through control switches.

3) Remote control panels located inside the ESF Switchgear Room. The diesel generators can be started either individually or simultaneously through HMI touchscreens.

Note:

The SBO DG control switches must be in the auto position in order to be controlled through the HMI touchscreens.

a.

Installed Capability All system operation within the control system for the diesel generators, including each of the HMIs, is performed in what is described as Minimum Requirements Mode. The SBO vendor has provided alternate modes of operation that involve modifications to the NB switchgear, running the SBO DGs in parallel with energized NB switchgear or the construction loop, and installing an external load bank. However, these options have not been installed.

8.3-4 Rev. 30

WOLF CREEK Minimum Requirements Mode is the installed configuration. There are no connections between the existing switchgear (NB001 and NB002) and the Kohler switchgear except for the differential CT wires and the open/closed status of NB00114 and NB00214. The operation of breakers NB00114 and NB00214 is manual only with no automatic protective features.

The Kohler-supplied switchgear is designed to control three Kohler 3250 kW generators in parallel with each other. All transfers and tests are manually initiated using an HMI (touchscreen).

There is one 15" HMI (touchscreen) mounted on the control section in the PEC for system monitoring and control. The Kohler-provided PLC-based control system consists of one hot standby master PLC and a PLC for each generator. In the event of a complete PLC system failure, the operator can use the control switches on the KU100 Local Control Panel to synchronize the generators and manually connect them to PB005.

There are two remote control panel enclosures. One is located in the NB00l Switchgear room and the other in the NB002 Switchgear room. There is one 15" HMI (touchscreen) mounted on each remote enclosure for system monitoring and control. The control switches on each remote control panel enclosure, with the exception of the emergency stop push buttons, are not functional in Minimum Requirements Mode. All breakers in NB001 and NB002 must be operated locally. No status (except open/closed status of NB00114 and NB00214) or control of these breakers is available.

To protect the cables going from the PB bus to the NB buses, monitoring, alarms and protective relaying are utilized. The loading on the cables will be monitored by the PLC, using an elapsed time counter to track the amount of time that the cables are loaded beyond a specified setpoint. The HMI will also alarm when the cables are loaded beyond the same setpoint. The setpoint along with a time delay is configurable through the HMI. Protective relaying is present at the PB bus that prevents cable overload damage while allowing the required loads to be powered without spurious tripping.

b.

Periodic Testing The SBO DG system will be periodically tested to ensure continued reliability of the system. The system is capable of performing the following tests while in the Minimum Requirements Mode:

No Load Test This test is performed from the PEC local control panel. This test will run the SBO diesels for an operator defined amount of time to verify readiness to operate.

8.3-5 Rev. 30

WOLF CREEK

• NSAFP Load Test This test is performed from either the PEC local control panel or one of the ESF Switchgear Room remote control panels.

This test will start and synchronize at least two diesel generators to the PB005 bus and will prevent the PB005 bus from powering the NB busses, before closing the PB00506 breaker.

The SBO DGs will provide power to the NSAFWP for the specified period of time to verify readiness to operate.

• NB Functional Load Test This test is performed from either of the ESF switchgear room remote control panels. This test will unload and de-energize the NB busses, then start at least two SBO DGs, energize the NB busses from the SBO DGs, and carry necessary plant loads for a Station Blackout Event.

8.3.1.1.2 Class 1E AC System The Class 1E AC system is that portion of the onsite power system inside the broken-line enclosures shown in Figure 8.3-1, sheet 1, and sheet 2.

The Class 1E AC system distributes power at 4.16 kV, 480 V, 208/120 V, and 120 V ac to all safety-related loads. Also, the Class 1E AC system supplies certain selected loads which are not safety related but are important to the plant operation. Figure 8.3-2 lists the major safety-related and isolated nonsafety-related loads supplied from the Class 1E AC system.

In addition to the above power distribution, the Class 1E AC system contains standby power sources diesel generator which provide the power required for post-accident and post-fire safe shutdown in the event of a loss of the preferred power sources.

The following describes various features of the Class 1E systems:

POWER SUPPLY FEEDERS - Each 4.16-kV load group is supplied by two preferred power supply feeders and one diesel generator (standby) supply feeder. Each 4.16-kV bus supplies motor loads and 4.0-kV/480-V load center transformers with their associated 480-V busses.

BUS ARRANGEMENTS - The Class 1E AC system is divided into two redundant load groups (load groups 1 and 2). Either one of the load groups is capable of providing power to safely reach cold shutdown. Each ac load group consists of a 4.16-kV bus, 480-V load centers, 480-V motor control centers, and lower voltage ac supplies.

LOADS SUPPLIED FROM EACH BUS - Refer to Figure 8.3-2 for a listing of Class 1E system loads and their respective busses.

MANUAL AND AUTOMATIC INTERCONNECTIONS BETWEEN BUSSES, BUSSES AND LOADS, AND BUSSES AND SUPPLIES - No provisions exist for automatically connecting one Class IE load group to another redundant Class IE load group or for automatically transferring loads between load groups. The incoming preferred power supply associated with a load group can supply the 4.16-kV Class 1E bus of the other load group by manual operation of the requisite 4.16-kV circuit breakers when required.

8.3-6 Rev. 30

WOLF CREEK For a discussion of interlocks, refer to Section 8.3.1.1.3.

INTERCONNECTIONS BETWEEN SAFETY-RELATED AND NONSAFETY-RELATED BUSSES - No interconnections are provided between the safety-and nonsafety-related busses.

The startup transformer supplies power through the same winding to a 13.8-kV bus and a 13.8/4.16-kV ESF transformer.

REDUNDANT BUS SEPARATION - The Class 1E switchgear, load centers, and motor control centers for the redundant load groups are located in separate rooms of the control building and auxiliary building in such a way as to ensure physical separation. Refer to Section 8.3.1.4.1 and Section 8.3.1.1.7 for the criteria governing redundant bus separation.

CLASS 1E EQUIPMENT CAPACITIES -

a. 4.16-kV Switchgear Bus 2000A continuous rating Incoming breakers 2000A continuous, 350 MVA interrupting Feeder breakers 1200A continuous, 350 MVA interrupting

b. 480-V Unit Load Centers Transformers 1000 kVA, 3 phase, 60-Hz, 4000/480 V Bus 1600A continuous Incoming breakers 1600A continuous, 50,000A rms symmetrical interrupting Feeder breakers 800A continuous, 30,000A rms symmetrical interrupting (AKR) 800A continuous, 42,000A rms symmetrical interrupting (MP)

c. 480-V Motor Control Centers Horizontal bus 600A continuous, 25,000A rms symmetrical Vertical bus 300A continuous, 25,000A rms symmetrical Breakers 25,000A rms symmetrical, (molded case) minimum interrupting (singly for thermal-magnetic breakers and in combination with a starter for magnetic only breakers)

AUTOMATIC LOADING AND LOAD SHEDDING - The automatic loading sequence of the Class IE busses is indicated in Figure 8.3-2.

If preferred power is available to the 4.16-kV Class 1E bus following a LOCA, the Class 1E loads are started in programmed time increments by the load sequencer. The emergency standby diesel generator is automatically started but not connected to the bus. However, in the event that preferred power is lost following a LOCA, the load sequencer will function to shed selected loads and automatically start the associated standby diesel generator (connection of the standby diesel generator to the 4.16-kV Class 1E bus is performed by the diesel generator control circuitry). Load sequencers then function to start the required Class 1E loads in programmed time increments.

8.3-7 Rev. 30

WOLF CREEK A failure modes and effects analysis and a reliability study have been performed on the load shedder emergency load sequencers (LSELS). These studies have shown that no failure within a single LSELS can result in the failure of both sources of offsite power, that there are no credible sneak circuits or common mode failures in the LSELS that could render both the onsite and offsite power sources unavailable, and that sequencing of loads on the offsite power system does not compromise the reliability of the offsite power source.

There are no permissive devices (e.g., lube oil pressure) incorporated into the final actuation control circuitry for large horsepower, safety-related motors.

Refer to Section 8.3.1.1.3 for additional information on load shedding and sequencing.

CLASS 1E EQUIPMENT IDENTIFICATION - Refer to Section 8.3.1.3 for details regarding the physical identification of Class 1E equipment.

INSTRUMENTATION AND CONTROL SYSTEMS FOR THE APPLICABLE POWER SYSTEMS WITH THE ASSIGNED POWER SUPPLY IDENTIFIED - The dc control supplies for switchgear breaker operation are separate and independent so that Class 1E dc load group 1 supplies Class 1E load group 1 switchgear. The battery chargers for dc load group 1 are fed from the same load group switchgear. Class 1E dc load group 2 supplies Class 1E load group 2 switchgear. For further information on the dc power system, refer to Section 8.3.2.

Each 4.16-kV switchgear bus and 480-V load center bus is equipped with an undervoltage relay for annunciation in the control room. All Class 1E 4.16-kV buses are provided with voltage and current indication. The 480 volt system is provided with current indications only.

ELECTRIC CIRCUIT PROTECTION SYSTEMS - Protective relay schemes or direct-acting trip devices on primary and backup circuit breakers are provided throughout the onsite power system in order to:

a. Isolate faulted equipment and/or circuits from unfaulted equipment and/or circuits

b. Prevent damage to equipment

c. Protect personnel

d. Minimize system disturbances The short circuit protective system is analyzed to ensure that the various adjustable devices are applied within their ratings and set to be coordinated with each other to attain selectivity in their operation. The combination of devices and settings applied affords the selectivity necessary to isolate a faulted area quickly with a minimum of disturbance to the rest of the system.

8.3-8 Rev. 27

WOLF CREEK Major types of protection applications that are used consist of the following:

a. Overcurrent Relaying Each bus supply breaker (except the standby diesel breaker) is equipped with three inverse-time overcurrent relays and one inverse-time ground fault relay for bus faults and to provide backup for feeder circuit relays.

Bus supply breakers from the standby emergency diesel generator are equipped with three inverse-time overcurrent relays only. Ground protection is provided on each generator neutral.

Each 4.16-kV motor circuit breaker has three overcurrent relays, each with one long-time and two instantaneous elements for overload, locked rotor, and short circuit protection. Each 4.16-kV motor circuit breaker is also equipped with an instantaneous ground current relay.

The current for Class 1E motors is monitored by computer in the control room and at the Class 1E switchgear.

Each 4.16-kV supply circuit breaker to a load center transformer has three overcurrent relays with long-time and instantaneous elements. An instantaneous overcurrent ground current relay provides sensitive ground fault protection.

b. Undervoltage Relaying Each 4.16-kV Class 1E bus is equipped with undervoltage relays for diesel generator start initiation and undervoltage annunciation.

Each 480-V Class 1E load center bus is equipped with undervoltage relays for undervoltage annunciation.

c. Differential Relaying The main, unit auxiliary, startup, station service, and ESF transformers are equipped with differential relays.

These relays provide high-speed disconnection to prevent severe damage in the event of transformer internal faults.

Motors rated above 3,500 horsepower are equipped with differential protection.

The main generator and the standby emergency diesel generator are provided with differential protection.

d. 480-V Load Center Overcurrent Relaying Each 480-V load center circuit breaker is equipped with a solid state device which has an adjustable phase and ground overcurrent trip.

8.3-9 Rev. 27

WOLF CREEK

e.

480-V Motor Control Center Overcurrent Relaying Molded case circuit breakers provide time overcurrent and/or instantaneous short circuit protection for connected loads. The molded case circuit breakers for motor circuits are equipped with instantaneous trip only. Motor overload protection is provided by ambient compensated thermal trip units in the motor controller.

The molded case breakers for nonmotor feeder circuits provide thermal time overcurrent protection as well as instantaneous short circuit protection.

All starters for motor-operated valves are equipped with thermal overload relays. The thermal overload relay trip contacts located in 480-V motor control centers for all Class 1E valves, are bypassed in accordance with Regulatory Guide 1.106, Rev. 1, dated March 1977.

The starters and the feeder circuit breakers located in the motor control center are coordinated with the motor control center incoming supply breakers so that, upon ground fault, the protective device nearest the fault trips first. Where coordination is not possible using the protective devices normally furnished in a standard motor control center module, solid-state ground fault protectors are added to the affected modules on an individual basis.

TESTING OF THE AC SYSTEMS DURING POWER OPERATION - All Class 1E circuit breakers and motor controllers are testable during reactor operation, except for the electric equipment associated with those Class 1E loads identified in Chapter 7.0. During periodic Class 1E system tests, subsystems of the engineered safety features actuation system, such as safety injection, containment spray, and containment isolation, are actuated, thereby causing appropriate circuit breaker or contactor operation. The 4.16-kV and 480-V circuit breakers and control circuits can also be tested independently while individual equipment is shut down. The circuit breakers can be placed in the test position and exercised without operation of the associated equipment.

8.3.1.1.3 Standby Power Supply The standby power supply for each safety-related load group consists of one diesel generator complete with its accessories and fuel storage and transfer systems. It is capable of supplying essential loads necessary to reliably and safely shut down and isolate the reactor. Each diesel generator is rated at 6,201 kW for continuous operation. Additional ratings are 6,635 kW for 2,000 hours0 days <br />0 hours <br />0 weeks <br />0 months <br />, 6,821 kW for 7 days, and 7,441 kW for 30 minutes. The generator 2-hour rating is equal to the 7-day rating. Each diesel generator is connected exclusively to a single 4.16-kV safety feature bus for one load group. The load groups are redundant and have similar safety-related equipment. Each load group is adequate to satisfy minimum engineered safety features demand caused by a LOCA and/or loss of preferred power supply. The diesel generators are electrically isolated from each other. Physical separation for fire and missile protection is provided between the diesel generators, since they are housed in separate rooms of a seismic Category I structure. Power and control cables for the diesel generators and associated switchgear are routed to maintain physical separation.

8.3-10 Rev. 27

WOLF CREEK Ratings for diesel generator sets are established in order to satisfy the requirements set forth in Regulatory Guide 1.9. Refer to Section 8.1.4.3.

The diesel generator loads are determined on the basis of nameplate rating, pump pressure and flow conditions, or pump runout conditions. The basis for each load is noted in Figure 8.3-2. The continuous rating of the diesel generator is based on the maximum total load required at any time.

The functional aspects of the onsite power system are discussed below.

STARTING INITIATING CIRCUITS - The diesel generators are started on the following:

a. Receipt of a safety injection signal (SIS)

b. Loss of voltage to the respective 4.16-kV Class 1E bus to which each generator is connected

c. Manual - Remote switch actuation (main control room)

d. Manual - Local switch actuation (diesel generator room)

e. Emergency Manual - Local switch actuation (diesel generator room)

Refer to logic diagrams - Figures 8.3-3, 8.3-4, and 8.3-5.

DIESEL STARTING MECHANISM AND SYSTEM - Refer to Section 9.5.6.

TRIPPING DEVICES - The following protective functions are for each diesel generator:

a. Start failure relay

b. Engine overspeed

c. High jacket coolant temperature

d. Low lube oil pressure

e. High crankcase pressure

f. Generator differential The above protective devices, which function to shut down the diesel or trip the diesel generator breaker, are also functional following an SIS or loss of offsite power.

The high jacket water coolant temperature, and low lube oil pressure, switches initiate shutdown only upon coincidence of a modified two-out-of-four logic.

The high crankcase pressure switches initiate shutdown only upon coincidence of a modified two-out-of-three logic. That is, a false trip on one channel does not erroneously shut down the diesel generator.

8.3-11 Rev. 27

WOLF CREEK The remaining protective functions that are retained during an SIS are (1) generator differential, (2) engine overspeed, and (3) start failure.

In accordance with the provisions of Reg. Guide 1.9, the engine overspeed and generator differential trips are retained to protect the diesel generator set from massive damage. The start failure protection functions to interrupt the starting of the diesel generator if a predetermined speed is not reached or if lube oil pressure is not established within a predetermined time following the start initiation.

Reverse power, loss of field, generator overcurrent, generator voltage-restrained overcurrent, generator ground overcurrent, overexcitation and underfrequency protection are also provided but cause a trip only during tests when the diesel generator is operating in parallel with the preferred power system.

During testing with a loss of offsite power event the diesel generator may trip due to one of the seven (7) previously mentioned protective trips. If the diesel generator trips, operator action may be required to reset a lockout relay. If the diesel generator does not trip, operator action is required to disable the seven (7) protective trips and place the diesel generator in isochronous mode.

Underfrequency protection is provided for safely separating the diesel generators from the preferred source (when previously synchronized to it) without damage to or shutdown of the diesel generators.

The diesel generators are monitored from the control room, and each device, when actuated, initiates an annunciator in the diesel generator room, a summary annunciator in the control room, and in some cases individual annunciation in the control room (see Section 8.3.1.1.3). The alarms are set to provide a warning of impending trouble prior to trip of the diesels.

INTERLOCKS - Circuit breaker electrical interlocks are provided to prevent automatic closing of a diesel generator breaker to an energized or faulted bus.

If the preferred power has been lost, undervoltage relays on the incoming (offsite) side of the 4.16-kV feeder breakers prevent closure of these breakers.

The two 4.16-kV circuit breakers which control the incoming preferred source power to a 4.16-kV Class 1E bus are so interlocked that only one breaker can be closed at any one time. This is to prevent parallel operation of the preferred sources.

When operating from the diesel generator supply (loss of offsite power),

redundant load groups cannot be manually connected together since the 4.16-kV circuit breakers controlling the incoming preferred power supplies to the Class 1E busses are interlocked to prevent paralleling of the diesel generators.

During normal operation (offsite power available), synchronizing check relays provide an interlock function. They prevent an operator error that would parallel the standby power source with the offsite power source when the two are out-of-synchronism.

8.3-12 Rev. 27

WOLF CREEK PERMISSIVES - A single switch (AUTO, LOCAL/ MANUAL) in the diesel generator room is provided for each diesel generator to block automatic start signals when the diesel is out for maintenance (i.e., LOCAL/MANUAL position). When in the LOCAL/MANUAL position, an annunciator is initiated in the control room.

A pushbutton in the control room and a local pushbutton are provided to allow manual start capability.

During periodic diesel generator tests, subsequent to diesel start and prior to synchronization to the preferred system, a switch in the control room allows parallel operation with the preferred system.

LOAD-SHEDDING CIRCUITS - Upon recognition of a loss of or degraded voltage on a 4.16-kV Class 1E bus, a logic signal is initiated to effect the following on each load group:

a. Shed selected loads

b. Send signal to start diesel

c. Trip 4.16-kV preferred power supply breakers Two voltage sensing schemes are employed on each 4.16-kV Class lE bus to initiate the required logic signal. One scheme recognizes a loss of voltage, and the other recognizes a degraded voltage. Four potential transformers on each bus provide the necessary input voltages to the protective devices necessary to achieve the above protection.

In order to recognize a loss of voltage, four instantaneous undervoltage relays are used. The output contacts of these relays are directed to logic circuits that process the four undervoltage input circuits into the 2-out-of-4 logic circuit described above. This scheme is used on each bus.

