Regulatory Guide 1.154: Difference between revisions

From kanterella
Jump to navigation Jump to search
(StriderTol Bot change)
(StriderTol Bot change)
 
Line 1: Line 1:
{{Adams
{{Adams
| number = ML031470300
| number = ML003740028
| issue date = 01/31/1987
| issue date = 01/31/1987
| title = Format and Content of Plant-specific Pressurized Thermal Shock Safety Analysis Reports for Pressurized Water Reactors
| title = (Task SI 502-4) Format & Content of Plant-Specific Pressurized Thermal Shock Safety Analysis Reports for Pressurized Water Reactors
| author name =  
| author name =  
| author affiliation = NRC/RES
| author affiliation = NRC/RES
Line 10: Line 10:
| license number =  
| license number =  
| contact person =  
| contact person =  
| case reference number = SI 502-4
| case reference number = -nr
| document report number = RG-1.154
| document report number = RG-1.154
| document type = Regulatory Guide
| document type = Regulatory Guide
| page count = 40
| page count = 41
}}
}}
{{#Wiki_filter:U.S. NUCLEAR REGULATORY COMMISSION  
{{#Wiki_filter:U.S. NUCLEAR REGULATORY COMMISSION  
January 1987 REGULATORY GUIDE
January 1987  
OFFICE OF NUCLEAR REGULATORY RESEARCH
/"
REGULATORY GUIDE 1.154 (Task SI 5024)
"REGULATORY GUIDE  
FORMAT AND CONTENT OF PLANT-SPECIFIC
OFFICE OF NUCLEAR REGULATORY RESEARCH  
PRESSURIZED THERMAL SHOCK SAFETY ANALYSIS
REGULATORY GUIDE 1.154 (Task SI 502-41 FORMAT AND CONTENT OF PLANT-SPECIFIC  
REPORTS FOR PRESSURIZED WATER REACTORS
PRESSURIZED THERMAL SHOCK SAFETY ANALYSIS  
USNRC REGULATORY GUIDES
REPORTS FOR PRESSURIZED WATER REACTORS  
Regulatory Guides are Issued to describe and make available to the public methods acceptable to the NRC staff of Implementing specific parts of the Commission's regulations, to delineate tech- niques used by the staff In evaluating specific problems or postu- lated accidents. or to provide guidance to applicants. Regulatory Guides are not substitutes for regulations, and compliance with them Is not required. Methods and solutions different from those set out In the guides will be acceptable If they provide a basis for the findings requisite to the Issuance or continuance of a permit or license by the CommissIon.
USNRC REGULATORY GUIDES  
 
The guides are issued in the following ten broad divisions:
This gulde was Issued after consideration of comments received from the pubiic. Comments and suggestlons for Improvements In these guides are encouraged at all times, and guides wiil be revised, as appropriate, to accommodate comments and to reflect new Informa- tion or experience.
Regulatory Guides are issued t o  describe and make available t o  the Public methods acceptable t o  the NRC staff of implementing
 
Written comments may be submitted to the Rules and Procedures Branch, DRR, ADM,
U.S.
 
Nuclear RegulatorY
Commission, Washington, DC 20555.
 
The guides are Issued In the following ten broad divisions:


===1. Power Reactors ===
===1. Power Reactors ===
6. Products speclfic parts of the Commisslon*~ regulations t o  delineate tech-
2. Research and Test Reactors
7. Transportation niques used by the staff i n  evaluating specific'problems or Postu-
3. Fuels and Materials Facilities 8. Occupational Health iated accidents or t o  provide guidance t o  applicant


===6. Products===
====s. Regulatory ====
2. Research and Test Reactors
4. Environmental and Siting
9. Antitrust and Financial Review Guides are no{ substitutes for regulations and compliance with
5. Materialsand Plant Protection 10. General them is not required. ~ e t h o d s and solutions h e r e n t  from those set out i n  the guides will be acceptable if they provide a basis for the findings requisite t o  the issuance or continuance of a permit or Copies of lssued guides may be purchased from the Government license b y  the Commission.


===7. Transportation===
Printing Office at the current GPO price. Information on current GPO prices may be obtained by contacting the Superintendent of This guide was issued afterconsideration of comments received from Documents U.S.
3. Fuels and Materials Facilities


===8. Occupational Health===
Government Printing Office Post Office Box the public Comments and suggestions for Improvements i n  these
4. Environmental and Siting
37082, waihington. DC 20013-7082, telephoni (202)275-2060 or guides are encouraged at all times and guides will be revised, as
9. Antitrust and Financial Review
5. Materials and Plant Protection 10. General Copies of Issued guides may be purchased from the Government Printing Office at the current GPO price. Information on current GPO prices may be obtained by contacting the Superintendent of Documents, U.S. Government Printing Office, Post Office Box
37082, Washington, DC 20013-7082, telephone 202)275-2060 or
(202)275-2171.
(202)275-2171.


Issued guides may also be purchased from the National Technical Information Service on a standing order basis. Details on this service may be obtalned by writing NTIS, 5285 Port Royal Road, Springfield, VA 22161.
appropriate t o  accommodate commhnts and t o  reflect new inform*
tlon or exp;rience.


-
Issued guides may also be purchased from the National Technical Written comments may be submitted t o  the Rules and Procedures Information Service on a standing order basis. Details on this Branch DRR
ADM,
U.S.


Table of Contents Page INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Nuclear Regulatory Commission, service may be obtained by writing NTIS. 5285 Ron Royal Road.
Background and Purpose of This Guide. . . . . . . . . . . . . .
Objectives of Plant-Specific PTS Safety Analysis Reports. . . .
Staff Review of Plant-Specific PTS Safety Analysis Reports and Acceptance Criteria for Continued Operation . . . . . . . . .
Recommended Format. . . . . . . . . . . . . . . . . . . . . . .
CHAPTER 1 OVERALL APPROACH, SCOPE OF ANALYSIS, AND REPORT
ORGANIZATION . . . .
. . . . . . . . . . . . . .
CHAPTER 2 PLANT DATA. . . . . . . . . . . . . . . . . . . . .
2.1
2.2
2.3
2.4
2.5
2.6 Systems Pertinent to PTS. . . . . .
Reactor Vessel. . . . . . . . . . .
Fluence . . . . . . . . . . . . . .
Inservice Inspection Results. . . .
Plant Operating Experience. . . . .
Operating Procedures. . . . . . . .
v v
v vi viii
1.154-1
1.154-3
1.


154-3
~ashtnbton. ~d 20555.
1.154-3
1.


154-4
Springfield. V A  22161.
1.154-4
1.154-4
1.154-5 DETERMINATION OF DETAILED PTS SEQUENCES FOR
ANALYSES. . . . . . . . . . . . . . . . . . . . . . . . .
1.154-6
3.1 Approach Used-. . . . . . . . . . . . . . . .
3.2 Sequence Delineation. . . . . . . . . . . . .
1.154-6
1.


154-6
Table o f  Contents INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . 
3.2.1 Development of Classes of Initiators .
Background and Purpose o f  This Guide . . . . . . . . . . . . . . 
3.2.2 Identification of Important Initiator Variations . . . . . . . . . . . . . .
Objectives o f  Plant-Specific PTS Safety Analysis Reports . . . . 
3.2.3 Definition of Potential Transients Resulting from Each Initiator. . . . .
Staff Review o f  Plant-Specific PTS Safety Analysis Reports and Acceptance C r i t e r i a  Tor Continued Operation . . . . . . . . . 
. .
Recommended Format . . . . . . . . . . . . . . . . . . . . . . .
1.154-6
CHAPTER 1 OVERALL APPROACH. SCOPE OF ANALYSIS. AND REPORT
. .
ORGANIZATION . . . . . . . . . . . . . . . . . . . . . .
1.154-7
CHAPTER 2 PLANT DATA . . . . . . . . . . . . . . . . . . . . . . .
. .
2.1 Systems Pertinent t o  PTS . . . . . . . . . . . . . . .
1.154-7
2.2 Reactorvessel . . . . . . . . . . . . . . . . . . . .
3.3 Operator Effects. . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . 
3.4 Sequence Quantification . . . . . . . . . . .
2.3 Fluence
1.154-8
. . . . . . . . . . . . . 
1.154-9
2.4 Inservice Inspection Results
1.154-9
2.5 Plant Operating Experience . . . . . . . . . . . . . . . 
1.154-9
2.6 Operating Procedures . . . . . . . . . . . . . . . . .
1. 154-10
/
3.4.1 Initiating Events. . . . . . . . . .
CHAPTER 3 DETERMINATION OF DETAILED PTS SEQUENCES FOR
3.4.2 Equipment Failures . . . . . . . . .
ANALYSES . . . . . . . . . . . . . . . . . . . . . . . . . 
3.4.3 Operator Actions . . . . . . . . . .
3.1 Approach Used . . . . . . . . . . . . . . . . . . . . .
3.5 Event Tree Collapse . . . . . . . . . . . . .
3.2 Sequence Delineation . . . . . . . . . . . . . . . . .
3.5.1 Specific Sequences . . . . . . . . . .
. . . . . 
3.5.2 Residual Groups. . . . . . . . . . . .
3.2.1 Development o f  Classes o f  I n i t i a t o r s 
1.154-11
3.2.2 I d e n t i f i c a t i o n  o f  Important I n i t i a t o r Variations . . . . . . . . . . . . . . . . . .
1.154-11
3.2.3 Definition o f  Potential Transients
1.154-11 i i i CHAPTER 3
. . . . . . . . .
.
Resulting from Each I n i t i a t o r 
.
3.3 Operator Effects . . . . . . . . . . . . . . . . . . .
.
3.4 Sequence Quantification . . . . . . . . . . . . . . .
.
3.4.1 I n i t i a t i n g  Events . . . . . . . . . . . . . . .
.
3.4.2 Equipment Failures . . . . . . . . . . . . . .
.
3.4.3 Operator Actions . . . . . . . . . . . . . . .
.
. . . . . . . . . . . . . . . . .
.
3.5 Event Tree Collapse
.
. . . . . . . . . . . . . .
.
3.5.1 Specific Sequences
.
3.5.2 Residual Groups . . . . . . . . . . . . . . . .
.
Page v
.
v i v i i i iii
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.


Table of Contents (Continued)
Tab1 e o f  Contents (Continued)  
CHAPTER 4 THERMAL-HYDRAULIC ANALYSIS .
Page CHAPTER 4 THERMAL-HYDRAULIC ANALYSIS . . . . . . . . . . . . . . .
. . . . . . . . . . . . . .
4.1 Thermal-Hydraulic Analysis Plan . . . . . . . . . . .
4.1 Thermal-Hydraulic Analysis Plan . . . . . . . . . . .
4.2 Thermal-Hydraulic Model  
4.2 Thermal-Hydraulic Model  
. . . .
. . . . . . . . . . . . .
. . . . . . . . .
4.3 Simp1 i f i e d  Analysis Methods . . . . . . . . . . . . .
4.3 Simplified Analysis Methods . . . . . . . . . . . . .
4.4 Thermal S t r a t i f i c a t i o n  Effects . . . . . . . . . . . .
4.4 Thermal Stratification Effects. . . . . . . . . . . .
4.5 Thermal -Hydraul i c Analysis Results . . . . . . . . .
4.5 Thermal-Hydraulic Analysis Results. . . . . . . .
CHAPTER 5 FRACTURE MECHANICS ANALYSIS . . . . . . . . . . . . . . .
.
CHAPTER 6 INTEGRATION OF ANALYSES . . . . . . . . . . . . . . . . .
CHAPTER 5 FRACTURE MECHANICS ANALYSIS . . . . . . . . . . . . . . .
CHAPTER 7 SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK  
CHAPTER 6 INTEGRATION OF ANALYSES .................
FREQUENCY . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER 7 SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK
7.1 S e n s i t i v i t y  Analysis . . . . . . . . . . . . . . . . .
FREQUENCY . . . . . . . . . . . . . . . . . . . . . . . .
7.2 Uncertainty Analysis . . . . . . . . . . . . . . . . .
7.1 Sensitivity Analysis. . . . . . . . . . . . .. . . .
7.2.1 Parameter Uncertainties . . . . . . . . . . . .
7.2 Uncertainty Analysis. . . . . . . . . . . . . . . . .
7.2.2 Model ing Uncertainties (Biases) . . . . . . . .
Page
CHAPTER 8 EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL  
1.154-12
CRACK FREQUENCY . . . . . . . . . . . . . . . . . . . . .
1.154-12
8.1 Flux Reduction Program . . . . . . . . . . . . . . . . 
1.154-12
8.2 Operating Procedures and Training Program  
1.154-13
. . . . . . . . . . . . . . . . . . . . .
1.154-14
Improvements
1.154-14
8.3 Inservi ce Inspecti on and Nondestructive Examination Program . . . . . . . . . . . . . . . . . 
1.154-16
8.4 Plant Modifications . . . . . . . . . . . . . . . . . 
1.154-19
8.5 I n S i t u A n n e a l i n g  . . . . . . . . . . . . . . . . . .
1. 154-20
CHAPTER 9 FURTHER ANALYSES . . . . . . . . . . . . . . . . . . . .
1.154-20
CHAPTER 10 RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES . . . . . .
1.154-20
10 .. 1 Summary o f  Analysis . . . . . . . . . . . . . . . . . 
CHAPTER
10.2 Basis f o r  Continued Operation . . . . . . . . . . . .
7.2.1 Parameter Uncertainties. . . . . . . . . . . .
REFERENCES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 
7.2.2 Modeling Uncertainties (Biases). . . . . . . .
REGULATORY ANALYSIS . . . . . . . . . . . . . . . . . . . . . . . . .
8 EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL
CRACK FREQUENCY . . . . . . . . . . . . . . . . . . . . .
8.1 Flux Reduction Program. . . . . . . . . . .
8.2 Operating Procedures and Training Program Improvements. . . . . . . . . . . . . . . .
8.3 Inservice Inspection and Nondestructive Examination Program . . . . . . . . . . . .
8.4 Plant Modifications . . . . . . . . . . . .
8.5 In Situ Annealing . . . . . . . . . . . . .
CHAPTER 9 FURTHER ANALYSES . . . . . . . . . . . . . . . . . . . .
1.154-20
1.154-21
1.154-23
-x
. .
1.154-23
>--)
. . .
1. 154-23
1.


154-24
INTRODUCTION
1.154-24
/
1.154-25
Background and Purpose o f  This Guide The pressurized thermal shock (PTS) rule, § 50.61 o f  10 CFR Part 50
1.154-26 CHAPTER 10 RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES. .
issued on July 23, 1985 (50 FR 29937), establishes a screening c r i t e r i o n based on reactor vessel n i l - d u c t i l i t y - t r a n s i t i o n  temperature (RTNDT)
10..1 Summary of Analysis. . . . . . . . . . . . .
The screening c r i t e r i o n  was establ ished a f t e r  extensive industry and NRC analyses regarding the likelihood o f  vessel f a i l u r e  due t o  PTS events i n  pressurized water reactors (PWRs).  
10.2 Basis for Continued Operation. . . . . . . .
The analyses were applied generically and contained conservative assumptions t o  make the results bounding f o r  any PWR.
REFERENCES . . . . . . . . . . . . . . . . . . . . . . . . .
REGULATORY ANALYSIS. . . . . . . . . . . . . . . . . . . . .
1.154- 7
1.154-27
1.154-27
1.154-28
1.154-30
K)
iv
.
.
.
.
.
.
.
.
.
.
.
.


INTRODUCTION
Based on the results, the NRC concluded t h a t  the r i s k  due t o  PTS events i s  acceptable a t  any p l a n t  so long as the RTpTSX o f  the reactor pressure vessel remains be1 ow the screening c r i t e r i o n .
Background and Purpose of This Guide The pressurized thermal shock (PTS) rule, § 50.61 of 10 CFR Part 50
Extensive safety analyses are required by the r u l e  for any p l a n t  t h a t wishes t o  operate with RTpTS values above the screening c r i t e r i o n .
issued on July 23, 1985 (50 FR 29937), establishes a screening criterion based on reactor vessel nil-ductility-transition temperature (RTNDT).  
The recom- mended methods t o  be used i n  performing the analyses are outlined i n  t h i s guide.
The screening criterion was established after extensive industry and NRC analyses regarding the likelihood of vessel failure due to PTS events in pressurized water reactors (PWRs).  
The analyses were applied generically and contained conservative assumptions to make the results bounding for any PWR.


Based on the results, the NRC concluded that the risk due to PTS events is acceptable at any plant so long as the RTPTS* of the reactor pressure vessel remains below the screening criterion.
The purpose o f  the analyses i s  t o  assess the r i s k  due t o  PTS events f o r  proposed operation o f  the p l a n t  w i t h  reactor vessel RTpTS above the screen- ing c r i t e r i o n . 
Effective 1 year a f t e r  the pub1 i c a t i o n  o f  t h i s  regulatory guide, Section 50.61 requires t h a t  these analyses be completed 3 years before the screening c r i t e r i o n  would be exceeded t o  allow adequate time f o r  implementation on the p l a n t  o f  any corrective actions assumed i n  the analyses before the plant operates above the screening c r i t e r i o n . 
,
This regulatory guide describes a format and content acceptable t o  the NRC
s t a f f  f o r  these plant-specific PTS safety analyses and describes acceptance c r i t e r i a  t h a t  the NRC s t a f f  w i l l  use i n  evaluating licensee analyses and pro- posed corrective measures.


Extensive safety analyses are required by the rule for any plant that wishes to operate with RTPTS values above the screening criterion.
The references l i s t e d  i n  t h i s  guide include a set o f  analyses sponsored by the NRC that, taken together, constitute an example o f  the analyses described by t h i s  guide.


The recom- mended methods to be used in performing the analyses are outlined in this guide.
The s t a f f  recommends t h a t  these references be extensively used, along w i t h  t h i s  guide, by those performing the plant-specific PTS analyses re- quired by the PTS rule, § 50.61.


The purpose of the analyses is to assess the risk due to PTS events for proposed operation of the plant with reactor vessel RTPTS above the screen- ing criterion.
References 1, 2, and 3, f o r  example, each represent an analysis by the Oak Ridge National Laboratory (ORNL) predicting through-wall crack frequency f o r  one PWR.


Effective 1 year after the publication of this regulatory guide, Section 50.61 requires that these analyses be completed 3 years before the screening criterion would be exceeded to allow adequate time for implementation Q on the plant of any corrective actions assumed in the analyses before the plant operates above the screening criterion.
These references w i l l  provide guid- ance through the analyses.


This regulatory guide describes a format and content acceptable to the NRC
Reference 3 (analysis o f  H. B. Robinson) should be most helpful because it was the l a s t  one performed and includes the experience gained i n  performing the two e a r l i e r  analyses.
staff for these plant-specific PTS safety analyses and describes acceptance criteria that the NRC staff will use in evaluating licensee analyses and pro- posed corrective measures.


The references listed in this guide include a set of analyses sponsored by the NRC that, taken together, constitute an example of the analyses described by this guide.
Objectives o f  Plant-Specific PTS Safety Analysis Reports Paragraph 50.61(b)(4)
requires t h a t  a licensee whose p l a n t  w i l l  exceed the screening c r i t e r i o n  before expiration o f  the operating license submit safety analyses t o  determi ne what, i f  any, modi f i c a t i  ons t o  equipment, systems, and
*To avoid confusion among several (preexisting) s l i g h t l y  d i f f e r e n t  d e f i n i t i o n s of RTNDT, !$
50.61 contains i t s  own d e f i n i t i o n  o f  an RTNDT (called RTpTS) t o be used when comparing plant-speci f i c vessel materi a1 properties w i t h  the PTS
screening c r i t e r i o n .


The staff recommends that these references be extensively used, along with this guide, by those performing the plant-specific PTS analyses re- quired by the PTS rule, § 50.61.
operation are necessary t o  prevent potential f a i l u r e  o f  the reactor vessel as a r e s u l t  o f  postulated PTS events i f  continued operation beyond the screening c r i t e r i o n  i s  a1 lowed.


References 1, 2, and 3, for example, each represent an analysis by the Oak Ridge National Laboratory (ORNL) predicting through-wall crack frequency for one PWR.
These analyses must include the effects o f  a1 1 corrective actions the licensee believes necessary t o  achieve an acceptable PTS-related r i s k  f o r  continued operation o f  the plant.


These references will provide guid- ance through the analyses.
The f i n a l  objective o f  the plant- specific PTS study, therefore, i s  t o  j u s t i f y  continued operation o f  the plant by demonstrating t h a t  the 1 i kel i hood o f  a through-wal 1 crack during continued operation i s  acceptably low.


Reference 3 (analysis of H. B. Robinson) should be most helpful because it was the last one performed and includes the experience gained in performing the two earlier analyses.
The study must include calculation, f o r  the re- mainder o f  plant 1 i f e ,  o f  the expected frequency o f  through-wall cracks due t o PTS .  
I n  calculating these results, it w i l l  be necessary to:
O
I d e n t i f y  the dominant accident sequences.


Objectives of Plant-Specific PTS Safety Analysis Reports Paragraph 50.61(b)(4) requires that a licensee whose plant will exceed the screening criterion before expiration of the operating license submit safety analyses to determine what, if any, modifications to equipment, systems, and
O
*To avoid confusion among several (preexisting) slightly different definitions V.- _
I d e n t i f y  operator actions, control actions, and plant features impor- t a n t  t o  PTS.
°f RTNDT, § 50.61 contains its own definition of an RTNDT (called RTPTS) to be used when comparing plant-specific vessel material properties with the PTS
screening criterion.


v
O
Estimate the effectiveness o f  potential corrective actions i n  reduc- i
ng the expected frequency o f  through-wal 1 cracks.


operation are necessary to prevent potential failure of the reactor vessel as a result of postulated PTS events if continued operation beyond the screening criterion is allowed.
O
I d e n t i f y  the sources and approximate magnitude o f  the major uncertain- t i e s  and t h e i r  effects on the conclusions.


These analyses must include the effects of all corrective actions the licensee believes necessary to achieve an acceptable PTS-related risk for continued operation of the plant.
O
Present and j u s t i f y  the licensee's proposed program f o r  corrective measures.


The final objective of the plant- specific PTS study, therefore, is to justify continued operation of the plant by demonstrating that the likelihood of a through-wall crack during continued operation is acceptably low.
I
 
\\
The study must include calculation, for the re- mainder of plant life, of the expected frequency of through-wall cracks due to PTS.
O
Present and j u s t i f y  the licensee's proposed basis f o r  continued opera- t i o n  a t  embrittlement level s above the screening criterion.


In calculating these results, it will be necessary to:
This must include comparison with the acceptance c r i t e r i a  described be1 ow o the PTS-related through-wall crack frequency with corrective actions implemented as necessary.
o Identify the dominant accident sequences.


o Identify operator actions, control actions, and plant features impor- tant to PTS.
S t a f f  Review o f  Plant-Speci f i c  PTS Safety Analysis Reports and Acceptance C r i t e r i a  f o r  Continued Operation The PTS r u l e  specifies a screening c r i t e r i o n  based on RTNDT (called RTpTS
f o r  use as defined within the rule) o f  270°F f o r  axial weld and plate materials and 300°F f o r  circumferential weld materials.


o Estimate the effectiveness of potential corrective actions in reduc- ing the expected frequency of through-wall cracks.
As detailed i n  SECY-82-465 (Ref. 4), these values were selected based on generic studies o the expected frequency and character o f  a wide spectrum o f  transients and accidents t h a t could cause pressurized overcool i n g  o f  the reactor vessel (PTS events) and on operating experience data.


o Identify the sources and approximate magnitude of the majo; uncertain- ties and their effects on the conclusions.
The r i s k  due t o PTS events was assessed i n  terms o f  probabilistic fracture mechanics calculations o f  the expected frequency o f through-wall crack penetration o f  the pressure vessel due t o  the PTS events.


o Present and justify the licensee's proposed program for corrective measures.
I n  selecting the screening c r i t e r i o n  based on those calculations, the conserva- t i v e  assumption was made t h a t  any through-wall crack could r e s u l t  i n  severe core degradation o r  melt.


o Present and justify the licensee's proposed basis for continued opera- tion at embrittlement levels above the screening criterion.
Core melt i t s e l f  was viewed as an event t o  be avoided even though r i s k  t o  the public due t o such an event i n  terms o f  person- rems and early and l a t e  f a t a l i t i e s was not calculated with any certainty.