The loss of voltage logic signal is set below the minimum bus voltage encountered during diesel generator sequential loading. A brief time delay is employed to prevent false trips arising from transient undervoltage (spike) conditions.

In order to recognize a degraded voltage, a diverse protection scheme is used.

The above four potential transformers each provide an analog output signal of 0-120 volts. This signal is directed to logic circuits and processors that convert the analog signals into a 2-out-of-4 logic signal, whenever the signal drops below a preset value. This scheme serves only to trip the incoming offsite power circuit breakers when that power source has been determined to be degraded. This design cannot adversely affect the sequential loading of the diesel generators.

The degraded voltage logic signal is set at the minimum permissible continuous bus voltage. A time delay is provided that prevents damage to or spurious tripping of the permanently connected Class lE loads by limiting the amount of time they are exposed to a degraded voltage. The final voltage and time setpoints was determined based on an analysis of the auxiliary power distribution system, including the Class lE busses at all voltage levels. The use of an SIS contact in series with the degraded voltage logic circuit output contact ensures that the Class lE busses are immediately separated from the offsite power system whenever an accident occurs and the offsite power system is not able to accept the loads continuously. An alarm is also provided to alert the operator to a degraded voltage condition. It is delayed until any motor starting-induced voltage transient bus has had sufficient time to clear.

8.3-13 Rev. 27

WOLF CREEK As each generator reaches rated voltage and frequency, the generator breaker connecting it to the corresponding 4.16-kV bus closes. With the SIS, connection of the diesel generator to the 4.16-kV bus is not made unless the preferred source of power is lost. The diesel generator is able to accept loads within 12 seconds after receipt of a starting signal, and all automatically sequenced loads are connected to the Class 1E bus within 35 seconds thereafter. Refer to Figure 8.3-2. Relays at the diesel generator detect generator rated voltage and frequency conditions and provide a permissive interlock for the closing of the respective generator circuit breaker. Upon loss of the preferred source of power without a LOCA, the load sequencer system initiates the starting of the diesel generators and sheds all loads, except the load centers and the centrifugal charging pumps.

Following diesel start and connection to the Class 1E bus, the loads are automatically sequenced onto the bus at programmed time intervals. A fast responding exciter and voltage regulator ensure voltage recovery of the diesel generator after each load step. Field flashing is utilized on the diesel generators for fast voltage buildup during the start sequence. Momentary voltage and frequency dips will not exceed a maximum of 25 percent below nominal rating (4.16 kV) for voltage and 5 percent for frequency.

The voltage levels at safety-related buses are optimized for the expected load conditions throughout the anticipated range of voltage of the offsite system by adjustment of transformer taps. This analysis is verified to be accurate by testing.

TESTING - Because the diesel generator is not of the type or size that has been previously used as a standby emergency power source in nuclear power plant service, the following tests are performed at the manufacturer's facility:

a. Load capability qualification tests were performed as follows:

1. The engine was brought to temperature equilibrium conditions and then run at rated load for 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br />.

Immediately following this period, the diesel was run for 2 additional hours at the rated short-time load.

This is in accordance with Paragraph 6.3.1(1) and (2) of IEEE 387-1977.

2. A load rejection from rated load was performed in one step. The engine speed did not exceed the normal speed plus 75 percent of the difference between normal speed and the overspeed setpoint. This is in accordance with Paragraph 6.3.1(3) of IEEE 387-1977.

3. A no load test was conducted for 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> followed by loading to the rated load to demonstrate the capability to carry full load following operation at no load. This is in accordance with Paragraph 6.3.1(4) of IEEE 387-1977. Refer to Section 9.5.8.2.3 for a discussion of the manufacturer's operating recommendations for light and no load operations for extended periods. (Note that IEEE-387 contains no requirement for analyzing or inspecting the exhaust gas or the exhaust system during or following this test. The acceptance criterion is the acceptance of the rated load.)

8.3-14 Rev. 27

WOLF CREEK

b. At least 300 valid start and load tests are performed on one diesel generator. This includes all valid tests performed offsite. A valid start and load test is defined as an unloaded start from design conditions with subsequent loading to at least 50 percent of the continuous rating within the required time interval and continued operation until temperature equilibrium is attained. This is in accordance with Paragraph 6.3.2 of IEEE 387-1977. At least 90 percent of these start tests were made from hot standby conditions and 10 percent from design hot equilibrium.

A failure-to-start rate in excess of one per hundred requires further testing as well as a review of the system design adequacy.

If failures to start are found to be caused by failures of a generic nature in a single component, it may be possible to correct the problem by use of a different kind of component or to correct the deficiency in the component.

If it is possible to independently test the component after its deficiencies have been corrected, it is not necessary to repeat the 300 starting tests of the complete diesel generator unit. If the component is successfully tested 300 times or more under acceptable simulated starting conditions, it is only necessary to continue and complete the original required 300 unit tests with the replacement component.

If starting failures are of a random nature or cannot be readily identified as being generic component failures, additional starting tests of the complete unit are performed after each starting problem has been corrected. The additional tests are of a sufficient number to verify the required starting reliability.

c. At least two full load and margin tests are performed on each diesel generator to demonstrate the start and load capability of these units with some margin in excess of the design requirements. The margin test includes step-loading the diesel generator with a test load at least 10 percent larger than the largest design single-step load.

This is in accordance with Paragraph 6.3.3 of IEEE 387-1977.

In addition to the above tests, after final assembly and preliminary startup testing each diesel generator was tested at the site prior to reactor fuel loading to verify actual electrical loading on the diesel generator and to demonstrate its ability to perform its intended function. The diesel generator is given each 8.3-15 Rev. 27

WOLF CREEK of the following tests, in accordance with Paragraph 6.4 of IEEE 387-1977 to certify the adequacy of the unit for the intended service.

a. Starting tests to demonstrate the ability to start automatically on simulation of loss of ac voltage and attain stabilized frequency and voltage within the rated limits and time.

b. Load acceptance tests to demonstrate the ability to accept the design loads in the design accident loading sequence and to maintain voltage and frequency within acceptable limits.

c. Rated load tests, with the diesel in parallel with the offsite system, to demonstrate the ability to carry the continuous rated load until temperature equilibrium is reached, followed by operation for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> at the short-time rated load of the diesel generator, followed by operation for 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> at the continuous rated load, without exceeding the manufacturer's design limits.

d. Functional tests to demonstrate diesel generator capability at full load temperature conditions by rerunning tests a and b above immediately following c above. If these tests are not satisfactorily completed, it is not necessary to repeat the tests of item c above prior to rerunning this test. Instead, prior to rerunning these tests, the diesel generator may be operated at the continuous rated load for 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> or until operating temperature has stabilized.

e. Design load tests to demonstrate the ability to carry the design load for a time required to reach equilibrium temperature plus 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> without exceeding the manufacturer's design limits.

f. Load rejection tests to demonstrate the ability to reject the maximum rated load without exceeding speeds or voltages that cause tripping, mechanical damage, or harmful overstresses.

g. Electrical tests to demonstrate that the electrical properties of the generator, excitation system, voltage regulator, engine governor system, and the control and surveillance systems are acceptable for the intended application including:

8.3-16 Rev. 27

WOLF CREEK

1. Synchronize the diesel generator unit with offsite system while the unit is connected to the emergency load.

2. Transfer the emergency load to the offsite system.

3. Isolate the diesel generator unit from the offsite system.

4. Restore diesel unit to standby status.

h. A minimum of 35 consecutive valid tests are to be run with no failures to demonstrate the required reliability.

i. Subsystem tests to demonstrate the capability of the control, surveillance, and protection systems to function in accordance with their intended application.

j. Tests to demonstrate the capability of the diesel generator unit to respond to an emergency start signal within the required time.

After being placed in service, the standby power system is tested periodically in accordance with the plant Technical Specifications to demonstrate the continued ability of the unit to perform its intended function.

REPAIRS AND MAINTENANCE - Preventative and corrective maintenance records are maintained and reviewed on a continuing basis for parts failure data. In cases where repeated failures of a certain part or component are identified, then investigative maintenance is performed to try to identify the root cause of the problem.

Upon completion of repairs or maintenance and prior to an actual start, run, and load test, a final equipment check is made to ensure the diesel generators are ready for operation.

FUEL OIL STORAGE AND TRANSFER SYSTEMS - The diesel generator fuel oil system is described in Section 9.5.4.

DIESEL GENERATOR COOLING AND HEATING SYSTEMS - The diesel generator cooling water system is described in Section 9.5.5.

INSTRUMENTATION AND CONTROL SYSTEMS FOR STANDBY POWER SUPPLY - Equipment is provided in the control room for each diesel generator for the following operations:

a. Remote manual starting and stopping 8.3-17 Rev. 27

WOLF CREEK

b. Remote manual synchronization

c. Remote manual frequency adjustment Remote manual voltage adjustment for the NE001 EDG and remote manual voltage adjustment for the NE002 EDG while in automatic voltage control only.

d. Governor and voltage drop selection

e. Automatic or manual voltage regulator selection (The NE002 EDG can only be switched between automatic and manual voltage control locally.)

A master transfer switch is provided in the diesel room for automatic and local-manual control selection. The switch is normally in the automatic position, whereby the engineered safety features system senses an accident or loss of preferred power and starts the diesel. The master transfer switch is placed in the local-manual position to allow manual operation of the diesel locally when it is out for maintenance. Equipment is provided locally at each diesel generator for manual starting in case of a control room evacuation. The local emergency start functions to start the diesel generator, regardless of the position of the master transfer switch.

Equipment is provided at each local control panel for the following operation (when the master transfer switch is in the local position):

a. Manual starting

b. Manual stopping

c. Frequency and voltage regulation

d. Automatic or manual regulation selection

e. Exciter field removal and reset The local control operation is annunciated in the control room. The dc power source for the diesel generator instrumentation and control system is of the same load group as the respective diesel generator.

Each diesel generator is equipped with the following alarms at the local control panel:

a. Lube oil pressure low

b. Lube oil temperature high

c. Lube oil temperature low 8.3-18 Rev. 27

WOLF CREEK

d. Lube oil level high in sump

e. Lube oil level low in sump

f. Lube oil filter differential pressure high

g. Lube oil strainer differential pressure high

h. Fuel oil filter differential pressure high

i. Fuel oil strainer differential pressure high

j. Fuel oil pressure low

k. Jacket coolant pressure low

1. Jacket coolant temperature high

m. Jacket coolant temperature low

n. Jacket coolant level low in expansion tank

o. Diesel generator undervoltage

p. Start failure

q. Engine trouble shutdown

r. Generator underfrequency

s. Barring device engaged

t. DC control power failure

u. Starting air pressure low train 1

v. Starting air pressure low train 2

w. Crankcase pressure high

x. Engine overspeed trip

y. Any switch not in auto position

z. Generator protective relay trip aa. Diesel main bearing temperature high 8.3-19 Rev. 27

WOLF CREEK bb. Combustion air pressure low cc. Intercooler water pressure low dd. Intercooler water temperature high ee. Intercooler water temperature low ff. Rocker arm lube oil filter differential pressure high gg. Rocker arm lube oil level high hh. Rocker arm lube oil pressure low ii. Diesel generator underexcitation jj. Diesel generator field grounded kk. Exciter power potential transformer fuse failure The following conditions are separately alarmed in the control room:

a. Diesel out of service

b. Diesel local alarm

c. Diesel generator undervoltage or underfrequency

d. Diesel overvoltage

e. Diesel negative phase sequence Electrical instruments are provided in the control room and at the diesel generator for surveillance of generator voltage, current, frequency, power, and reactive volt amperes. The breaker status of each 4.16-kV breaker of the engineered safety features system is displayed by red and green indicating lamps in the control room. Local indication is provided at the switchgear.

A window is provided on the engineered safety features status panel in order to determine the availability of the diesel generator. The window reads "Emergency Diesel Generator" and operates as described in Section 7.5.2.2.

This window is activated by all conditions which render the diesel inoperable.

These conditions are listed as follows:

a. Loss of dc control power

b. Generator relay trip 8.3-20 Rev. 27

WOLF CREEK

c. Barring device engaged

d. Starting air pressure low

e. Engine shutdown

f. Start failure

g. Diesel generator control switch not in auto position

h. Diesel generator auxiliaries control switch in off position.

Controls and monitoring instruments for the WCGS emergency diesel generators are installed in free standing, floor-mounted control panels, separate from the engine skid. Only those sensors and other electrical controls (solenoid valves and governor actuator) which send or receive signals to and from the control panels are mounted on the diesel generator unit.

Although the WCGS panels are mounted on the same floor as the engine skid they do not employ vibration mounts because the floor is of sufficient mass to dampen the engine vibrations.

8.3.1.1.4 Control Rod Drive Power Supply Electric power to control rod drive mechanisms is supplied by two full-capacity, motor-generator sets. Each motor-generator set is connected to a separate non-Class IE 480-V load center. Each generator is of the synchronous type and is driven by a 200-hp induction motor. The ac power is distributed to the rod control power cabinets through two series-connected reactor trip breakers.

8.3.1.1.5 Vital Instrument AC Power Supply Four independent Class IE 120-V vital instrument ac power supplies are provided to supply the four channels of the protection systems and reactor control systems. Each vital instrument ac power supply consists of one normal inverter equipped with an integral bypass constant voltage transformer and one distribution bus. Normally, the inverter is operating to supply the vital ac bus. Each inverter is supplied by a separate Class IE battery system, as described in Section 8.3.2. If an inverter is inoperable or is to be removed from service, the vital ac bus can be supplied from the integral constant voltage transformer until the trains swing (backup) inverter is configured to operate in its place. The swing unit can supply either inverter in that train.

A selector switch located on the inverter is positioned to select the appropriate inverter to be replaced (a keylock is used to maintain the position). The swing unit will be fed from the dc bus associated with the affected inverters power supply. A 125 VDC power source is selected on the DC manual transfer switch via key operated switches.

Refer to Figure 8.3-6, sheet 1, for the single-line arrangement of the vital instrument ac power supply.

8.3-21 Rev. 29

WOLF CREEK 8.3.1.1.6 Non-vital Instrument AC Power Supply The non-vital 120/208-V instrument ac power supply is designed to furnish reliable power to all nonsafety-related plant instruments. In addition, it is utilized as the source of power for the public address system.

The non-vital instrument ac power supply system is divided into four panelboards. Two of the panel boards are normally supplied by three phase transformers, each connected to a Class 1E motor control center. In the event of the loss of normal auxiliary power, the transformers are automatically energized by the emergency diesel generators. In the event that the transformers fail, the instrument buses will be automatically transferred to an alternate regulated source from non-vital motor control centers. The other two panelboards are fed from uninterruptible power supplies. These panelboards supply instrument loads which are required for stable plant operation and cannot withstand an interruption in power.

8.3.1.1.7 Electric Equipment Layout The following are the general features of the electric equipment layout:

a. Class IE switchgear, load centers, and motor control centers of redundant load groups are located in separate rooms within seismic Category I buildings.

b. Four Class IE battery supplies are located in the control building. Each battery is located in a separate room.

Battery ventilation considerations are addressed in Section 9.4.1.

c. The battery charger, inverter, and dc busses associated with each of the four subsystems are in separate rooms outside the battery rooms.

d. Two cable spreading rooms are provided, one above and one below the control room. This enhances redundant cable separation.

e. Redundant diesel generators and associated supporting equipment are located in separate rooms in the seismic Category I diesel generator building.

Electrical equipment layout drawings showing the location of electrical equipment and equipment and cable raceways are listed in Section 1.7.

8.3-22 Rev. 27

WOLF CREEK 8.3.1.1.8 Design Criteria for Class IE Equipment Design criteria are discussed below for the Class IE equipment:

MOTOR SIZE - For all motors rated above 480 Volts, some have the nameplate rated horsepower less than the horsepower required by the driven load under runout condition, but still within the service factor of the motor.

In the case of containment spray pumps (500 hp nameplate rating and 505 brake horsepower), residual heat removal pumps (500 hp nameplate rating and 510 brake horsepower), centrifugal charging pumps (600 hp nameplate rating and 680 brake horsepower), and safety injection pumps (450 hp nameplate rating and 460 brake horsepower) which are under the scope of the NSSS supplier, the brake horsepower exceeds the nameplate rating of the motor, but is within the capability of the motors which have a service factor of 1.15.

MINIMUM MOTOR ACCELERATING VOLTAGE - All Class IE motors fed from the 4.16-kV busses are specified with accelerating capability at 75 percent of the motor nameplate rating (4,000 volts). IE motors rated for use on lower voltage busses, which are required to start concurrently with large 4-kV motors, are specified with accelerating capability at 65 percent of the motor nameplate rating.

To prevent valve damage from the oversizing of motors, motor-operated valve actuators are specified with accelerating capability at 80 percent of the nameplating rating.

The electrical system is designed so that the total voltage drop on the Class IE motor circuits is less than that required to accelerate those motors.

MOTOR STARTING TORQUE - The motor starting torque is capable of starting and accelerating the connected load to normal speed within sufficient time to perform its safety function for all expected operating conditions, including the design minimum bus voltage stated in Section 8.3.1.1.3.

MINIMUM MOTOR TORQUE MARGIN OVER PUMP TORQUE THROUGH ACCELERATING PERIOD - The minimum torque margin (accelerating torque) is such that the pump-motor assembly reaches nominal speed within sufficient time to perform its safety function at design minimum terminal voltage.

MOTOR INSULATION - Insulation systems are selected on the basis of the particular ambient conditions to which insulation is exposed. For Class IE motors located within the containment, the insulation system is selected to withstand the postulated accident environment.

8.3-23 Rev. 27

WOLF CREEK TEMPERATURE MONITORING DEVICES PROVIDED IN LARGE HORSEPOWER MOTORS - Each motor in excess of 1,500 hp is provided with six resistance temperature detectors (RTD) embedded in the motor slots, two per phase. In normal operation, the RTD at the hottest location (selected by test) monitors the motor temperature and provides a computer alarm in the control room on high temperature. Each 4.16-kV motor bearing (except residual heat removal) is provided with one thermocouple which will provide an alarm on bearing high temperature.

INTERRUPTING CAPACITIES - The interrupting capacities of the protective equipment are determined as follows:

a. Switchgear Switchgear interrupting capacities are greater than the maximum short circuit current available at the point of application. The magnitude of the short circuit currents in the medium voltage systems is determined in accordance with ANSI C37.010-1972. The offsite power system, a single operating diesel generator, and running motor contributions are considered in determining the fault level. All motors connected to the bus are considered to be running when the short circuit is postulated.

High voltage power circuit breaker interrupting capacity ratings are selected in accordance with ANSI C37.06-1971.

b. Load Centers, Motor Control Centers, and Distribution Panels Load centers, motor control centers, and distribution panel circuit breakers have a symmetrical rated interrupting current as great as the determined total available symmetrical current at the point of application. Symmetrical current is determined in accordance with the procedures of ANSI C37-1973 for low-voltage circuit breakers other than molded-case breakers and of NEMA Standards Publication AB l for molded case circuit breakers.

ELECTRIC CIRCUIT PROTECTION - Refer to Section 8.3.1.1.2 for criteria regarding the electric circuit protection.

GROUNDING REQUIREMENTS - Equipment and system grounding were designed using IEEE 80, 1971 "Guide for Safety in AC Substation Grounding," and IEEE 142, 1972, "Recommended Practice for Grounding of Industrial and Commercial Power Systems" as a guide.

8.3-24 Rev. 27

WOLF CREEK 8.3.1.1.9 Cable Derating and Cable Tray Fill The ampacity and group derating factors for cables in conduit duct bank and maintained space trays are in accordance with the manufacturers recommendations and IPCEA P-46-426 or the NEC. For randomly filled trays, ICEA P-54-440 with IPCEA P-46-426, as appropriate, is used in conjunction with the manufacturers recommendation for cable ampacity and group derating factors.

The cable ampacities are based on a maximum conductor temperature of 90 C, 100-percent load factor, and all cables fully loaded.

Cable tray fill, for the various randomly filled tray configurations, is generally limited by the percentage criteria as follows: 45% for raceway containing control and low voltage power cables inside the cable spreading rooms and for raceway containing instrumentation cables; 30% for raceway containing control and low voltage power cables outside the cable spreading rooms. Where these conditions cannot be maintained, a design engineer reviews each case for the adequacy of the design for both physical fill and derating.

Conduit fill is in compliance with the provisions of the NEC. Where these provisions cannot be maintained, a design engineer reviews each case and will allow a higher fill percentage based on actual cable sizes, conduit sizes, length of conduit, and number of bends.

8.3.1.2 Analysis 8.3.1.2.1 Compliance with General Design Criteria 17 and 18 and Regulatory Guides For discussion of regulatory guides in regard to Class IE ac systems, refer to Section 8.1.4.3.

Compliance with General Design Criteria 17 and 18 is discussed in Section 3.1.

A failure modes and effects analysis is provided in accordance with IEEE 352-1972. Refer to Table 8.3-4.

8.3.1.2.2 Safety-Related Equipment Exposed to Hostile Environment The detailed information on all Class IE equipment that must operate in a hostile environment during and/or subsequent to an accident is furnished in Section 3.11(B) and 3.11(N).

8.3.1.3 Physical Identification of Safety-Related Equipment Each circuit (scheme) and raceway is given a unique alphanumeric identification. This identification provides a means of distinguishing a circuit or raceway association with a particular channel or load group, and is assigned on the basis of the following criteria:

8.3-25 Rev. 27

WOLF CREEK SEPARATION GROUP 1 - A safety-related instrumentation, control, or power scheme/raceway associated with safety-related load group 1 or protection system channel 1.

SEPARATION GROUP 2 - A safety-related instrumentation, control, or power scheme/raceway associated with protection system channel 2.

SEPARATION GROUP 3 - A safety-related instrumentation, power, or control scheme/raceway associated with protection system channel 3.

SEPARATION GROUP 4 - A safety-related instrumentation, control, or power scheme/raceway associated with safety-related load group 2 or protection system channel 4.

Nonsafety-related cables and raceways associated with normal plant (non-Class IE) equipment are uniquely identified and separately routed from safety-related cables and raceways, as described in Section 8.1.4.3.

The unique identification afforded all nonsafety-related cables is generally black; however, other colors (other than Red, White, Blue and Yellow) may be used for non-safety related cable in isolated cases.

Nameplates with colored backgrounds are provided for all IEEE 308 Class lE equipment (such as transformers, motors, motor control centers, switchgear, panels, and switchboards) under A/E scope. Each separation group has its distinguishing color. The applicable channel or load group designation is marked on each nameplate. For the identification of instrumentation and control equipment, refer to Section 7.1.2.3.

Raceways are marked in a distinct, permanent manner at intervals not to exceed 15 feet and at points of entry to, and exit from, enclosed areas.

The 600 volt fire-resistive control and power cables are routed independent of raceways. The fire-resisitive cables are distinctly and permanently marked in the same manner as described above for raceways.

Color identification is provided for each separation group of field-wired, safety-related cables.

Within control panels where more than one separation group is present, wiring is identified by separation group designation or, if enclosed by conduit, the conduit is identified by separation group designation.

8.3-26 Rev. 27

WOLF CREEK Within a cabinet or panel which is associated and identified with a single separation group, the internal wiring is exclusively associated with the same separation group and, therefore, requires no further identification.

In cases where the majority of the wiring within a cabinet or panel is primarily one separation group, standard color wire and/or sleeves for the majority separation group is used. The remaining wiring is identified, using the appropriate color, as defined in applicable specifications or drawings.

When colored sleeves are used in lieu of colored wiring, the sleeves are provided at both ends of the wire and at strategic intervals along its length.

Design drawings provide distinct identification of Class IE equipment.

Operating and maintenance documents pertaining to Class IE equipment are distinctly identified.

8.3.1.4 Independence of Redundant Systems 8.3.1.4.1 Separation Criteria This section establishes the criteria and the bases for preserving the independence of redundant Class IE power systems.

8.3.1.4.1.1 Raceway and Cable Routing

a.

Wherever possible, cable trays are arranged from top to bottom, with trays containing the highest voltage cables at the top and trays containing the lowest voltage cables at the bottom. A raceway designated for a single voltage category of cables contains only cables of the same voltage category. Voltage categories are:

1.

15-kV power (non-Class IE)

2.

5-kV power

3.

Large 600-V power (cables from load centers)

4.

600-V power (cables from motor control centers, control and digital signal cables)

5.

Instrumentation cables

b.

Cables associated with each safety-related separation group, as defined in Section 8.3.1.3, are run in separate conduits, cable trays, ducts, and penetrations.

8.3-27 Rev. 27

WOLF CREEK The 600 volt fire-resistive control and power cables are routed independent of raceways. The fire-resistive cables are routed in the same manner as conduits.

c.

The arrangement of electrical equipment and cabling minimizes the possibility of a fire in one separation group from propagating to another separation group.

In the absence of confirming analyses to support less stringent requirements, the following rules apply to those areas in which the only source of fire is electrical. Areas in which the only source of fire is electrical are divided into two groups--cable spreading rooms and general plant areas. (See Section 8.3.1.4.1.4 for exemptions) Table 8.3-5 contains analyses of alternate minimum separation distances as allowed by RG 1.75.

GENERAL - Routing of instrumentation, control, or power cables through rooms or spaces where there is a potential for accumulation of large quantities of combustible fluids is avoided. Where such routing is unavoidable, only cables of one separation group are allowed. In addition, the cables are enclosed in conduit. Openings in solid floors for vertical runs of cables are sealed with fire resistant material.

GENERAL PLANT AREAS - In plant areas from which equipment with potential hazards such as missiles, external fires, and pipe whip are excluded, the separation criteria are as follows:

a.

Cable trays of different separation groups have a minimum horizontal separation of 3 feet if no physical barrier exists between the trays. In the limited number of areas where horizontal separation of 3 feet is unattainable, a fire barrier is installed extending at least 1 foot above the top of the tray (or to the ceiling) and 1 foot below the bottom of the tray (or to the floor).

b.

For cable trays of different separation groups, there is a minimum vertical separation of 5 feet between open-top trays stacked vertically. In the limited number of areas where trays of different separation groups are stacked with less than 5 feet of vertical separation, a fire barrier is placed between the two separation groups. The barrier extends 1 foot to each side of the tray system (or to the wall).

8.3-28 Rev. 27

WOLF CREEK

c.

In the case where a tray of one separation group crosses over a tray of a different separation group and the vertical separation is less than 5 feet, a fire barrier is installed extending 1 foot from each side of each tray and 5 feet along each tray from the crossover.

d.

Where it is necessary that cables of different separation groups approach the same or adjacent control panels with less than 3-foot horizontal or 5-foot vertical spacing, isolation is maintained by installing both separation groups in steel conduit or enclosed wireway or by installing fire barriers between the separation groups. In the case of horizontal separation, the barrier extends 1 foot below the bottom of the tray (or to the floor) to 1 foot above the top of the tray (or to the ceiling). In the case of vertical spacing, the barrier extends 1 foot on each side of the tray system (or to the wall).

e.

Isolation between separation groups is considered to be adequate where physical separation is less than that indicated in Items a, b, and c above, provided the circuits of different separation groups are run in enclosed raceways that qualify as barriers or other barriers are installed between the different separation groups. The minimum distance between these enclosed raceways and between barriers and raceways is 1 inch.

The barriers are installed as described in a through d above. Additionally, 600 volt fire-resistive control and power cables are capable of withstanding fire and can be routed with 1.5 inch isolation distance from other separation groups and non-safety raceways and fire resistive cables.

In cases of open trays containing safety-related cables and totally enclosed conduits containing non-safety-related cables, the safety design basis is to protect the safety-related cables from failure of the non-safety-related circuits, and not vice-versa. In consideration of this limit, enclosing the non-safety circuits in raceway and maintaining at least one inch separation provides an acceptable level of protection.

The conduit can contain only a limited quantity of combustible material (cable insulation and jacket).

Furthermore, there is insufficient oxygen inside the conduit to support combustion of more than a fraction of the available material.

Based on these considerations, it is established that one-inch separation between a conduit containing non-safety-related circuits and an open tray containing safety-related circuits is sufficient to assure that any failure within the non-safety related circuits will not propagate into and compromise the integrity of the safety related circuits.

8.3-29 Rev. 27

WOLF CREEK CABLE SPREADING AREAS - The cable spreading area does not contain high energy equipment such as switchgear, transformers, rotating equipment, or potential sources of missiles or pipe whip and is not used for storing flammable materials. (Circuits in the cable spreading area are limited to control and instrument functions and also those power supply circuits and facilities serving the control room and instrument systems.) Power supply feeders 480 V and above are installed in enclosed raceways. Separation criteria are as follows:

a.

he minimum separation distance between redundant Class IE cable trays is 1 foot between trays separated horizontally and 3 feet between trays separated vertically.

b.

Where termination arrangements preclude maintaining the minimum separation distance, the redundant circuits are run in enclosed raceways or other barriers are provided between redundant circuits. The minimum distance between these redundant enclosed raceways and between barriers and raceways is 1 inch. The fire barriers are installed as described above in "General Plant Areas."

c.

Arrangement and/or protective barriers preclude locally generated forces or missiles from destroying redundant systems. In the absence of confirming analyses to support less stringent requirements, the following rules have been used:

1.

The routing of Class IE circuits and the location of Class IE electrical equipment is reviewed for exposure to hazards such as high pressure piping, missiles, flammable material, and flooding.

A degree of separation or physical protection commensurate with the damage potential of the hazard is provided so that the independence of redundant Class IE subsystems is maintained. The separation of redundant Class IE circuits and equipment makes use of features inherent in the plant design, such as using different rooms or opposite sides of rooms or areas.

2.

The separation of Class IE circuits and equipment is such that the required independence is not compromised by the failure of mechanical systems served by the Class IE systems. For example, Class IE circuits are routed or protected so that failure 8.3-30 Rev. 27

WOLF CREEK of related mechanical equipment of one redundant subsystem cannot jeopardize Class IE circuits or equipment essential to the operation of the other redundant subsystem.

d.

Nonsafety-related cables are not routed through safety-related raceways. However, if a nonsafety-related cable is fed from a safety-related power service it may be routed through safety-related raceways of the same separation group as that of the power service. For discussion of nonsafety-related circuits fed from safety-related sources through isolation devices, refer to Section 8.1.4.3 - Regulatory Guide 1.75.

e.

Load group 1 and protection channels 1 and 3 and load group 2 and protection channels 2 and 4 cables are routed through separate cable chases and cable spreading rooms. The former circuits enter the lower cable spreading room, while the latter circuits enter the upper cable spreading room.

f.

The independence of redundant NSSS safety-related systems is discussed below:

Safety-related reactor trip, engineered safety features actuation, and instrumentation and control power supply systems are designed to meet the independence and separation requirements of Criterion 22 of the 1971 General Design Criteria and Paragraph 4.6 of IEEE 279, 1971.

Channel independence is carried throughout the system, extending from the sensor through to the devices actuating the protective function. Physical separation of wiring for each redundant channel set is used.

Redundant analog equipment is separated by locating modules in different protection rack sets.

Each redundant channel set is energized from a separate ac power feed.

There are four separate process protection analog rack sets. Separation of redundant analog channels begins at the process sensors and is maintained in the analog protection racks to the redundant trains in the logic racks. Redundant analog channels are separated by locating modules in different rack sets. Within these racks, field run nonsafety-related shielded cables having a signal level of 100 V or less are routed in common 8.3-31 Rev. 27

WOLF CREEK wireways with safety-related shielded cables with no physical separation. Internal cabinet safety and nonsafety-related cables are similarly routed.

Justification for this method of routing is contained in Reference 1. The field run non safety-related shielded cables to these cabinets are routed in accordance with Reference 1.

Two reactor trip breakers are actuated by two separate logic matrices which interrupt power to the control rod drive mechanisms. The breaker main contacts are connected in series with the power supply so that opening either breaker interrupts power to all control rod drive mechanisms, permitting the rods to free fall into the core.

Protection system channel inputs are separated from the solid state protection system train outputs as follows:

1.

Shielded cables defined in the NSSS vendor protection system documentation (process sensing circuits, solid state protection system logic cabinet inputs from control board switches, and pushbuttons) are separated from 120-V ac instrumentation and vital instrument bus voltage cables and 120-V ac and 125-V dc control voltage cables.

2.

Prefabricated cables which connect process control system 24-V dc signals to the protection system input are separated from the 120-V ac instrumentation and vital instrument bus voltage cables, 120-V ac and 125-V dc control voltage cables.

3.

The 48-V dc reactor trip logic Train A and Train B output circuits are installed in separate conduits.

4.

Train A protection system outputs (120-V ac and 125-V dc Class IE control voltage unshielded cables only) are contained in the same tray as protection system channel I unshielded cables.

5.

Train B protection system outputs (120-V ac and 125-V dc Class IE control voltage unshielded cables only) are contained in the same tray as protection system channel IV unshielded cables.

These requirements are complied with in the field circuiting.

8.3-32 Rev. 27

WOLF CREEK 8.3.1.4.1.2 Control Boards and Other Panels Within the control boards and other panels associated with protection systems, circuits and instruments of different separation groups (see Section 8.3.1.3) are independent and physically separated horizontally and vertically by a distance of 6 inches. Where physical separation is impracticable, conduit and/or fire barriers are utilized to maintain independence.

Single control devices to which different separation groups are connected are avoided, wherever practicable. Where single devices are unavoidable, electrical isolation is provided. Devices that provide electrical isolation include relays, isolation amplifiers, and solid-state optical couplers. A small number of control switches (e.g., reactor trip switches, lockout relays) contain different separation group wiring to their control contacts. For these switches, electrical independence is maintained, and physical barriers are provided between each separation group. Within control boards and other panels, nonsafety-related wiring is not harnessed together with safety-related wiring.

However, if an associated nonsafety-related cable is supplied from a safety-related bus it is treated as a safety-related cable and is harnessed with safety-related cables of the same group. Harnesses of different separation groups are separated physically by a distance of 6 inches. Where physical separation is impracticable, fire barriers, conduit, or wire duct is used to maintain independence.

8.3.1.4.1.3 Reactor Containment Penetration Areas Two separate penetration areas are provided for cables that must pass through the containment wall. The south penetration area contains cable for Separation Groups 2 and 4, each group having separate penetration assemblies. The north penetration area contains cable for Separation Groups l and 3, each group again having separate penetration assemblies. Raceway separation criteria, as described in this section, apply in routing cable through the penetration areas.

8.3.1.4.1.4 Exemptions from Physical Separation Requirements A limited number of specific raceway and panel configurations exist for which the previously given separation requirements are not imposed due to practical limitations. These exemptions are identified in E-1R8902. The evaluation criteria for acceptance of these exemptions is as follows:

A)

Class 1E raceway is assumed lost and the effects are determined.

Exception is allowed provided the loss does not affect safe shutdown; OR B)

Non-Class 1E circuits are energized only during maintenance when Class 1E circuits are out of service. Non-Class 1E circuits are isolated from the Class 1E circuits by administrative controls; OR C)

Deviations are evaluated based upon a review of Electrical Raceway Separation Verification Test Reports for Limerick Units 1 & 2 and the WCNOC overcurrent protection system.

8.3-33 Rev. 27

WOLF CREEK Review/Analysis -- Wyle Laboratories conducted tests for Limerick Units 1 and 2 (Test Report 46960-1 and 46960-3) to justify separation which is less than the standard distance. They used similar cables of the same size (and larger) as the WCNOC cables in question. Their tests are based on the following failure mode assumptions:

1. The cable or equipment in the circuit develops a fault that is not cleared due to the failure of the primary overcurrent protective device.

2. The fault current level (660 amps) is just below the long-term trip setpoint of the next higher level overcurrent device.

3. The impedance of the fault adjusts itself automatically to maintain the fault current magnitude at a constant level as the resistance of the wire increases due to heating.

4. There are no other loads on the same circuit which would cause the next high level overcurrent device to trip.

5. The overload wire can maintain the continuous overheated condition without an operator being aware of the condition.

Philadelphia Electric Company's Design Verification Test Report #48503 showed that heating effects due to wiring faults which caused sustained overcurrent conditions with the above assumptions had the greatest impact on adjacent wires. The results of their tests revealed the following:

1. Cable sized #4/0 AWG and smaller when energized with 660 amps and routed in an open cable tray, did not ignite.

Cables were tested in both horizontal and vertical tray configurations and did not ignite in any case.

Configuration with a 1" vertical separation between cable trays and zero separation between cable tray and enclosed raceway were tested successfully without damage.

2. No separation was required between an enclosed raceway and another enclosed raceway or cable tray when the enclosed raceway contains cables which are #4/0 AWG and smaller.

3. One inch separation between an enclosed raceway and another enclosed raceway or cable tray is required when the enclosed raceway contains cables larger than #4/0 AWG.

8.3-34 Rev. 27

WOLF CREEK The Electrical Raceway Separation Verification Test reports for Limerick Units 1 & 2 are applicable to WCNOC for the following reasons:

1. WCNOC uses similar cables made by the same manufactures as the cables used in the test. Cables used by WCNOC made by different manufactures than those used in the test use the same type of insulation material (cross-linked polyethylene or cross-linked ethylene propylene rubber) and jacket material (chlorosulfonated polyethylene or neoprene). In addition, all class 1E cables, with the exception of stanless steel fire-resistive cables, are qualified to the same standards such as IEEE-323 and IEEE-383 and are manufactured to the same IPCEA standards. Stanless steel fire-resistive cables have been type tested for exceeding the standards of IEEE-323 and IEEE-383.