This must include comparison with the acceptance criteria described below of the PTS-related through-wall crack frequency with corrective actions implemented as necessary.
The estimated through-wall crack frequency developed as a function o f  RTNOT f o r axial welds (Fig. 8.3 o f  Ref. 4) i s  shown i n  Figure 1.


Staff Review of Plant-Specific PTS Safety Analysis Reports and Acceptance Criteria for Continued Operation The PTS rule specifies a screening criterion based on RTNDT (called RTPTS
LONGITUDINAL CRACK EXTENSION NO ARREST
for use as defined within the rule) of 270°F for axial weld and plate materials and 300°F for circumferential weld materials.
1 o - ~ 
SECY-82-465 PRA RESULTS
I
1
1
1 I
1 k
LEGEND:
MEAN SURFACE RTNDT(*F)
Figure 1


As detailed in SECY-82-465 (Ref. 4), these values were selected based on generic studies of the expected frequency and character of a wide spectrum of transients and accidents that could cause pressurized overcooling of the reactor vessel (PTS events) and on operating experience data.
The RTpTS screening criterion selected by the staff corresponds to a mean I
(or average) "best estimate'' surface RTpTS of 210°F.


The risk due to PTS events was assessed in terms of probabilistic fracture mechanics calculations of the expected frequency of through-wall crack penetration of the pressure vessel due to the PTS events.
The staff used a "2-sigma"
-L
value (spread between "best estimate" and "upper limit") of 60°F;* thus the screening criterion expressed in terms of RTpTS, which, by definition, i s  this upper limit value, was selected a t  210 + 60 = 270°F.


In selecting the screening criterion based on those calculations, the conserva- tive assumption was made that any through-wall crack could result in severe core degradation or melt.
For axial weld and plate materials, Figure 1 gives a through-wall crack frequency of about 5 x per reactor year a t  210°F, which corresponds w i t h  an RTpTS of 270°F.


Core melt itself was viewed as an event to be avoided even though risk to the public due to such an event in terms of person- rems and early and late fatalities was not calculated with any certainty.
For circum- ferential welds, the same frequency i s  believed to be bounded by an RTpTS of approximately 300°F (Ref. 4).
The Commission concluded that the PTS-re1 ated risk a t  any PWR i s  acceptable so long as the RTpTS values remain below the specified screening criterion.


The estimated through-wall crack frequency developed as a function of RTNDT for axial welds (Fig. 8.3 of Ref. 4) is shown in Figure 1.
I t  was realized that there are many unknowns and uncertainties inherent in the probabilistic calculations; thus it was w i t h  deliberate intent that conser- vative assumptions such as those stated above were made.


9 vi
The expectation was that the true risk a t  any plant due to PTS events would in all likelihood be considerably below that derived from Figure 1 and would therefore be acceptable.


LONGITUDINAL CRACK EXTENSION NO ARREST
Also contributing to the belief that the real PTS risk a t  any given plant was lower than that resulting from the analysis in Reference 4 was the belief that many of the generic plant assumptions made i n  Reference 4 (e.g., material properties, system performance, crack distribution) would prove to be overcon- servative for analysis of a specific plant and that the resulting plant-specific analysis, when performed, i s  likely t o  result in a reduced prediction of PTS  
i
2 SECY-82-465 PRA RESULTS
LEGEND:
O
PRA TOTAL
O
STEAM LINE BREAKS
6 S.G. TUBE RUPTURES
io-3 V
SBLOCA W/WPS
-
EXTENDED HPI
4~
0
L.
 
cO
o-,
1~~~~~~~~~1
10'6
175
200
225
250
275
300
325 MEAN SURFACE RTNDT(0F)
Figure 1 vii
 
The RTPTS screening criterion selected by the staff corresponds to a mean (or average) "best estimate" surface RTPTS of 210°F.
 
The staff used a "2-sigma"
value (spread between "best estimate" and "upper limit") of 600 F;* thus the screening criterion expressed in terms of RTPTS, which, by definition, is this upper limit value, was selected at 210 + 60 = 270°F.
 
For axial weld and plate materials, Figure 1 gives a through-wall crack frequency of about 5 x 10-6 per reactor year at 210°F, which corresponds with an RTPTS of 270°F.
 
For circum- ferential welds, the same frequency is believed to be bounded by an RTPTS of approximately 300°F (Ref. 4).
The Commission concluded that the PTS-related risk at any PWR is acceptable so long as the RTPTS values remain below the specified screening criterion.
 
It was realized that there are many unknowns and uncertainties inherent in the probabilistic calculations; thus it was with deliberate intent that conser- vative assumptions such as those stated above were made.
 
The expectation was that the true risk at any plant due to PTS events would in all likelihood be considerably below that derived from Figure 1 and would therefore be acceptable.
 
Also contributing to the belief that the real PTS risk at any given plant was lower than that resulting from the analysis in Reference 4 was the belief that many of the generic plant assumptions made in Reference 4 (e.g., material properties, system performance, crack distribution) would prove to be overcon- servative for analysis of a specific plant and that the resulting plant-specific analysis, when performed, is likely to result in a reduced prediction of PTS
risk.
risk.


If the plant-specific PTS analyses submitted by licensees in accordance with § 50.61 using the methodology described in this guide (or acceptable equi- valent methodology) predict that the PTS-related, through-wall crack penetration mean frequency will remain less than 5 x 10-6 per reactor year for the requested period of continued operation, such operation would be acceptable to the staff.
If the plant-specific PTS analyses submitted by licensees in accordance with § 50.61 using the methodology described in this guide (or acceptable equi- valent methodology) predict that the PTS-related, through-wall crack penetration mean frequency will remain less than 5 x per reactor year for the requested period of continued operation, such operation would be acceptable to the staff.
 
In all the analyses performed, the licensee must justify that the impor- tant input values used are valid for the remaining life of the plant.


Recommended Format The recommended content of plant-specific PTS safety analyses is presented in Chapters 1 through 10 of this guide.
In a1 1 the analyses performed, the licensee must justify that the impor- tant input values used are valid for the remaining 1 ife of the plant.


Use of this format by licensees will help ensure the completeness of the information provided, will assist the NRC
Recommended Format The recommended content of plant-specific PTS safety analyses i s  presented i n  Chapters 1 through 10 of this guide.
staff in locating the information, and will aid in shorteni:q the time needed for the review process.


If the licensee chooses to adopt this format, the numbering system of this guide should be followed at least down to the section level.
Use of this format by 1 icensees will help ensure the completeness of the information provided, dill assist the NRC
staff i n  locating the information, and will aid in shortening the time needed for the review process.


Certain sections may be omitted if they are clearly unnecessary to pro- vide for comprehension of the analysis or if they are repetitive.
If the Ticensee chooses to adopt this format, the numbering system of this guide should be followed a t  least down to the section level.


*Based on preliminary RTNDT data from many plants (see Table P.1 of Enclosure A
Certain sections may be omitted i f  they are clearly unnecessary to pro- vide for comprehension of the analysis or if they are repetitive.
to Ref. 4).
viii


Additional guidance on style, composition, and specifications of safety analysis reports is provided in the Introduction of Revision 3 to Regulatory Guide 1.70, "Standard Format and Content of Safety Analysis Reports for Nuclear Power Plants (LWR Edition)."
RTeDT data from many plants (see Table P . l  of Enclosure A
The Advisory Committee on Reactor Safeguards has been consulted concerning this guide and has concurred in the issuance of this regulatory guide.
to Ref. 4).  
viii


Any information collection activities mentioned in this regulatory guide are contained as requirements in 10 CFR Part 50, which provides the regulatory basis for this guide.
Additional guidance on style, composition, and specifications of safety i
analysis reports is provided in the Introduction of Revision 3 to Regulatory Guide 1.70, "Standard Format and Content of Safety Analysis Reports for Nuclear Power Pl ants (LWR Edition). "
The Advisory Committee on Reactor Safeguards has been consulted concerni ng this guide and has concurred in the issuance of this regulatory guide.


The information collection requirements in 10 CFR Part 50
Any information collection activities mentioned in this regulatory guide are contained as requirements in 10 CFR Part 50, which provides the regulatory basis for this guide. The information collection requirements in 10 CFR Part 50  
have been cleared under OMB Clearance No. 3150-0011.
have been cleared under OMB Clearance No. 3150-0011.


ix
1. OVERALL APPROACH, SCOPE OF ANALYSIS, AND REPORT ORGANIZATION
,
This chapter is to describe the overall approach to the analysis and out-
1 i ne the individual tasks in terms of the nature and source of input, the methods used for analysis, and the nature and subsequent use of the output. The inter- relationship of the tasks should be described and should be illustrated by a flow chart. How the analysis tasks are integrated to achieve the results and conclusions is to be described.


1. OVERALL APPROACH, SCOPE OF ANALYSIS, AND REPORT ORGANIZATION
Major emphasis should be placed on analyzing event sequences leading to vessel through-wal 1 cracking and corrective actions to prevent this from occurri ng.
W
This chapter is to describe the overall approach to the analysis and out- line the individual tasks in terms of the nature and source of input, the methods used for analysis, and the nature and subsequent use of the output.


The inter- relationship of the tasks should be described and should be illustrated by a flow chart.
The report should include both probabilistic and deterministic fracture mechanics analyses. The probabi 1 i stic analyses should be used to determine the statistical 1 i kel i hood of vessel through-wal 1 crack penetration assuming a crack size distribution appropriately justified for the vessel being analyzed and appropriate uncertainties and distribution of the significant input param- eter such as material properties. The deterministic analyses should be used to evaluate the critical time interval in the transient during which mitigat- ing action can be effective. The deterministic analyses should be carried out using the two sigma upper and lower bounding values of the appropriate param- eters such as fluence, copper content, nickel content, fracture initiation toughness, fracture arrest toughness, and ductile fracture toughness.


How the analysis tasks are integrated to achieve the results and conclusions is to be described.
The input to the probabilistic analysis should be best estimates based on appropriate assumptions. Uncertainties and conservatisms should be explicitly  
 
,
Major emphasis should be placed on analyzing event sequences leading to vessel through-wall cracking and corrective actions to prevent this from occurring.
presented in the decision rationale for the 1 icensee' s proposed corrective mea- sures and basis for continued operation.
 
The report should include both probabilistic and deterministic fracture mechanics analyses.
 
The probabilistic analyses should be used to determine the statistical likelihood of vessel through-wall crack penetration assuming a crack size distribution appropriately justified for the vessel being analyzed and appropriate uncertainties and distribution of the significant input param- eter such as material properties.
 
The deterministic analyses should be used to evaluate the critical time interval in the transient during which mitigat- ing action can be effective.
 
The deterministic analyses should be carried out using the two sigma upper and lower bounding values of the appropriate param- eters such as fluence, copper content, nickel content, fracture initiation toughness, fracture arrest toughness, and ductile fracture toughness.
 
The input to the probabilistic analysis should be best estimates based on
*lli appropriate assumptions.
 
Uncertainties and conservatisms should be explicitly presented in the decision rationale for the licensee's proposed corrective mea- sures and basis for continued operation.


The analysis should include effects of operator actions, control system interactions, and support systems such as electric power, instrument air, and service water cooling.
The analysis should include effects of operator actions, control system interactions, and support systems such as electric power, instrument air, and service water cooling.
Line 438: Line 280:
The main report should describe the objectives and overall approach used in the study, outline the plant systems analyzed, describe the engineering anal- yses performed, present the results obtained and conclusions drawn, and present and justify the licensee's proposed program of corrective measures.
The main report should describe the objectives and overall approach used in the study, outline the plant systems analyzed, describe the engineering anal- yses performed, present the results obtained and conclusions drawn, and present and justify the licensee's proposed program of corrective measures.


Appendices should contain data, detailed models, sample calculations, and detailed results needed to support the various chapters of the report. Appen- dices should contain little supporting text.- Instead, the nature and relevance oflmaterial in the appendices should be described in the pertinent chapters of the main report.
Appendices should contain data, detai 1 ed models , sample calculations , and detailed results needed to support the various chapters of the report. Appen- dices should contain 1 i ttle supporting text. Instead, the nature and relevance of material in the appendices should be described in the pertinent chapters of the main report.
 
Throughout the guide, wherever it is specified or suggested that detailed
-descriptive materials should be submitted as part of the licensee's analyses, these detailed materials may be provided by incorporation of reference material
..'already submitted to the NRC (for example, in the final safety analysis report).
'It remains the responsibility of the licensee to provide a coherent, readable
1.154-1


document that does not unduly burden a reviewer with collecting extensive references before proceeding with the review.
Throughout the guide, wherever it is specified or suggested that detailed descriptive materials should be submitted as part of the licensee's analyses, these detai 1 ed materials may be provided by incorporation of reference material already submitted to the NRC (for example, in the final safety analysis report).  
It remains the responsibility of the licensee to provide a coherent, readable


Therefore, care should be exercised in limiting such material provided by reference to the reviewer who is conducting an extensive, detailed evaluation of the submitted work.
document that does not unduly burden a reviewer with collecting extensive references before proceeding with the review. Therefore, care should be exercised in limiting such material provided by reference to the reviewer who is conducting an extensive, detai 1 ed eval uation of the submitted work.


Certain details (noted in Chapter 1 and in Section 4.3 of this regulatory guide) that have.not been previously submitted to the NRC may be made available for NRC inspection and may also be referenced by the submitted analyses.
Certain details (noted in Chapter 1 and in Section 4.3 of this regulatory guide) that have not been previously submitted to the NRC may be made available for NRC inspection and may also be referenced by the submitted analyses.


1. 154-2
2.


2. PLANT-DATA
PLANT DATA  
This chapter is to briefly describe plant systems and operations pertinent to PTS.
This chapter i s  t o  b r i e f l y  describe plant systems and operations pertinent t o  PTS.


Chapter 2 of Reference 3 (the H. B. Robinson analysis by ORNL) provides a good example.
Chapter 2 o f  Reference 3 (the H. 0. Robinson analysis by ORNL) provides a good example.


Supporting appendices or references are to present the design and operating data used in the analysis or needed to understand the analysis.
Supporting appendices o r  references are t o  present the design and operating data used i n  the analysis o r  needed t o  understand the analysis.


References to other dcuments (e.g., the final safety analysis report (FSAR))
References t o  other dbcuments (e. g. , the f i n a l  safety analysis report (FSAR))  
should indicate specific sections.
should indicate specific sections.


(Reliability data, however, are to be in Section 3.4, "Sequence Quantification," or its supporting appendices and references.)
( R e l i a b i l i t y  data, however, are t o  be i n Section 3.4, "Sequence Quantification," or i t s  supporting appendices and references. )  
2.1 Systems Pertinent to PTS
2.1 Systems Pertinent t o  PTS  
Summarize design and operating features of systems pertinent to PTS.
Summarize design and operating features o f  systems pertinent t o  PTS.


Illustrate each system with a simplified process and instrumentation diagram or a single line diagram.
I l l u s t r a t e  each system with a simplified process and instrumentation diagram o r  a single l i n e  diagram.


Identify on each illustration any interfaces with other systems.
I d e n t i f y  on each i l l u s t r a t i o n  any interfaces w i t h other systems.


For each system, include a table summarizing key design and operating data.
For each system, include a table summarizing key design and operating data.


Give the maximum, minimum, and nominal values for those cases in which design data may vary with time (for example, high-pressure injection (HPI) water temperature may vary with season).  
Give the maximum, minimum, and nominal values f o r  those cases i n  which design data may vary with time ( f o r  example, high-pressure i n j e c t i o n (HPI) water temperature may vary with season).  
Such values used in the analysis should be identified and justified.
Such values used i n  the analysis should be i d e n t i f i e d  and j u s t i f i e d . 
Refer t o  appendices o r  other documents (e. g. , specific sections o f  the FSAR) as necessary f o r  more details.


Refer to appendices or other documents (e.g., specific sections of the FSAR) as necessary for more details.
Systems t o  be considered should include pertinent portions of:
Reactor cooling system Condensate and main feedwater systems Steam system Auxi 1 i ary feedwater system Reactor protection system Chemical and volume control system Emergency core cooling systems Instrumentation and, control systems Support systems
- Electric power
- Instrument a i r 
- Service cooling water
2.2 Reactor Vessel Summarize the reactor vessel construction and i t s  material properties.


Systems to be considered should include pertinent portions of:
Use tables, drawings, or graphs t o  show:  
°
O
Reactor cooling system
Vessel design (including weld locations and hot leg and cold  
°
1 eg penetrations).  
Condensate and main feedwater systems o
Vessel materials and chemical composition i n  the b e l t l i n e  region (including both base and weld material properties).  
Steam system o
O
Auxiliary feedwater system o
Vessel fabrication procedures, p a r t i c u l a r l y  welding and cladding.
Reactor protection system o
Chemical and volume control system o
Emergency core cooling systems o
Instrumentation and-control systems o
Support systems
-
Electric power
-
Instrument air
-
Service cooling water
2.2 Reactor Vessel Summarize the reactor vessel construction and its material properties.
 
Use tables, drawings, or graphs to show:
o Vessel design (including weld locations and hot leg and cold leg penetrations).
°
Vessel materials and chemical composition in the beltline region (including both base and weld material properties).
°
Vessel fabrication procedures, particularly welding and cladding.
 
1.154-3
.
:::
- a- .
,
: . :
=,
..
r
.
-
,:
b
.. .
F
i'
r .:
t O{.-.
[Du>: .
:,::
,,
r .
-aX $r,:
'i!-
.,.,,'s
; i,'£:':
,'t'
.:
....-
0'<,!.;'.Y '
.C.W .-;
_.,
4'n's. :E
* r.-.
i
'V; '
sS',.:
.'M.,
b'
_'..N',"'._'
'"''':\\ X
.'' ') '
..:.
:, :>- .
i ''" '
[ffo4!
i
,'';, '
ts'b.;,
L


0  
0  
Vessel properties (e.g., RTNDT, initial RTNDT, appropriate fracture toughness data, including the upper-shelf regime, residual stresses, flaw density distribution, etc.).  
Vessel properties (e. g. , RTNDT, i n i t i a l  RTNDT, appropriate fracture C
Describe and justify methods used to calculate or otherwise determine properties.
toughness data, including the upper-shelf regime, residual stresses, flaw density distribution, etc. ). Describe and j u s t i f y  methods used t o  calculate o r  otherwise determine properties.


Available information on the vessel properties should be reexamined in detail to fill any gaps in the supporting data for making an estimate of RTNDT
Available information on the vessel properties should be reexamined i n detail t o  f i l l  any gaps i n  the supporting data f o r  making an estimate o f  RTNDT  
and to support resolution of any disagreements about the validity of values used.
and t o  support resolution o f  any disagreements about the v a l i d i t y  o f  values used.


Few data are currently available and validated to support the selection of a value for the initial RTNDT.
Few data are currently available and validated t o  support the selection o f a value f o r  the i n i t i a l  RTNDT The confidence t h a t  can be placed i n  estimates of the i n i t i a l  RTHDT depends not only on material tests but also on the accu- rate documentation of we1 d i  ng technique, weld wire used, and weld f l u x  used.


The confidence that can be placed in estimates of the initial RTNDT depends not only on material tests but also on the accu- rate documentation of welding technique, weld wire used, and weld flux used.
The c r e d i b i l i t y  o f  such estimates could be enhanced by performing more tests on archival material, by discovering previously unreported t e s t  results on weld specimens from the particular plant, o r  by evaluating properties o f  welds considered typical o f  the p l  ant-speci f i c  we1 d.


The credibility of such estimates could be enhanced by performing more tests on archival material, by discovering previously unreported test results on weld specimens from the particular plant, or by evaluating properties of welds considered typical of the plant-specific weld.
2.3 Fluence Present (or incorporate by reference t o  a submitted report) the current and projected fluence on the vessel using benchmarked computer programs and methodology and information from neutron f l u x  surveillance dosimetry.


2.3 Fluence Present (or incorporate by reference to a submitted report) the current and projected fluence on the vessel using benchmarked computer programs and.
Use the weld locations and fluence values t o  i d e n t i f y  the c r i t i c a l  welds.


methodology and information from neutron flux surveillance dosimetry.
Show how the
1. ,
fluence varies along the length and depth o f  the c r i t i c a l  welds.


Use the weld locations and fluence values to identify the critical welds.
Describe the basi s f o r  these estimates and t h e i r  uncertainty.


Show how the fluence varies along the length and depth of the critical welds.
These f 1 ucnce val ues should be benchmarked, f o r  example, through use o f  ENDF/B-IV or V 1;ross sections, t o quantify the error.


Describe the basis for these estimates and their uncertainty.
Inservice Inspection Results To the extent pertinent t o  the probabilistic analysis and proposed correc- t i v e  actions, summarize:
O
Results - The number, size, depth, and location o f  any flaws found should be we1 1 defined and described.


These fluence values should be benchmarked, for example, through use of ENDF/B-IV or V cross sections, to quantify the error.
O
 
Methods used - The method used t o  perform the inspection should be we1 1 described with documentation o f  any val i d a t i  on informati on.
2.4 Inservice Inspection Results To the extent pertinent to the probabilistic analysis nd proposed correc- tive actions, summarize:
o Results -
The number, size, depth, and location of any flaws found should be well defined and described.
 
o Methods used -
The method used to perform the inspection should be well described with documentation of any validation information.


Note:  
Note:  
Only those inservice inspections (ISIs) that have actually been per- formed should be discussed in this section.
Only those inservice inspections (ISIs) that have actually been per-  
-
formed should be discussed i n  t h i s  section.


Improved ISI programs as proposed by the licensee should be described under corrective measures in Chapter 8,
Improved I S 1  programs as proposed by the licensee should be described under corrective measures i n  Chapter 8,  
"Effect of Corrective Actions on Vessel Through-Wall Crack Frequency."
"Effect o f  Corrective Actions on Vessel Through-Wall Crack Frequency."  
2.5 Plant Operating Experience Summarize overcooling transients that have occurred at this station and similar stations.
2.5 P l  ant Operati ng Experience Summarize overcool ing transients t h a t  have occurred a t  t h i s  station and similar stations.


Also, summarize lessons learned from these and other tran- sients, and indicate actions taken to prevent recurrence or minimize severity of overcooling transients.
A1 so, summarize lessons learned from these and other tran- s i  ents, and indicate actions taken t o  prevent recurrence or m i  nimize severity o f  overcooling transients.


1.154-4
2.6 Operating Procedures
6.-.
/
l
This section provides procedural data, e.g., what the operator i s  supposed to do and when.


2.6 Operating Procedures This section provides procedural data, e.g., what the operator is supposed to do and when.
This section, for example, should present and describe the important operator actions as defined by existing procedures associated w i t h potential overcool i ng transients. A1 so emphasize how the procedures were evaluated and optimized i n  light of any competing risks that might arise from events other than PTS events t o  ensure that overall plant safety i s  appropriately balanced.


This section, for example, should present and describe the important operator actions as defined by existing procedures associated with potential overcooling transients. Also emphasize how the procedures were evaluated and optimized in light of any competing risks that might arise from events other than PTS events to ensure that overall plant safety is appropriately balanced.
The conditions under which the operator takes each action, the expected time for performing the action, and how the time was derived should be identified.


The conditions under which the operator takes each action, the expected time for performing the action, and how the time was derived should be identified.
Some examples of these operator actions are:
O
Trip reactor coolant pumps.


Some examples of these operator actions are:
O
o Trip reactor coolant pumps.
Throttlehermi nate' emergency core cool ant.


o Throttle/terminate emergency core coolant.
O
Throttl e/termi nate main and emergency feedwater.


o Throttle/terminate main and emergency feedwater.
0
Restore main and emergency feedwater.


o Restore main and emergency feedwater.
O
Isolate break (primary or secondary).
Supply a summary of training materials associated w i t h  overcooling events in general and with respect to principal initiators.


o Isolate break (primary or secondary).
In addition, a summary of simulator exercises associated with potenti a1 overcool i ng events should be provided.
Supply a summary of training materials associated with overcooling events in general and with respect to principal initiators. In addition, a summary of simulator exercises associated with potential overcooling events should be provided.


Note:  
Note:  
Proposed improvements in procedures, diagnostic instrumentation, display systems, and operator training should be presented in Section 8.2 under the O
Proposed improvements in procedures, diagnostic instrumentation, display  
licensee's program of corrective measures.-
-
1.154-5
systems, and operator training should be presented in Section 8.2 under the  
1 i censee' s program of corrective measures.


3. DETERMINATION OF DETAILED PTS SEQUENCES FOR ANALYSES
3.
This chapter is to present the methods and analyses used to identify those transient sequences that could contribute significantly to the PTS risk.


A
DETERMINATION OF DETAILED PTS SEQUENCES FOR ANALYSES
good example is presented in Chapter 3 of Reference 3. The scope includes iden- tifying initiating events, developing event trees, modeling and quantifying the reliability of relevant systems and operator actions, and collapsing the event trees to identify specific relevant sequences.
This chapter i s  t o  present the methods and analyses used t o  i d e n t i f y  those transient sequences t h a t  could contribute significantly t o  the PTS r i s k . 
A  
good example i s  presented i n  Chapter 3 o f  Reference 3.


Detailed models, data, and sample calculations should be included in appendices or referenced.
The scope includes iden- t i f y i  ng i n i t i a t i n g  events, developing event trees, model ing and quantifying the r e l i a b i l i t y  o f  relevant systems and operator actions, and collapsin'g the event trees t o  i d e n t i f y  speci f i c  re1 evant sequences.


However, the logic of the analysis, criteria used, results, and insights gained are to be described in the main report.
Detai 1 ed models , data, and sample calculations should be included i n  appendices o r  referenced, However, the l o g i c o f  the analysis, c r i t e r i a  used, results, and insights gained are t o  be described i n  the main report.


3.1 Approach Used Describe how the material presented in this chapter fits into the overall PTS study.
3.1 Approach Used Describe how the material presented i n  t h i s  chapter f i t s  i n t o  the overall PTS study.


Provide a general description of the process used to identify PTS
Provide a general description o f  the process used t o  i d e n t i f y  PTS  
sequences.
sequences.


It should be made clear how the approach used will result in com- pleteness of identification of all classes of events that could contribute sig- nificantly to PTS risk, how specific events are selected for more detailed anal- ysis to represent each class, and finally how the events so analysed are used to determine total PTS risk at the plant.
It should be made clear how the approach used w i l l  r e s u l t  i n  com- pleteness o f  i d e n t i f i c a t i o n  o f  a l l  classes o f  events t h a t  could contribute sig- n i f i c a n t l y  t o  PTS risk, how specific events are selected f o r  more detailed anal- y s i s  t o  represent each class, and f i n a l l y  how the events so analysed are used t o  determine t o t a l  PTS r i s k  a t  the plant.


3.2 Sequence Delineation Identify potential overcooling transients in a well-defined manner, and document them in such a way that it is clear to a reviewer that all important potential overcooling conditions have been considered. Classes of initiators I
3.2 Sequence Del i neati on Identi f y  potential overcool i ng transients i n  a we1 1 -def i ned manner, and document them i n  such a way t h a t  it i s  clear t o  a reviewer t h a t  a l l  important potential overcool ing conditions have been considered.
should be developed, important variations of initiators within each class should be identified, and potential transients resulting from these initiators should be defined.


Operating experience at the specific plant and at similar plants should be carefully examined to aid in the identification of potentially significant PTS initiators, contributing failures, and potential corrective actions.
Classes o f  i n i t i a t o r s 
1 should be developed, important variations o f  i n i t i a t o r s  within each class should be identified, and potential transients resulting from these i n i t i a t o r s  should be defined.


The ORNL contribution to Systematic Evaluation Program reviews (Ref. 5, for example)
Operating experience a t  the specific plant and a t  similar plants should be carefully examined t o  a i d  i n  the i d e n t i f i c a t i o n  o f  potentially significant PTS i n i t i a t o r s , contributing f a i  1 ures, and potential corrective actions.
is a technique that can be used for this purpose.


3.2.1 Development of Classes of Initiators Any class of transients that could lead to overcooling of the reactor ves- sel should be considered in the analysis.
The ORNL contribution t o  Systematic Eva1 uation Program reviews (Ref. 5, f o r  example)
i s  a technique that can be used f o r  t h i s  purpose.


It should, however, be appropriate to use logical arguments to eliminate classes of transients as actual PTS
3.2.1 Development o f  Classes o f  I n i t i a t o r s Any class o f  transients t h a t  could lead t o  overcool ing o f  the reactor ves- sel should be considered i n  the analysis. It should, however, be appropriate t o  use logical arguments t o  eliminate classes o f  transients as actual PTS  
initiators whenever justifiable.
i n i t i a t o r s  whenever justifiable. . Examples o f  i n i t i a t o r s  that should be included are:
O
Loss-of-coolant accidents ( LOCAs) , i ncl udi ng steam generator tube rupture accidents.


Examples of initiators that should be included are:
*
o Loss-of-coolant accidents (LOCAs), including steam generator tube rupture accidents.
Steam 1 i ne breaks.


o Steam line breaks.
O
Overfeeds.


o Overfeeds.
O
Combinations of these, i ncl uding possible return t o c r i t i c a l  i ty.


o Combinations of these, including possible return to criticality.
3.2.2 I d e n t i f i c a t i o n  o f  Important I n i t i a t o r  Variations
 
-
1.154-6
After the classes o f  potential i n i t i a t o r s  have been identified, it i s  i m - 
portant t o  consider variations within any individual class. These variations should include:
1.


3.2.2 Identification of Important Initiator Variations After the classes of potential initiators have been identified, it is im- portant to consider variations within any individual class. These variations should include:
Decay heat level - The decay heat level, determined by recent operat- ing history o f  the plant, can have a major impact on the potential consequences o f  a given event.
1. Decay heat level - The decay heat level, determined by recent operat- ing history of the plant, can have a major impact on the potential consequences of a given event.


Thus, various decay heat conditions should be considered.
Thus, various decay heat conditions should be considered.


Clearly, decay heat associated with a reactor trip from full power (assuming operation at full power for some considerable time) should be examined.
Clearly, decay heat associated with a reactor t r i p  from f u l l  power (assuming operation a t  f u l l  power f o r  some considerable time) should be examined.


Zero decay heat represents the opposite extreme but for all practical purposes occurs only once at the beginning of life for the plant when PTS is not important.
Zero decay heat represents the opposite extreme but f o r  a l l  practical purposes occurs only once a t  the beginning o f  l i f e  f o r  the plant when PTS i s  not important.


Therefore, the analyst may choose to use some other level of decay heat that would cover potential decay heat conditions after the initial startup of the plant.
Therefore, the analyst may choose t o  use some other level o f  decay heat t h a t would cover potential decay heat conditions a f t e r  the i n i t i a l  startup o f  the plant.


The reasons for choosing particular decay heat levels for analysis should be documented.
The reasons f o r  choosing particular decay heat levels f o r  analysis should be documented.


Each identified initiator should be examined at all decay heat levels defined whenever appropriate.
Each i d e n t i f i e d  i n i t i a t o r  should be examined a t  a l l  decay heat levels defined whenever appropriate.


2. Power level -
2.
Power level may be important since certain equipment conditions or configurations may only exist at certain power levels, e.g., hot standby.


As in the case of decay heat level identification, the reasons for the selection of specific power levels for analysis purposes should be stated.
Power level - Power level may be important since certain equipment conditions o r  configurations may only e x i s t  a t  certain power levels, e.g.,
hot standby.


It should be noted that under certain conditions a reactor system may be at a high power level with a low decay heat condition.
As i n  the case of decay heat level identification, the reasons f o r the selection o f  specific power levels f o r  analysis purposes should be stated.


3. Location of event -
It should be noted t h a t  under certain conditions a reactor system may be a t  a high power level with a low decay heat condition.
In many instances the location of the event is defined.


For example, an event consisting of a failed open turbine bypass valve has the location defined since it is a specific valve failure.
3.


However, for some events such as pipe breaks, the location is not defined and could have an impact on the progression of the event.
Location o f  event - I n  many instances the location o f  the event i s defined.


In the case in which location is not defined, all locations that could be significant should be considered.
For example, an event consisting o f  a f a i l e d  open turbine bypass valve has the location defined since it i s  a specific valve failure.


Each location should then be elimihated by logical argument, bounded by consequences associated with another location, or treated as a separate event.
However, f o r some events such as pipe breaks, the location i s  not defined and could have an impact on the progression o f  the event.


4. Magnitude of event - Many of the initiators can occur to various degrees.
I n  the case i n  which location i s  not defined, a l l  locations that could be s i g n i f i c a n t  should be considered.


For example, a LOCA can range from a very small break to a full guil- lotine pipe break.
Each location should then be eliminated by logical argument, bounded by consequences associated with another location, or treated as a separate event.


Break sizes should be examined to identify categories of sizes that lead to similar system conditions.
4.


In the.case of the LOCA event, special consideration should be given to the identification of break sizes that could lead to loop flow stagnation. The larger-sized LOCAs typically do not
Magnitude o f  event - Many o f  the i n i t i a t o r s  can occur t o  various degrees.
'contribute to PTS risk since the pressure cannot be maintained because of the large flow out of the break.


3.2.3 Definition of Potential Transients Resulting from Each Initiator After the complete set of significant initiators has been defined, event trees are required to identify potential sequences resulting from each initia- tor. The development of the event tree headings and branches should be done in a consistent and logical manner.
For example, a LOCA can range from a very small break t o  a f u l l  g u i l -
l o t i n e  pipe break.


This was done in the ORNL studies (Refs. 1,
Break sizes should be examined t o  i d e n t i f y  categories o f sizes t h a t  lead t o  similar system conditions.
2, and 3) by using what have been called system state trees.


These trees define the potential states of each plant system of interest conditional on specific
I n  the case o f  the LOCA event, special consideration should be given t o  the i d e n t i f i c a t i o n  o f  break sizes t h a t could lead t o  loop flow stagnation.
-':thermal-hydraulic conditions.


Initiator-specific event trees can then be developed by examining the system state trees with respect to each initiating
The larger-sized LOCAs t y p i c a l l y  do not contribute t o  PTS r i s k  since the pressure cannot be maintained because o f  the large flow out o f  the break.
1. 154-7


event.
3.2.3 D e f i n i t i o n  o f  Potential Transients Resulting from Each I n i t i a t o r After the complete set o f  s i g n i f i c a n t  i n i t i a t o r s  has been defined, event trees are required t o  i d e n t i f y  potential sequences resulting from each i n i t i a - 
tor.


A similar or equivalent approach should be used to ensure traceability of the event trees and to ensure that important sequences are not inadvertently eliminated.
The development o f  the event tree headings and branches should be done i n  a consistent and logical manner.


Support system failures should also be presented within some type of event tree structure.
This was done i n  the ORNL studies (Refs. 1,
2, and 3) by using what have been called system state trees.


If the event trees are developed as previously described, any support system failure would most likely lead to a sequence of events that is already mapped out on the event trees, but in many instances with a higher pro- bability of occurrence.
These trees define the potential states o f  each plant system o f  interest conditional on specific thermal-hydraulic conditions.


In other cases, it may be necessary to define event trees resulting from a support system failure.
I n i t i a t o r - s p e c i f i c  event trees can then be developed by examining the system state trees with respect t o  each i n i t i a t i n g 


In either case, it is important that the support systems be examined to identify their potential impact on over- cooling conditions. The results of this examination should be presented as a separate section with the identification of specific support system failure sequences of interest.
event.


The support system review should at least include:
A similar or equivalent approach should be used to ensure traceability of the event trees and to ensure that important sequences are not inadvertently el imi nated.
o The electrical supply system.


o The compressed air instrument system.
Support system failures should also be presented within some type of event tree structure.


o The component and service water systems.
If the event trees are developed as previously described, any support system failure would most likely lead to a sequence of events that i s already mapped out on the event trees, b u t  in many instances with a higher pro- bability of occurrence.


3.3 Operator Effects The operator effects are analyzed in two separate sections. In this sec- tion the potential operator actions are identified.
In other cases, i t  may be necessary t o  define event trees resulting from a support system failure.


These actions are further analyzed in Section 3.4 in which the probabilities associated with the perfor- mance of an operator action are developed.
In either case, i t  i s  important that the support systems be examined to identify their potential impact on over- cooling conditions.


The operator can improve, aggravate, or initiate an overcooling transient.
The results of this examination should be presented as a separate section with the identification of specific support system failure sequences of interest.


All three of these categories should be discussed in this section.
The support system review should a t  least include:
"
The electrical supply system.


1. Procedures and/or the operators' general knowledge can lead to actions that improve the conditions associated with an overcooling event.
O
The compressed a i r  instrument system.


Explanation should be included as to why it is perceived that this action would be taken.
O
The component and service water systems.


Where appropriate, these operator actions should be either included directly on the event trees or presented as separate operator action trees that can later be coupled with the principal event trees.
Operator Effects The operator effects are analyzed in two separate sections.


2. Although the ORNL studies (Refs. 1, 2, and 3) did not include operator- initiated events or events aggravated by operator actions contrary to procedures, this category of events should also be examined as part of a plant-specific analysis.
In this sec- tion the potential operator actions are identified.


3. The analyses should include a quantitative approximation of the PTS
These actions are further analyzed in Section 3.4 in which the probabilities associated w i t h  the perfor- mance o f  an operator action are developed.
risk resulting from operator acts of commission.


Also included should be the possibility that an operator could initiate or exacerbate some milder event into a more severe PTS-type event.
I
The operator can improve, aggravate, or initiate an overcooling transient.


Since there is no generally accepted way to perform such analyses, the approximation used by the licensee for this purpose should be discussed and justified for applicability to this particular plant.
1 All three of these categories should be discussed in this section.


The "confusion matrix" approach (Ref. 6) used in human reliability analysis could provide an acceptable structure for identifying and analyzing these potential operator actions.
.  
1.


1.154-8
Procedures and/or the operators1 general knowledge can lead t o  actions that improve the conditions associated with an overcooling event.


w
Explanation should be included as to why i t  i s  perceived that this action would be taken.
3.4 Sequence Quantification Quantify the event trees by using identified initiating event frequencies, appropriate conditional probabilities associated with the success or failure of specific equipment operations, and success and failure probabilities asso- ciated with operator actions.


Plant-specific data should be used whenever appropriate to define these probabilities, including appropriately adjusted simulator studies.
Where appropriate, these operator actions should be either included directly on the event trees or presented as separate operator action trees that can later be coupled w i t h  the principal event trees.


This should be supplemented by vendor-specific or PWR-
2.
generic data bases when plant-specific data do not appear to provide an adequate data base.


Reference 7 includes guidance about treatment of generic and plant- specific data.
Although the ORNL studies (Refs. 1, 2, and 3) did not include operator- initiated events or events aggravated by operator actions contrary to procedures, this category of events should also be examined as part of a plant-specific analysis.


Its appendices include an updated generic data base that should be used.
3.


Identify by specific reference or provide in appendices all the reliability data used as input to quantify the event sequences.
The analyses should include a quantitative approximation of the PTS
risk resulting from operator acts of commission.


An explanation should be supplied as to how the data were derived for each data point.
Also included should be the possibility that an operator could initiate or exacerbate some milder event into a more severe PTS-type event.


3.4.1 Initiating Events Initiating event frequencies should be developed based on the number of observed events within selected periods of operation for similar plants under consideration.
Since there i s  no generally accepted way t o  perform such analyses, the approximation used by the licensee for this purpose should be discussed and justified for appl icabi 1 ity to this particular plant.


If no failures have been observed and no other information is available with which to estimate a probability, a standard statistical method such as the Poisson distribution can be used to determine a probability, or the technique described in Appendix B to Reference 3 for estimating plant-specific initiating event frequencies can be used.
The "confusion matrix" approach (Ref. 6) used i n  human reliability analysis could provide an acceptable structure for identifying and analyzing these potential operator actions.


For some initiators, it may be neces- sary to estimate the frequency of events in a particular operating mode, e.g.,
I
hot zero power.
3.4 Sequence Quantification Quantify the event trees by using identified initiating event frequencies, appropriate conditional probabilities associated with ttie success or failure of specific equipment operations, and success and failure probabilities asso- ciated with operator actions. Plant-specific data should be used whenever appropriate to define these probabilities, including appropriately adjusted simulator studies. This should be supplemented by vendor-specific or PWR-
generic data bases when plant-specific 'data do not appear to provide an adequate data base. Reference 7 includes guidance about treatment of generic and plant- specific data. Its appendices include an updated generic data base that should be used.


The data should be researched to identify trends associated with the occurrence of the event and the operating mode.
Identify by specific reference or provide in appendices all the reliability data used as input to quantify the event sequences. An explanation should be suppl ied as to how the data were derived for each data point.


In addition, the initiator itself should be examined to identify physical conditions that might favor failure in one mode rather than another.
3.4.1 Initiating Events Initiating event frequencies should be developed based on the number of observed events within selected periods of operation for similar plants under consideration. If no failures have been observed and no othe-r information is available with which to estimate a probability, a standard statistical method such as the Poisson distribution can be used to determine a probability, or the technique described in Appendix B to Reference 3 for estimating plant-specific initiating event frequencies can be used. For some initiators, it may be neces- sary to estimate the frequency of events in a particular operating mode, e. g. ,
hot zero power. The data should be researched to identify trends associated with the occurrence of the event and the operating mode. In addition, the initiator itself should be examined to identify physical conditions that might favor failure iti one mode rather than another. If this examination reveals no evidence of correlation between frequency and operating mode, the fraction of time spent in each operating mode can be used as a weighting factor.


If this examination reveals no evidence of correlation between frequency and operating mode, the fraction of time spent in each operating mode can be used as a weighting factor.
3.4.2 Equipment Fai 1 ures Following each initiating event, certain components are designed to perform in a defined manner. Failure of a component to perform its required function could lead to PTS considerations. Thus, it is necessary to assign a failure and successful operation probability for each component on a per-demand basis. These probabilities can be obtained by estimating the number of failures observed within a period of time, combined with an estimate of the number o f  demands expected within that same period, or by developing fault trees. If no failures have been observed and no other information is available with which to estimate a fai 1 ure-on-demand probabi 1 i ty , a standard statistical method can be used to develop a probability.


3.4.2 Equipment Failures Following each initiating event, certain components are designed to perform in a defined manner.
As with all event trees, the probability associated with a particular branch is conditional on the prior branches in the sequence. Questions of conditional probabi 1 i ty should be careful ly considered before a fai 1 ure probabi 1 i ty i s assigned.


Failure of a component to perform its required function could lead-to PTS considerations.
The potential for coupled or common cause failures within a system or between systems should be examined in the analysis. Careful consideration


Thus, it is necessary to assign a failure and successful operation probability for each component on a per-demand basis.
should be given t o  increasing the f a i l u r e  potential o f  a component, given the f a i l u r e  o f  one o r  more components o f  the same type i n  the same system o r  i n other systems being subjected t o  the same environment o r  f a u l t  causes.


These probabilities can be obtained by estimating the number of failures observed within a period of time, combined with an estimate of the number of demands expected within that same period, or by developing fault trees.
As additional components o f  a p a r t i c u l a r  type are postulated t o  f a i l , the proba- b i l i t y  f o r  the next component o f  the same type t o  f a i l  should increase.


If no failures have been observed and no other information is available with which to estimate a failure-on-demand probability, a standard statistical method can be used to develop a probability.
Based on the ORNL analysis, a simplified approach would be t o  assume t h a t  the f a i l u r e p r o b a b i l i t y  o f  the second component, given t h a t  the f i r s t  component has f a i l e d , 
might be as high as 0.1.


is, As with all event trees, the probability associated with a particular branch is conditional on the prior branches in the sequence.
The t h i r d  component might be assumed t o  f a i l  w i t h  a
0.3 probability, given the f a i l u r e  o f  two identical components.


Questions of conditional probability should be carefully considered before a failure probability is Ot>a'
One could then assume that, a f t e r  the f a i l u r e  o f  three components o f  the same type, a l l  remaining components o f  t h a t  type i n  the same o r  i n  other systems being subjected t o  the same environment o r  f a u l t  causes would f a i l  w i t h  a p r o b a b i l i t y  o f  1.0.
assigned.


The potential for coupled or common cause failures within a system or between systems should be examined in the analysis.
The licensee should discuss how these types o f  coupled f a i l u r e s  are handled i n  the analysis.


Careful consideration
Common cause f a i l u r e s  o f  a d i f f e r e n t  type may occur, as previously dis- cussed, through the f a i l u r e  o f  a support system or a control signal.
1.154-9


should be given to increasing the failure potential of a component, given the failure of one or more components of the same type in the same system or in other systems being subjected to the same environment or fault causes. As additional components of a particular type are postulated to fail, the proba- bility for the next component of the same type to fail should increase. Based on the ORNL analysis, a simplified approach would be to assume that the failure probability of the second component, given that the first component has failed, might be as high as 0.1.
An anal- y s i s  o f  these potential f a i l u r e s  should be made and the branch p r o b a b i l i t i e s should be adjusted whenever appropriate.


The third component might be assumed to fail with a
3.4.3 Operator Actions Operator action p r o b a b i l i t i e s  are p a r t i c u l a r l y  d i f f i c u l t  t o  determine because o f  the lack o f  a data base.
0.3 probability, given the failure of two identical components.


One could then assume that, after the failure of three components of the same type, all remaining components of that type in the same or in other systems being subjected to the same environment or fault causes would fail with a probability of 1.0.
The problem i s  f u r t h e r  complicated when time becomes an important variable.


The licensee should discuss how these types of coupled failures are handled in the analysis.
The procedure outlined below represents one approach t o  quantifying operator actions.


Common cause failures of a different type may occur, as previously dis- cussed, through the failure of a support system or a control signal.
This procedure shoul d be conser- vative f o r  any operator action ~erformed as required by procedures assuming i,  
t h a t  the equipment required i s  operational.


An anal- ysis of these potential failures should be made and the branch probabilities should be adjusted whenever appropriate.
For operator actions t h a t  might not be associated w i t h  procedural steps, it i s  not clear t h a t  t h i s  s i m p l i f i e d approach would produce conservative frequencies.


3.4.3 Operator Actions Operator action probabilities are particularly difficult to determine because of the lack of a data base.
Therefore, the approach described would only be recommended f o r  operator actions associated w i t h  proce- dural steps.


The problem is further complicated when time becomes an important variable.
Regardless o f  the method used, the human e r r o r  p r o b a b i l i t i e s  used i n  these analyses should be supported by data validated f o r  the p l a n t  being analyzed.


The procedure outlined below represents one approach to quantifying operator actions.
1. I d e n t i f y  operator actions - I n  t h i s  step the procedures associated w i t h  each i n i t i a t o r  would be reviewed t o  i d e n t i f y  those operator actions t h a t 
7 would have an impact on downcomer temperature.


This procedure should be conser- vative for any operator action performed as required by procedures assuming that the equipment required is operational.
2.


For operator actions that might not be associated with procedural steps, it is not clear that this simplified approach would produce conservative frequencies.
I d e n t i f y  time constraint - I n  the case o f  each operator action, the transient would be reviewed assuming no operator action t o  i d e n t i f y  the time- frame available f o r  successful comp~etion' o f  the operator action.


Therefore, the approach described would only be recommended for operator actions associated with proce- dural steps.
3.


Regardless of the method used, the human error probabilities used in these analyses should be supported by data validated for the plant being analyzed.
Assign screening f a i l u r e  p r o b a b i l i t i e s  - I n  t h i s  step a conservative value f o r  the f a i l u r e  o f  the operator action would be identified.


1. Identify operator actions -
For operator actions required by procedures- t o  be performed w i t h i n  the f i r s t  5 minutes o f the transient, the t i m e - r e l i a b i l i t y  curve as presented i n  NUREGKR-2815 (Ref. 7)
In this step the procedures associated with each initiator would be reviewed to identify those operator actions that would have an impact on downcomer temperature.
could be used t o  i d e n t i f y  a screening value.


2. Identify time constraint -
After 5 minutes, a value o f  0.9 f o r  success and 0.1 f o r  f a i l u r e  would be assumed f o r  a l l  operator actions.
In the case of each operator action, the transient would be reviewed assuming no operator action to identify the time- frame available for successful completion of the operator action.


3. Assign screening failure probabilities -
The e n t i r e  PTS analysis would then be completed using these screening values.
In this step a conservative value for the failure of the operator action would be identified.


For operator actions required by procedures to be performed within the first 5 minutes of the transient, the time-reliability curve as presented in NUREG/CR-2815 (Ref. 7)
4.
could be used to identify a screening value.
 
After 5 minutes, a value of 0.9 for success and 0.1 for failure would be assumed for all operator actions.


The entire PTS analysis would then be completed using these screening values.
I d e n t i f y  dependency factors - I n  some instances, there may be coupled f a i l u r e s  associated w i t h  operator actions j u s t  as there were coupled f a i l u r e s 


4. Identify dependency factors -
associated with equipment failures.
In some instances, there may be coupled
(
failures associated with operator actions just as there were coupled failures
1.154-10


of an operator action may be linked, to various degrees, to the success or fail- ure of a previous operator action.
I n  many instances, the potential failure of an operator action may be linked, t o  various degrees, to the success or fail- ure of a previous operator action.