2. The WCNOC electrical raceway configurations are similar to the electrical raceway configurations used in the test.

3. The fault current used in the test is very conservative compared to the maximum credible fault current that could develop for the configuration of circuits described above in this section.

Physical separation between transient electrical cables and Class 1E raceway/cables/equipment may on a temporary basis fail to meet the 3 foot - 5 foot requirement per Reg. Guide 1.75 Rev. 1 and IEEE 384-1974.

Transient electrical cables are defined as follows: transient electrical cables are those non-safety related cables used on a temporary basis in support of field work activities or testing/monitoring which will remain in place for a short duration of time and which do not require a permanent plant modification or a temporary modification for their use. Transient cables typically include but are not limited to: extension cords, temporary power leads, temporary lighting cords, hand power tool cords, welding leads, communication cables, computer cables, video cables, test leads, (DMMs, recorders, data acquisition equipment, etc.) and instrumentation leads.

Transient cable separation requirements are delineated in plant administrative procedures. All deviations from the administrative procedures will require an engineering evaluation.

Physical separation between the non-safety related Local Area Network (LAN) cable and Class 1E raceway may on a limited basis, fail to meet the 3 foot horizontal and 5 foot vertical requirement of R.G. 1.75 and IEEE 384-1974.

These cables are installed in free air. Physical separation of 1 inch horizontal and 3 inches vertical is maintained between the free air cables and Class 1E raceway.

LAN cables inside the power block consist of fiber optic cables and 4 pair - 24 AWGUTP, Category 5/5e cables, both of which meet the flame spread requirements of WCNOC design document, E-11013, section 3.0. The fiber optic cable carries no electrical energy, cannot conduct electrical current and will not propagate a flame. Consequently these cables pose no risk to Class 1E electrical circuits. The 24 AWGUTP Category 5 copper conductor cables carry digital computer data only and consequently do not pose a risk with respect to degrading the functions of Class 1E electrical circuits.

8.3-35 Rev. 27

WOLF CREEK 8.3.1.4.2 Administrative Responsibilities and Controls for Assuring Separation Criteria During Design and Installation The scheme and raceway channel identification (refer to Section 8.3.1.3) facilitated and ensured the maintenance of separation in the routing of cables and the connection of control boards and panels. At the time of the cable routing assignment in the design office, the routing engineer checked to ensure that the separation group designation on the scheme to be routed was compatible with the raceways in the intended route. Extensive use of computer program checks helped ensure separation. Each circuit and raceway was identified in the computer program, and the identification included the applicable separation group. The program used in routing specifically checked to ensure that cables of a particular separation group were routed through the appropriate raceways.

The routing was also confirmed by quality control personnel, during installation, to be consistent with the design document. Color identification of equipment and cabling (refer to Section 8.3.1.3) assisted field personnel in this effort.

8.3.2 DC POWER SYSTEMS 8.3.2.1 Description Site dc power is supplied at 125 volts from two independent sources within the power block, Buses PK01 and PK02 as shown in Figure 8.3-6 sheet 2, neither of which is a Class 1E power bus. One fused disconnect switch at each source delivers power to the site through underground feeders. Each site feeder supplies a 125-V dc distribution panel at the shop building. Each distribution panel supplies miscellaneous dc loads at the shop building, and a 125-V dc distribution panel at the non-Class 1E circulating water screenhouse. These distribution panels supply miscellaneous dc loads at the screenhouse.

Interconnection of the independent power block buses is prevented at all levels of distribution.

The makeup water screenhouse is provided with a 125-V dc wet cell storage battery. The battery is rated at 160 ampere-hours and is trickle-charged from a static battery charger. The battery supplies a 125-V dc distribution panel, which in turn supplies miscellaneous dc loads at the screenhouse.

The powerblock dc power system for WCGS consists of four independent Class 1E 125-V dc subsystems, four non-Class 1E 125-V dc subsystems, and one non-Class 1E 250-V dc system. The dc power system is designed to provide reliable and continuous power for controls, instrumentation, inverters, and dc emergency auxiliaries.

8.3-36 Rev. 27

WOLF CREEK The Class 1E dc system provides dc electric power to the Class 1E dc loads and for control and switching of the Class 1E systems. Physical separation, electrical isolation, and redundancy are provided to comply with the requirements of IEEE 308. The four class 1E dc power subsystems are shown in Figure 8.3-6, sheet 1. Subsystems 1 and 4 provide control power for ac Load Groups 1 and 2, respectively. These subsystems also provide vital instrumentation and control power for channels 1 and 4, respectively, of the reactor protection and engineered safety features systems. DC subsystems 2 and 3 provide vital instrumentation and control power for channels 2 and 3, respectively, of the reactor protection and engineered safety features systems.

Each Class 1E dc power subsystem consists of one 125-V battery, one battery charger, one inverter, and distribution switchboards. The battery chargers for dc subsystems 1 and 3 are supplied 480-V ac power from different Class 1E busses of Load Group 1. Similarly, the battery chargers for dc subsystems 2 and 4 are supplied 480-V ac power from different Class 1E busses of Load Group 2.

The inverters provide four independent 120-V ac vital instrumentation and control power supplies for the channels of reactor protection and engineered safety features systems.

Two spare battery chargers and two swing (spare) inverters are provided for the power block. The spare chargers are located in the ESF Switchgear rooms and are connected in place of failed chargers via non-automatic transfer switches.

The Train A swing inverter is located in the Train A ESF room and the Train B swing inverter is located in the Train B ESF room. These are aligned to replace the selected inverter via non-automatic transfer switches. In the event of a charger or inverter failure, the spare charger/swing inverter is connected to the affected system permitting the malfunctioning equipment to be repaired without long term disruption of the system.

The batteries, racks, chargers, inverters, and auxiliary distribution equipment (switchboards) are designated seismic Category I, and are designed to maintain their functional capability during and after an SSE. The electrical equipment qualification is discussed in Section 3.10(B) and 3.10(N).

The non-Class IE loads for the power block are supplied by separate dc systems.

A 125-V dc system PK03 and PK04 is provided to supply nonvital control and instrumentation. Two 200-A dc feeders are provided to supply the site system dc control loads. In addition, a 250-V dc system is provided to supply nonvital dc motors, such as emergency lube oil pumps and emergency seal oil pumps. The 125-V dc system, in conjunction with inverters, also serves as the back-up source of power for the computers and fire detection system.

The 250-V dc system includes one battery and two battery chargers, one charger serving as a backup for the other. The non-Class IE 125-V dc system includes four batteries, each of which has one battery charger.

One battery charger of the 250-V dc system and all battery chargers of the non-Class IE 125-V dc system are supplied 480-V ac power from the standby power system.

The 125-V and 250-V dc non-Class 1E and 125-v dc Class 1E systems are subjected to a maximum voltage of 140V (for 125V) and 280V (for 250V) dc. This occurs during the equalization of the batteries. All equipment associated with and connected to the dc systems is designed to withstand the maximum voltage during equalization.

8.3-37 Rev. 29

WOLF CREEK 8.3.2.1.1 Safety-Related DC Loads Table 8.3-1 identifies loads related to each Class IE 125-V dc subsystem.

8.3.2.1.2 Class IE Station Batteries and Battery Chargers BATTERY CAPACITY - The WCGS Class IE batteries are sized in excess of that required to supply the loads in Tables 8.3-2 and 8.3-3 for 240 minutes. The required capacity is initially evaluated from design loads, with margin, imposed on each battery throughout the 240-minute duty cycle.

From this capacity, a margin of 25 percent is applied to ensure that the rated battery capacity is at least 125 percent of that required. This margin is consistent with the 80 percent capacity battery replacement criteria given in IEEE 450-1995.

As a result of the above sizing, the WCGS batteries are selected from those larger sizes that are commercially available. The resulting final battery selection is in excess of 150 percent of the system requirements.

BATTERY CHARGER CAPACITY - The capacity of each Class IE battery charger is based on the largest combined demand of all the steady state loads and the charging capacity to restore the battery from the design minimum charge state (one duty cycle) to the fully charged state within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> (irrespective of the status of the plant during which these demands occur).

INSPECTION, MAINTENANCE, AND TESTING - Testing of the dc power system is performed during plant operation, in accordance with Regulatory Guide 1.118 and IEEE Standard 450-1995.

Preoperational tests and inspections were performed in accordance with the procedures described in Chapter 14.0.

8.3.2.1.3 Separation and Ventilation The Class IE batteries, chargers, and dc switchgear of each separation group are located in separate rooms of the seismic Category I control building.

Chargers and dc switchgear are in separate rooms from the batteries. The battery rooms are ventilated by a system which is designed to preclude the possibility of hydrogen accumulation. Section 9.4.1.2 contains a description of the battery room ventilation system. Battery room temperature is controlled or the batteries appropriately derated so that the battery capacity is maintained at a level that satisfies the requirements of Section 8.3.2.1.2.

8.3.2.2 Analysis 8.3.2.2.1 Compliance with General Design Criteria, Regulatory Guides, and Industry Standards The following paragraphs analyze compliance of the Class IE dc power system with Regulatory Guides 1.6, 1.32, 1.41, 1.81, 1.93, 1.128, and 1.129 and IEEE Standards 308-1974 and 450-1995.

Compliance with General Design Criteria 17 and 18 is discussed in Section 3.1.

Refer to Appendix 3A for the applicable revision dates on regulatory guides.

8.3-38 Rev. 27

WOLF CREEK REGULATORY GUIDE 1.6, INDEPENDENCE BETWEEN REDUNDANT STANDBY (ONSITE) POWER SOURCES AND BETWEEN THEIR DISTRIBUTION SYSTEMS - The power block Class IE dc system is separated into four subsystems, two per load group. Each dc subsystem is energized by one battery and one battery charger. Each battery charger is supplied from its associated ac load group. The batteries are exclusively associated with a single 125-V dc bus. No provision exists for transferring loads between redundant 125-V dc subsystems. Thus, sufficient independence and redundancy exist between the 125-V dc subsystems to ensure performance of minimum safety functions, assuming a single failure.

Two spare chargers are provided to replace any of the four chargers. The spare chargers are located in the ESF Switchgear rooms, and are connected in place of failed chargers via non-automatic transfer switches.

REGULATORY GUIDE 1.32, CRITERIA FOR SAFETY-RELATED ELECTRIC POWER SYSTEMS FOR NUCLEAR POWER PLANTS The requirements of Regulatory Positions C.1 and C.2 pertaining to the dc systems are met as follows:

a.

Reference:

Paragraph C.1.b of the regulatory guide.

Refer to Section 8.3.2.1.2.

b.

Reference:

Paragraph C.1.c of the regulatory guide. The test is performed as specified in IEEE Standard 450-1975 rather than the 3 years specified in Table 2 of IEEE Standard 308-1974.

The battery service test described in IEEE Standard 450-1995 is performed in addition to the battery performance discharge test. The service test intervals will be no longer than 18 months. (See Appendix 3A for discussion of compliance to Regulatory Guide 1.32 in relation to IEEE Standard 450)

c.

Reference:

Paragraph C.1.d of the regulatory guide.

Refer to Regulatory Guide 1.6 above in this section.

d.

Reference:

Paragraph C.2.a of the regulatory guide.

Refer to Regulatory Guide 1.81 below in this section.

e.

Reference:

Paragraph C.2.b of the regulatory guide.

Refer to Regulatory Guide 1.93 below in this section.

REGULATORY GUIDE 1.41, PREOPERATIONAL TESTING OF REDUNDANT ON-SITE ELECTRIC POWER SYSTEMS TO VERIFY PROPER LOAD GROUP ASSIGNMENTS - In compliance with this regulatory guide, the Class IE 125-V dc subsystems designed in accordance with Regulatory Guides 1.6 and 1.32 are tested as follows:

a.

Testing of the dc power system, including an acceptance test of battery capacity, is performed prior to unit operation and after major modifications or repairs in accordance with the procedures described in Chapter 14.0.

b.

The charger, battery connections, and charger supply are checked for proper assignment to the proper ac load group.

8.3-39 Rev. 27

WOLF CREEK

c. Class IE 125-V dc subsystems are functionally tested, along with the associated ac load group, by discon-necting and isolating the other ac load group, its ac power sources, and the associated dc subsystem. Each test includes simulation of an engineered safety features actuation signal, startup of the standby diesel generator and the load group under test, sequencing of loads, and the functional performance of the loads.

During these tests, the ability of the 125-V dc subsystem to perform its intended functions, e.g.,

control of diesel generators and Class IE ac switchgear, is checked.

d.

During the testing of the Class IE 125-V dc subsystem associated with one ac load group, the busses of the 125-V dc subsystem associated with the ac load groups not under test are monitored to verify the absence of voltage, indicating no interconnection of the dc systems.

REGULATORY GUIDE 1.81, SHARED EMERGENCY AND SHUTDOWN ELECTRIC SYSTEMS FOR MULTI-UNIT NUCLEAR POWER PLANTS - WCGS is a single unit plant.

REGULATORY GUIDE 1.93, AVAILABILITY OF ELECTRIC POWER SOURCES - Refer to Appendix 3A for the response to this regulatory guide.

REGULATORY GUIDE 1.128, INSTALLATION DESIGN AND INSTALLATION OF LARGE LEAD STORAGE BATTERIES FOR NUCLEAR POWER PLANTS - The requirements of IEEE 484, 1975 are used for the installation of batteries.

The battery room ventilation system limits hydrogen concentration to less than 2 percent by volume at any location in the battery area.

Restraining channel beams and tie rods are electrically insulated from the cell cases and are finished with acid-resistant paint.

The requirements of Regulatory Guide 1.120 for safety-related battery rooms are complied with. Refer to Appendix 3A for the response to this regulatory guide.

The requirements of Regulatory Guide 1.100 are complied with. Refer to Appendix 3A for the response to this regulatory guide.

Batteries are located in a well-ventilated location with adequate aisle space and space above cells.

Temperature differential between cells is no greater than 3ø C at a given time.

The presence of localized heat sources is precluded.

Eyewash facilities are provided in the corridor between the battery rooms as shown on Figure 1.2-24.

Battery racks provide for the mounting of batteries in a two-step configuration.

Fire detection sensors and alarms are provided as described in Section 9.5.1.

8.3-40 Rev. 27

WOLF CREEK During unpacking, any cell with electrolyte level 1/2 inch or more below the top of the plates is replaced.

Cells are stored in a clean, level, dry, and cool location. Extremely low ambient temperatures and localized sources of heat are avoided.

The recommendations for a freshening charge outlined in IEEE 484, Paragraph 5.3.1, are followed after the installation of the batteries.

A hydrogen survey is performed to verify that the ventilation system limits hydrogen concentration to less than 2 percent by volume. This survey data is recorded and maintained in a permanent file for future reference.

REGULATORY GUIDE 1.129, MAINTENANCE, TESTING, AND REPLACEMENT OF LARGE LEAD STORAGE BATTERIES FOR NUCLEAR POWER PLANTS - The requirements of IEEE 450, 1995 are followed as described below.

IEEE Standard 308-1974, IEEE Standard Criteria for Class IE Electric Systems for Nuclear Power Generating Stations - For compliance with the ac power requirements of IEEE 308, refer to Section 8.1.4.3.

The following provides compliance for the dc power requirements of IEEE 308.

The Class IE dc system provides dc electric power to the Class IE dc loads and for the control and switching of the Class IE systems. Physical separation, electrical isolation, and redundancy are provided to prevent the occurrence of common mode failures. The design of the Class IE dc system includes the following:

a.

he dc system is separated into four subsystems.

b.

The safety actions of each group of loads are independent of the safety actions provided by its redundant counterpart.

c.

Each dc subsystem includes power supplies that consist of one battery and one battery charger.

d.

The batteries are not interconnected.

e.

The batteries do not have a common failure mode.

Each Class IE dc distribution circuit is capable of transmitting sufficient energy to start and operate all the required loads in that circuit.

Distribution circuits to redundant equipment are independent of each other.

The distribution system is monitored to the extent that it is shown to be ready to perform its intended function. The dc auxiliary devices required to operate the equipment of a specific ac load group are supplied from the dc subsystem of the same load group.

8.3-41 Rev. 27

WOLF CREEK The batteries are maintained in a fully charged condition and have sufficient stored energy to operate all the necessary circuit breakers and to provide an adequate amount of energy for all required emergency loads for 240 minutes after loss of ac power or charger failure.

Each battery charger has sufficient capacity to restore the battery from the design minimum charge (one duty cycle) to its fully charged state while supplying the largest combined demand of the steady-state loads. The battery charger of one subsystem is independent of the battery charger for the redundant subsystem.

Instrumentation is provided to monitor the status of each dc subsystem. No instrumentation is shared between subsystems.

A summary annunciator in the control room is provided to alarm on any one of the following conditions. Each condition is also provided with individual alarm windows at the main switchboard.

a.

Charger input breaker open

b.

Charger output breaker open

c.

Charger failure

d.

Charger input ac undervoltage

e.

Charger output dc undervoltage

f.

Charger output dc overvoltage

g.

Dc bus undervoltage

h.

Distribution switchboard undervoltage

i.

Dc ground

j.

Battery circuit continuity monitor Indicating instruments are provided to monitor the following:

a.

Battery output amperes (local and control room)

b.

Bus voltage (local and control room)

c.

Charger output current (local and control room)

d.

Charger output voltage (local only)

e.

Distribution switchboard white light (local only) 8.3-42 Rev. 27

WOLF CREEK Each battery charger has an input ac and output dc circuit breaker for isolation of the charger. Each battery charger power supply is designed to prevent the ac supply from becoming a load on the battery due to a power feedback as the result of the loss of ac power to the chargers.

Equipment of the Class IE dc system is protected and isolated by fuses or circuit breakers in the event of a short circuit or overload conditions.

Indication is provided to identify equipment that is made unavailable per the following:

Event Available Indication

a. Battery charger ac Control room summary alarm, input breaker trip alarm at main switchboard, breaker position at charger

b. Battery charger dc Control room summary alarm, output breaker trip alarm at main switchboard, breaker position at charger

c. Battery fuse blow Control room summary alarm, alarm at main switchboard

d. Distribution switch-Control room summary alarm, board feeder fuse blow alarm at main switchboard local white light

e. Distribution circuit Individual equipment alarm fuse blow

f. Inverter dc feeder Inverter trouble alarm/static fuse blow switch transfer

g. Inverter output ac 120-v ac vital bus under-breaker trip voltage alarm

h. Battery high rate of Control room computer alarm discharge Periodic testing and surveillance requirements for the Class IE batteries are detailed in the Technical Specifications.

Dependable power supplies are provided for the reactor protection system and engineered safety features actuation system. Four independent dc and ac power supplies are provided for control and instrumentation of these systems. The independent dc supplies are provided by distribution circuits from distribution panels on each system. Independent ac supplies are provided by the four inverters and associated 120-v ac vital busses. Refer to Section 8.3.1.1.5 for further description of these vital instrument ac power supplies.