Thus, it is recommended that each operator action be reviewed with respect to dependency.
Thus, i t  is recommended that each operator action be reviewed w i t h  respect to dependency.


This can be accomplished using the dependency tables as presented in the human reliability handbook (Ref. 8).
T h i s  can be accomplished using the dependency tables as presented i n  the human reliability handbook (Ref. 8).  
5. If any of the dominant sequences involve the failure of an operator action, a more comprehensive evaluation of the failure would be performed for that operator action.
5. If any of the dominant sequences involve the failure of an operator action, a more comprehensive evaluation of the failure would be performed for that operator action. When necessary, the comprehensive evaluation should be performed using a human reliability methodology.


When necessary, the comprehensive evaluation should be performed using a human reliability methodology.
The acceptability of this methodology for the purpose should be justified by the licensee (Refs. 9 through 13).
3.5 Event Tree Col lapse Collapse the event trees using a frequency screening criterion to form a l i s t  of specific sequences and a set of residual groups to be analyzed.


The acceptability of this methodology for the purpose should be justified by the licensee (Refs. 9 through 13).
T h i s i s  important since the event trees may generate thousands of end states that cannot be individual ly analyzed.
3.5 Event Tree Collapse Collapse the event trees using a frequency screening criterion to form a list of specific sequences and a set of residual groups to be analyzed.


This is important since the event trees may generate thousands of end states that cannot be individually analyzed. A screening value of 1.OE-7/reactor year is recommended.
A screening value of 1.0E-7/reactor year i s recommended.


This value should ensure that important sequences are treated individually, and it should also help to keep the size of the residual small.
This value should ensure that important sequences are treated individually, and i t  should also help to keep the size of the residual small.


This is particularly important since it may be necessary to treat the residual using a bounding consequence condition.
This i s  particularly important since i t  may be necessary t o  t r e a t  the residual using a bounding consequence condition.


3.5.1 Specific Sequences Those sequences that survive the frequency screening should be defined and their frequency noted.
3.5.1 Specific Sequences Those sequences that survive the frequency screening should be defined and their frequency noted.


It is recommended that some identification be assigned to each sequence to enhance its traceability through the remainder of the anal- ysis.
I t  i s  recommended that some identification be assigned t o  each sequence t o  enhance i t s  traceability through the remainder of the anal- ysis.


Grouping and identifying each sequence with respect to initiator type may also prove helpful.
Grouping and identifying each sequence w i t h  respect to initiator type may also prove helpful.


3.5.2 Residual Groups Those sequences that do not survive the frequency screening must also be considered. They should be grouped together based on transient characteristics to form a set of residual groups.
3.5.2 Residual Groups Those sequences that do not survive the frequency screening must also be considered.


The residual groups should be reviewed to identify sequences that should be grouped with previously defined sequences i--because of transient similarity or should be specifically evaluated because of their severe consequence.
They should be grouped together based on transient characteristics to form a s e t  of residual groups.


It is important to attempt to reduce the size of each residual group since it will be necessary to assign a bounding consequence that would apply within each group.
The residual groups should be reviewed to identify sequences that should be grouped with previously defined sequences because of transient similarity or should be specifically evaluated because of their severe consequence.


Each residual group should be defined and its
I t  i s  important to attempt to reduce the size of each residual group since i t  will be necessary to assign a bounding consequence that would apply within each group.
-
f.requency noted.


1.154-11 associated wit-h ninment fi1ures Tn mn.v in.stan.rcs th.e nntential, filure
Each residual group should be defined and i t s frequency noted.


4. THERMAL-HYDRAULIC ANALYSIS
4. THERMAL-HYDRAULIC ANALYSIS  
This chapter is to present the reactor coolant pressures, temperatures,  
\\[
(
This chapter is to present the reactor coolant pressures, temperatures, and heat transfer coefficients at the vessel's interior surface in the beltline region for the set of overcooling sequences that envelops the plant's potential for experiencing a PTS event. A good example is presented in Chapter 4 of Reference 3. Also the chapter is to present the details of the analysis methods used to obtain these fluid conditions and is to include the following sections:
and heat transfer coefficients at the vessel's interior surface in the beltline region for the set of overcooling sequences that envelops the plant's potential for experiencing a PTS event.
1.


A good example is presented in Chapter 4 of Reference 3. Also the chapter is to present the details of the analysis methods used to obtain these fluid conditions and is to include the following sections:
The thermal-hydraul ic analysis plan and 1 ogic.
1. The thermal-hydraulic analysis plan and logic.


2. A description and evaluation of the thermal-hydraulic models.
2.


3. A description of any simplified analysis methods used in the study.
A description and evaluation of the thermal-hydraul ic models.


4. A description of the methods used to evaluate the effects of thermal stratification and mixing.
3.


5. Graphs of all the best-estimate thermal-hydraulic results with their associated uncertainties and a detailed explanation of the transient behavior observed.
A description of any simplified analysis methods used in the study.


4.1 Thermal-Hydraulic Analysis Plan This section should outline the logic and identify the subtasks in the thermal-hydraulic analysis. Subtasks include detailed thermal-hydraulic systems analysis, simplified thermal-hydraulic systems analysis, and thermal stratifica-
4.
(
tion analysis.


The logic should describe the sampling plan used to select sequences for detailed or simplified analysis.
A description of the methods used to evaluate the effects of thermal stratification and mixing.


ORNL experience favors selecting detailed thermal-hydraulic analysis sequences, including at least a few severe examples of each type of postulated overcooling transient in order to understand and benchmark the plant behavior for subsequent simplified calculations.
5 . 
Graphs of a1 1 the best-estimate thermal -hydraul ic results with their associated uncertainties and a detailed explanation of the transient behavior observed.


The order in which the scenarios are evaluated can result in a considerable reduc- tion in expenditures.
Thermal-Hydraulic Analysis Plan This section should out1 ine the logic and identify the subtasks in the thermal-hydraul ic analysis. Subtasks incl ude detai led thermal- hydraul ic systems
1 analysis, simp1 ified thermal-hydraul ic systems analysis, and thermal stratifica- tion analysis. The logic should describe the sampling plan used to select sequences for detailed or simplified analysis. ORNL experience favors selecting detailed thermal-hydraulic analysis sequences, including at least a few severe examples of each type of postulated overcooling transient in order to understand and benchmark the plant behavior for subsequent simplified calculations. The order in which the scenarios are evaluated can result in a considerable reduc- tion in expenditures. By first analyzing the scenarios that are expected to be the bounding cases (i. e. , the most severe), calculations for an entire class of overcooling scenarios may be deemed unnecessary if the bounding case is not of PTS concern. Similarly, careful selection -of the first set of scenarios to be evaluated can permit simple extrapolation or interpolation of the results to other scenarios that share common controlling thermal-hydraulic phenomena.


By first analyzing the scenarios that are expected to be the bounding cases (i.e., the most severe), calculations for an entire class of overcooling scenarios may be deemed unnecessary if the bounding case is not of PTS concern.
During the analysis, the sequence identification analyst and the thermal -
hydraulic analyst should coordinate activities to ensure that pertinent details of the delineated sequences are thoroughly understood. Similarly, close coor- dination must be maintained between the thermal-hydraulic analyst and the frac- ture mechanics analyst so that the transient fluid conditions are calculated at the appropriate vessel locations.


Similarly, careful selection of the first set of scenarios to be evaluated can permit simple extrapolation or interpolation of the results to other scenarios that share common controlling thermal-hydraulic phenomena.
4.2 Thermal-Hydraulic Models Thjs section and supporting appendices should present a detailed descrip- tion of the thermal-hydraulic computer models used in this analysi


During the analysis, the sequence identification analyst and the thermal- hydraulic analyst should coordinate activities to ensure that pertinent details of the delineated sequences are thoroughly understood.
====s. The models ====


Similarly, close coor- dination must be maintained between the thermal-hydraulic analyst and the frac- ture mechanics analyst so that the transient fluid conditions are calculated at the appropriate vessel locations.
should include an accurate representation of the pertinent parts of the primary and secondary systems. This includes the condensate system, the main and auxil- iary feedwater systems, and parts of the steam system. The model should include appropriate secondary-side metal heat capacity. Particular attention should be given to the modeling of control system logic and characteristics such as valve closure times and liquid level measurements. References 14 through 17 illustrate some of the modeling details included in such a study. The thermal-hydraulic models should be capable of predicting single and two-phase flow behavior and critical flow as required. The models should be capable of predicting plant behavior for LOCAs, steamline breaks, and steam generator tube ruptures. In general, a one-dimensional code is suitable for most overcooling transient calculations. However, if any of the control systems are dependent solely on the fluid conditions in a single loop (e.g., reactor coolant pump restart crite- ria), a method of estimating the three-dimensional effects in the downcomer may be necessary for some of the asymmetric cooldown scenarios encountered in the PTS study. Sensitivity of calculated results to the nodalization schemes used should be discussed. The thermal-hydraulic models should be coupled, where appropriate, with neutronic models that have the capability to analyze pressure surges resulting from any relevant sequences involving recriticality.


4.2 Thermal-Hydraulic Models This section and supporting appendices should present a detailed descrip- tion of the thermal-hydraulic computer models used in this analysis.
This section of the report must also present the results of benchmarking the computer models against suitable plant data or data from experimental facilities or incorporate this information by reference to an NRC-approved topical report. As a minimum, the plant data comparison should fully exercise the modeling features that are employed in the thermal-hydraulic computer pro- grams such as the pressurizer (including heaters and sprays), feedwater heaters and liquid level controls, the steam generator liquid level controls, and the turbine bypass (i . e. , steam dump) controls under steady-state and transient con- ditions. If overcooling transients have occurred at the plant or at a similar plant, they should be benchmarked against the computer models. The licensee is encouraged to use codes and methods accepted by the NRC at the time the calcula- tion is performed.


The models
The models should be capable of accurately predicting condensation at all steam-water interfaces in the primary system, especially in the pressurizer during the repressurization phase of an overcool ing event or during refi 11 ing of the primary system with cold safety-injection water. The effects of noncon- densible gases, if present, on system pressure and temperature calculations should be addressed.
1.154-12


should include an accurate representation of the pertinent parts of the primary and secondary systems.
All code input and modeling assumptions should be documented and available for NRC review during the analysis review period (normally starting 3 years before the plant exceeds the screening limit and continuing until the evaluation results and any requisite actions are approved by the Commission).
Simplified Analysis Methods This section should present the technical bases for any simplified analysis methods that are applied in the study. This includes the grouping of similar sequences by controlling phenomena and any extrapolations used to modify exist- ing calculations. If a simplified thermal-hydraulic plant model is used to pre- dict portions of the plant transients, all the simplifying assumptions inherent


This includes the condensate system, the main and auxil- iary feedwater systems, and parts of the steam system.
t o  t h i s  model should be stated and j u s t i f i e d . 
Reference 18 provides examples of how t o  group sequences and develop a simplified thermal-hydraulic model suitable i
f o r  portions o f  the analysis.


The model should include appropriate secondary-side metal heat capacity.
i
 
4.4 Thermal S t r a t i f i c a t i o n  Effects Transient thermal-hydraulic computer programs available t o  analyze LWR
Particular attention should be given to the modeling of control system logic and characteristics such as valve closure times and liquid level measurements.
response t o  overcooling scenarios do not model f l u i d  behavior with s u f f i c i e n t d e t a i l  t o  predict the onset o f  H P I  thermal f l u i d  s t r a t i f i c a t i o n  i n  the cold leg and the subsequent cold l e g  and downcomer behavior.
 
References 14 through 17 illustrate some of the modeling details included in such a study.
 
The thermal-hydraulic models should be capable of predicting single and two-phase flow behavior and critical flow as required.
 
The models should be capable of predicting plant behavior for LOCAs, steamline breaks, and steam generator tube ruptures.
 
In general, a one-dimensional code is suitable for most overcooling transient calculations.
 
However, if any of the control systems are dependent solely on the fluid conditions in a single loop (e.g., reactor coolant pump restart crite- ria), a method of estimating the three-dimensional effects in the downcomer may be necessary for some of the asymmetric cooldown scenarios encountered in the PTS study.
 
Sensitivity of calculated results to the nodalization schemes used should be discussed.


The thermal-hydraulic models should be coupled, where appropriate, with neutronic models that have the capability to analyze pressure surges resulting from any relevant sequences involving recriticality.
As a result, additional analysis methods may be needed t o  determine which transients are affected by thermal s t r a t i f i c a t i o n  and the extent o f  such effects.


This section of the report must also present the results of benchmarking the computer models against suitable plant data or data from experimental facilities or incorporate this information by reference to an NRC-approved topical report.
This section should describe and j u s t i f y  the thermal f l u i d  mixing analysis methods t h a t  have been applied i n  the study.


As a minimum, the plant data comparison should fully exercise the modeling features that are employed in the thermal-hydraulic computer pro- grams such as the pressurizer (including heaters and sprays), feedwater heaters and liquid level controls, the steam generator liquid level controls, and the turbine bypass (i.e., steam dump) controls under steady-state and transient con- ditions.
References 19 through 24 describe the results o f  recent mixing analyses and experiments.


If overcooling transients have occurred at the plant or at a similar plant, they should be benchmarked against the computer models.
Reference 19 i d e n t i f i e s a useful s t r a t i f i c a t i o n  c r i t e r i o n  t o  determine which overcooling transients w i l l require the additional mixing analysis.


The licensee is encouraged to use codes and methods accepted by the NRC at the time the calcula- tion is performed.
Particular attention should be given t o  scenarios t h a t  involve H P I  under very low flow o r  stagnant loop conditions.


The models should be capable of accurately predicting condensation at all steam-water interfaces in the primary system, especially in the pressurizer during the repressurization phase of an overcooling event or during refilling of the primary system with cold safety-injection water. The effects of noncon- densible gases, if present, on system pressure and temperature calculations should be addressed.
When stagnation i s  p a r t i a l  (i.e.,
not a l l  loops stagnate), s t r a t i f i c a t i o n  i s expected only w i t h i n  the cold legs o f  the stagnant loops.


All code input and modeling assumptions should be documented and available for NRC review during the analysis review period (normally starting 3 years before the plant exceeds the screening limit and continuing until the evaluation results and any requisite actions are approved by the Commission).
However, scenarios involving complete loop stagnation w i l l  require the evaluation o f  a transient cooldown i n  the presence o f  s t r a t i f i e d  layers both i n  the cold legs and i n  a portion o f  the downcomer.
4.3 Simplified Analysis Methods I; This section should present the technical bases for any simplified analysis methods that are applied in the study.


This includes the grouping of similar sequences by controlling phenomena and any extrapolations used to modify exist- ing calculations.
The mixing model should include the e f f e c t  o f  metal heating on the mixing behavior, p a r t i c u l a r l y  i n  a stagnant flow situation.


If a simplified thermal-hydraulic plant model is used to pre- dict portions of the plant transients, all the simplifying assumptions inherent
Also, the e f f e c t  o f  noncondensible gases, i f  present, should be included.
1.154-13 m


to this model should be stated and justified.
References 19 through 23 describe tools t h a t  have been used f o r  such an analysis.


Reference 18 provides examples of- how to group sequences and develop a simplified thermal-hydraulic model suitable for portions of the analysis.
I _
This section should also document the heat transfer correlations applied i n  the mixing analysis.


4.4 Thermal Stratification Effects Transient thermal-hydraulic computer programs available to analyze LWR
The research e f f o r t s  described i n  References 18 through
response to overcooling scenarios do not model fluid behavior with sufficient detail to predict the onset of HPI thermal fluid stratification ithe cold leg and the subsequent cold leg and downcomer behavior.
23 indicated t h a t  the downcomer heat transfer coefficients generally exceeded
300 Btu/hr-ft2-OF.


As a result, additional analysis methods may be needed to determine which transients are affected by thermal stratification and the extent of such effects.
These values o f  heat transfer c o e f f i c i e n t  were generally high enough t o  keep the vessel wall surface temperatures w i t h i n  a few degrees o f  the downcomer f l u i d  temperature.


This section should describe and justify the thermal fluid mixing analysis X 4 methods that have been applied in the study.
Furthermore, because the vessel wall cool- down was controlled by conduction processes rather than convection processes, the vessel wall surface temperatures were insensitive t o  heat transfer coef- f i c i e n t  variations due t o  changes i n  flow and heat transfer regimes.


References 19 through 24 describe the results of recent mixing analyses and experiments.
4.5 Thermal-Hydraulic Analysis Results This section should present graphs o f  the best-estimate downcomer pressures, f 1 u i  d temperatures, and heat transfer coefficients and t h e i r  associated uncer- t a i n t y  ranges as a function o f  time a t  the c r i t i c a l  weld areas.


Reference 19 identifies a useful stratification criterion to determine which overcooling transients will require the additional mixing analysis.
This includes the results o f  the detailed thermal-hydraulic model, the simplified model, and mixing analysis calculations.


Particular attention should be given to scenarios that involve HPI under very low flow or stagnant loop conditions.
The duration assumed f o r  each overcooling scenario should be j u s t i f i e d . 
It i s  assumed t h a t  a scenario duration o f  2 hours may be reasonable f o r  many cases since the overcool ing transient would probably be i d e n t i f i e d  and m i  ti gated p r i o r t o  t h a t  time.


When stagnation is partial (i.e., not all loops stagnate), stratification is expected only within the cold legs of the stagnant loops.
However, there may be scenarios requiring lengthier evaluation periods because the control 1 i ng phenomena delay the scenario's evolution.


However, scenarios involving complete loop stagnation will require the evaluation of a transient cooldown in the presence of stratified layers both in the cold legs and in a portion of the downcomer.
I
Also provide a discussion o f  the accuracy o f  the results, including a demonstration t h a t  nodalization and error estimation methods chosen are appro- p r i a t e ,  and how the predicted p l a n t  behavior compared t o  p l a n t  h i s t o r y  and oper- ating experience.


The mixing model should include the effect of metal heating on the mixing behavior, particularly in a stagnant flow situation.
Time-dependent uncertainty estimates f o r  the downcomer pres- sure, f l u i d  temperature, and heat transfer coefficients a t  the c r i t i c a l  welds should be provided f o r  each scenario.


Also, the effect of noncondensible gases, if present, should be included.
These uncertainties are often l i m i t e d  by physical phenomena.


References 1 through 23 describe tools that have been used for such an analysis.
For example, the pressurizer power-operated r e l i e f  valve (PORV) setpoints w i l l  l i m i t  the system pressure f o r  certain high-pressure sce- narios.
 
This section should also document the heat transfer correlations applied in the mixing analysis.
 
The research efforts described in References 18 through
23 indicated that the downcomer heat transfer coefficients generally exceeded
300 Btu/hr-ft2-0F. These values of heat transfer coefficient were generally high enough to keep the vessel wall surface temperatures within a few degrees of the downcomer fluid temperature.
 
Furthermore, because the vessel wall cool- down was controlled by conduction processes rather than convection processes, the vessel wall surface temperatures were insensitive to heat transfer coef- ficient variations due to changes in flow and heat transfer regimes.
 
4.5 Thermal-Hydraulic Analysis Results This section should present graphs of the best-estimate downcomer pressures, fluid temperatures, and heat transfer coefficients and their associated uncer- tainty ranges as a function of time at the critical weld areas.
 
This includes the results of the detailed thermal-hydraulic model, the simplified model, and mixing analysis calculations.
 
The duration assumed for each overcooling scenario should be justified.
 
It is assumed that a scenario duration of 2 hours may be reasonable for many cases since the overcooling transient would probably be identified and mitigated prior to that time.
 
However, there may be scenarios requiring lengthier evaluation periods because the controlling phenomena delay the scenario's evolution.
 
1.154-14
 
Also provide a discussion of the accuracy of the results, including a demonstration that nodalization and error estimation methods chosen are appro- priate, and how the predicted plant behavior compared to plant history and oper- ating experience.
 
Time-dependent uncertainty estimates for the downcomer pres- sure, fluid temperature, and heat transfer coefficients at the critical welds should be provided for each scenario.
 
These uncertainties are often limited by physical phenomena. For example, the pressurizer power-operated relief valve I
(PORV) setpoints will limit the system pressure for certain high-pressure sce- narios.
 
Therefore, the uncertainty is limited by PORV operating character- istics.


Therefore, the uncertainty i s  l i m i t e d  by PORV operating character- i s t i c s . 
References 16 and 18 describe some uncertainty analysis techniques.
References 16 and 18 describe some uncertainty analysis techniques.


F
5. FRACTURE MECHANICS ANALYSIS
E;
For each sequence identified in Chapter 3, "Determination of Detailed PTS
.';
Sequences for Analyses," calculate (or for unimportant sequences, estimate using bounding conditions) the conditional probabi 1 i ty of through-wal 1 crack penetra- tion given the occurrence of the event versus fluence or RTNDT (Although licensees were required to use the method of determining RTNDT (RTpTS) specified in paragraph 50.61(b)(2)
,  
when evaluating their vessel properties with respect to the screening limits, in performing these plant-specific calculations, they are encouraged to use any alternative methods/data/correlations for which they provide justification of applicability to their specific plant.) Specific sequences identified in Section 3.5.1 should be calculated individually in detail. Less important events such as the residual groups identified in Sec- tion 3.5.2 may be conservatively bounded without a calculation for each sequence in the group. A good example is provided in Chapter 5 of Reference 3. Input for these calculations includes the primary system pressure, the temperature of the coolant in the reactor vessel downcomer, the fluid-film heat transfer coefficient adjacent to the vessel wall, all as a function of time, and the vessel properties. The calculations should be performed with a probabilistic fracture mechanics code such as OCA-P or VISA-I1 (Refs. 25 arid 26).
.541
An acceptable procedure to be followed in the fracture mechanics analysis is as follows: A one-dimensional thermal and stress analysis for the vessel wall should be performed. The effect of cladding should be accounted for in both the thermal and stress analyses. The fracture mechanics model can be based on linear elastic fracture mechanics with a specified maximum value of KIc and I
KIa to account for upper-shelf behavior. Plastic instability should be consid- ered in the determination of failure. Warm prestress should not be assumed in evaluations of the postulated transients. Acceptable types of material pro- perties are given in the study of the H. B. Robinson reactor (Ref. 3).
In the Monte Carlo portion of the analysis, as a minimum, each of the following should be assigned distribution functions:
KIc = Static crack initiation fracture toughness KIa = Crack arrest fracture toughness RTNDT = Ni 1 -ducti 1 i ty reference temperature Cu = Concentration of copper, wt-%
Ni = Concentration of nickel, wt-%
F = Fast neutron fluence The functions used should be justified. Examples of these distributions are found in Reference 3.


5. FRACTURE MECHANICS ANALYSIS
The following additional information should be supplied:
For each sequence identified in Chapter 3, "Determination of Detailed PTS
/
Sequences for Analyses," calculate (or for unimportant sequences, estimate using bounding conditions) the conditional probability of through-wall crack penetra- tion given the occurrence of the event versus fluence or RTNDT.
1.


(Although licensees were required to use the method of determining RTNDT (RTp15) specified in paragraph 50.61(b)(2) when evaluating their vessel properties with respect to the screening limits, in performing these plant-specific calculations, they are encouraged to use any alternative methods/data/correlations for which they provide justification of applicability to their specific plant.) Specific sequences identified in Section 3.5.1 should be calculated individually in detail.
Flaw density - The number o f  cracks per u n i t  surface area should be established f o r  use i n  the calculations and should be j u s t i f i e d . 
A value o f 
0.2 flaw per square meter o f  8-inch-thick material (one flaw/cubic meter) was selected i n  References 1, 2, and 3.


Less important events such as the residual groups identified in Sec- tion 3.5.2 may be conservatively bounded without a calculation for each sequence in the group. A good example is provided in Chapter 5 of Reference 3. Input for these calculations includes the primary system pressure, the temperature of the coolant in the reactor vessel downcomer, the fluid-film heat transfer coefficient adjacent to the vessel wall, all as a function of time, and the vessel properties.
2.


The calculations should be performed with a probabilistic fracture mechanics code such as OCA-P or VISA-II (Refs.
Flaw depth density function - The flaw depth density d i s t r i b u t i o n should be established.


25 ad 26).
The function t o  be used can be t h a t  specified i n References 1, 2, and 3.
An acceptable procedure to be followed in the fracture mechanics analysis is as follows: A one-dimensional thermal and stress analysis for the vessel wall should be performed.


The effect of cladding should be accounted for in both the thermal and stress analyses.
3.


The fracture mechanics model can be based on linear elastic fracture mechanics with a specified maximum value of K
Flaw size, shape, and location - Axial flaws w i t h  depths less than
and KIa to account for upper-shelf behavior.
20 percent o f  the wall thickness and a l l  circumferential flaws should be modeled i n  i n f i n i t e  length.


Plastic instability should be consid- ered in the determination of failure.
Axial flaws with depths greater than 20 percent o f  the wall thickness may be modeled i n  i n f i n i t e  o r  f i n i t e  length depending on the r e l a t i v e toughness o f  the weld regions and plate material.


Warm prestress should not be assumed in evaluations of the postulated transients.
For instance, the length o f an axial flaw i n  an axial weld t h a t  suffers severe radiation damage r e l a t i v e  t o the plate can be l i m i t e d  t o  the length o f  the weld.


Acceptable types of material pro- perties are given in the study of the H. B. Robinson reactor (Ref. 3).
The flaws should be assumed t o  be located a t  the inner surface o f  the vessel and should extend through the cladding t o  the inner surface o f  the vessel.
In the Monte Carlo portion of the analysis, as a minimum, each of the following should be assigned distribution functions:
KIC = Static crack initiation fracture toughness KIa = Crack arrest fracture toughness RTNDT = Nil-ductility reference temperature Cu.= Concentration of copper, wt-%
Ni = Concentration of nickel, wt-%
F = Fast neutron fluence The functions used should be justified.


Examples of these distributions are found in Reference 3.
Reference 20 provides a comprehensive discussion o f  recommendations f o r input distributions t o  be used i n  probabi 1 i s t i c  fracture mechanics calculations.


1.154-16
4.


The following additional information should be supplied:
A l l  regions o f  the b e l t l i n e  should be considered.
1. Flaw density -
The number of cracks per unit surface area should be established for use in the calculations and should be justifie


====d. A value of====
This includes axial and circumferential welds as well as the base material.
0.2 flaw per square meter of 8-inch-thick material (one flaw/cubic meter) was selected in References 1, 2, and 3.


2. Flaw depth density function -
The f o l  low
The flaw depth density distribution should be established.
-
K ~ c 
-
-
K ~ a 
-  
where T = Val 1 temperature R
T
~
~
~
o


The function to be used can be that specified in References 1, 2, and 3.
= I n i t i a l  n i l - d u c t i l i t y  reference temperature Exampl
= Increase i n  n i l - d u c t i l i t y  reference temperature due t o  radiation damage, f(Cu,Ni,fluence).
I f  plant surveillance data meet the c r i t e r i a  f o r  c r e d i b i l i t y  given i n  Reference 27, they may be used as described therein.


3. Flaw size, shape, and location -
es o f  these functions are described i n  References 3 and 27.
Axial flaws with depths less than
20 percent of the wall thickness and all circumferential flaws should be modeled in infinite length.


Axial flaws with depths greater than 20 percent of the wall thickness may be modeled in infinite or finite length depending on the relative toughness of the weld regions and plate material.
I n  reporting the results, the methods used f o r  the p r o b a b i l i s t i c  vessel- i n t e g r i t y  analysis should be described, t h e i r  limitations f o r  t h i s  analysis identified, and the impact o f  uncertainties i n  the resulting vessel f a i l u r e probabilities estimated.


For instance, the length of an axial flaw in an axial weld that suffers severe radiation damage relative to the plate can be limited to the length of the weld.
Discussion o f  the analysis should include a l i s t i n g of the assumptions used, t h e i r  bases, and a discussion o f  the s e n s i t i v i t y  o f the results t o  variations i n  the assumptions.


The flaws should be assumed to be located at the inner surface of the vessel and should extend through the cladding to the inner surface of the vessel.
Vessel dimensions and material properties used should be given.


Reference 20 provides a comprehensive discussion of recommendations for input distributions to be used in probabilistic fracture mechanics calculations.
For each transient of interest, a deterministic analysis that includes a i
set of critical crack-depth curves as functions of time (see Refs. 1, 2, and 3),
i - e . ,  a plot of crack depths corresponding to initiation and arrest events versus L
time, should be carried out.


4.
This plot should also have curves indicating the depth of crack a t  which upper-shelf toughness i s  effective.


All regions of the beltline should be considered.
These results should correspond to minus two sigma values for KIc and KIa, plus two sigma values for RTNDT, and plus two sigma values for the copper and nickel contents as well as plus two sigma for the fluence value.


and circumferential welds as well as the base material.
These curves, which graphically represent the worst-case condition for each transient of interest, will be used i n  the evaluation of the critical time interval from the initiation of the transient during which mitigating action can occur.


This includes axial The following relationships are required:
6.
KIc f(T,RTNDTO ARTNDT), and KIa = f(T, RTNDTO,A RTNDT)
where T = Wall temperature RTNDTo = Initial nil-ductility reference temperature ARTNDT = Increase in nil-ductility reference temperature due to radiation damage, f(Cu,Ni,fluence).
If plant surveillance data meet the criteria for credibility given in Reference 27, they may be used as described therein.


Examples of these functions are described in References 3 and 27.
INTEGRATION OF ANALYSES
-
I n  t h i s  chapter, the event frequencies are coupled with the results o f  the fracture mechanics analysis t o  obtain an integrated frequency o f  vessel through- wall cracking due t o  PTS.


In reporting the results, the methods used for the probabilistic vessel- integrity analysis should be described, their limitations for this analysis identified, and the impact of uncertainties in the resulting vessel failure probabilities estimated.
An example o f  one acceptable method i s  presented i n Chapter 6 o f  Reference 3.


Discussion of the analysis should include a listing of the assumptions used, their bases, and a discussion of the sensitivity of the results to variations in the assumptions.
A table t h a t  supplies the following information f o r each specific sequence and residual group i d e n t i f i e d  i n  Section 3.5 should be provided.


Vessel dimensions and material properties used should be given.
These results are t o  be provided f o r  the operating time a t  which the reactor w i l l  reach the PTS screening c r i t e r i o n  and f o r  any additional operation
1 i f e  bei ng requested:
O
Sequence identification.


1.154-17 I;U
O
I;
Type o f  i n i t i a t o r  (smal 1-break LOCA with low decay heat, large steamline break a t f u l l  power, etc.).  
p I
O
t .
Estimated sequence frequency.
i,:
_


For each transient of interest, a deterministic analysis that includes a set of critical crack-depth curves as functions of time (see Refs. 1, 2, and 3),
O
i.e., a plot of crack depths corresponding to initiation and arrest events versus time, should be carried out.
Method used t o  determine conditional through-wal 1 crack penetration probabi 1 i ty.


This plot should also have curves indicating the depth of crack at which upper-shelf toughness is effective.
O
Sequence conditional through-wal 1 crack penetration probabi l i ty."
O
Frequency o f  through-wall cracking due t o  sequence obtained by the product o f  sequence frequency and sequence conditional through-wall crack penetration probabi 1 i ty.


These results should correspond to minus two sigma values for KIC and Ka, plus two sigma values for RTNDI, and plus two sigma values for the copper and nickel contents as well as plus two sigma for the fluence value.
For each dominant sequence, a section o r  table should be provided t h a t  sup- p l i e s  (1) specific reference t o  the graph o f  temperature, pressure, and flow as provided i n  Chapter 4, "Thermal-Hydraulic Analysisn; (2) a time-line description o f  the accident sequence noting important operator actions, control actions, protection system actions, equipment faults, and vessel f a i  l ure; and (3) fre- quency of through-wall crack penetration as a function o f  fluence o r  RTNDT-
Results should then be summed within each i n i t i a t o r  type t o  provide a fre- quency o f  through-wall crack penetration as a function o f  i n i t i a t o r  type.


These curves, which graphically represent the worst-case condition for each transient of interest, will be used in the evaluation of the critical time interval from the initiation of the transient during which mitigating action can occur.
The discussion should explain why each i n i t i a t o r  type i s  or i s  not impor- t a n t  t o  PTS.


Ii II
Finally, the results should be summed over a l l  i n i t i a t o r  types t o  provide an integrated frequency o f  through-wall cracking f o r  the vessel.
. i II
1.154-18


*
This inte- grated value should be reported as a function o f  fluence, or RTNDTy and p l o t t e d with uncertainty values as determined i n  Chapter 7, "Sensitivity and Uncertainty Analyses o f  Through-Wall Crack Frequency," and included on the p l o t .
6. INTEGRATION OF ANALYSES
The dis- cussion should i d e n t i f y  important operator actions, control actions, and p l a n t features t h a t  can cause o r  prevent vessel failure.
In this chapter, the event frequencies are coupled with the results of the fracture mechanics analysis to obtain an integrated frequency of vessel through- wall cracking due to PTS.


An example of one acceptable method is presented in Chapter 6 of Reference 3. A table that supplies the following information for each specific sequence and residual group identified in Section 3.5 should be provided.
he conditional through-wall crack penetration probability i s  the probability of a through-wall crack as determined by the fracture mechanics analysis, given t h a t  the event occurs.


These results are to be provided for the operating time at which the reactor will reach the PTS screening criterion and for any additional operation life being requested:
7.
o--
&deg;Sequence identification.


ott
SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK FREQUENCY
&deg;
I n  order f o r  the results o f  the probabilistic analysis t o  be useful f o r regulatory decisionmaking, the s e n s i t i v i t y  o f  the results t o  input parameters and assumptions should be determined, the major sources o f  uncertainty should be identified, and the magnitude o f  the uncertainty should be estimated.
Type of initiator (small-break LOCA with low decay heat, large steamline break at full power, etc.).
o;
&deg;
Estimated sequence frequency.


o Method used to determine conditional through-wall crack penetration probability.
I n  t h i s chapter, the results and the procedures used t o  perform each o f  these processes are t o be documented.


o  
A good example i s  given i n  Chapter 7 o f  Reference 3.
&deg;
Sequence conditional through-wall crack penetration probability.*
&deg;
Frequency of through-wall cracking due to sequence obtained by the product of sequence frequency and sequence conditional through-wall crack penetration probability.


For each dominant sequence, a section or table should be provided that sup- plies (1) specific reference to the graph of temperature, pressure, and flow as provided in Chapter 4, "Thermal-Hydraulic Analysis"; (2) a time-line description of the accident sequence noting important operator actions, control actions, protection system actions, equipment faults, and vessel failure; and (3) fre- quency of through-wall crack penetration as a function of fluence or RTNDT.
Portions o f  t h a t  analysis, or other analyses, may be referenced i n  l i e u  o f  por- tions o f  the analysis described i n  t h i s  chapter, provided the licensee demon- strates the appl icabi 1 i t y  o f  the referenced analyses t o  the specific plant.


Results should then be summed within each initiator type to provide a fre- quency of through-wall crack penetration as a function of initiator type.
7.1 Sensitivity Analysis Perform a s e n s i t i v i t y  analysis t o  estimate the change i n  the through-wall crack frequency f o r  a known change o f  a single parameter.


The discussion should explain why each initiator type is or is not impor- tant to PTS.
Parameters examined i n  the s e n s i t i v i t y  analysis should include (1) the i n i t i a t i n g  event and event tree branch frequencies, (2) the thermal -hydraul i c  variabl es (temperature, pres- sure, etc. ), and (3) the fracture mechanics variables (fluence, flaw density, etc.).
Where appropriate, 68th percentile (1-sigma) values should be used t o represent the change i n  the parameter.


Finally, the results should be summed over all initiator types to provide an integrated frequency of through-wall cracking for the vessel.
This should provide a s u f f i c i e n t  change t o  i l l u s t r a t e  the effects o f  the change, and the use o f  the 68th percentile value whenever possible w i l l  help t o  define the important v a r i a b i l i t i e s . 
I n the case o f  temperature and pressure, however, the 68th percentile values may vary from one sequence t o  another.


This inte- grated value should be reported as a function of fluence, or RINOT, and plotted with uncertainty values as determined in Chapter.7, "Sensitivity and Uncertainty Analyses of Through-Wall Crack Frequency," and included on the plot. The dis- cussion should identify important operator actions, control actions, and plant features that can cause or prevent vessel failure.
I n  t h i s  case, it may be easier t o  i d e n t i f y a representative change i n  the parameter t h a t  could then be used f o r  a l l sequences rather than t o  t r y  t o  use the 68th percentile values.


'WThe conditional through-wall crack penetration probability is the probability of a through-wall crack as determined by the fracture mechanics analysis, given that the event occurs.
1.


1.154-19
Each variable examined i n  the s e n s i t i v i t y  analysis should be l i s t e d  along w i t h  the change i n  the variable.


7. SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK FREQUENCY
I n  the cases i n  which changes are represented by using 68th percentile values, some explanation should be provided t o  document the reasons the value i s  considered a 68th percentile value.
6 In order for the results of the probabilistic analysis to be useful for regulatory decisionmaking, the sensitivity of the results to input parameters and assumptions should be determined, the major sources of uncertainty should be identified, and the magnitude of the uncertainty should be estimated.


In this chapter, the results and the procedures used to perform each of these processes are to be documented. A good example is given in Chapter 7 of Reference 3.
I n  those cases i n which something other than a 68th percentile value i s  chosen, discussion should center around the reasons f o r  choosing the value used.


Portions of that analysis, or other analyses, may be referenced in lieu of por- tions of the analysis described in this chapter, provided the licensee demon- strates the applicability of the referenced analyses to the specific plant.
Sensitivity factors should be obtained by dividing the through-wal 1 crack frequency obtained with the changed variable by the through-wall crack frequency obtained with each variable a t  i t s  mean value.


7.1 Sensitivity Analysis Perform a sensitivity analysis to estimate the change in the through-wall crack frequency for a known change of a single parameter.
Supply the s e n s i t i v i t y  factors obtained f o r  both positive and negative changes i n  each o f  the variables.


Parameters examined in the sensitivity analysis should include (1) the initiating event and event tree branch frequencies, (2) the thermal-hydraulic variables (temperature, pres- sure, etc.), and (3) the fracture mechanics variables (fluence, flaw density, etc.).
The s e n s i t i v i t y  factors obtained f o r  changes made i n  the PTS-adverse direction should be ranked according t o  magnitude and provided i n  table form.
Where appropriate, 68th percentile (1-sigma) values should be used to represent the change in the parameter.


This should provide a sufficient change to illustrate the effects of the change, and the use of the 68th percentile value whenever possible will help to define the important variabilities. In the case of temperature and pressure, however, the 68th percentile values may vary from one sequence to another.
Uncertainty Analysis
7.2.1 Parameter Uncertainties Each step i n  the p r o b a b i l i s t i c  analysis should include an uncertainty anal- ysis.


In this case, it may be easier to identify a representative change in the parameter that could then be used for all sequences rather than to try to use the 68th percentile values.
This should include uncertainty i n  frequency o f  occurrence o f  a sequence, uncertainty i n  temperatures and pressures reached during the sequence, including t h a t  resulting from the nodal i z a t i o n  scheme chosen as discussed i n  Section 4.5, and uncertainty i n  the fracture mechanics model for vessel f a i l u r e  given the transients.


Each variable examined in the sensitivity analysis should be listed along with the change in the variable. In the cases in which changes are represented by using 68th percentile values, some explanation should be provided to document the reasons the value is considered a 68th percentile value.
For the following reasons, a Monte Carlo simulation i s  appropriate for
,I
portions of the PTS uncertainty analysis.


In those cases in which something other than a 68th percentile value is chosen, discussion should center around the reasons for choosing the value used.
O
The temperature and pressure error di s t r i  buti ons are not symmetric.


Sensitivity factors should be obtained by dividing the through-wall crack frequency obtained with the changed variable by the through-wall crack frequency obtained with each variable at its mean value.
O
The fracture mechanics results are nonlinear with respect to variations i n  input parameters, particularly the temperature and pressure time hi stories.


Supply the sensitivity factors obtained for both positive and negative changes in each of the variables.
O
The results of the Monte Car10 analysis can indicate the shape of the output distribution.


The sensitivity factors obtained for changes made in the PTS-adverse direction should be. ranked according to magnitude and provided in table form.
The Monte Carlo approach would involve four steps as described below:
1.


7.2 Uncertainty Analysis
Develop a statistical distribution for each variable used in the calculation - T h i s  step will involve the representatioh of each variable as a distribution w i t h  5th and 95th percentiles as previously identified.
7.2.1 Parameter Uncertainties Each step in the probabilistic analysis should include an uncertainty anal- ysis.


This should include uncertainty in frequency of occurrence of a sequence, uncertainty in temperatures and pressures reached during the sequence, including that resulting from the nodalization scheme chosen as discussed in Section 4.5, and uncertainty in the fracture mechanics model for vessel failure given the transients.
The shapes of the distributions selected should be discussed.


d
2.
1.154-20


X w For the following reasons, a Monte Carlo simulation is appropriate for portions of the PTS uncertainty analysis.
Select a random value from each distribution - A random sampling code should be used to sample from each of the distributions.


o The temperature and pressure error distributions are not symmetric.
3.


o The fracture mechanics results are nonlinear with respect to variations in input parameters, particularly the temperature and pressure time histories.
Calculate a through-wall crack frequency estimate based on values obtained in the previous step - In this step, the through-wall crack frequency i s  obtained based on the randomly selected variables.


o The results of the Monte Carlo analysis can indicate the shape of the output distribution.
This requires under- standing the form of the relationship between each input variable and through- wall crack frequencies.


The Monte Carlo approach would involve four steps as described below:
For some variables such as initiating event and branch frequencies and flaw density, this is simple since the through-wall crack frequency i s  directly proportional to the value of these parameters over the range of variable val ues considered.
1. Develop a statistical distribution for each variable used in the calculation - This step will involve the representation of each variable as a distribution with 5th and 95th percentiles as previously identified.


The shapes of the distributions selected should be discussed.
Other vari abl es such as temperature and pressure may require the development of an appropriate relationship.


2. Select a random value from each distribution - A random sampling code should be used to sample from each of the distributions.
In such cases i n  which the effect of a variable change may be dependent on the value of another variable, response-surface techniques may be used to estimate important interaction effects.


3. Calculate a through-wall crack frequency estimate based on values obtained in the previous step - In this step, the through-wall crack frequency is obtained based on'the randomly selected variables.
4.
 
This requires under- standing the form of the relationship between each input variable and through- wall crack frequencies.
 
For some variables such as initiating event and branch frequencies and flaw density, this is-simple since the through-wall crack frequency is directly proportional to the value of these parameters over the range of variable values considered.
 
Other variables such as temperature and pressure may require the development of an appropriate relationship.
 
In such cases in which the effect of a variable change may be dependent on the value of another variable, response-surface techniques may be used to estimate important interaction effects.


4. Summarize the resulting estimates and approximate frequency distribu- tion - Steps 2 and 3 are repeated until a statistically valid number of trials have been performed.
Summarize the resulting estimates and approximate frequency distribu- tion - Steps 2 and 3 are repeated until a statistically valid number of t r i a l s have been- performed.


A distribution of through-wall crack frequencies is then produced from the results of the trials.
A distribution of through-wall crack frequencies i s  then produced from the results of the trials.


The 95th and 5th percentiles and the mean (expected value) of this distribution should be identified and discussed.
The 95th and 5th percentiles and the mean (expected value) of this distribution should be identified and discussed.


7.2.2 Modeling Uncertainties (Biases)
7.2.2 Model i ng Uncertai nties (Bi ases)  
During the process of performing the PTS analysis, the analyst will make simplifying assumptions in order to make the analysis tractable.
During the process of performing the PTS analysis, the analyst will make simplifying assumptions i n  order to make the analysis tractable.


Such assump- tions include decisions on thermal-hydraulic models, fracture mechanics models, grouping of sequences both for thermal-hydraulic analysis and fracture mechanics analysis, nodalization in the thermal-hydraulic models, etc.
Such assump- tions include decisions on thermal-hydraulic models, fracture mechanics models, grouping of sequences both for thermal-hydraulic analysis and fracture mechanics analysis, nodalization i n  the thermal-hydraulic models, etc.


These assumptions can introduce conservative or nonconservative biases into the analysis.
These assumptions can introduce conservative or nonconservative biases into the analysis.
Line 1,250: Line 993:
These biases should be identified and their potential impact on the results discussed.
These biases should be identified and their potential impact on the results discussed.


In this section, important assumptions made as part of the analysis should be listed.
In this section, important assumptions made as part of the analysis should be  
1 isted.


Each assumption should be identified as being either conservative or nonconservative.
Each assumption should be identified as being either conservative or nonconservative.


A discussion should be supplied for each assumption with respect to its impact on the overall value of through-wall crack frequency.
A discussion should be supplied for each assumption w i t h respect t o  i t s  impact on the overall value of through-wall crack frequency.


1.154-21
Whenever excess conservatism or nonconservatism i s  suspected to be present i n an assumption, an alternative assumption should also be used in the full calcu- lation procedure and the impacts on the overall result compared.


Whenever excess conservatism or nonconservatism is suspected to be present in an assumption, an alternative assumption should also be used in the full calcu- lation procedure and the impacts on the overall result compared.
8.


1.154-22
EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL CRACK FREQUENCY  
 
This chapter i s  t o  summarize the licensee's program o f  corrective measures.
8. EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL CRACK FREQUENCY
This chapter is to summarize the licensee's program of corrective measures.


Each corrective measure considered by the licensee should be presented and ex- plained.
Each corrective measure considered by the licensee should be presented and ex- plained.


In each case, the reasons for considering the action as a corrective measure are to be documented, and the estimated impact of the action with respect to through-wall crack .frequency provided.
I n  each case, the reasons f o r  considering the action as a corrective measure are t o  be documented, and the estimated impact o f  the action with respect t o  through-wall crack frequency provided.


Corrective actions that are to be considered include, but are not limited to, those discussed in the remaining sections of the chapter.
Corrective actions t h a t  are t o  be considered include, but are not l i m i t e d  to, those discussed i n  the remaining sections o f  the chapter.


An example can be found in Chapter 8 of Reference 3.
An example can be found i n  Chapter 8 o f  Reference 3.


8.1 Flux Reduction Program Early analysis and implementation of such flux reductions as are reasonably practicable to avoid reaching the screening criterion are already being required and accomplished in accordance with the PTS rule, &sect; 50.61.
8.1 F l  ux Reduction Program Early analysis and implementation o f  such flux reductions as are reasonably practicable t o  avoid reaching the screening c r i t e r i o n  are already being required and accomplished i n  accordance with the PTS rule, &sect; 50.61.


Further flux reduc- tions to critical areas of the vessel wall that would reduce the risk of con- tinued operation beyond the screening criterion should be considered. If such additional flux reductions are needed, in view of the irreversibility of embrittlement, the licensee should consider early implementation before reaching the screening criterion.
Further f l u x  reduc- tions t o  c r i t i c a l  areas o f  the vessel wall t h a t  would reduce the r i s k  o f  con- tinued operation beyond the screening c r i t e r i o n  should be considered.


For licensees who are considering applications to extend the operating license beyond its present expiration date, it may be pru- dent to implement the reduction as early as possible to avoid the necessity of vessel annealing or replacement.
I f  such additional f l u x  reductions are needed, i n  view o f  the i r r e v e r s i b i l i t y  o f embr-ittlement, the .Ticensee should consider early implementation before reaching the screening criterion.


8.2 Operating Procedures and Training Program Improvements Operator actions and associated plant response play a key role in the initiation and mitigation of PTS events.
For licensees who are considering applications t o extend the operating license beyond i t s  present expiration date, i t  may be pru- dent t o  implement the reduction as early as possible t o  avoid the necessity o f vessel annealing or replacement.


Therefore, ensure that the actions are based on approved technical guidelines that include an integrated;evaluation of relevant technical considerations, including, but not limited to, PTS, core cooling, environmental releases, and containment integrity. The evaluation should address the following types of concerns:
8.2 Operating Procedures and Training Program Improvements Operator actions and associated p l a n t  response play a key r o l e  i n  the i n i t i a t i o n  and mitigation o f  PTS events.
&deg;
Frequent realistic "team" training should be conducted, exposing the operators to potential PTS transients and their precursor events.