8.3-43 Rev. 29

WOLF CREEK IEEE STANDARD 450-1995, RECOMMENDED PRACTICE FOR MAINTENANCE, TESTING, AND REPLACEMENT OF VENTED LEAD-ACID BATTERIES FOR STATIONARY APPLICATIONS - The following recommended practices of IEEE 450 for maintenance, testing, and replacement of batteries are followed for the Class IE batteries:

a.

Maintenance, inspections, and tests, including cell differential temperature measurements, are carried out on a regularly scheduled basis to comply with the requirements of IEEE 450.

b.

An acceptance test of battery capacity is performed at the factory to determine if it meets the specified discharge rate and duration.

c.

The first performance test of battery capacity was carried out within the first 2 years of service. The subsequent performance tests or modified performance tests of battery capacity are made once every 5 years until the battery shows signs of degradation. Refer to Technical Specification 3.8.4.

d.

Eighteen month performance tests of battery capacity are given to any battery which shows signs of degradation or which has reached 85 percent of the expected service life.

e.

The battery service tests or modified performance tests described in Sections 5.3 and 5.4 of IEEE Standard 450-1995 are performed at test intervals not to exceed 18 months.

If system design is changed so that the previous test is no longer a valid test of the capability of the battery to meet the changed design requirements of the system, a service test is conducted on the new system design.

f.

The rating of the battery when purchased is approximately 50 percent greater than that required to supply the emergency load requirements. 25% of the 50% is reserved for aging margin. This margin permits a battery replacement criteria of 80-percent rated capacity (refer to Section 8.3.2.1.2).

g.

Records of the data obtained from inspections and tests are kept along with test procedures, to comply with the requirements.

8.3-44 Rev. 27

WOLF CREEK 8.3.3 FIRE PROTECTION FOR CABLE SYSTEMS The measures employed for the prevention of and protection against fires in electrical cables are described in Section 9.5.1.

Section 8.3.1.4.1, Separation Criteria, provides information regarding separation between redundant cable trays.

8.

3.4 REFERENCES

1.

Marasco, F. W. and Siroky, R. M., "Westinghouse 7300 Series Process Control System Noise Tests," WCAP-8892-A, June 1977.

8.3-45 Rev. 27

WOLF CREEK TABLE 8.3-1 CLASS IE DC SYSTEM LOADS I. DC Subsystem 1 (Separation Group 1)

a. Diesel generator NE01 control and field flashing

b. Solenoid valves, indicating lights, and miscellaneous power and controls associated with load group 1

c. Class IE switchgear of load group 1 dc control

d. Inverter NN11 (or Swing Inverter NN15)

e. Reactor trip switchgear, channel 1 dc control

f. Main control room dc emergency lighting

g. Load shedder and emergency load sequencer panel

h. Engineered safety feature status panel

i. Diesel generator 1 control panel II. DC Subsystem 4 (Separation Group 4)

a. Diesel generator NE02 control and field flashing

b. Solenoid valves, indicating lights, and miscellaneous power and controls associated with load group 2

c. Class IE switchgear of load group 2 dc control

d. Inverter NN14 (or Swing Inverter NN16)

e. Reactor trip switchgear channel 2 dc control

f. Engineered safety features status panel

g. Load shedder and emergency load sequencer panel

h. Diesel generator 2 control panel III. DC Subsystem 3 (Separation Group 3)

a. Inverter NN13 (or Swing Inverter NN15)

b. Miscellaneous indicators, power, and controls associated with Separation Group 3 Rev. 29

WOLF CREEK TABLE 8.3-1 (Sheet 2)

IV. DC Subsystem 2 (Separation Group 2)

a. Inverter NN12 (or Swing Inverter NN16)

b. Miscellaneous indicators, power, controls, and auxiliary feedwater pump turbine controls associated with Separation Group 2 Rev. 29

WOLF CREEK TABLE 8.3-2 125 V DC CLASS IE BATTERY LOADING CYCLE (AMPERES REQUIRED PER TIME INTERVAL PER BATTERY AFTER LOSS OF AC POWER)

SUBSYSTEMS 1 AND 4 Battery Unit and Load 0-1 1-60 60-200 200-201 201-210 210-211 211-220 220-221 221-239 239-240 Profile(1) min min min min min min min min min min Total Amps/interval --- NK11 213.38 126.16 129.57 148.68 129.57 148.68 129.57 148.68 129.57 148.68 Total Amps/interval --- NK14 213.17 125.58 125.58 144.56 125.58 144.56 125.58 144.56 125.58 144.56

1.

The loading cycle assumes that all continuous loads are running for the entire duration (240 minutes). See applicable engineering calculation for detailed load list. Momentary loads are based on the worst case conditions during the emergency. For example, the first column represents the loads that are required at time zero.

Rev. 32

WOLF CREEK TABLE 8.3-2 (Sheet 2)

NOTES:

1.

The loading cycle assumes that all continuous loads are running for the entire duration (240 minutes).

Momentary loads are based on the worst case conditions during the emergency. For example, the first column represents the loads that are required at time zero.

Rev. 26

WOLF CREEK TABLE 8.3-3 125 V DC CLASS IE BATTERY LOADING CYCLE (AMPERES REQUIRED PER TIME INTERVAL PER BATTERY AFTER LOSS OF AC POWER)

SUBSYSTEMS 2 AND 3 Battery Unit and Load 0-1 min 1-240 min Profile(1)

Total Amps/interval --- NK12 88.08 68.74 Total Amps/interval --- NK13 61.73 61.73

1.

The loading cycle assumes that all continuous loads are running for the entire duration (240 minutes). See applicable engineering calculation for detailed load list.

Rev. 32

WOLF CREEK TABLE 8.3-4 FAILURE MODES AND EFFECTS ANALYSIS This table presents the failure mode and effects analysis (FMEA) of the engineered safety features (ESF) auxiliary electrical power system. The purpose of the analysis is to demonstrate that the Class IE power system can provide sufficient power to ensure the operation of all ESF loads required for post-accident safe shutdown, assuming a single component failure, as defined in IEEE Standard 308-1974.

Components which are included in the analysis are listed on the first sheets of the table. Refer to Figure 8.3-1 sheets 1 through 5 and Figure 8.3-6, sheet 1, for the location of these components in the system.

Rev. 21

WOLF CREEK TABLE 8.3-4 (Sheet 2)

A. LIST OF MAJOR ELECTRICAL EQUIPMENT 120-Vac Battery Fusible 125-V 125-V dc Manual Distr 480-V MCC Transformers D-G Chargers Batteries Switches Swbd Distr Swbd Inverters Tsfr Bkr Swbd Breakers 13.8-kV Breakers XNG02 NEO2 NK22 NK12 89NK0201 89NK0402 89NK0404 NK02 NK42 NN12 52NN0201 NN02 52NG02AFF3 252PA0201 (L.G.2) XNG04 XNB02 NK24 NK14 89NK0202 89NK0409 89NK0411 NK04 NK44 NN14 52NN0401 NN04 52NG06EAF1 XNG06 XMR01 NK26* 89NK0209 89NK0204 89NK0405 NK54 NN16 52NG02ADF1 89NK0401 89NK0211 89NK0103 52NG02ABR1 89NK0303 52NG02AFF1 (L.G.1) XNG01 NE01 NK21 NK11 89NK0101 89NK0302 89NK0304 NK01 NK41 NN11 52NN0101 NN01 52NG01ACR3 XNG03 XNB01 NK23 NK13 89NK0102 89NK0309 89NK0311 NK03 NK43 NN13 52NN0301 NN03 52NG05EAF1 XNG05 NK25* 89NK0109 89NK0104 89NK0105 NK51 NN15 52NG01ABF1 89NK0301 89NK0111 89NK0203 52NG01AGF3 89NK0403 52NG01AGF4 AC Transfer Switches DC Transfer Switches (L.G.1) NK77 NK71 NK73 NK75 NK79 (L.G.2) NK78 NK72 NK74 NK76 NK80 Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 3) 4160-V 480-V 480-V Bus L.C. MCC 4-kV Breakers 480-V Breakers NG02 NG02A NG06E 152NB0209 152NB0212 152NB0201 152NB0205 52NG0401 52NG0206 52NG0208 (L.G.2) NB02 NG04 NG02B NG02T 152NB0211 152NB0208 152NB0206 152NB0215 52NG0201 52NG0207 NG04C NG04T 152NB0213 152NB0204 152NB0207 152NB0214* 52NG0406 52NG0216 NG04D 152NB0210 152NB0202 152NB0203 152NB0216 52NG0407 52NG0405 (L.G.1) NG01 NG01A NG05E 152NB0112 152NB0109 152NB0104 152NB0105 52NG0101 52NG0307 52NG0108 NB01 NG03 NG01B NG01T 152NB0110 152NB0106 152NB0107 152NB0115 52NG0301 52NG0306 NG03C NG03T 152NB0113 152NB0101 152NB0108 152NB0114* 52NG0106 52NG0116 NG03D 152NB0111 152NB0103 152NB0102 152NB0116 52NG0107 52NG0305 Rev. 0

WOLF CREEK TABLE 8.3-4 (Sheet 4)

B. FAILURE MODES AND EFFECTS ANALYSIS Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure N/A Offsite power Provides power Loss of power Loss of pre-Undervoltage None-offsite Offsite system failure, to startup ferred power relays, volt-power supplied transmission line xfmr XMR01 to xfmr XMR01 meters, lights by alternate failure, bus fault, source through failure of swyd C.B.

ESF xfmr XNB01 N/A Offsite power Provides power Loss of power Loss of pre-None-offsite Offsite system failure, to ESF xfmr ferred power to power supplied transmission line XNB01 XNB01 by alternate failure, bus fault, source through failure of swyd C.B.

startup xfmr XMR01 XMR01 Startup Provides pre-Fails to provide Loss of pre-Overcurrent, None-offsite Internal fault, transformer ferred power power ferred power neutral ground power supplied lightning arrestor to ESF xfmr to XNB02 overcurrent, by alternate failure, bushing XNB02 and differen-source through failure, cooling tial relays, ESF xfmr XNB01 system failure fault pressure (during startup only) annunciation; undervoltage annunciation for bus NB02 at MCB.

Periodic testing and inspection XNB01 ESF transformer Provides pre-Fails to provide Loss of pre-Undervoltage None-D-G NE01 Internal fault, ferred power power ferred power annunciation energizes NB01 bushing failure to bus NB01 to bus NB01 for bus NB01 until bkr and backup and backup at MCB 152NB0109 is power to bus power to bus Periodic test-NB02 NB02 ing and in-spection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 5)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure XNB02 ESF transformer Provides pre-Fails to provide Loss of pre-Undervoltage None-D-G NE02 Internal fault, ferred power power ferred power annunciation energized NB02 bushing failure to bus NB02 to bus NB02 for bus NB02 until bkr and backup and backup at MCB 152NB0212 is power to bus power to bus manually closed NB01 NB01 Periodic test-ing and in-spection 252PA0201 1,200-A 13.8-Provides power Fails open Loss of pre-Indicating lights, None-D-G NE02 Mechanical failure, kV N.C. in-to and pro-ferred power undervoltage an-feeds bus NB02 relay failure, coming feeder tects ESF to xfmr XNB02 nunciation for bus until bkr control power bkr xfmr XNB02 NB02 at MCB 152NB0212 is failure closed Fails closed Swyd bkr Periodic test-isolates xfmr ing and in-XMR01 spection 152NB0209 2,000-A, 4.16-Provides pre-Fails open Loss of pre-Indicating lights, None-bus NB02 Mechanical failure, kV N.C. breaker ferred power ferred power undervoltage supplied by relay failure, to and pro-to bus NB02 annunciation NE02 loss of control tects bus NB02 for bus NB02 power at MCB Fails closed Bus NB02 Periodic test-None-bus NB02 isolated by ing and in-isolated by N.C.

N.C. bkr spection bkr 252PA0201; 252PA0201 ESF loads fed by L.G.1 Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 6)

Equip. No.

Equip. Name Function Failure Mode Effect on Subsystem Method of Failure Detection Effect on Total System Causes of Failures 152NB0109 2,000-A, Provides back-Fails open Loss of backup Indicating lights, None-backup Mechanical failure, 4.16-kV up power to power to bus undervoltage power to bus relay failure, N.0. breaker and protects NB01 annunciation NB01 supplied loss of control bus NB01 for bus NB01 by D-G NE01 power at MCB Fails closed Bus NB01 Periodic test-None-ESF loads isolated by ing and in-fed by L.G.2 N.C. bkr spection 252PA0201 152NB0112 2,000-A, Provides pre-Fails open Loss of pre-Indicating lights, None-bus NB01 Mechanical failure, 4.16-kV ferred power ferred power undervoltage supplied by relay failure, N.C. breaker to and protects to bus NB01 annunciation D-G NE01 loss of control bus NB01 for bus NB01 power at MCB Fails closed Bus NB01 Periodic test-None-bus isolated isolated by ing and in-by swyd bkr; ESF N.C. swyd bkr spection loads fed by L.G.2 152NB0212 2,000-A, Provides back-Fails open Backup power Indicating lights, None-back up Mechanical failure, 4.16-kV up power to to bus NB02 undervoltage power to bus relay failure, N.O. breaker and protects supplied by annunciation NB02 supplied loss of control bus NB02 D-G NE02 for bus NB02 by D-G NE02 power at MCB Fails closed Bus NB02 Periodic testing None-ESF loads isolated by and inspection fed by L.G.1 N.C. swyd bkr NB01 4.16-kV bus Distributes Fails to Loss of ESF Undervoltage None-redundant Overload electrical distribute loads on NB01 annunciation load group pro-Short circuit power power at MCB vides all EFS functions Periodic testing and inspection NB02 4.16-kV bus Distributes Fails to Loss of ESF Undervoltage None-redundant Overload electrical distribute loads on NB02 annunciation load group pro-Short circuit power power at MCB vides all ESF functions Periodic test-ing and in-spection Rev. 13

WOLF CREEK TABLE 8.3-4 (Sheet 7)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 152NB0113 1200-A, Provides power Fails open Loss of pre-Indicating lights, None-ESF loads Mechanical failure, 4.16-kV to and protects ferred power undervoltage on L.C. NG01 relay failure, N.C. breaker xfmr XNG01 to L.C. NG01 annunciation supplied through control power for L.C. NG01 tie bkr 52NG0116 failure at MCB Fails closed Bus NB01 Periodic test-None-redundant isolated by ing and in-load group pro-bkr 152NB0112 spection vides all ESF functions 152NB0110 1200-A, Provides power Fails open Loss of pre-Indicating lights, None-ESF loads Mechanical failure, 4.16-kV to and pro-ferred power undervoltage on L.C. NG03 relay failure, N.C. breaker tects xfmr to L.C. NG03 annunciation supplied through control power XNG03 for L.C. NG03 tie bkr 52NG0116 failure at MCB Fails closed Bus NB01 Periodic test-None-redundant isolated by ing and in-load group pro-bkr 152NB0112 spection vides all ESF functions 152NB0210 1200-A, Provides power Fails open Loss of pre-Indicating lights None-ESF loads Mechanical failure, 4.16-kV to and pro-ferred power undervoltage on L.C. NG04 relay failure, N.C. breaker tects xfmr to L.C. NG04 annunciation supplied through control power XNG04 for L.C. NG04 tie bkr 52NG0216 failure at MCB Fails closed Bus NB02 Periodic test-None-redundant isolated by ing and in-load group pro-bkr 152NB0209 spection vides all ESF functions 152NB0213 1200-A, Provides power Fails open Loss of pre-Indicating lights None-ESF loads Mechanical failure, 4.16-kV to and pro-ferred power undervoltage on L.C. NG02 relay failure, N.C. breaker tects xfmr to L.C. NG02 annunciation supplied through control power XNG02 for L.C. NG02 tie bkr 52NG0216 failure at MCB Fails closed Bus NB02 Periodic test-None-redundant isolated by ing and in-load group pro-bkr 152NB0209 spection vides all ESF functions XNG01 4.16-kV/480-V Provides Fails to Loss of primary Overcurrent, None-L.C. NG01 Internal fault, load center primary power provide power power to L.C. ground over-and NG03 sup-bushing failure xfmr source to NG01 and current, neutral plied by xfmr L.C. NG01 alternate overcurrent XNG03 and alternate power to L.C. annunciation, power source NG03 undervoltage an-to L.C. NG03 nunciation for L.C. NG01 at MCB Periodic testing and inspection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 8)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure XNG03 4.16-kV/480-V Provides Fails to Loss of primary Overcurrent, None-L.C. NG01 Internal fault, load center primary power provide power power to L.C. ground over-and NG03 sup-bushing failure xfmr source to NG03 and current, neutral plied by xfmr C. NG03 alternate overcurrent XNG01 and alternate power to L.C. annunciation, power source NG01 undervoltage an-to L.C. NG01 nunciation for L.C. NG03 at MCB.

Periodic testing and inspection 152NB0111 2,000-A, Connects die-Fails open Loss of die-Indicating lights, None-redundant Mechanical failure, 4.16-kV sel generator sel generator undervoltage load group pro-relay failure, N.O. diesel NE01 to bus power to bus annunciation vides all ESF control power generator bkr NB01 NB01 for bus NB01 functions failure at MCB Fails closed Damage to D-G Periodic test-NE01, bus NB01 ing and in-isolated by spection bkr 152NB0112 152NB0211 2000-A, Connects die-Fails open Loss of die-Indicating lights, None-redundant Mechanical failure, 4.16-kV sel generator sel generator undervoltage load group pro-relay failure, N.O. diesel NE02 to bus power to bus annunciation vides all ESF control power generator bkr NB02 NB02 for bus NB02 functions failure at MCB Fails closed Damage to D-G Periodic test-NE02, bus NB02 ing and in-isolated by spection bkr 152NB0209 NE01 4.16-kV emer-Provides emer-Fails to Loss of emer-D-G undervoltage/ None-redundant Fault, mechanical gency diesel gency power provide emer-gency power under freq, over-load group pro-failure, loss of generator to bus NB01 gency power to bus NB01 current, Volt re-vides all ESF excitation strained O.C., functions reverse power, loss of field, differential, and overexcitation neut ground O.C.

annunciation. Peri-odic testing, and inspection. Under-voltage annunciation for bus NB01 at MCB Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 9)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NE02 4.16-kV emer-Provides emer-Fails to pro-Loss of emer-D-G UV/UF, O.C., None-redundant Fault, mechanical gency diesel gency power to vide emer-gency power to Volt restr O.C., load group pro-failure, loss of generator bus NB02 gency power bus NB02 reverse pwr, vides all ESF excitation loss of field, functions overexcitation, diff and neut GRD O.C. annun-ciation. Periodic testing and in-spection. Under-voltage annunciation for bus NB02 at MCB 152NB0106 1,200-A, Provides power Fails open Loss of power Indicating lights, None-pressurizer Mechanical failure, 4.16-kV to and pro-to pressurizer undervoltage heaters are not relay failure, N.C. breaker tects xfmr backup heaters annunciation safety related control power XPG21 for L.C. PG21 failure Fails closed Bus NB01 Periodic test-None-redundant isolated by N.C. ing and in-load group pro-bkr 152NB0112 spection vides all ESF functions 152NB0208 1,200-A, Provides power Fails open Loss of power Indicating lights, None-pressurizer Mechanical failure, 4.16-kV to and pro-to pressurizer undervoltage heaters are not relay failure, N.C. breaker tects xfmr backup heaters annunciation safety related control power XPG22 on L.C. PG22 failure Fails closed Bus NB02 Periodic test-None-redundant isolated by N.C. ing and in-load group pro-bkr 152NB0209 spection vides all ESF functions XNG04 4.16-kV/480-V Provides Fails to Loss of primary Overcurrent, None-L.C. NG04 Internal fault, L.C. xfmr primary power provide power power to L.C. ground over-and L.C. NG02 bushing failure source to NG04 and current, neutral, supplied by xfmr L.C. NG04 alternate overcurrent XNG02 and alternate power to L.C. annunciation power source NG02 to L.C. NG02 Undervoltage an-nunciation for L.C. NG04 at MCB.