The training should give the operators actual practice in controlling reactor system pressure and cooldown rates during PTS situations.
Therefore, ensure t h a t  the actions are based on approved technical guidelines t h a t  include an integrated'evaluation o f  relevant technical considerations, including, but not l i m i t e d  to, PTS, core cooling, environmental releases, and containment i n t e g r i t y . 
The evaluation should address the following types o f  concerns:
*
Frequent real i s t i c  "team" t r a i n i n g  should be conducted, exposing the operators t o  potential PTS transients and t h e i r  precursor events.


Specific training should include, but not be limited to, reactor cool- ant pump trip criteria, the HPI throttling criterion, control of natural circulation, recovery from inadequate core cooling, recovery from solid plant operations, and the use of PORVs to control primary overpressure.
The t r a i n i n g  should give the operators actual practice i n  controlling reactor system pressure and cooldown rates during PTS situations.


o Instructions should be based on analyses that include consideration of system response delay times (e.g., loop transport time, thermal transport time).
Specific t r a i n i n g  should include, but not be l i m i t e d  to, reactor cool- ant pump t r i p  c r i t e r i a ,  the HPI t h r o t t l i n g c r i t e r i o n ,  control o f natural circulation, recovery from inade,quate core cooling, recovery from s o l i d  plant operations, and the use o f  PORVs t o  control primary overpressure.
o Whether or not there is a need for cooldown rate limits for periods shorter than 1 hour should be evaluated.


o Methods for controlling cooldown rates should be provided.
O
Instructions should be based on analyses t h a t  include consideration o f  system response delay times (e. g. , loop transport time, thermal transport time).
O
Whether o r  not there i s  a need f o r  cooldown rate l i m i t s  f o r  periods shorter than 1 hour should be evaluated.
 
O
Methods f o r  control 1 i n g  cooldown rates should be provided.


Reference should be made to these methods with respect to the dominant PTS
Reference should be made t o  these methods with respect t o  the dominant PTS  
risk sequences whenever possible.
r i s k  sequences whenever possible.


1.154-23
O
Guidance should be provided for the operator if cool down rates or i
pressure-temperature limits are exceeded. These guidelines should L
take into account potential core cooling, environmental release, or containment integrity problems that could exist as a result of respond- ing to the abnormal cooldown rate. These guidelines should leave little doubt as to when PTS concerns are more important than other safety issues and when other safety issues assume primary importance over PTS concerns. It should be emphasized how the guidelines were evaluated and optimized in light of any competing risks that might arise from events other than PTS events to ensure that plant safety is appropriately balanced.


o Guidance should be provided for the operator if cooldown rates or pressure-temperature limits are exceeded.
O
The desired region of operation between the pressure-temperature 1 imi t and the limit determined by avoidance of saturation conditions should be evaluated to determine if it can be revised to minimize total risk due to plant operation from PTS plus non-PTS events.


These guidelines should take into account potential core cooling, environmental release, or containment integrity problems that could exist as a result of respond- ing to the abnormal cooldown rate.
O
Instructions for control 1 ing pressure following depressurization transients should be provided.


These guidelines should leave little doubt as to when PTS concerns are more important than other safety issues and when other safety issues assume primary importance over PTS concerns. It should be emphasized how the guidelines were evaluated and optimized in light of any competing risks that might arise from events other than PTS events to ensure that plant safety is appropriately balanced.
O
Instructions should be available for the condition where natural
,circulation is lost and the primary system main circulation pumps are not available.


o The desired region of operation between the pressure-temperature limit and the limit determined by avoidance of saturation conditions should be evaluated to determine if it can-be revised to minimize total risk due to plant operation from PTS plus non-PTS events.
Portions of the above may be provided by incorporation by reference, for example, to the plant-specific Emergency Response Guidelines. However, a sum- mary discussion re1 ati ng the referenced material to the overall subject should be provided.


o Instructions for controlling pressure following depressurization transients should be provided.
8.3 Inservice Inspection and Nondestructive Examination Program The use of state-of-the-art nondestructive examination (NDE) techniques could provide an opportunity to decrease any conservatism that might exist in the flaw density value used in the analysis. This decrease in conservatism, however, may be less important than the decrease in uncertainty in the actual flaw density that may result from an examination of this type.


o Instructions should be available for the condition where natural circulation is lost and the primary system main circulation pumps are not available.
Existing inservice inspection programs should be reevaluated to consider incorporation of state-of-the-art examination techniques for inspecting the clad-base metal interface and the near-surface area. This includes plant-unique consideration of the clad surface conditions. Considerati on should be given to increased frequency of inspections.


Portions of the above may be provided by incorporation by reference, for example, to the plant-specific Emergency Response Guidelines.
The reliability of the NDE method selected to detect small flaws should be documented.


However, a sum- mary discussion relating the referenced material to the overall subject should be provided.
8.4 Plant Modifications All plant modifications should be evaluated and optimized in light of any com- peting risks that might arise from events other than PTS events to ensure that overall plant safety is appropriately balanced. PI ant modifications that may be considered include the following:


8.3 Inservice Inspection and Nondestructive Examination Program The use of state-of-the-art nondestructive examination (NDE) techniques could provide an opportunity to decrease any conservatism that might exist in the flaw density value used in the analysis.
1.


This decrease in conservatism, however, may be less important than the decrease in uncertainty in the actual flaw density that may result from an examination of this type.
Instrumentation, Controls, and Operation a.


Existing inservice inspection programs should be reevaluated to consider incorporation of state-of-the-art examination techniques for inspecting the clad-base metal interface and the near-surface area.
Reactor vessel downcomer water temperature monitor.


This includes plant-unique consideration of the clad surface conditions.
b.


Consideration should be given to increased frequency of inspections.
Instantaneous and integrated reactor coolant system cooldown rate monitors.


The reliability of the NDE method selected to detect small flaws should be documented.
c.


8.4 Plant Modifications All plant modifications should be evaluated and optimized in light of any com- peting risks that might arise from events other than PTS events to ensure that overall plant safety is appropriately balanced.
Steam dump interlock.


Plant modifications that may be considered include the following:
d.
1.


154-24
Feedwater i sol ation/f low control 1 ogic.


1. Instrumentation, Controls, and Operation a. Reactor vessel downcomer water temperature monitor.
e.


b. Instantaneous and integrated reactor coolant system cooldown rate monitors.
Reactor coolant system .pressure and temperature monitors.


c. Steam dump interlock.
f.


d. Feedwater isolation/flow control logic.
Control system to prevent repressurization of the reactor primary coolant system during overcooling events.


e. Reactor coolant system pressure and temperature monitors.
g.


f. Control system to prevent repressurization of the reactor primary coolant system during overcooling events.
Monitor to measure margin between vessel inner-surface temperature and current RTNDT at that location.


g. Monitor to measure margin between vessel inner-surface temperature and current RTNDT at that location.
h.


h. Diagnostic instrumentation and displays.
Diagnostic instrumentation and displays.


i.
i.


Primary coolant system pump trip logic.
Primary coolant system pump trip logic..
j.


j.
Automatic isolation of auxiliary feedwater to broken steam
1 i nedgenerators.


Automatic isolation of auxiliary feedwater to broken steam lines/generators.
2.


2. Increased Temperature of Emergency Core Cooling Water and Emergency Feedwater If plant modifications are proposed to prevent overcooling, the report should include an evaluation of undesirable side effects (i.e., undercooling)
Increased Temperature of Emergency Core Cooling Water and Emergency Feedwater If plant modifications are proposed to prevent overcooling, the report should include an evaluation of undesirable side effects (i.e., undercooling)  
and a discussion of steps planned to ensure that the modifications represent a net improvement in safety when PTS and non-PTS related events are considered.
and a discussion of steps planned to ensure that the modifications represent a net improvement in safety when PTS and non-PTS related events are considered.


8.5 In Situ Annealing If in situ annealing is part of the licensee's program of corrective mea- sures, the licensee should describe the program to ensure that annealing will achieve the planned increase in vessel toughness, the surveillance program to monitor vessel toughness after annealing, the program directed toward code requalification after annealing, and the program to ensure that annealing does not introduce other safety problems.
8.5 In Si tu Anneal i ng If in situ annealing is part of the licensee's program of corrective mea- sures, the licensee should describe the program to ensure that annealing will achieve the planned increase in vessel toughness, the surveillance program to monitor vessel toughness after annealing, the program directed toward code requalification after annealing, and the program to ensure that annealing does not introduce other safety problems.


1.
9.


154-25
FURTHER ANALYSES
 
The PTS rule (Q
9.
50.61 of 10 CFR Part 50) requires Commission approval for plant operation with RTpTS values above 270&deg;F.


FURTHER ANALYSES
This regulatory guide out1 ines the analyses that should be performed in support of any request to operate a t R
The PTS rule (&sect; 50.61 of 10 CFR Part 50) requires Commission approval for plant operation with RTp15 values above 270&deg;F.
T
~
~
~


This regulatdry guide outlines the analyses that should be performed in support of any request to operate at RTprs values in excess of 270&deg;F, as required in paragraphs 50.61(b)(4) and
values in excess of 270&deg;F, as required in paragraphs 50,6l(b)(4) and  
50.61(b)(5), and states that the staff's primary acceptance criterion will be licensee demonstration that expected through-wall crack frequency will be below
50.61(b)(5), and states that the s t a f f ' s primary acceptance criterion wi 11 be licensee demonstration that expected through-wall crack frequency will be below  
5 x 10-6 per reactor year for such operation.
5 x per reactor year for such operation.


In the event that a licensee is unable to meet this primary acceptance criterion, he may request Commission approval for continued operation under the provisions of paragraph 50.61(b)(6), which allows the submittal of further anal- yses. The content of these further analyses'-would be determined by the licensee and might include topics such as overall plant risk analyses that are beyond the scope of the vessel failure analyses covered by this regulatory guide.
In the event that a licensee i s  unable to meet this primary acceptance criterion, he may request Commission approval for continued operation under the provisions of paragraph 50.61(b)(6), which allows the submittal of further anal- yses.


,, .~~~~~~~~~~~~~~~~~~~~~~~~
The content of these further analyses would be determined by the licensee and might include topics such as overall plant risk analyses that are beyond the scope of the vessel failure analyses covered by this regulatory guide.
,'~~~~~~~~~~~~~~~~~~~~
1. 154-26


10.
10.


RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES
RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES  
.This chapter is to summarize the models used and the results obtained and provide the conclusions reached with respect to continued operation of the plant.
1 This chapter i s  to summarize the models used and the results obtained and provide the conclusions reached with respect to continued operation of the plant.


10.1 Summary of Analysis In this section the major findings of each aspect of the PTS analysis, as described in the previous chapters, should be presented.
10.1 Summary of Analysis In this section the major findings of each aspect of the PTS analysis, as described i n  the previous chapters, should be presented.


These should include:
These should include:  
o Expected (mean) value of frequency of reactor vessel through-wall crack penetration versus time, with uncertainty bound (95th percentile).
O
o Identification of dominant accident sequences.
Expected (mean) value of frequency of reactor vessel through-wall crack penetration versus time, w i t h  uncertainty bound (95th percentile).  
O
Identi f ication of dominant accident sequences.


o If sensitivity/uncertainty analysis shows that slightly different assumptions could lead to different dominant sequences, identification of these assumptions and discussion of the impact on results given the different assumptions.
O
If sensitivi ty/uncertainty analysis shows that slightly different assumptions could lead to different dominant sequences, identification of these assumptions and discussion of the impact on results given the different assumptions.


o Identification of important operator actions, control actions, and plant features that can increase or decrease the frequency or severity of overcooling transients, and whether these have been appropriately balanced to ensure optimum overall plant safety.
O
Identification of important operator actions, control actions, and plant features that can increase or decrease the frequency or severity of overcooling transients, and whether these have been appropriately balanced to ensure optimum overall plant safety.


o Major sources and magnitudes of uncertainty in the analysis.
O
Major sources and magnitudes of uncertainty i n  the analysis.


o The relative effectiveness of potential alternative corrective measures in reducing the expected (mean) value of through-wall crack penetration.
O
The re1 ative effectiveness of potential a1 ternati ve corrective measures in reducing the expected (mean) value of through-wall crack penetration.


&deg;
O
The program of planned corrective measures.
The program of planned corrective measures.


10.2 Basis for Continued Operation Finally, as part of the plant-specific analysis package, the licensee should provide a basis for concluding whether or not continued plant operation is justified.
10.2 Basis for Continued Operation Finally, as part o f  the plant-specific analysis package, the licensee should provide a basis for concluding whether or not continued plant operation i s  justified.


The basis for continued operation should include comparison with NRC's PTS acceptance criteria given in the Introduction-to this guide.
The basis for continued operation should include comparison with NRC's PTS acceptance criteria given in the Introduction to this guide.
 
REFERENCES
I -i
1.


1.154-27
T. 3. Burns e t  a1 . , "Preliminary Development o f  an Integrated Approach t o the Evaluation o f  Pressurized Thermal Shock Risk As Applied t o  the Oconee Unit 1 Nuclear Power Plant," Oak Ridge National Laboratory, U.S.


F~~~~~
Nuclear Regulatory Commission (USNRC) Report NUREG/CR-3770 (ORNL/TM-9176),
-
May 1986.
i lX
~2.


14I
2.
3.


4.
D. L. Selby e t  al., "Pressurized Thermal Shock Evaluation o f  the Calvert C l i f f s  Unit 1 Nuclear Power Plant," Oak Ridge National Laboratory, USNRC
Report NUREG/CR-4022 (ORNL/TM-9408),
November 1985.


'l
3.
~~7.


3
D. L. Selby e t  al., "Pressurized Thermal Shock Evaluation o f  the H. B.
~~8.


ii
Robi nson Unit 2 Nuclear Power Plant ,'I Oak Ridge National Laboratory, USNRC Report NUREG/CR-4183 (ORNL/TM-9567),
9.
November 1985.


S
4.
~~10.


,  
USNRC, "Pressurized Thermal Shock (PTS) ,'I SECY-82-465, November 23, 1982.
'~~11.


12.
5.


tt
Appendix F t o  "Integrated Plant Safety Assessment Report, Systematic Evaluation Program, San Onofre Nuclear Generating Station Unit 1," USNRC
~13.
Report NUREG-0829, Apri 1 1985.


REFERENCES
6.
T. J. Burns et al., "Preliminary Development of an Integrated Approach to the Evaluation of Pressurized Thermal Shock Risk As Applied to the Oconee Unit 1 Nuclear Power Plant," Oak Ridge National Laboratory, U.S. Nuclear Regulatory Commission (USNRC) Report NUREG/CR-3770 (ORNL/TM-9176),
May 1986.


D. L. Selby et al., "Pressurized Thermal Shock Evaluation of the Calvert Cliffs Unit Nuclear Power Plant," Oak Ridge National Laboratory, USNRC
L. Potash, "ConfusionMatrix,"
Report NUREG/CR-4022 (ORNL/TM-9408), November 1985.
SectionC.1.2of Appendix C inl'OconeePRA,"  
Electric Power Research I n s t i t u t e ,  Palo Alto, CA, and Duke Power Co.,  
Char1 otte, NC, NSAC/60, Vol . 4, 1984.


D. L. Selby et al., "Pressurized Thermal Shock Evaluation of the H. B.
7.


Robinson Unit 2 Nuclear Power Plant," Oak Ridge National Laboratory, USNRC Report NUREG/CR-4183 (ORNL/TM-9567), November 1985.
R.


USNRC, "Pressurized Thermal Shock (PTS)," SECY-82-465, November 23, 1982.
A.


Appendix F to-"Integrated Plant Safety Assessment Report, Systematic Evaluation Program, San Onofre Nuclear Generating Station Unit 1," USNRC
Bari e t  al. , "Probability Safety Analysis Procedures Guide,"
Report NUREG-0829, April 1985.
k Brookhaven National Laboratory, Revision 1 t o  USNRC Report NUREGKR-2815, August 1985.


L. Potash, "Confusion Matrix," Section C1.2 of Appendix C in "Oconee PRA,"
8.
Electric Power Research Institute, Palo Alto, CA, and Duke Power Co.,
Charlotte, NC, NSAC/60, Vol. 4, 1984.


R. A. Bari et al., "Probability Safety Analysis Procedures Brookhaven National Laboratory, Revision 1 to USNRC Report August 1985.
A. D. Swain and H. E. Guttmann, "Handbook o f  Human R e l i a b i l i t y  Analysis with Emphasis on Nuclear Power Plant Applications ,I1 Sandia National Laboratories, USNRC Report NUREGKR-1278 (SAND80-0200),
October 1983.


Guide,"
9.
NUREG/CR-2815, A. D. Swain and H. E. Guttmann, "Handbook of Human Reliability Analysis with Emphasis on Nuclear Power Plant Applications," Sandia National Laboratories, USNRC Report NUREG/CR-1278 (SAND80-0200), October 1983.


M. K. Comer et al., "Generating Human Reliability Estimates Using Expert Judgment," General Physics Corporation, USNRC Report NUREG/CR-3688, Vols.
M.


and 2, January 1985.
K. Comer e t  al., "Generating Human R e l i a b i l i t y  Estimates Using Expert Judgment ,It General Physics Corporati on, USNRC Report NUREGAR-3688, Vol s. 1 and 2, January 1985.


1 D. E. Embrey, "The Use of Performance Shaping Factors and Quantified Expert Judgment in the Evaluation of Human Reliability:
10.
An Initial Appraisal," Brookhaven National Laboratory, USNRC Report NUREG/CR-2986 (BNL-NUREG-51591), October 1983.


D. A. Seaver and W. G. Stillwell, "Procedures for Using Expert Judgment To Estimate Human Error Probabilities in Nuclear Power Plant Operations,"
D.
Sandia National Laboratories, USNRC Report NUREG/CR-2743 (SAND82-7054),
April 1983.


Organisation for Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety of Nuclear Installations, "Assessing Human Reliability in Nuclear Power Plants," May 1983.
E. Embrey, "The Use o f  Performance Shaping Factors and Quantified Expert Judgment i n  the Evaluation o f  Human R e l i a b i l i t y : 
An I n i t i a l Appraisal , " Broo khaven National Laboratory, USNRC Report NUREGKR-2986 (BNL-NUREG-51591),  
October 1983.


Organisation for Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety of Nuclear Installations, "Expert Judgment of Human Reliability," CSNI Report No. 88, January 1985.
11.


1.154-28 E
0. A.
(
/


14.
Seaver and W.


B. Bassett et al., "TRAC Analyses of Severe Overcooling Transients for the Oconee 1 PWR," Los Alamos Scientific Laboratory (LASL), USNRC Report NUREG/CR-3706, August 1985.
G. S t i l l w e l l , "Procedures f o r  Using Expert Judgment To Estimate Human Error Probabi 1 i t i e s  i n  Nuclear Power Plant Operations ,"  
Sandia Nattonal Laboratories, USNRC Report NUREGAR-2743 (SAND82-7054),  
April 1983.


15. C. D. Fletcher et al., "RELAP 5 Thermal-Hydraulic Analysis of PTS Sequences for the Oconee 1 PWR," EG&G, USNRC Report NUREG/CR-3761, July 1984.
12.


16. J. Koenig, G. Spriggs, and R. Smith, "TRAC-PFI Analyses of Potential PTS
Organi sation f o r  Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety o f  Nuclear I n s t a l  lations, "Assessing Human Re1 i a b i l  i t y  i n  Nuclear Power Plants ," May 1983.
Transients at a Combustion Engine6ring PWR," LASL, USNRC Report NUREG/CR-4109, April 1985.


17.
13.


C. D. Fletcher et al., "RELAP 5 Thermal-Hydraulic Analyses of PTS Sequences for H. B. Robinson Unit 2 PWR," EG&G, USNRC Report NUREG/CR-3977, April 1985.
Organisation f o r  Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety o f  Nuclear I n s t a l  1 ations , "Expert Judgment o f  Human Reliability," CSNI Report No. 88, January 1985.


18. C. D. Fletcher, C. B. Davis, and D. M. Ogden, "Thermal-Hydraulic Analyses of Overcooling Sequences for the H. B. Robinson Unit 2 PTS Study," EG&G,
0. Bassett e t  a1 . , "TRAC Analyses o f  Severe Overcool i n g  Transients f o r the Oconee 1 PWR,"  
USNRC Report NUREG/CR-3935, July 1985.
Los Alamos S c i e n t i f i c  Laboratory (LASL),  
USNRC Report NUREG/CR-3706, August 1985.


19. T. G. Theofanous et al., "Decay of Buoyancy Driven Stratified Layers with Application to PTS," Purdue University, USNRC Report NUREG/CR-3700, May 1984.
C. D. Fletcher e t  al., "RELAP 5 Thermal-Hydraulic Analysis o f  PTS Sequences f o r  the Oconee 1 PWR,"  
EG&G, USNRC Report NUREG/CR-3761, July 1984.


20. T. G. Theofanous et al., "REMIX:
3. Koenig, G. Spriggs, and R. Smith, "TRAC-PF1 Analyses o f  Potential PTS
Computer Program for Temperature Transients Due to High Pressure Injection in a Stagnant Loop," Purdue University, USNRC Report NUREG/CR-3701, May 1986.
Transients a t  a Combustion Engineering PWR,"  
LASL, USNRC Report NUREGKR-4109, Apri 1 1985.


21. T. G. Theofanous et al., "Buoyancy Effects on Overcooling Transients Calculated for the USNRC Pressurized Thermal Shock Study," Purdue University, USNRC Report NUREG/CR-3702, May 1986.
C. D. Fletcher e t  al., "RELAP 5 Thermal-Hydraulic Analyses o f  PTS Sequences f o r  H. B. Robinson Unit 2 PWR,"  
EG&G, USNRC Report NUREG/CR-3977, A p r i l  1985.


22.
C. D. Fletcher, C. B. Davis, and D. M. Ogden, "Th6rmal-Hydraulic Analyses o f  Overcooling Sequences f o r  the H. B. Robinson Unit 2 PTS Study,"
EG&G,
USNRC Report NUREGAR-3935, July 1985.


Bart Daly, "Three-Dimensional Calculations of Transient Fluid-Thermal Mixing in the Downcomer of the Calvert Cliffs-1 Plant Using SOLA-PTS,"
T. G. Theofanous e t  al., "Decay o f  Buoyancy Driven S t r a t i f i e d  Layers w i t h Appl ication t o  PTS ,I1 Purdue University , USNRC Report NUREG/CR-3700,  
LASL, USNRC Report NUREG/CR-3704, April 1984.
May 1984.


23. Martin Torrey and Bart Daly, "SOLA-PTS:  
T. G. Theofanous e t  al. , "REMIX:  
A Transient 3-D Algorithm for Fluid-Thermal Mixing and Wall Heat Transfer in Complex Geometries," LASL,
Computer Program f o r  Temperature Transients Due t o  High Pressure I n j e c t i o n  i n  a Stagnant Loop," Purdue University , USNRC Report NUREGKR-3701, May 1986.
USNRC Report NUREG/CR-3822, July 1984.


24.
T. G. Theofanous e t  al., "Buoyancy Effects on Overcooling Transients Calculated f o r  the USNRC Pressurized Thermal Shock Study," Purdue University , USNRC Report NUREG/CR-3702, May 1986.


F. X. Dolan et a., "Facility and Test Design Report:
Bart Daly, "Three-Dimensional Calculations o f  Transient Fluid-Thermal Mixing i n  the Downcomer o f  the Calvert C l  i f f s - 1  Plant Using SOLA-PTS,"  
1/2-Scale Thermal Mixing Project," USNRC Report NUREG/CR-3426, Vols. 1 and 2, September 1985.
LASL, USNRC Report NUREG/CR-3704, Apri 1 1984.


-
Martin Torrey and Bart Daly, "SOLA-PTS:
25.
A Transient 3-D Algorithm f o r F l  uid-Thermal Mixing and Wall Heat Transfer i n  Complex Geometries," LASL,
USNRC Report NUREG/CR-3822, July 1984.


R. D. Cheverton and D. G. Ball, "OCA-P,
F. X.
A Deterministic and Probabilistic Fracture-Mechanics Code for Application to Pressure Vessels," Oak Ridge National Laboratory, USNRC Report NUREG/CR-3618 (ORNL-5991), July 1984.


26.
Do1 an e t  a1 . , "Faci 1 i ty and Test Design Report:
1/2-Scal e Thermal Mixing Project ," USNRC Report NUREGAR-3426, Vols. 1 and 2, September 1985.


F. A. Simonen et al., "VISA-II - A Computer Code for Predicting the Proba- bility of Reactor Vessel Failure," Battelle Pacific Northwest Laboratories, USNRC Report NUREG/CR-4486, April 1986.
R. D. Cheverton and D. G. Ball, "OCA-P, A Deterministic and Probabilistic Fracture-Mechanics Code f o r  Application t o  Pressure Vessels ,I1 Oak Ridge National Laboratory, USNRC Report NUREG/CR-3618 (ORNL-5991),  
July 1984.


27.
F. A. Simonen e t  al., "VISA-I1 - A Computer Code f o r  Predicting the Proba- b i  1 i t y  o f  Reactor Vessel Fai 1 ure ,I1 Battel l e  Pacific Northwest Laboratories, USNRC Report NUREG/CR-4486, Apri 1 1986.


USNRC Regulatory Guide 1.99, "Effects of Residual Elements on Predicted Radiation Damage to Reactor Vessel Materials."
USNRC Regulatory Guide 1.99, "Effects o f  Residual Elements on Predicted Radiation Damage t o  Reactor Vessel Materials. "  
1.154-29


REGULATORY ANALYSIS  
REGULATORY ANALYSIS  
4 The pressurized thermal shock (PTS) rule, &sect; 50.61 of 10 CFR Part 50  
The pressurized thermal shock (PTS) rule, &sect; 50.61 of 10 CFR Part 50  
qg (July 23, 1985--50 FR 29937), requires collection and reporting of material properties data, analyses of flux reduction options, and detailed plant-specific PTS risk analyses for those plants that reach the screening criterion based on RTNDT,* as specified in the rule, during the term of the operating license.
(July 23, 1985--50 FR 29937), requires collection and reporting of material properties data, analyses of flux reduction options, and detailed plant-specific PTS risk analyses for those plants that reach the screening criterion based on RTNDT,* as specified in the rule, during the term of the operating 1 icense.


The regulatory guide addresses the detailed plant-specific risk analysis requirement, providing recommendations regarding how licensees should perform and how the NRC
The regulatory guide addresses the detailed plant-specific risk analysis requirement, providing recommendations regarding how licensees should perform and how the NRC  
staff should review those analyses.
staff should review those analyses.


Neither the PTS rule nor the regulatory guide requires specific corrective actions. The guide merely provides guidance for the performance of the analyses required by the rule to identify and select necessary corrective actions.
Neither the PTS rule nor the regulatory guide requires specific corrective actions.


There- fore, in accordance with the Commission's Regulatory Analysis Guidelines (NUREG/
The guide merely provides guidance for the performance of the analyses required by the rule to identify and select necessary corrective actions.
BR-0058, Revision 1), this regulatory analysis does not provide extensive and detailed assessment of required, specific corrective actions.


The background material, nature of the problem, objectives, and costs, etc.,
There- fore, i n  accordance w i t h  the Commission's Regulatory Analysis Guide1 ines (NUREG/
of the PTS rule's requirements are covered in the regulatory analysis prepared as part of the rulemaking proceeding (Enclosure B to SECY-83-288, Proposed Pressurized Thermal Shock (PTS) Rule, July 15, 1983, and Enclosure D to SECY-85-60, Final Pressurized Thermal Shock (PTS) Rule, February 20, 1985).
BR-0058, Revision l), this regulatory analysis does not provide extensive and detai led assessment of required, specific corrective actions.
This regulatory analysis therefore addresses only (1) the need for publishing guidance regarding how licensees should perform the required plant-specific analyses, (2) the appropriateness of this particular guidance, and (3) the basis for the NRC staff acceptance criteria provided in the subject guide.


1. Need for Guidance The NRC staff has gained considerable experience concerning PTS risk analyses.
The background material, nature of the problem, objectives, and costs, etc.,
of the PTS rule's requirements are covered in the regulatory analysis prepared as part of the rulemaking proceeding (Enclosure B to SECY-83-288, Proposed Pressurized Thermal Shock (PTS) Rule, July 15, 1983, and Enclosure D to SECY-85-60, Fi nal Pressurized Thermal Shock (PTS) Rul e, February 20, 1985).
This regulatory analysis therefore addresses only (1) the need for publishing guidance regarding how licensees should perform the required plant-specific analyses, (2) the appropriateness of this particular guidance, and (3) the basis i
for the NRC staff acceptance criteria provided in the subject guide.
 
,
Need for Guidance The NRC staff has gained considerable experience concerning PTS risk analyses.


This experience has come from performance of analyses by the staff, from prototype plant-specific analyses performed by national laboratories and sponsored by NRC, and from review of industry-sponsored analyses.
This experience has come from performance of analyses by the staff, from prototype plant-specific analyses performed by national laboratories and sponsored by NRC, and from review of industry-sponsored analyses.


The regula- tory guide reflects the lessons learned from this experience and will aid licensees in performing analyses that will efficiently derive risk estimates in the form the NRC needs for use in evaluating their cor,formance with the regulations.
The regula- tory guide reflects the lessons learned from this experience and will aid  
1 icensees in performing analyses that wi 11 efficiently derive risk estimates in the form the NRC needs for use in evaluating their conformance with the regulations.


This need for guidance is particularly acute since the plant-specific PTS
This need for guidance i s  particularly acute since the plant-specific PTS  
analyses should use a probabilistic risk analysis (PRA) approach, as opposed to the more traditional design basis accident (BA) approach, as explained below.
analyses should use a probabi 1 i s t i c  risk analysis (PRA) approach, as opposed to the more traditional design basis accident (DBA) approach, as explained be1 ow.


The PTS risk is developed as the sum of the small risks resulting from each of a large number of possible (but unlikely) PTS events.
The PTS risk i s  developed as the sum of the small risks resulting from each of a large number of possible (but unlikely) PTS events.


The regulatory guide accordingly describes acceptable methods to identify as many as possible of the potential PTS events, group them, calculate the frequencies and conse- quences of each group, determine the risk due to each group by multiplying the predicted frequency by the calculated consequences, and then sum the results
The regulatory guide accordingly describes acceptable methods to identify as many as possible of the potential PTS events, group them, calculate the frequencies and conse- quences of each group, determine the risk due to each group by multiplying the predicted frequency by the calculated consequences, and then sum the results  
*Reference Temperature for the Nil Ductility Transition, a measure of the  
"Reference Temperature for the Nil Ductility Transition, a measure of the temperature range i n  which the materials' ductility changes most rapidly with changes i n  temperature.
4 temperature range in which the materials' ductility changes most rapidly with changes in temperature.


1.154-30
from a1 1 groups t o  obtain t o t a l  PTS r i s k  estimates t h a t  can be compared w i t h the acceptance c r i t e r i a  given i n  the regulatory guide.
r
I!
'I


from 'llIgrouosito-zobtain total PTS risk estimates that can be compared with the acceptance criteria given in the regulatory guide.
The DBA approach, on the other hand, would attempt t o  define a worst cred- i b l e  event (the "design basis accident") and then show t h a t  (1) consequences from t h a t  event are acceptable and (2) a l l  other credible events are less severe and therefore acceptable.


-TheDBA approach, on the other hand, would attempt to define a worst cred- ibleevent (the "design basis accident") and then show that (1) consequences from:that event are acceptable and (2) all other credible events are less severe and therefore acceptable.
The s t a f f  has determined t h a t  t h i s  DBA approach i s not appropriate f o r  plant-specific PTS analyses because the t o t a l  r i s k  from a l l credible PTS events can be s i g n i f i c a n t  even though each event i n d i v i d u a l l y  i s less severe than the DBA.


The staff has determined that this DBA approach is not appropriate for plant-specific PTS analyses because the total risk from all credible PTS events can be significant even though each event individually is less severe than the DBA.
The NRC s t a f f  therefore believes t h a t  t h i s  guide w i l l encourage licensees t o  use the acceptable PRA approach and not waste time and resources on the more t r a d i t i o n a l  DBA approach.


The NRC staff therefore believes that this guide will encourage licensees to use the acceptable PRA approach and not waste time and resources on the more traditional DBA approach.
2.


2. Justification of This Particular Guidance V.
J u s t i f i c a t i o n  o f  This.Particular Guidance The NRC staff has performed prototype plant-specific analyses f o r  three plants.


The NRC staff has performed prototype plant-specific analyses for three plants.
They constitute the most detai 1 ed, thorough ana.lyses performed t o  date, and the lessons learned i n  t h e i r  performance are r e f l e c t e d  i n  the guide.


They constitute the most detailed, thorough analyses performed to date, and the lessons learned in their performance are reflected in the guide.
The NRC s t a f f  has incorporated i n t o  the guide descriptions o f  the best methods found regarding how t o  assemble d e t a i l s  o f  a p l a n t ' s  design (and t o  what level those d e t a i l s  should be included), how t o  use event t r e e  methodologies t o  i d e n t i f y and group potential PTS events, how t o  calculate severity o f  the events, how t o integrate the r e s u l t i n g  r i s k ,  and many other subjects.


The NRC staff has incorporated into the guide descriptions of the best methods found regarding how to assemble details of a plant's design (and to what level those details should be included), how to use event tree methodologies to identify and group potential PTS events, how to calculate severity of the events, how to integrate the resulting risk, and many other subjects.
The s t a f f  believes t h a t the benefit o f  t h i s  experience i s  presented i n  t h i s  guide, and i t s  use by li- censees w i l l  enable them t o  avoid many o f  the false s t a r t s and errors made by the s t a f f  and t h e i r  contractors i n  performing the prototype analyses, thereby saving time! and resources.


The staff believes that t-
3.
the benefit of this experience is presented in this guide, and its use by i- censees will enable them to avoid many of the false starts and errors made by the staff and their contractors in performing the prototype analyses, thereby saving time and resources.


3. Justification of Acceptance Criteria The guide states that, in judging the acceptability of continued operation beyond the PTS screening criterion, the staff will accept any analyses performed with acceptable methods such as those described in the subject regulatory guide that predict a through-wall crack penetration frequency less than 5 x 10-6 per reactor year.
J u s t i f i c a t i o n  o f  Acceptance C r i t e r i a The guide states that, i n  judgi ng the acceptabi 1 i t y  o f  conti nued operation beyond the PTS screening c r i t e r i o n , the s t a f f  w i l l  accept any analyses performed w i t h  acceptable methods such as those described i n  the subject regulatory guide t h a t  predict a through-wall crack penetration frequency less than 5 x per reactor year.


The mean frequency of reactor vessel through-wall crack penetration is used as the principal acceptance criterion because the staff's analyses predict that there is a high likelihood of core damage in the event of such cracks.
The mean frequency o f  reactor vessel through-wall crack penetration i s used as the principal acceptance c r i t e r i o n  because the s t a f f ' s analyses p r e d i c t t h a t  there i s  a high l i k e l i h o o d  o f  core damage i n  the event o f  such cracks.


Core damage events have potential public health and safety consequences that t.
Core damage events have potential public health and safety consequences t h a t are d i f f i c u l t  t o  analyze w i t h  certainty.


are difficult to analyze with certainty. They would also have severe economic impacts upon the licensee and the public who will pay for cleanup and replace- ment power.
They would also have severe economic impacts upon the licensee and the public who w i l l  pay for cleanup and replace- ment power.


For all these reasons, reactor vessel through-wall crack penetra- tion frequency is used as the principal acceptance criterion.
For a l l  these reasons, reactor vessel through-wall crack penetra- t i o n  frequency i s  used as the p r i n c i p a l  acceptance c r i t e r i o n . 
The p a r t i c u l a r value o f  5 x mean frequency per reactor year was selected as an achievable, r e a l i s t i c  goal t h a t  w i l l  r e s u l t  i n  an acceptable level o f  r i s k .  It i s  believed t h a t  t h i s  value i s  acceptably low considering t h a t  pressure vessel f a i l u r e  i s not p a r t  o f  the design basis o f  the p l a n t  and therefore must have a frequency low enough t o  be considered incredible.


The particular value of 5 x 10-6 mean frequency per reactor year was selected as an achievable, realistic goal that will result in an acceptable level of risk.
When the various (unquantifiable)
biases t h a t  are inherent i n  the analyses are taken i n t o  account a t  l e a s t q u a l i t a t i v e l y ,  such as the i m p l i c i t  assumption t h a t  "core damage" i s  equivalent


It is believed that this value is acceptably low considering that pressure vessel failure is not part of the design basis of the plant and therefore must have a frequency low enough to be considered incredible.
to "core melt," this value probably results in a core me1 t mean frequency close I
I
to one per mil 1 ion reactor years.


When the various (unquantifiable)
k In the opinion of the NRC staff, there are no practical quantities on which t o  base the acceptance criteria other than reactor vessel through-wall cracks (i.
biases that are inherent in the analyses are taken into account at least qualitatively, such as the implicit assumption that "core damage" is equivalent
1.154-31


to "core melt," this value probably results in a core melt mean frequency close to one per million reactor years.
e., vessel failure).  
 
In the opinion of the NRC staff, there are no practical quantities on which to base the acceptance criteria other than reactor vessel through-wall cracks (i.e., vessel failure).
4
1.


154-32}}
UNITED STATES
NUCLEAR REGULATORY COMMISSION
WASHINGTON, D.C. 20555 OFFICIAL BUSINESS
PENALTY FOR PRIVATE USE, $300
USNRC
PERMIT No. G-67
1 I
I}}


{{RG-Nav}}
{{RG-Nav}}

Latest revision as of 02:08, 17 January 2025

(Task SI 502-4) Format & Content of Plant-Specific Pressurized Thermal Shock Safety Analysis Reports for Pressurized Water Reactors
ML003740028
Person / Time
Issue date: 01/31/1987
From:
Office of Nuclear Regulatory Research
To:
References
-nr RG-1.154
Download: ML003740028 (41)


U.S. NUCLEAR REGULATORY COMMISSION

January 1987

/"

"REGULATORY GUIDE

OFFICE OF NUCLEAR REGULATORY RESEARCH

REGULATORY GUIDE 1.154 (Task SI 502-41 FORMAT AND CONTENT OF PLANT-SPECIFIC

PRESSURIZED THERMAL SHOCK SAFETY ANALYSIS

REPORTS FOR PRESSURIZED WATER REACTORS

USNRC REGULATORY GUIDES

The guides are issued in the following ten broad divisions:

Regulatory Guides are issued t o describe and make available t o the Public methods acceptable t o the NRC staff of implementing

1. Power Reactors

6. Products speclfic parts of the Commisslon*~ regulations t o delineate tech-

2. Research and Test Reactors

7. Transportation niques used by the staff i n evaluating specific'problems or Postu-

3. Fuels and Materials Facilities 8. Occupational Health iated accidents or t o provide guidance t o applicant

s. Regulatory

4. Environmental and Siting

9. Antitrust and Financial Review Guides are no{ substitutes for regulations and compliance with

5. Materialsand Plant Protection 10. General them is not required. ~ e t h o d s and solutions h e r e n t from those set out i n the guides will be acceptable if they provide a basis for the findings requisite t o the issuance or continuance of a permit or Copies of lssued guides may be purchased from the Government license b y the Commission.

Printing Office at the current GPO price. Information on current GPO prices may be obtained by contacting the Superintendent of This guide was issued afterconsideration of comments received from Documents U.S.

Government Printing Office Post Office Box the public Comments and suggestions for Improvements i n these

37082, waihington. DC 20013-7082, telephoni (202)275-2060 or guides are encouraged at all times and guides will be revised, as

(202)275-2171.

appropriate t o accommodate commhnts and t o reflect new inform*

tlon or exp;rience.

Issued guides may also be purchased from the National Technical Written comments may be submitted t o the Rules and Procedures Information Service on a standing order basis. Details on this Branch DRR

ADM,

U.S.

Nuclear Regulatory Commission, service may be obtained by writing NTIS. 5285 Ron Royal Road.

~ashtnbton. ~d 20555.

Springfield. V A 22161.

Table o f Contents INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Background and Purpose o f This Guide . . . . . . . . . . . . . .

Objectives o f Plant-Specific PTS Safety Analysis Reports . . . .

Staff Review o f Plant-Specific PTS Safety Analysis Reports and Acceptance C r i t e r i a Tor Continued Operation . . . . . . . . .

Recommended Format . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER 1 OVERALL APPROACH. SCOPE OF ANALYSIS. AND REPORT

ORGANIZATION . . . . . . . . . . . . . . . . . . . . . .

CHAPTER 2 PLANT DATA . . . . . . . . . . . . . . . . . . . . . . . .

2.1 Systems Pertinent t o PTS . . . . . . . . . . . . . . .

2.2 Reactorvessel . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . .

2.3 Fluence

. . . . . . . . . . . . .

2.4 Inservice Inspection Results

2.5 Plant Operating Experience . . . . . . . . . . . . . . .

2.6 Operating Procedures . . . . . . . . . . . . . . . . .

/

CHAPTER 3 DETERMINATION OF DETAILED PTS SEQUENCES FOR

ANALYSES . . . . . . . . . . . . . . . . . . . . . . . . .

3.1 Approach Used . . . . . . . . . . . . . . . . . . . . .

3.2 Sequence Delineation . . . . . . . . . . . . . . . . .

. . . . .

3.2.1 Development o f Classes o f I n i t i a t o r s

3.2.2 I d e n t i f i c a t i o n o f Important I n i t i a t o r Variations . . . . . . . . . . . . . . . . . .

3.2.3 Definition o f Potential Transients

. . . . . . . . .

Resulting from Each I n i t i a t o r

3.3 Operator Effects . . . . . . . . . . . . . . . . . . .

3.4 Sequence Quantification . . . . . . . . . . . . . . .

3.4.1 I n i t i a t i n g Events . . . . . . . . . . . . . . .

3.4.2 Equipment Failures . . . . . . . . . . . . . .

3.4.3 Operator Actions . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . .

3.5 Event Tree Collapse

. . . . . . . . . . . . . .

3.5.1 Specific Sequences

3.5.2 Residual Groups . . . . . . . . . . . . . . . .

Page v

v i v i i i iii

Tab1 e o f Contents (Continued)

Page CHAPTER 4 THERMAL-HYDRAULIC ANALYSIS . . . . . . . . . . . . . . . .

4.1 Thermal-Hydraulic Analysis Plan . . . . . . . . . . .

4.2 Thermal-Hydraulic Model

. . . . . . . . . . . . . .

4.3 Simp1 i f i e d Analysis Methods . . . . . . . . . . . . .

4.4 Thermal S t r a t i f i c a t i o n Effects . . . . . . . . . . . .

4.5 Thermal -Hydraul i c Analysis Results . . . . . . . . . .

CHAPTER 5 FRACTURE MECHANICS ANALYSIS . . . . . . . . . . . . . . .

CHAPTER 6 INTEGRATION OF ANALYSES . . . . . . . . . . . . . . . . .

CHAPTER 7 SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK

FREQUENCY . . . . . . . . . . . . . . . . . . . . . . . .

7.1 S e n s i t i v i t y Analysis . . . . . . . . . . . . . . . . .

7.2 Uncertainty Analysis . . . . . . . . . . . . . . . . .

7.2.1 Parameter Uncertainties . . . . . . . . . . . .

7.2.2 Model ing Uncertainties (Biases) . . . . . . . .

CHAPTER 8 EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL

CRACK FREQUENCY . . . . . . . . . . . . . . . . . . . . .

8.1 Flux Reduction Program . . . . . . . . . . . . . . . .

8.2 Operating Procedures and Training Program

. . . . . . . . . . . . . . . . . . . . .

Improvements

8.3 Inservi ce Inspecti on and Nondestructive Examination Program . . . . . . . . . . . . . . . . .

8.4 Plant Modifications . . . . . . . . . . . . . . . . .

8.5 I n S i t u A n n e a l i n g . . . . . . . . . . . . . . . . . .

CHAPTER 9 FURTHER ANALYSES . . . . . . . . . . . . . . . . . . . .

CHAPTER 10 RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES . . . . . .

10 .. 1 Summary o f Analysis . . . . . . . . . . . . . . . . .

10.2 Basis f o r Continued Operation . . . . . . . . . . . .

REFERENCES . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

REGULATORY ANALYSIS . . . . . . . . . . . . . . . . . . . . . . . . .

INTRODUCTION

/

Background and Purpose o f This Guide The pressurized thermal shock (PTS) rule, § 50.61 o f 10 CFR Part 50

issued on July 23, 1985 (50 FR 29937), establishes a screening c r i t e r i o n based on reactor vessel n i l - d u c t i l i t y - t r a n s i t i o n temperature (RTNDT)

The screening c r i t e r i o n was establ ished a f t e r extensive industry and NRC analyses regarding the likelihood o f vessel f a i l u r e due t o PTS events i n pressurized water reactors (PWRs).

The analyses were applied generically and contained conservative assumptions t o make the results bounding f o r any PWR.

Based on the results, the NRC concluded t h a t the r i s k due t o PTS events i s acceptable a t any p l a n t so long as the RTpTSX o f the reactor pressure vessel remains be1 ow the screening c r i t e r i o n .

Extensive safety analyses are required by the r u l e for any p l a n t t h a t wishes t o operate with RTpTS values above the screening c r i t e r i o n .

The recom- mended methods t o be used i n performing the analyses are outlined i n t h i s guide.

The purpose o f the analyses i s t o assess the r i s k due t o PTS events f o r proposed operation o f the p l a n t w i t h reactor vessel RTpTS above the screen- ing c r i t e r i o n .

Effective 1 year a f t e r the pub1 i c a t i o n o f t h i s regulatory guide, Section 50.61 requires t h a t these analyses be completed 3 years before the screening c r i t e r i o n would be exceeded t o allow adequate time f o r implementation on the p l a n t o f any corrective actions assumed i n the analyses before the plant operates above the screening c r i t e r i o n .

,

This regulatory guide describes a format and content acceptable t o the NRC

s t a f f f o r these plant-specific PTS safety analyses and describes acceptance c r i t e r i a t h a t the NRC s t a f f w i l l use i n evaluating licensee analyses and pro- posed corrective measures.

The references l i s t e d i n t h i s guide include a set o f analyses sponsored by the NRC that, taken together, constitute an example o f the analyses described by t h i s guide.

The s t a f f recommends t h a t these references be extensively used, along w i t h t h i s guide, by those performing the plant-specific PTS analyses re- quired by the PTS rule, § 50.61.

References 1, 2, and 3, f o r example, each represent an analysis by the Oak Ridge National Laboratory (ORNL) predicting through-wall crack frequency f o r one PWR.

These references w i l l provide guid- ance through the analyses.

Reference 3 (analysis o f H. B. Robinson) should be most helpful because it was the l a s t one performed and includes the experience gained i n performing the two e a r l i e r analyses.

Objectives o f Plant-Specific PTS Safety Analysis Reports Paragraph 50.61(b)(4)

requires t h a t a licensee whose p l a n t w i l l exceed the screening c r i t e r i o n before expiration o f the operating license submit safety analyses t o determi ne what, i f any, modi f i c a t i ons t o equipment, systems, and

  • To avoid confusion among several (preexisting) s l i g h t l y d i f f e r e n t d e f i n i t i o n s of RTNDT, !$

50.61 contains i t s own d e f i n i t i o n o f an RTNDT (called RTpTS) t o be used when comparing plant-speci f i c vessel materi a1 properties w i t h the PTS

screening c r i t e r i o n .

operation are necessary t o prevent potential f a i l u r e o f the reactor vessel as a r e s u l t o f postulated PTS events i f continued operation beyond the screening c r i t e r i o n i s a1 lowed.

These analyses must include the effects o f a1 1 corrective actions the licensee believes necessary t o achieve an acceptable PTS-related r i s k f o r continued operation o f the plant.

The f i n a l objective o f the plant- specific PTS study, therefore, i s t o j u s t i f y continued operation o f the plant by demonstrating t h a t the 1 i kel i hood o f a through-wal 1 crack during continued operation i s acceptably low.

The study must include calculation, f o r the re- mainder o f plant 1 i f e , o f the expected frequency o f through-wall cracks due t o PTS .

I n calculating these results, it w i l l be necessary to:

O

I d e n t i f y the dominant accident sequences.

O

I d e n t i f y operator actions, control actions, and plant features impor- t a n t t o PTS.

O

Estimate the effectiveness o f potential corrective actions i n reduc- i

ng the expected frequency o f through-wal 1 cracks.

O

I d e n t i f y the sources and approximate magnitude o f the major uncertain- t i e s and t h e i r effects on the conclusions.

O

Present and j u s t i f y the licensee's proposed program f o r corrective measures.

I

\\

O

Present and j u s t i f y the licensee's proposed basis f o r continued opera- t i o n a t embrittlement level s above the screening criterion.

This must include comparison with the acceptance c r i t e r i a described be1 ow o f the PTS-related through-wall crack frequency with corrective actions implemented as necessary.