Periodic testing and inspection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 10)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure XNG02 4.16-kV/480-V Provides Fails to Loss of primary Overcurrent, None-L.C. NG02 Internal fault, L.C. xfmr primary power provide power power to L.C. ground over-and L.L. NG04 bushing failure to L.C. NG02 NG02 and current, neutral supplied by xfmr and alternate alternate overcurrent, XNG04 power source power to L.C. annunciation to L.C. NG04 NG04 Undervoltage an-nunciation for L.C. NG02 at MCB Periodic testing and inspection 52NG0101 1,600-A, Provides power Fails open None-L.C. Indicating lights None-L.C. NG01 Mechanical failure, 480-V N.C. to and pro-NG01 fed undervoltage fed through tie relay failure, loss of breaker tects L.C. through tie annunciation bkr 52NG0116 control power NG01 bkr 52NG0116 for L.C. NG01 at MCB Fails closed L.C. xfmr Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 152NB0113 spection all ESF functions 52NG0301 1,600-A, Provides power Fails open None-L.C. Indicating lights, None-L.C. NG03 Mechanical failure, 480-V N.C. to and pro-NG03 fed undervoltage fed through tie relay failure, loss of breaker tects L.C. through tie annunciation bkr 52NG0116 control power NG03 bkr 52NG0116 for L.C. NG03 at MCB Fails closed L.C. xfmr Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 152NB0110 spection all ESF functions 52NG0401 1,600-A, Provides power Fails open None-L.C. Indicating lights, None-L.C. NG04 Mechanical failure, 480-V N.C. to and pro-NG04 fed undervoltage fed through tie relay failure, loss of breaker tects L.C. through tie annunciation bkr 52NG0216 control power NG04 bkr 52NG0216 for L.C. NG04 at MCB Fails closed L.C. xfmr Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 152NB0210 spection all ESF functions 52NG0201 1,600-A, Provides power Fails open None-L.C. Indicating lights, None-L.C. NG02 Mechanical failure, 480-V N.C. to and pro-NG02 fed undervoltage fed through tie relay failure, loss of breaker tects L.C. through tie annunciation bkr 52NG0216 control power NG02 bkr 52NG0216 for L.C. NG02 at MCB Fails closed L.C. xfmr Periodic test-None-redundant Mechanical failure, isolated by ing and in-L.G. provides relay failure, loss bkr 152NB0213 spection all ESF of control power functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 11)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG0116 1,600-A, Ties L.C. NG01 Fails open Loss of alter-Indicating lights, None-redundant Mechanical failure, 480-V N.O. with NG03 in nate power to undervoltage L.G. provides relay failure, loss of breaker the event of either L.C. annunciation all ESF func-control power loss of primary NG01 or NG03 for either L.C. tions power to either NG01 or NG03 at MCB Fails closed L.C. NG01 Periodic test-None-redundant and NG03 ing and in-L.G. provides isolated by spection all ESF functions bkrs 52NG0101 and/or 52NG0301 52NG0216 1,600-A, Ties L.C. NG04 Fails open Loss of alter-Indicating lights, None-redundant Mechanical failure, 480-V N.O. with NG02 in nate power to undervoltage L.G. provides relay failure, loss of breaker the event of either L.C. annunciation all ESF func-control power loss of primary NG02 or NG04 for either L.C.

power to either NG02 or NG04 at MCB Fails closed L.C. NG02 Periodic test-None-redundant and NG04 ing and in-L.G. provides isolated by spection all ESF bkrs 52NG0201 functions and/or 52NG0401 L.C. NG01 480-V load Distributes Fails to Loss of loads Undervoltage None-redundant Overload center electrical distribute on L.C. NG01; annunciation L.G. provides all Short circuit power power loss of alter-at MCB ESF functiions nate source to Periodic test-NG03 ing and inspection L.C. NG03 480-V load Distributes Fails to Loss of loads Undervoltage None-redundant Overload center electrical distribute L.C. NG03; annunciation L.G. provides all Short circuit power power loss of alter-at MCB ESF functions nate source to Periodic test-NG01 ing and inspection L.C. NG04 480-V load Distributes Fails to Loss of loads Undervoltage None-redundant Overload center electrical distribute on L.C. NG04; annunciation L.G. provides all Short circuit power power loss of alter-at MCB F functiions nate source to Periodic test-NG02 ing and inspection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 12)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure L.C. NG02 480-V load Distributes Fails to Loss of loads Undervoltage None-redundant Overload center electrical distribute on L.C. NG02; annunciation L.G. provides all Short circuit power power loss of alter-at MCB ESF functions nate source to NG04 Periodic test-ing and inspection 52NG0106 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG01A trip annunciator L.G. provides relay failure, loss of breaker MCC NG01A ESF functions control power Fails closed L.C. NG01 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0101 spection ESF functions 52NG0107 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG01B trip annunciator L.G. provides relay failure, loss of breaker MCC NG01B ESF functions control power Fails closed L.C. NG01 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0101 spection ESF functions 52NG0306 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG03C trip annunciator L.G. provides relay failure, loss of breaker MCC NG03C ESF functions control power Fails closed L.C. NG03 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0301 spection ESF functions 52NG0307 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG03D trip annunciator L.G. provides relay failure, loss of breaker MCC NG03D ESF functions control power Fails closed L.C. NG03 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0301 spection ESF functions 52NG0406 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG04C trip annunciator L.G. provides relay failure, loss of breaker MCC NG04C ESF functions control power Fails closed L.C. NG04 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0401 spection all ESF functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 13)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG0407 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG04D trip annunciator L.G. provides relay failure, loss of breaker MCC NG04D ESF functions control power Fails closed L.C. NG04 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0401 spection ESF functions 52NG0207 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG02B trip annunciator L.G. provides relay failure, loss of breaker MCC NG02B all ESF func-control power tions Fails closed L.C. NG02 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0201 spection ESF functions 52NG0206 800-A, Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG02A trip annunciator L.G. provides relay failure, loss of breaker MCC NG02A all ESF func-control power tions Fails closed L.C. NG02 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0201 spection of all ESF all ESF functions functions NG01A 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electrical distribute on MCC NG01A fdr breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection NG01B 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electrical distribute on MCC NG01B fdr breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection Rev. 0

WOLF CREEK TABLE 8.3-4 (Sheet 14)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NG03C 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on MCC NG03C breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions ad indicating lights Periodic testing and inspection NG03D 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on MCC NG03D breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection NG04C 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on MCC NG04C breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection NG04D 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on MCC NG04D breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection NG02B 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on NG02B breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection NG02A 480-V motor Distributes Fails to Loss of loads Annunciation for None-redundant Overload control center electrical distribute on NG02A breaker trip, L.G. provides Short circuit power power loss of individual all ESF functions load indicating lights Periodic testing and inspection Rev. 0

WOLF CREEK TABLE 8.3-4 (Sheet 15)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG0208 800-A, Provides power Fails open Loss of loads Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects on MCC NG02T trip annunciation L.G. provides relay failure, loss of breaker NG02T all ESF func-control power tions Fails closed L.C. NG02 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0201 spection all ESF func-tions 52NG0405 800-A, Provides power Fails open Loss of loads Indicating lights, None-redundant Mechanical failure, 480-V N.C. to and protects on MCC NG04T trip annunciation L.G. provides relay failure, loss of breaker NG04T all ESF func-control power tions Fails closed L.C. NG04 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0401 spection all ESF func-tions NG01T 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electric distribute on MCC NG01T FDR breaker trip L.G. provides Short circuit power power all ESF functions NG03T 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electric distribute on MCC NG03T FDR breaker trip L.G. provides Short circuit power power all ESF functions NG02T 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electric distribute on MCC NG02T FDR breaker trip L.G. provides Short circuit power power all ESF functions NG04T 480-V motor Distributes Fails to Loss of loads Annunciation on None-redundant Overload control center electric distribute on MCC NG04T FDR breaker trip L.G. provides Short circuit power power all ESF functions 52NG0108 800-A, Provides power Fails open Loss of power Indicating lights None-redundant Mechanical failure, 480-V N.C. to and protects to MCC NG01T trip annunciator L.G. provides relay failure, loss of breaker MCC NG01T all ESF func-control power tions Fails closed L.C. NG01 Periodic test-None-redundant isolated by ing and in-L.G. provides bkr 52NG0101 spection all ESF functions Rev. 0

WOLF CREEK TABLE 8.3-4 (Sheet 16)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG0305 800-A, 480- Provides Fails open Loss of power Indicating lights None-redundant Mechanical failure, Volt N.C. power to to MCC NG03T trip annunciator L.G. provides relay failure, loss breaker and protects all ESF functions of control power MCC NG03T Fails closed L.C. NG03 Periodic testing None-redundant isolated by and inspection L.G. provides bkr 52NG0301 all ESF functions 152NB0101 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEJ01A L.G. provides the relay failure, loss tects RHR PP ESF function of control power PE J01A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB01 at MCB all ESF functions 152NB0103 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEM01A L.G. provides the relay failure, loss tects S.I. PP ESF function of control power PEMO1A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB01 at MCB all ESF functions 152NB0104 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PBG05A L.G. provides the relay failure, loss tects cent ESF functions of control power chgng PP PBG05A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB01 at MCB all ESF functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 17)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 152NB0107 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEG01A PEG01C provides relay failure, loss tects comp clg ESF function of control power wtr PP PEG01A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB01 at MCB all ESF functions 152NB0108 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEG01C PEG01A provides relay failure, loss tects comp clg the ESF function of control power wtr PP PEG01C Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB02 at MCB all ESF functions 152NB0102 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEN01A L.G. provides relay failure, loss tects cont the ESF function of control power spray PP PEN01A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB02 at MCB all ESF functions 152NB0105 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PAL01A L.G. provides relay failure, loss tects aux fw the ESF function of control power PP PAL01A Periodic testing and inspection Fails closed Bus NB01 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0112 for NB01 at MCB the ESF functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 18)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 152NB0204 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEJ01B L.G. provides relay failure, loss tects RHR PP the ESF function of control power PEJ01B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions 152NB0202 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEM01B L.G. provides relay failure, loss tects S.I. PP the ESF function of control power PEM01B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions 152NB0201 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PBG05B L.G. provides relay failure, loss tects cent the ESF function of control power chgng PP PBG05B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions 152NB0206 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEG01B PEG01D provides relay failure, loss tects comp clg the ESF function of control power wtr PEG01B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 19)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 152NB0207 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEG01D PEG01B provides relay failure, loss tects comp clg the ESF function of control power wtr PP PEG01D Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation for L.G. provides bkr 152NB0209 NB02 at MCB all ESF functions 152NB0203 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PEN01B L.G. provides relay failure, loss tects cont the ESF function of control power spray PP PEN01B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions 152NB0205 1,200-A, 4.16-Provides power Fails open Power unavail-Indicating lights None-redundant Mechanical failure, kV breaker to and pro-able at PAL01B L.G. provides relay failure, loss tects aux FW the ESF function of control power PP PAL01B Periodic testing and inspection Fails closed Bus NB02 Undervoltage None-redundant isolated by annunciation L.G. provides bkr 152NB0209 for NB02 at MCB all ESF functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 20)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 152NB0116 1,200-A, 4.16-Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure kV N.C. to and pro-to XNG05 loss of indicating load group pro-Relay failure breaker tects XNG05 lights in MCC load vides all neces-Loss of control power ckts sary functions Fails closed Bus NB01 Undervoltage an-None-redundant isolated by nunciation for load group provides N.C. bkr NB01 at MCB all necessary 152NB0112 functions Periodic testing and inspection 152NB0115 1,200-A, 4.16-Provides power Fails open Loss of power Indicating lights None-redundant Mechanical failure kV N.C. to and pro-to PP DPEF01A load group pro-Relay failure breaker tects PP vides all neces-Loss of control power PEF01A sary functions Fails closed Bus NB01 Undervoltage an-None-redundant isolated by nunciation for load group provides N.C. bkr NB01 at MCB all necessary 152NB0112 functions Periodic testing and inspection 152NB0216 1,200-A, 4.16-Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure kV N.C. to and pro-to DPEF01B loss of indicating load group pro-Relay failure breaker tects XNG06 lights in MCC load vides all neces-Loss of control power ckts sary functions Fails closed Bus NB02 Undervoltage an-None-redundant isolated by nunciation for load group provides N.C. bkr NB02 at MCB all necessary 152NB0209 functions Periodic testing and inspection 152NB0215 1,200-A, 4.16-Provides power Fails open Loss of power Indicating lights, None-redundant Mechanical failure kV N.C. to and pro-to DPEF01B undervoltage an-load group pro-Relay failure breaker tects PP nunciation for vides all neces-Loss of control power PEF01B NB02 at MCB sary functions Fails closed Bus NB02 Periodic testing None-redundant isolated by and inspection load group provides N.C. bkr all necessary 152NB0209 functions Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 21)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure XNG05 4.00-kV/ Provides power Fails to pro-Loss of power Overcurrent, None-redundant Internal fault 480-V xfmr to MCC NG05E vide power to MCC NG05E ground over-load group pro-current, neutral vides all neces-overcurrent sary functions annunciator Loss of indicating lights in MCC load ckts Periodic testing and inspection XNG06 4.00-kV/ Provides power Fails to pro-Loss of power Overcurrent, None-redundant Internal fault 480-V xfmr to MCC NG06E vide power to MCC NG06E ground over-load group pro-current, neutral vides all neces-overcurrent sary functions annunciator Loss of indicating lights in MCC load ckts Periodic testing and inspection 52NG05E 800-A, 480-V Provides power Fails open Loss of power Indicating lights None-redundant Mechanical failure AF1 N.C. breaker to and pro-to MCC NG05E Trip annunciator load group pro-Relay failure tects MCC vides all neces-Loss of control power NG05E sary functions Fails closed NG05E Loss of indi-None-redundant isolated by cating lights in load group provides N.C. bkr MCC load ckts all necessary 152NB0116 functions Periodic testing and inspection 52NG06E 800-A, 480-V Provides power Fails open Loss of power Indicating lights None-redundant Mechanical failure AF1 N.C. breaker to and pro-to MCC NG06E Trip annunciator load group pro-Relay failure tects MCC NG06E vides all neces-Loss of control power sary functions Fails closed NG06E Loss of indi-None-redundant isolated by cating lights in load group provides N.C. bkr MCC load ckts all necessary 152NB216 functions Rev. 13

WOLF CREEK TABLE 8.3-4 (Sheet 22)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure Periodic testing and inspection NG05E 480-V motor Distributes Fails to Loss of power to Trip annunciator None-redundant Overload control center electrical provide power ESW Intake Struc-on feeder bkrs load group pro-Short circuit power ture Separation vides all neces-Group 1 Loss of indicating sary functions lights in MCC load ckts Periodic testing and inspection NG06E 480-V motor Distributes Fails to Loss of power to Trip annunciator None-redundant Overload control center electrical provide power ESW Intake Struc-on feeder bkrs load group pro-Short circuit power ture Separation vides all neces-Group 4 Loss of indicating sary functions lights in MCC load ckts Periodic testing and inspection Rev. 13

WOLF CREEK TABLE 8.3-4 (Sheet 23)

Method of Causes Effect on Failure Effect on of Equip. No.

Equip. Name Function Failure Mode Subsystem Detection Total System Failure Deleted Deleted 152NB0117 Space Periodically N/A N/A N/A None N/A used for test device or spare breaker storage Deleted 152NB0217 Space Periodically N/A N/A N/A None N/A used for test device or spare breaker storage Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 24)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NK11 125-V battery Provides back-Fails to pro-Loss of backup Solid state None-redundant Short to ground, up dc power to vide adequate dc power to battery monitor, dc subsystem internal shorts dc bus NK01 if output voltage bus NK01 local indication, provides all charger NK21 control room necessary func-fails; provides annunciation tions extra power during surges Periodic testing and inspection NK13 125-V battery Provides back-Fails to pro-Loss of backup Solid state None-redundant Short to ground, up dc power to vide adequate dc power to battery monitor, dc subsystem internal shorts dc bus NK03 if output voltage bus NK03 local indication, provides all charger NK23 control room necessary func-fails; provides annunciation tions extra power during surges Periodic testing and inspection NK12 125-V battery Provides back-Fails to pro-Loss of backup Solid state None-redundant Short to ground, up dc power to vide adequate dc power to battery monitor, dc subsystem internal shorts dc bus NK02 if output voltage bus NK02 local indication, provides all charger NK22 control room necessary func-fails; provides annunciation tions extra power during surges Periodic testing and inspection NK14 125-V battery Provides back-Fails to pro-Loss of backup Solid state None-redundant Short to ground, up dc power to vide adequate dc power to battery monitor, dc subsystem internal shorts dc bus NK04 if output voltage bus NK04 local indication, provides all charger NK24 control room necessary func-fails; provides annunciation tions extra power during surges Periodic testing and inspection 89NK0101 125-V, N.C. Provides power Fails open Loss of battery Battery output None-battery Mechanical failure fusible switch to and protects NK11 source amps indicated charger NK21 bus NK01 to bus NK01 in control room provides power 89NK0301 125-V, N.C. Provides power Fails open Loss of battery Battery output None-battery Mechanical failure fusible switch to and protects NK13 source amps indicated charger NK23 bus NK03 to bus NK03 in control room provides power 89NK0201 125-V, N.C. Provides power Fails open Loss of battery Battery output None-battery Mechanical failure fusible switch to and protects NK12 source amps indicated charger NK22 bus NK02 to bus NK02 in control room provides power Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 25)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 89NK0401 125-V, N.C. Provides power Fails open Loss of battery Battery output None-battery Mechanical failure fusible switch to and protects NK14 source amps indicated charger NK24 bus NK04 to bus NK04 in control room provides power NK21 125-V battery Charges bat-Fails to provide None-battery Local indication None-battery Fault, component charger tery NK11; power NK11 picks up and control room NK11 provides failure provides pri-load until summary annun-power (spare is mary power spare charger ciation for also available) to bus NK03 NK25 is in-input under-stalled voltage and output under and over voltage Periodic testing and inspection NK23 125-V battery Charges bat-Fails to provide None-battery Local indication None-battery Fault, component charger tery NK13; power NK13 picks up and control room NK13 provides failure provides pri-load until summary annun-power (spare is mary power spare charger ciation for also available) to bus NK03 NK25 is in-input under-stalled voltage and output under and over voltage Periodic testing and inspection NK22 125-V battery Charges bat-Fails to provide None-battery Local indication None-battery Fault, component charger tery NK12; power NK12 picks up and control room NK12 provides failure provides pri-load until summary annun-power (spare is mary power spare charger ciation for also available) to bus NK02 NK25 is in-input under-stalled voltage and output under and over voltage Periodic testing and inspection NK24 125-V battery Charges bat-Fails to provide None-battery Local indication None-battery Fault, component charger tery NK14; power NK14 picks up and control room NK14 provides failure provides pri-load until summary annun-power (spare is mary power spare charger ciation for also available) to bus NK04 NK25 is in-input under-stalled voltage and output under and over voltage Periodic testing and inspection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 26)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 89NK0102 125-V, N.C. Provides power Fails open Loss of battery Charger output None-battery Mechanical failure fusible switch to and protects charger NK21 amps indicated NK11 supplies bus NK01 source to in control room bus NK01 bus NK01 89NK0302 125-V, N.C. Provides power Fails open Loss of battery Charger output None-battery Mechanical failure fusible switch to and pro-charger NK23 amps indicated NK13 supplies tects bus source to in control room bus NK03 NK03 bus NK03 89NK0202 125-V, N.C. Provides power Fails open Loss of battery Charger output None-battery Mechanical failure fusible switch to and pro-charger NK22 amps indicated supplies tects bus source to in control room bus NK02 NK02 bus NK02 89NK0402 125-V, N.C. Provides power Fails open Loss of battery Charger output None-battery Mechanical failure fusible switch to and pro-charger NK24 amps indicated supplies tects bus source to in control room bus NK04 NK04 bus NK04 NK01 125-Vdc bus Distributes Fails to Loss of Sep. Ground detection None-redundant Overload electrical distribute Grp. 1 dc power local indication subsystem pro-Short circuit power power of undervoltage, vides all neces-and summary sary functions annunciation at control room Periodic testing and inspection NK03 125-Vdc bus Distributes Fails to Loss of Sep. Ground detection None-redundant Overload electrical distribute Grp. 3 dc power local indication subsystem pro-Short circuit power power of undervoltage, vides all neces-and summary sary functions annunciation at control room Periodic testing and inspection Rev. 11

WOLF CREEK TABLE 8.3-4 (Sheet 27)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NK02 125-Vdc bus Distributes Fails to Loss of Sep. Ground detection, None-redundant Overload electrical distribute Grp. 2 dc power local indication subsystem provides Short circuit power power of undervoltage, all necessary and summary functions annunciation at control room Periodic testing and inspection NK04 125-Vdc bus Distributes Fails to Loss of Sep. Ground detection, None-redundant Overload electrical distribute Grp. 4 dc power local indication subsystem provides Short circuit power power of undervoltage, all necessary and summary functions annunciation at control room Periodic testing and inspection 89NK0111 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN01 Mechanical failure fusible switch to and pro-er NN11 power put to inv fed by inverter tects 7.5-kVA to bus NN01 annunciated alternate CVT source inverter NN11 or swing unit NN15 89NK0311 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN03 Mechanical failure fusible switch to and pro-er NN13 power put to inv fed by inverter tects 7.5-kVA to bus NN03 annunciated alternate CVT source inverter NN13 or swing unit NN15 89NK0211 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN02 Mechanical failure fusible switch to and pro-er NN12 power put to inv fed by inverter tects 7.5-kVA to bus NN02 annunciated alternate CVT source inverter NN12 or swing unit NN16 89NK0411 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN04 Mechanical failure Fusible switch to and pro-er NN14 power put to inv fed by inverter tects 7.5-kVA to bus NN04 annunciated alternate CVT source inverter NN14 or swing unit NN16 89NK0104 125-V, N.C. Provides power Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch to and pro-swbd NK41 indication at dc subsystem pro-tects distr swbd NK41, vides necessary swbd NK41 undervoltage functions alarm at swbd NK01, and trouble alarm at MCB 89NK0103 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN01 Mechanical failure fusible switch to and pro-er NN15 power put to inv fed by inverter tects 7,5-kVA to bus NN01 annunciated alternate CVT source inverter NN15 or normal inv unit 89NK0303 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN03 Mechanical failure fusible switch to and pro-er NN15 power put to inv fed by inverter tects 7,5-kVA to bus NN03 annunciated alternate CVT source inverter NN15 or normal inv unit Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 28)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 89NK0304 125-V, N.C. Provides power Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch to and pro-swbd NK43 indication at dc subsystem pro-tects distr swbd NK43, vides necessary swbd NK43 undervoltage functions alarm at swbd NK03, and trouble alarm at MCB 89NK0204 125-V, N.C. Provides power Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch to and pro-swbd NK42 indication at dc subsystem pro-tects distr swbd NK42, vides necessary swbd NK42 undervoltage functions alarm at swbd NK02, and trouble alarm at MCB 89NK0404 125-V, N.C. Provides power Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch to and pro-swbd NK44 indication at dc subsystem pro-tects distr swbd NK44, vides necessary swbd NK44 undervoltage functions alarm at swbd NK04, and trouble alarm at MCB NK41 125-Vdc Distributes Fails to Loss of loads Undervoltage None-redundant Overload control dc power distribute on distr swbd indication at dc subsystem Short circuit distribution power NK41 NK41, under-provides necessary switchboard voltage alarm functions at NK01, trouble alarm at MCB NK43 125-Vdc Distributes Fails to Loss of loads Undervoltage None-redundant Overload control dc power distribute on distr swbd indication at dc subsystem Short circuit distribution power NK43 NK43, under-provides necessary switchboard voltage alarm functions at NK03, trouble alarm at MCB NK42 125-Vdc Distributes Fails to Loss of loads Undervoltage None-redundant Overload control dc power distribute on distr swbd indication at dc subsystem Short circuit distribution power NK42 NK42, under-provides necessary switchboard voltage alarm functions at NK02, trouble alarm at MCB 89NK0203 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN02 Mechanical failure fusible switch to and pro-er NN16 power put to inv fed by inverter tects 7.5-kVA to bus NN02 annunciated alternate CVT source inverter NN16 or normal inv unit 89NK0403 125-V, N.C. Provides power Fails open Loss of invert-Loss of dc in-None-bus NN04 Mechanical failure fusible switch to and pro-er NN16 power put to inv fed by inverter tects 7.5-kVA to bus NN04 annunciated alternate CVT source inverter NN16 or normal inv unit Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 29)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NK44 125-Vdc Distributes Fails to Loss of loads Undervoltage None-redundant Overload control dc power distribute on dist swbd indication at dc subsystem Short circuit distribution power NK44 NK44, under-provides necessary switchboard voltage alarm at functions NK04, trouble alarm at MCB NN11 7.5-kVA Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component inverter ulated ac provide swbd NN01 lost; put annunciation ac subsystem failure, output tripped power to power alternate source provides neces-by power surge swbd NN01 CVT auto transfer. Periodic testing sary functions NN15 manually and inspection connected.

NN13 7.5-kVA Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component inverter ulated ac provide swbd NN03 lost; put annunciation ac subsystem failure, output tripped power to power alternate source provides neces-by power surge swbd NN03 CVT auto transfer Periodic testing sary functions NN15 manually and inspection connected.

NN12 7.5-kVA Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component inverter ulated ac provide swbd NN02 lost; put annunciation ac subsystem failure, output tripped power to power alternate source provides neces-by power surge swbd NN02 CVT auto transfer Periodic testing sary functions NN16 manually and inspection connected.

NN14 7.5-kVA Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component inverter ulated ac provide swbd NN04 lost; put annunciation ac subsystem failure, output tripped power to power alternate source provides neces-by power surge swbd NN04 CVT auto transfer Periodic testing sary functions NN16 manually and inspection connected.

52NN0101 100-A/120-V Swbd NN01 fdr Fails open Loss of power Periodic testing None-redundant Mechanical failure normally brkr from to swbd NN01 and inspection channel provides closed non-normal power necessary functions automatic ckt source-inverter Undervoltage bkr NN11 Annunciation for None-redundant swbd NN01 channel provides necessary functions Fails closed Swbd NN01 isolated by inverter output bkr NN15 7.5-kVA Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component swing inverter ulated ac provide swbd NN01/NN03 put annunciation ac subsystem failure, output tripped power to power bst; alternate provides neces-by power surge swbd NN01/NN03 CVT source auto Periodic testing sary functions transfer and inspection NN16 7.5-kVA swing Provides reg-Fails to Inv source to Loss of ac out-None-redundant Fault, component inverter ulated ac provide swbd NN02/NN04; put annunciation ac subsystem failure, output tripped power to power bst; alternate provides neces-by power surge swbd NN02/NN04 CVT source auto Periodic testing sary functions transfer and inspection Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 30)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NN0301 100-A/120-V Swbd NN01 fdr Fails open Loss of power Periodic testing None-redundant Mechanical failure normally closed bkr from to swbd NN03 and inspection channel provides nonautomatic normal power necessary functions ckt bkr source-inverter Undervoltage NN13 annunciation for swbd NN03 Fails closed Swbd NN01 isolated None-redundant by inverter out-channel provides put bkr necessary functions 52NN0201 100-A/120-V Swbd NN01 fdr Fails open Loss of power Periodic testing None-redundant Mechanical failure normally closed bkr from to swbd NN02 and inspection channel provides nonautomatic normal power necessary functions ckt bkr source-inverter Undervoltage NN12 annunciation for swbd NN02 Fails closed Swbd NN01 isolated None-redundant by inverter out-channel provides put bkr necessary functions 51NN0401 100-A/120-V Swbd NN01 fdr Fails open Loss of power Periodic testing None-redundant Mechanical failure normally closed bkr from to swbd NN04 and inspection channel provides nonautomatic normal power necessary functions ckt bkr source-inverter Undervoltage NN14 annunciation for swbd NN04 Fails closed Swbd NN01 isolated None-redundant by inverter out-channel provides put bkr necessary functions NN01 120-Vac Distributes Fails to Loss of loads Undervoltage None-redundant Overload instrument electrical provide power on swbd NN01 annunciation channel provides Short circuit switchboard power necessary func-Periodic testing tions.

and inspection Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 31)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure NN03 120-Vac Distributes Fails to Loss of loads Undervoltage None-redundant Overload instrument electric provide power on swbd NN03 annunciation channel provides Short circuit switchboard power necessary functions Periodic testing and inspection NN02 120-Vac Distributes Fails to Loss of loads Undervoltage None-redundant Overload instrument electric provide power on swbd NN02 annunciation channel provides Short circuit bus power necessary functions Periodic testing and inspection NN04 120-Vac Distributes Fails to Loss of loads Undervoltage None-redundant Overload instrument electric provide power on swbd NN04 annunciation channel provides Short circuit bus power necessary functions Periodic testing and inspection Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 32)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG01ABF1 100-A/480-V Provides Fails open Loss of xfmr Periodic testing None-transformer Mechanical failure N.C. circuit isolation XPN07 and inspection loads are non-breaker between class safety related 1E power supply and Non-Fails closed MCC NG01A is None-redundant class 1E load isolated by L.C. MCC provides Xfmr-XPN07 bkr 52NG0106 necessary functions 52NG02ADF1 100-A/480-V Provides Fails open Loss of xfmr Periodic testing None-transformer Mechanical failure N.C. circuit isolation XPN08 and inspection loads are non-breaker between class safety related 1E power supply and Non-Fails closed MCC NG02A is None-redundant class 1E load isolated by L.C. MCC provides Xfmr-XPN08 bkr 52NG0206 necessary functions 52NG01ACR3 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N.C. circuit to and pro-NN11 backup AC and inspection source provides breaker tects Inv NN11 (CVT) necessary functions CVT Fails closed MCC NG01A iso-None-preferred lated by N.C. source provides bkr 52NG0106 necessary functions Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 33)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 52NG02AFF3 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N.C. circuit to and pro-NN14 backup AC and inspection source provides breaker tects Inv NN14 (CVT) necessary functions CVT Fails closed MCC NG02A iso-None-preferred lated by N.C. source provides bkr 52NG0206 necessary functions NK25 Spare 125-V Replaces any Fails to Inability to Periodic testing None-battery as-Fault, component battery of chargers provide replace a and inspection asociated with failure charger NK21, NK23 power failed failed charger charger supplies load 89NK0109 125-V, N.O. Connects Fails open None Periodic testing None Mechanical failure fusible switch battery NK11 and inspection to resistive load for dis-charge testing 89NK0309 125-V, N.O. Connects Fails open None Periodic testing None Mechanical failure fusible switch battery NK13 and inspection to resistive load for dis-charge testing 89NK0209 125-V, N.O. Connects Fails open None Periodic testing None Mechanical failure fusible switch battery NK12 and inspection to resistive load for dis-charge testing 89NK0409 125-V, N.O. Connects Fails open None Periodic testing None Mechanical failure fusible switch battery NK14 and inspection to resistive load for dis-charge testing Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 34)

Method of Causes Effect on Failure Effect on of Equip. No.

Equip. Name Function Failure Mode Subsystem Detection Total System Failure NK26 Spare 125-V Replaces any Fails to Inability to Periodic testing None-battery Fault, component battery of chargers provide replace a and inspection associated with failure charger NK22, NK24 power failed failed charger charger supplies load NK71 DC transfer Connects Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK21 or transfer replace a and inspection associated with NK25 to bus NK01 failed charger failed charger supplies load NK72 DC transfer Connects Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK22 or transfer replace a and inspection associated with NK26 to bus NK02 failed charger failed charger supplies load NK73 DC transfer Connects Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK23 or transfer replace a and inspection associated with NK25 to bus NK03 failed charger failed charger supplies load NK74 DC transfer Connects Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK24 or transfer replace a and inspection associated with NK26 to bus NK04 failed charger failed charger supplies load NK75 DC transfer Connects spare Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK25 to transfer replace a and inspection associated with bus NK01 or NK03 failed charger failed charger supplies load NK76 DC transfer Connects spare Fails to Inability to Periodic testing None-battery Mechanical failure switch charger NK26 to transfer replace a and inspection associated with bus NK02 or NK04 failed charger failed charger supplies load NK77 AC transfer Connects AC Fails to Inability to Periodic testing None-battery Mechanical failure switch power from bus transfer replace a and inspection associated with NG01 or PG19 to failed charger failed charger charger NK25 supplies load NK78 AC transfer Connects AC Fails to Inability to Periodic testing None-battery Mechanical failure switch power from bus transfer replace a and inspection associated with NG04 or PG20 to failed charger failed charger charger NK26 supplies load NK79 Swing Inverter Connects DC Fails to Inability to Periodic testing None-battery Mechanical failure transfer switch power from bus transfer replace a and inspection associated with NK01 or NK03 to failed Swing failed Inverter Swing Inv NN15 Inverter supplies load NK80 Swing Inverter Connects DC Fails to Inability to Periodic testing None-battery Mechanical failure transfer switch power from bus transfer replace a and inspection associated with NK02 or NK04 to failed Swing failed Inverter Swing Inv NN16 Inverter supplies load Rev. 29

WOLF CREEK TABLE 8.3-4 (Sheet 35)

Method of Causes Effect on Failure Effect on of Equip. No. Equip. Name Function Failure Mode Subsystem Detection Total System Failure 89NK0105 125-V, N.C. Provides Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch power to swbd NK51 indication at dc subsystem and protects swbd NK51 by provides necessary distr swbd alarm at swbd functions NK51 NK01 and trouble alarm at MCB 89NK0405 125-V, N.C. Provides Fails open Loss of distr Undervoltage None-redundant Mechanical failure fusible switch power to swbd NK54 indication at dc subsystem and protects swbd NK54, provides necessary distr swbd alarm at swbd functions NK54 NK04 and trouble alarm at MCB NK51 125-V control Distributes dc Fails to Loss of loads Undervoltage None-redundant Overload distribution power distribute on swbd NK51 indication on dc subsystem Short circuit switchboard power swbd NK51, UV provides necessary alarm at NK01, functions and trouble alarm at MCB NK54 125-V dc con-Distributes dc Fails to Loss of loads Undervoltage None-redundant Overload trol distri-power distribute on swbd NK54 indicating on dc subsystem Short circuit bution switch-power swbd NK54, UV provides necessary board alarm at NK04, functions and trouble alarm at MCB 52NG01AGF3 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N. C. circuit to and pro-NN13 backup AC and inspection source provides Breaker tects Inv NN13 (CVT) necessary functions CVT Fails closed MCC NG01A iso-None-preferred lated by N. C. source provides bkr 52NG0106 necessary functions 52NG01AGF4 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N. C. circuit to and pro-NN15 backup AC and inspection source provides Breaker tects Inv NN15 (CVT) necessary functions CVT Fails closed MCC NG04A iso-None-preferred lated by N. C. source provides bkr 52NG0106 necessary functions 52NG02ABR1 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N. C. circuit to and pro-NN12 backup AC and inspection source provides Breaker tects Inv NN12 (CVT) necessary functions CVT Fails closed MCC NG04A iso-None-preferred lated by N. C. source provides bkr 52NG0206 necessary functions 52NG02AFF1 100-A/480-V Provides power Fails open Loss of Inv Periodic testing None-preferred Mechanical failure N. C. circuit to and pro-NN16 backup AC and inspection source provides Breaker tects Inv NN16 (CVT) necessary functions CVT Fails closed MCC NG01A iso-None-preferred lated by N. C. source provides bkr 52NG0206 necessary functions Rev. 29

Table 8.3-5 (Sheet 1 of 3)

Minimum Separation Distance Analysis Required by R. G. 1.75 and IEEE 384-74 EQUIPMENT EQUIPMENT FUNCTION FAILURE EFFECT ON SYSTEM CAUSE NUMBER DESCRIPTION MODE GSHV31 & These valves are solenoid These valves are the inside and Valve fails This is a safe condition.

Loss of power GSHV32 valves with a 120V AC outside containment isolation closed to valve supply voltage and a load valves on the sample supply ______________________________________________________________________

of 2 amps.1 line to containment radiation Valve fails This is a safe condition.

Short to monitor GTRT32. closed A blown fuse (3A) or tripped ground The phase conductor to breaker (15a) due to overcurrent each valve is protected Both valves are normally conditions is essentially the by a 3 amp fuse located energized, normally open and same as a loss of power. If the in the Main Control fail closed. 15 amp breaker trips at the MCC Board (RL020). distribution panel, it should be The only time these valves noted that the other devices fed The secondary level of are required to be closed, from the breaker will also fail in protection for GSHV31 is excluding testing is during in the safe position.2 the 15 amp circuit breaker a LOCA or MSLB where upon ______________________________________________________________________

(NG01ACR123) which is receipt of the containment Valve fails Either the valve remains open due Hot short.

located in MCC distri-isolation signal the circuits closed to energization of the solenoid bution panel NG01AA1. supplying the solenoids are (see following) or it closes. If deenergized and the valves it closes, this is a safe condition.

The secondary level of are closed. ______________________________________________________________________

protection for GSHV32 is Valve fails This is a safe condition during Hot short.

the 15 amp circuit breaker open normal operations.

(NG02ACR130) which is located in MCC distribution During the following a LOCA or panel NG02AA1. MSLB these valves remaining open could be a concern, however, the Conduit 4U3E7N serves probability of the lack of the valve GSHV32. 3' - 5' separation resulting in both GSHV31 and GSHV32 remaining open during or following a MSLB or LOCA is deemed extremely low and as such not credible.

There-fore the present design is considered acceptable.

Rev. 1

Table 8.3-5 (Sheet 2 of 3)

EQUIPMENT EQUIPMENT FUNCTION FAILURE EFFECT ON SYSTEM CAUSE NUMBER DESCRIPTION MODE The following sequence of events would be necessary for both valves to fail open:

1. A failure or fault internal to the exposed cable on skid GTRT32 must cause a fire.

2. The fuses(s) which protect the skid must fail to clear the fault.

3. The breaker(s) which protect the cable(s) supplying the skid must fail to clear the fault.

4. The cable(s) supplying the skid must overheat to the point of combustion.

5. The fire in item 4 must propagate to the GSHV31 cable.

6. GSHV31 cable conductors must develop a hot short with another voltage source.

7. The hot short in item 6 must result in GSHV31 being open.

8. The fire in item 4 must generate sufficient heat to cause the GSHV32 cable to fail resulting in a hot short. This hot short must then cause the valve itself to fail open.

This sequence of events is not considered credible.

Rev. 1

Table 8.3-5 (Sheet 3 of 3)

Notes

1. See Vendor Print J-603A-0071.

2. Devices associated with MCC Distribution Panel NG02AA1 Breaker 30 (15A).

Solenoid valves - GSHV36, GSHV39, GSHV32, GSHV33, GGRV28A, B, C, & D.

Dampers - GGRZ36, GGHZ43, GGHZ44, GGHZ57, GGHZ14, GGHZ33-1 & 33-2, GLHZ70, GLHZ72, GLHZ74, GLHZ62.

Devices associated with MCC Distribution Panel NG01AA1 Breaker 23 (15A).

Solenoid valves - GSHV31, GSHV34, GSHV37, GSHV38, GGRV27A, B, C, & D.

Dampers - GGRZ37, GGHZ40, GGHZ41, GGHZ42, GGHZ56, GLHZ13, GLHZ32-1 & 32-2, GLHZ69, GLHZ71, GLHZ73, GLHZ75.

Rev. 8

WOLF CREEK APPENDIX 8.3A STATION BLACKOUT 8.3A.1 INTRODUCTION On July 21, 1988, the Nuclear Regulatory Commission (NRC) amended its regulations in 10 C.F.R., Part 50. A new section, 50.63, was added which requires that each light-water-cooled nuclear power plant be able to withstand and recover from a station blackout (SBO) of a specified duration. It also identifies the factors that must be considered in specifying the station blackout duration. Section 50.63 requires that, for the station blackout duration, the plant be capable of maintaining core cooling and appropriate containment integrity. Section 50.63 further requires the following information:

1)

A proposed station blackout duration including a justification for the selection based on the redundancy and reliability of the onsite emergency AC power sources, the expected frequency of loss of offsite power (LOOP),

and the probable time needed to restore offsite power;

2)

A description of the procedures that will be implemented for station blackout events for the duration (as determined in 1 above) and for recovery therefrom; and

3)

A list and proposed schedule for any needed modifications to equipment and associated procedures necessary for the specified SBO duration.

Late in 1985, the Nuclear Management and Resources Council, NUMARC, established a working group on station blackout. A Nuclear Utility Group on Station Blackout (NUGSBO) provided the major portion of the technical support for the NUMARC station blackout working group. NUMARC determined that many of the concerns related to station blackout could be alleviated through industry initiatives to reduce overall station blackout risk.

The NUMARC Executive Committee approved industry initiatives to address the more important contributors to station blackout risk.

In order to provide guidance and methodologies for implementing the NUMARC station blackout initiatives, NUMARC published the document NUMARC 87-00, Guidelines and Technical Bases for NUMARC Initiatives addressing Station Blackout at Light Water Reactors.

The NRC has issued Regulatory Guide 1.155 Station Blackout which describes a means acceptable to the NRC Staff for meeting the requirements of 10 C.F.R. 50.63. Regulatory Guide (RG) 1.155 states that the NRC Staff has determined that NUMARC 87-00 Guidelines and Technical Bases for NUMARC Initiatives addressing Station Blackout at Light Water Reactors also provides guidance that is, in a large part, identical to the RG 1.155 guidance and is acceptable to the NRC Staff for meeting these requirements.

8.3A-1 Rev. 14

WOLF CREEK 8.3A.2 STATION BLACKOUT GENERAL CRITERIA AND ASSUMPTIONS Procedures and equipment relied upon in a station blackout should ensure that satisfactory performance of necessary decay heat removal systems is maintained for the required station blackout coping duration. Additional requirements are to keep the core covered and to provide appropriate containment integrity to the extent that isolation valves perform their intended function without AC power. The general criteria and baseline assumptions used to evaluate the station blackout event are discussed in detail in Reference 1, NUMARC 87-00.

8.3A.3 WOLF CREEK BLACKOUT DURATION NUMARC 87-00, Section 3 was used to determine a station blackout duration of four hours for Wolf Creek. This duration was determined based on the following plant considerations.

8.3A.3.1 AC Power Design Characteristic Group NUMARC 87-00 distinguishes between sites having particular susceptibilities to losing off-site power due to plant-centered, grid-related, and weather-related events. Three off-site power design groups are provided and are designed to be mutually exclusive. Of the three groups, group P1 includes those sites characterized by redundant and independent power sources that are considered less susceptible to loss as a result of plant-centered and weather-initiated events. Based upon NUMARC 87-00 guidance, Wolf Creek is determined to be in AC Power Design Characteristic Group, P1. This determination is based upon the following criteria of NUMARC 87-00.

a)

The expected frequency of grid-related loss of offsite power (LOOPs) does not exceed once per twenty years. As discussed in the Wolf Creek USAR Section 8.2.2, the grid design and past performance of the transmission system support the projection of uninterrupted transmission grid availability necessary to meet all requirements over the life of Wolf Creek.

b)

Sites are categorized in groups based upon the estimated frequency of LOOPs due to extremely severe weather. The estimated frequency of loss of off-site power due to extremely severe weather is determined by the annual expectation of storms at the site with wind velocities greater than or equal to 125 mph. Sites within the Extreme Severe Weather Group 1 have an annual frequency of storms, with wind velocities greater than or equal to 125 mph, less than 3.3 x 10-4. Wolf Creek is in Extreme Severe Weather Group 1.

c)

The estimated frequency of LOOPs due to severe weather places Wolf Creek in Severe Weather Group 2. Based on site specific factors, an empirical formula is used to determine the estimated frequency of LOOP due to severe weather in events per year. The factors include the annual expectation of tornados of severity f2 (windspeeds greater than or equal to 113 miles per hour) in events per square mile; and the annual expectation of storms for the site with wind velocities between 75 and 124 mph. Plants within Severe Weather Group 2 have an estimated frequency of loss of off-site power due to severe weather of 0.0033 or greater, up to but not including 0.0100.

d) The potential for long duration loss of off-site power events can have a significant impact on station blackout risk and required coping durations. Long duration LOOP events are associated with grid failures 8.3A-2 Rev. 14

WOLF CREEK due to severe weather conditions or unique transmission system features.

Shorter duration LOOP events tend to be associated with specific switchyard features, in particular, (1) the independence of the off-site power sources constituting the preferred power supply to the shutdown buses on-site, and (2) the power transfer schemes when the normal source of AC power is lost. Two plant groupings, I 1/2 and I 3, are used for classifying the interface of the preferred power supply to the safe shutdown bus. Of the two groups, the I 1/2 group is characterized by features associated with greater independence and redundancy of sources, and a more desirable transfer scheme. The plant groupings are based upon the applicability of three conditions A, B (1), or B (2), for a given plant. Condition A requires that all off-site power sources are connected to the units safe shutdown buses through either the switchyards or two or more electrically connected switchyards. This condition applies at Wolf Creek.

Condition B (1) requires the normal source of AC power to be from the unit main generator with no automatic transfers and one or more manual transfers of all safe shutdown buses to preferred or alternate off-site sources. Condition B (2) requires the normal source of AC power to be from the unit main generator with one automatic transfer and no manual transfers of all safe shutdown buses to one preferred or one alternate off-site power source.

Conditions B (1) and B (2) are not applicable to Wolf Creek. At Wolf Creek the normal source of AC power to the shutdown buses is from the switchyard. Since Condition A is applicable to Wolf Creek and Conditions B (1) and B (2) are not, the Wolf Creek off-site power system is assigned to the I 1/2 Group per NUMARC 87-00 guidance.

The combination of the above Factors places Wolf Creek in the P1 off-site power design characteristic group per NUMARC 87-00.

8.3A.3.2 Emergency AC Power Configuration Group Wolf Creek is determined to be in the emergency AC power configuration group C (EAC Group C). After the likelihood of losing off-site power, the redundancy of the emergency AC power system is the next most important contributor to station blackout risk. With greater EAC system redundancy, the potential for station blackout diminishes, as does the likelihood of core damage. The importance of EAC redundancy is reflected through the use of four distinct EAC configuration groups. Those sites in group C have typical redundant and independent EAC sources to safe shutdown equipment.

Placement in this group depends on the number of EAC standby power supplies available and the number required to operate AC-powered decay heat removal equipment necessary to achieve and maintain safe shutdown in a station blackout. Overall, the greater the level of EAC redundancy, the less restrictive are the station blackout coping durations and maximum emergency diesel generator (EDG) failure rates before longer coping durations are required, or corrective actions become necessary.

8.3A-3 Rev. 14

WOLF CREEK The potential for excess EAC power sources to be used as Alternate AC is directly related to the existing level of EAC redundancy. Since EAC redundancy is an important parameter for determining station blackout coping duration categories, EAC power sources relied upon as Alternate AC power sources must not also be considered when assessing the required coping duration.

The Wolf Creek designation of Group C is based on the following:

1)

There are two emergency AC power supplies not credited as alternate AC power sources; and

2)

One emergency AC power supply is necessary to operate safe shutdown equipment following a loss of off-site power.

8.3A.3.3 Emergency Diesel Generator (EDG) Reliability The target emergency diesel generator reliability for Wolf Creek is selected to be 0.95. The selection of this value is consistent with NUMARC 87-00 and is based upon having a nuclear unit average EDG reliability for the last 100 demands as of April 17, 1989 greater than 0.95.

The unit EDG reliability is used in conjunction with the sites off-site power design characteristic, P1, and the EAC configuration Group C, to determine the units required station blackout coping duration. The unit EDG reliability was calculated by averaging the individual EDG reliability for the last 20, 50, and 100 demands for each machine as of April 17, 1989.

The objective of the three-tier approach (i.e., 20, 50, and 100 Demands) to reliability measurements is to provide greater depth of understanding regarding reliability trends. The 20-demand sample set is the most volatile, and offers a very sensitive indication of EDG performance. Since this indicator moves with each incremental failure or success, it is not considered a reliable measure of long-term performance. Similarly, the 100-demand sample set offers a long-term trend indication, while providing limited insight to recent trends due to data smoothing effects. The 50-demand sample set bridges the two indicators while also providing an intermediate level. Taken together, the set of indicators provides a fairly complete picture of EDG reliability.

Wolf Creek maintains an EDG reliability monitoring program to ensure reliability remains greater than 0.95.

8.3A.3.4 Coping Duration Category Using Table 3-8 of NUMARC 87-00, Wolf Creek has a required coping duration category of four hours. The criteria supporting this four hour duration include the Wolf Creek off-site power group P1, discussed in Section 8.3A.3.1, the EAC Group C, discussed in Section 8.3A.3.2, and the minimum EDG target reliability of 0.95, discussed in Section 8.3A.3.3.

8.3A-4 Rev. 14

WOLF CREEK 8.3A.4 Procedures for SBO Wolf Creek procedures comply with the guidelines of NUMARC 87-00, Section 4.

SBO response guidelines provide for operator actions to be taken in a SBO event; guidance is provided to operations and load dispatcher personnel for actions to restore AC power in a station blackout; and guidance is given for operators to determine the proper actions due to the onset of severe weather.

Wolf Creek procedures incorporate these guidelines and are described as follows:

1)

The station blackout response guidelines of NUMARC 87-00, Section 4.2.1 are met by plant procedures, Loss of all AC Power; Security Diesel Generator Operability Test; Technical Support Center Diesel Generator Operability Test and Emergency Operations Facility Diesel Generator Operability Test.

2)

The AC power restoration guidelines of NUMARC 87-00, Section 4.2.2, are met by plant procedure, Loss of All AC Power Recovery Without SI Required.

3)

The severe weather preparation guidelines of NUMARC 87-00, Section 4.2.3, are met by plant procedure, Natural Events OFF Normal.

8.3A.5 Summary of SBO Coping Assessment The ability of Wolf Creek to cope with a station blackout for four hours has been assessed in accordance with NUMARC 87-00. The coping assessment assures that Wolf Creek has adequate condensate inventory for decay heat removal during a SBO of the four hour duration; has adequate battery capacity to support decay heat removal during the four hour duration; air operated valves required for decay heat removal have sufficient reserve air or can be manually operated under station blackout conditions for four hours; operability of equipment by determination of the average steady state temperature in dominant areas containing equipment necessary to achieve and maintain safe shutdown during the SBO; containment integrity can be provided during the SBO for the four hour duration, and the ability to maintain adequate reactor coolant system inventory. Each item of assessment is discussed in the following paragraphs.

8.3A.5.1 Condensate Inventory for Decay Heat Removal It was originally determined using guidelines in Section 7.2.1 of NUMARC 87-00 that 151,000 gallons of water are required for decay heat removal for a four-hour coping duration. This number has changed to 156,300 gallons due to power rerate and condensate storage tank temperature analysis for elevated tank temperatures when using recirculation of the tank via the condensate demineralizer system. The minimum permissible condensate storage tank level per Technical Specifications provides 281,000 gallons of water, which exceeds the required quantity for coping with a four-hour station blackout. Hence this new number still satisfies a four-hour coping duration.

8.3A-5 Rev. 26

WOLF CREEK 8.3A.5.2 Class 1E Battery (ies) Capacity A battery capacity calculation has been performed pursuant to NUMARC 87-00, Section 7.2.2, to verify that the Class 1E battery (ies) has sufficient capacity to meet station blackout loads for four hours.

8.3A.5.3 Compressed Air Air-operated valves relied upon to cope with a station blackout for four hours have sufficient backup sources independent of the blacked out units preferred and Class 1E power supplies. The valves are identified in plant procedures.

8.3A.5.4 Effects of Loss of Ventilation The calculated peak air temperature for the steam driven AFW pump room (the dominant area of concern for a PWR) during a station blackout induced loss of ventilation is 150° F provided corridor doors are opened. This requirement is incorporated in the plant procedures for Loss of All AC Power.

Reasonable assurance of the operability of station blackout response equipment in the above dominant area of concern has been assessed using Appendix F to NUMARC 87-00. No modifications are required to provide reasonable assurance for equipment operability.

The assumption in NUMARC 87-00, Section 2.7.1 that the control room will not exceed 120°F during a station blackout has been assessed. Calculations verify that the control room at Wolf Creek will not exceed 120°F during a station blackout provided certain doors are opened. The doors are listed in an Attachment in plant procedure Loss of All AC Power.

8.3A.5.5 Containment Isolation The plant list of containment isolation valves has been reviewed to verify that valves which must be capable of being closed or that must be operated (cycled) under station blackout conditions can be positioned (with indication) independent of the preferred Class 1E power supplies. No plant modifications were determined to be required to ensure that appropriate containment integrity can be provided under SBO conditions. Wolf Creek procedures include all actions necessary to assure containment integrity.

8.3A.5.6 Reactor Coolant Inventory The ability to maintain adequate reactor coolant system inventory to ensure that the core is cooled for four hours has been assessed. A plant-specific analysis was used for this assessment. The expected rates of reactor coolant inventory loss under SBO conditions do not result in uncovering the core in an SBO of four hours. Therefore, makeup systems under SBO conditions are not required to maintain core cooling under natural circulation (including reflux boiling).

8.3A-6 Rev. 14

WOLF CREEK 8.3A.6 REFERENCES

1.

NUMARC 87-00, Guidelines and Technical Bases for NUMARC Initiatives addressing Station Blackout at Light Water Reactors, November 1987.

2.

NRC NUREG-1032, Evaluation of Station Blackout Accidents at Nuclear Power Plants, 1985.

3.

NRC Regulatory Guide 1.155, Station Blackout.

4.

Wolf Creek Calculations: AN 93-056, AN 99-004, GK-E-001, GK-EW-001, GK-M-005, GK-MW-004, NK-E-001, SR-88-001, SA-89-004, YY-01-W.

5.

NO 89-0072, dated April 17, 1989 (Response to Station Blackout Rule).

6.

ET 90-0057, dated March 30, 1990 (Supplemental Response to Station Blackout Rule).

7.

ET 92-0072, dated March 24, 1992 (Response to Request for additional information on Station Blackout Analysis for the Wolf Creek Generating Station).

8.

NRC letter dated Janurary 16, 1992 (Safety Evaluation and Request for Additional Information Concerning Station Blackout Analysis for the Wolf Creek Generating Station, TAC No. M68626).

9.

NRC letter dated June 16, 1992, Wolf Creek Generating Station -

Supplemental Safety Evaluation Regarding Blackout Rule.

10.

WCAP-12231, Station Blackout Coping Assessment for Wolf Creek Generating Station, dated April 15, 1989.

11.

Wolf Creek Procedure EMG C-0, Loss of All AC Power.

12.

Wolf Creek Procedure EMG CS-01, Loss of All AC Power Recovery without SI Required.

13.

Wolf Creek Procedure AP20A-007, Station Blackout Quality Program Requirements.

8.3A-7 Rev. 25