S t a f f Review o f Plant-Speci f i c PTS Safety Analysis Reports and Acceptance C r i t e r i a f o r Continued Operation The PTS r u l e specifies a screening c r i t e r i o n based on RTNDT (called RTpTS

f o r use as defined within the rule) o f 270°F f o r axial weld and plate materials and 300°F f o r circumferential weld materials.

As detailed i n SECY-82-465 (Ref. 4), these values were selected based on generic studies o f the expected frequency and character o f a wide spectrum o f transients and accidents t h a t could cause pressurized overcool i n g o f the reactor vessel (PTS events) and on operating experience data.

The r i s k due t o PTS events was assessed i n terms o f probabilistic fracture mechanics calculations o f the expected frequency o f through-wall crack penetration o f the pressure vessel due t o the PTS events.

I n selecting the screening c r i t e r i o n based on those calculations, the conserva- t i v e assumption was made t h a t any through-wall crack could r e s u l t i n severe core degradation o r melt.

Core melt i t s e l f was viewed as an event t o be avoided even though r i s k t o the public due t o such an event i n terms o f person- rems and early and l a t e f a t a l i t i e s was not calculated with any certainty.

The estimated through-wall crack frequency developed as a function o f RTNOT f o r axial welds (Fig. 8.3 o f Ref. 4) i s shown i n Figure 1.

LONGITUDINAL CRACK EXTENSION NO ARREST

1 o - ~

SECY-82-465 PRA RESULTS

I

1

1

1 I

1 k

LEGEND:

MEAN SURFACE RTNDT(*F)

Figure 1

The RTpTS screening criterion selected by the staff corresponds to a mean I

(or average) "best estimate surface RTpTS of 210°F.

The staff used a "2-sigma"

-L

value (spread between "best estimate" and "upper limit") of 60°F;* thus the screening criterion expressed in terms of RTpTS, which, by definition, i s this upper limit value, was selected a t 210 + 60 = 270°F.

For axial weld and plate materials, Figure 1 gives a through-wall crack frequency of about 5 x per reactor year a t 210°F, which corresponds w i t h an RTpTS of 270°F.

For circum- ferential welds, the same frequency i s believed to be bounded by an RTpTS of approximately 300°F (Ref. 4).

The Commission concluded that the PTS-re1 ated risk a t any PWR i s acceptable so long as the RTpTS values remain below the specified screening criterion.

I t was realized that there are many unknowns and uncertainties inherent in the probabilistic calculations; thus it was w i t h deliberate intent that conser- vative assumptions such as those stated above were made.

The expectation was that the true risk a t any plant due to PTS events would in all likelihood be considerably below that derived from Figure 1 and would therefore be acceptable.

Also contributing to the belief that the real PTS risk a t any given plant was lower than that resulting from the analysis in Reference 4 was the belief that many of the generic plant assumptions made i n Reference 4 (e.g., material properties, system performance, crack distribution) would prove to be overcon- servative for analysis of a specific plant and that the resulting plant-specific analysis, when performed, i s likely t o result in a reduced prediction of PTS

risk.

If the plant-specific PTS analyses submitted by licensees in accordance with § 50.61 using the methodology described in this guide (or acceptable equi- valent methodology) predict that the PTS-related, through-wall crack penetration mean frequency will remain less than 5 x per reactor year for the requested period of continued operation, such operation would be acceptable to the staff.

In a1 1 the analyses performed, the licensee must justify that the impor- tant input values used are valid for the remaining 1 ife of the plant.

Recommended Format The recommended content of plant-specific PTS safety analyses i s presented i n Chapters 1 through 10 of this guide.

Use of this format by 1 icensees will help ensure the completeness of the information provided, dill assist the NRC

staff i n locating the information, and will aid in shortening the time needed for the review process.

If the Ticensee chooses to adopt this format, the numbering system of this guide should be followed a t least down to the section level.

Certain sections may be omitted i f they are clearly unnecessary to pro- vide for comprehension of the analysis or if they are repetitive.

RTeDT data from many plants (see Table P . l of Enclosure A

to Ref. 4).

viii

Additional guidance on style, composition, and specifications of safety i

analysis reports is provided in the Introduction of Revision 3 to Regulatory Guide 1.70, "Standard Format and Content of Safety Analysis Reports for Nuclear Power Pl ants (LWR Edition). "

The Advisory Committee on Reactor Safeguards has been consulted concerni ng this guide and has concurred in the issuance of this regulatory guide.

Any information collection activities mentioned in this regulatory guide are contained as requirements in 10 CFR Part 50, which provides the regulatory basis for this guide. The information collection requirements in 10 CFR Part 50

have been cleared under OMB Clearance No. 3150-0011.

1. OVERALL APPROACH, SCOPE OF ANALYSIS, AND REPORT ORGANIZATION

,

This chapter is to describe the overall approach to the analysis and out-

1 i ne the individual tasks in terms of the nature and source of input, the methods used for analysis, and the nature and subsequent use of the output. The inter- relationship of the tasks should be described and should be illustrated by a flow chart. How the analysis tasks are integrated to achieve the results and conclusions is to be described.

Major emphasis should be placed on analyzing event sequences leading to vessel through-wal 1 cracking and corrective actions to prevent this from occurri ng.

The report should include both probabilistic and deterministic fracture mechanics analyses. The probabi 1 i stic analyses should be used to determine the statistical 1 i kel i hood of vessel through-wal 1 crack penetration assuming a crack size distribution appropriately justified for the vessel being analyzed and appropriate uncertainties and distribution of the significant input param- eter such as material properties. The deterministic analyses should be used to evaluate the critical time interval in the transient during which mitigat- ing action can be effective. The deterministic analyses should be carried out using the two sigma upper and lower bounding values of the appropriate param- eters such as fluence, copper content, nickel content, fracture initiation toughness, fracture arrest toughness, and ductile fracture toughness.

The input to the probabilistic analysis should be best estimates based on appropriate assumptions. Uncertainties and conservatisms should be explicitly

,

presented in the decision rationale for the 1 icensee' s proposed corrective mea- sures and basis for continued operation.

The analysis should include effects of operator actions, control system interactions, and support systems such as electric power, instrument air, and service water cooling.

The report should be organized by starting with a description in Chapter 1 of how the report chapters and supporting appendices are interrelated and what material is in the appendices.

The main report should describe the objectives and overall approach used in the study, outline the plant systems analyzed, describe the engineering anal- yses performed, present the results obtained and conclusions drawn, and present and justify the licensee's proposed program of corrective measures.

Appendices should contain data, detai 1 ed models , sample calculations , and detailed results needed to support the various chapters of the report. Appen- dices should contain 1 i ttle supporting text. Instead, the nature and relevance of material in the appendices should be described in the pertinent chapters of the main report.

Throughout the guide, wherever it is specified or suggested that detailed descriptive materials should be submitted as part of the licensee's analyses, these detai 1 ed materials may be provided by incorporation of reference material already submitted to the NRC (for example, in the final safety analysis report).

It remains the responsibility of the licensee to provide a coherent, readable

document that does not unduly burden a reviewer with collecting extensive references before proceeding with the review. Therefore, care should be exercised in limiting such material provided by reference to the reviewer who is conducting an extensive, detai 1 ed eval uation of the submitted work.

Certain details (noted in Chapter 1 and in Section 4.3 of this regulatory guide) that have not been previously submitted to the NRC may be made available for NRC inspection and may also be referenced by the submitted analyses.

2.

PLANT DATA

This chapter i s t o b r i e f l y describe plant systems and operations pertinent t o PTS.

Chapter 2 o f Reference 3 (the H. 0. Robinson analysis by ORNL) provides a good example.

Supporting appendices o r references are t o present the design and operating data used i n the analysis o r needed t o understand the analysis.

References t o other dbcuments (e. g. , the f i n a l safety analysis report (FSAR))

should indicate specific sections.

( R e l i a b i l i t y data, however, are t o be i n Section 3.4, "Sequence Quantification," or i t s supporting appendices and references. )

2.1 Systems Pertinent t o PTS

Summarize design and operating features o f systems pertinent t o PTS.

I l l u s t r a t e each system with a simplified process and instrumentation diagram o r a single l i n e diagram.

I d e n t i f y on each i l l u s t r a t i o n any interfaces w i t h other systems.

For each system, include a table summarizing key design and operating data.

Give the maximum, minimum, and nominal values f o r those cases i n which design data may vary with time ( f o r example, high-pressure i n j e c t i o n (HPI) water temperature may vary with season).

Such values used i n the analysis should be i d e n t i f i e d and j u s t i f i e d .

Refer t o appendices o r other documents (e. g. , specific sections o f the FSAR) as necessary f o r more details.

Systems t o be considered should include pertinent portions of:

Reactor cooling system Condensate and main feedwater systems Steam system Auxi 1 i ary feedwater system Reactor protection system Chemical and volume control system Emergency core cooling systems Instrumentation and, control systems Support systems

- Electric power

- Instrument a i r

- Service cooling water

2.2 Reactor Vessel Summarize the reactor vessel construction and i t s material properties.

Use tables, drawings, or graphs t o show:

O

Vessel design (including weld locations and hot leg and cold

1 eg penetrations).

Vessel materials and chemical composition i n the b e l t l i n e region (including both base and weld material properties).

O

Vessel fabrication procedures, p a r t i c u l a r l y welding and cladding.

0

Vessel properties (e. g. , RTNDT, i n i t i a l RTNDT, appropriate fracture C

toughness data, including the upper-shelf regime, residual stresses, flaw density distribution, etc. ). Describe and j u s t i f y methods used t o calculate o r otherwise determine properties.

Available information on the vessel properties should be reexamined i n detail t o f i l l any gaps i n the supporting data f o r making an estimate o f RTNDT

and t o support resolution o f any disagreements about the v a l i d i t y o f values used.

Few data are currently available and validated t o support the selection o f a value f o r the i n i t i a l RTNDT The confidence t h a t can be placed i n estimates of the i n i t i a l RTHDT depends not only on material tests but also on the accu- rate documentation of we1 d i ng technique, weld wire used, and weld f l u x used.

The c r e d i b i l i t y o f such estimates could be enhanced by performing more tests on archival material, by discovering previously unreported t e s t results on weld specimens from the particular plant, o r by evaluating properties o f welds considered typical o f the p l ant-speci f i c we1 d.

2.3 Fluence Present (or incorporate by reference t o a submitted report) the current and projected fluence on the vessel using benchmarked computer programs and methodology and information from neutron f l u x surveillance dosimetry.

Use the weld locations and fluence values t o i d e n t i f y the c r i t i c a l welds.

Show how the

1. ,

fluence varies along the length and depth o f the c r i t i c a l welds.

Describe the basi s f o r these estimates and t h e i r uncertainty.

These f 1 ucnce val ues should be benchmarked, f o r example, through use o f ENDF/B-IV or V 1;ross sections, t o quantify the error.

Inservice Inspection Results To the extent pertinent t o the probabilistic analysis and proposed correc- t i v e actions, summarize:

O

Results - The number, size, depth, and location o f any flaws found should be we1 1 defined and described.

O

Methods used - The method used t o perform the inspection should be we1 1 described with documentation o f any val i d a t i on informati on.

Note:

Only those inservice inspections (ISIs) that have actually been per-

-

formed should be discussed i n t h i s section.

Improved I S 1 programs as proposed by the licensee should be described under corrective measures i n Chapter 8,

"Effect o f Corrective Actions on Vessel Through-Wall Crack Frequency."

2.5 P l ant Operati ng Experience Summarize overcool ing transients t h a t have occurred a t t h i s station and similar stations.

A1 so, summarize lessons learned from these and other tran- s i ents, and indicate actions taken t o prevent recurrence or m i nimize severity o f overcooling transients.

2.6 Operating Procedures

/

This section provides procedural data, e.g., what the operator i s supposed to do and when.

This section, for example, should present and describe the important operator actions as defined by existing procedures associated w i t h potential overcool i ng transients. A1 so emphasize how the procedures were evaluated and optimized i n light of any competing risks that might arise from events other than PTS events t o ensure that overall plant safety i s appropriately balanced.

The conditions under which the operator takes each action, the expected time for performing the action, and how the time was derived should be identified.

Some examples of these operator actions are:

O

Trip reactor coolant pumps.

O

Throttlehermi nate' emergency core cool ant.

O

Throttl e/termi nate main and emergency feedwater.

0

Restore main and emergency feedwater.

O

Isolate break (primary or secondary).

Supply a summary of training materials associated w i t h overcooling events in general and with respect to principal initiators.

In addition, a summary of simulator exercises associated with potenti a1 overcool i ng events should be provided.

Note:

Proposed improvements in procedures, diagnostic instrumentation, display

-

systems, and operator training should be presented in Section 8.2 under the

1 i censee' s program of corrective measures.

3.

DETERMINATION OF DETAILED PTS SEQUENCES FOR ANALYSES

This chapter i s t o present the methods and analyses used t o i d e n t i f y those transient sequences t h a t could contribute significantly t o the PTS r i s k .

A

good example i s presented i n Chapter 3 o f Reference 3.

The scope includes iden- t i f y i ng i n i t i a t i n g events, developing event trees, model ing and quantifying the r e l i a b i l i t y o f relevant systems and operator actions, and collapsin'g the event trees t o i d e n t i f y speci f i c re1 evant sequences.

Detai 1 ed models , data, and sample calculations should be included i n appendices o r referenced, However, the l o g i c o f the analysis, c r i t e r i a used, results, and insights gained are t o be described i n the main report.

3.1 Approach Used Describe how the material presented i n t h i s chapter f i t s i n t o the overall PTS study.

Provide a general description o f the process used t o i d e n t i f y PTS

sequences.

It should be made clear how the approach used w i l l r e s u l t i n com- pleteness o f i d e n t i f i c a t i o n o f a l l classes o f events t h a t could contribute sig- n i f i c a n t l y t o PTS risk, how specific events are selected f o r more detailed anal- y s i s t o represent each class, and f i n a l l y how the events so analysed are used t o determine t o t a l PTS r i s k a t the plant.

3.2 Sequence Del i neati on Identi f y potential overcool i ng transients i n a we1 1 -def i ned manner, and document them i n such a way t h a t it i s clear t o a reviewer t h a t a l l important potential overcool ing conditions have been considered.

Classes o f i n i t i a t o r s

1 should be developed, important variations o f i n i t i a t o r s within each class should be identified, and potential transients resulting from these i n i t i a t o r s should be defined.

Operating experience a t the specific plant and a t similar plants should be carefully examined t o a i d i n the i d e n t i f i c a t i o n o f potentially significant PTS i n i t i a t o r s , contributing f a i 1 ures, and potential corrective actions.

The ORNL contribution t o Systematic Eva1 uation Program reviews (Ref. 5, f o r example)

i s a technique that can be used f o r t h i s purpose.

3.2.1 Development o f Classes o f I n i t i a t o r s Any class o f transients t h a t could lead t o overcool ing o f the reactor ves- sel should be considered i n the analysis. It should, however, be appropriate t o use logical arguments t o eliminate classes o f transients as actual PTS

i n i t i a t o r s whenever justifiable. . Examples o f i n i t i a t o r s that should be included are:

O

Loss-of-coolant accidents ( LOCAs) , i ncl udi ng steam generator tube rupture accidents.

Steam 1 i ne breaks.

O

Overfeeds.

O

Combinations of these, i ncl uding possible return t o c r i t i c a l i ty.

3.2.2 I d e n t i f i c a t i o n o f Important I n i t i a t o r Variations

-

After the classes o f potential i n i t i a t o r s have been identified, it i s i m -

portant t o consider variations within any individual class. These variations should include:

1.

Decay heat level - The decay heat level, determined by recent operat- ing history o f the plant, can have a major impact on the potential consequences o f a given event.

Thus, various decay heat conditions should be considered.

Clearly, decay heat associated with a reactor t r i p from f u l l power (assuming operation a t f u l l power f o r some considerable time) should be examined.

Zero decay heat represents the opposite extreme but f o r a l l practical purposes occurs only once a t the beginning o f l i f e f o r the plant when PTS i s not important.

Therefore, the analyst may choose t o use some other level o f decay heat t h a t would cover potential decay heat conditions a f t e r the i n i t i a l startup o f the plant.

The reasons f o r choosing particular decay heat levels f o r analysis should be documented.

Each i d e n t i f i e d i n i t i a t o r should be examined a t a l l decay heat levels defined whenever appropriate.

2.

Power level - Power level may be important since certain equipment conditions o r configurations may only e x i s t a t certain power levels, e.g.,

hot standby.

As i n the case of decay heat level identification, the reasons f o r the selection o f specific power levels f o r analysis purposes should be stated.

It should be noted t h a t under certain conditions a reactor system may be a t a high power level with a low decay heat condition.

3.

Location o f event - I n many instances the location o f the event i s defined.

For example, an event consisting o f a f a i l e d open turbine bypass valve has the location defined since it i s a specific valve failure.

However, f o r some events such as pipe breaks, the location i s not defined and could have an impact on the progression o f the event.

I n the case i n which location i s not defined, a l l locations that could be s i g n i f i c a n t should be considered.

Each location should then be eliminated by logical argument, bounded by consequences associated with another location, or treated as a separate event.

4.

Magnitude o f event - Many o f the i n i t i a t o r s can occur t o various degrees.

For example, a LOCA can range from a very small break t o a f u l l g u i l -

l o t i n e pipe break.

Break sizes should be examined t o i d e n t i f y categories o f sizes t h a t lead t o similar system conditions.

I n the case o f the LOCA event, special consideration should be given t o the i d e n t i f i c a t i o n o f break sizes t h a t could lead t o loop flow stagnation.

The larger-sized LOCAs t y p i c a l l y do not contribute t o PTS r i s k since the pressure cannot be maintained because o f the large flow out o f the break.

3.2.3 D e f i n i t i o n o f Potential Transients Resulting from Each I n i t i a t o r After the complete set o f s i g n i f i c a n t i n i t i a t o r s has been defined, event trees are required t o i d e n t i f y potential sequences resulting from each i n i t i a -

tor.

The development o f the event tree headings and branches should be done i n a consistent and logical manner.

This was done i n the ORNL studies (Refs. 1,

2, and 3) by using what have been called system state trees.

These trees define the potential states o f each plant system o f interest conditional on specific thermal-hydraulic conditions.

I n i t i a t o r - s p e c i f i c event trees can then be developed by examining the system state trees with respect t o each i n i t i a t i n g

event.

A similar or equivalent approach should be used to ensure traceability of the event trees and to ensure that important sequences are not inadvertently el imi nated.

Support system failures should also be presented within some type of event tree structure.

If the event trees are developed as previously described, any support system failure would most likely lead to a sequence of events that i s already mapped out on the event trees, b u t in many instances with a higher pro- bability of occurrence.

In other cases, i t may be necessary t o define event trees resulting from a support system failure.

In either case, i t i s important that the support systems be examined to identify their potential impact on over- cooling conditions.

The results of this examination should be presented as a separate section with the identification of specific support system failure sequences of interest.

The support system review should a t least include:

"

The electrical supply system.

O

The compressed a i r instrument system.

O

The component and service water systems.

Operator Effects The operator effects are analyzed in two separate sections.

In this sec- tion the potential operator actions are identified.

These actions are further analyzed in Section 3.4 in which the probabilities associated w i t h the perfor- mance o f an operator action are developed.

I

The operator can improve, aggravate, or initiate an overcooling transient.

1 All three of these categories should be discussed in this section.

.

1.

Procedures and/or the operators1 general knowledge can lead t o actions that improve the conditions associated with an overcooling event.

Explanation should be included as to why i t i s perceived that this action would be taken.

Where appropriate, these operator actions should be either included directly on the event trees or presented as separate operator action trees that can later be coupled w i t h the principal event trees.

2.

Although the ORNL studies (Refs. 1, 2, and 3) did not include operator- initiated events or events aggravated by operator actions contrary to procedures, this category of events should also be examined as part of a plant-specific analysis.

3.

The analyses should include a quantitative approximation of the PTS

risk resulting from operator acts of commission.

Also included should be the possibility that an operator could initiate or exacerbate some milder event into a more severe PTS-type event.

Since there i s no generally accepted way t o perform such analyses, the approximation used by the licensee for this purpose should be discussed and justified for appl icabi 1 ity to this particular plant.

The "confusion matrix" approach (Ref. 6) used i n human reliability analysis could provide an acceptable structure for identifying and analyzing these potential operator actions.

I

3.4 Sequence Quantification Quantify the event trees by using identified initiating event frequencies, appropriate conditional probabilities associated with ttie success or failure of specific equipment operations, and success and failure probabilities asso- ciated with operator actions. Plant-specific data should be used whenever appropriate to define these probabilities, including appropriately adjusted simulator studies. This should be supplemented by vendor-specific or PWR-

generic data bases when plant-specific 'data do not appear to provide an adequate data base. Reference 7 includes guidance about treatment of generic and plant- specific data. Its appendices include an updated generic data base that should be used.

Identify by specific reference or provide in appendices all the reliability data used as input to quantify the event sequences. An explanation should be suppl ied as to how the data were derived for each data point.

3.4.1 Initiating Events Initiating event frequencies should be developed based on the number of observed events within selected periods of operation for similar plants under consideration. If no failures have been observed and no othe-r information is available with which to estimate a probability, a standard statistical method such as the Poisson distribution can be used to determine a probability, or the technique described in Appendix B to Reference 3 for estimating plant-specific initiating event frequencies can be used. For some initiators, it may be neces- sary to estimate the frequency of events in a particular operating mode, e. g. ,

hot zero power. The data should be researched to identify trends associated with the occurrence of the event and the operating mode. In addition, the initiator itself should be examined to identify physical conditions that might favor failure iti one mode rather than another. If this examination reveals no evidence of correlation between frequency and operating mode, the fraction of time spent in each operating mode can be used as a weighting factor.

3.4.2 Equipment Fai 1 ures Following each initiating event, certain components are designed to perform in a defined manner. Failure of a component to perform its required function could lead to PTS considerations. Thus, it is necessary to assign a failure and successful operation probability for each component on a per-demand basis. These probabilities can be obtained by estimating the number of failures observed within a period of time, combined with an estimate of the number o f demands expected within that same period, or by developing fault trees. If no failures have been observed and no other information is available with which to estimate a fai 1 ure-on-demand probabi 1 i ty , a standard statistical method can be used to develop a probability.

As with all event trees, the probability associated with a particular branch is conditional on the prior branches in the sequence. Questions of conditional probabi 1 i ty should be careful ly considered before a fai 1 ure probabi 1 i ty i s assigned.

The potential for coupled or common cause failures within a system or between systems should be examined in the analysis. Careful consideration

should be given t o increasing the f a i l u r e potential o f a component, given the f a i l u r e o f one o r more components o f the same type i n the same system o r i n other systems being subjected t o the same environment o r f a u l t causes.

As additional components o f a p a r t i c u l a r type are postulated t o f a i l , the proba- b i l i t y f o r the next component o f the same type t o f a i l should increase.

Based on the ORNL analysis, a simplified approach would be t o assume t h a t the f a i l u r e p r o b a b i l i t y o f the second component, given t h a t the f i r s t component has f a i l e d ,

might be as high as 0.1.

The t h i r d component might be assumed t o f a i l w i t h a

0.3 probability, given the f a i l u r e o f two identical components.

One could then assume that, a f t e r the f a i l u r e o f three components o f the same type, a l l remaining components o f t h a t type i n the same o r i n other systems being subjected t o the same environment o r f a u l t causes would f a i l w i t h a p r o b a b i l i t y o f 1.0.

The licensee should discuss how these types o f coupled f a i l u r e s are handled i n the analysis.

Common cause f a i l u r e s o f a d i f f e r e n t type may occur, as previously dis- cussed, through the f a i l u r e o f a support system or a control signal.

An anal- y s i s o f these potential f a i l u r e s should be made and the branch p r o b a b i l i t i e s should be adjusted whenever appropriate.

3.4.3 Operator Actions Operator action p r o b a b i l i t i e s are p a r t i c u l a r l y d i f f i c u l t t o determine because o f the lack o f a data base.

The problem i s f u r t h e r complicated when time becomes an important variable.

The procedure outlined below represents one approach t o quantifying operator actions.

This procedure shoul d be conser- vative f o r any operator action ~erformed as required by procedures assuming i,

t h a t the equipment required i s operational.

For operator actions t h a t might not be associated w i t h procedural steps, it i s not clear t h a t t h i s s i m p l i f i e d approach would produce conservative frequencies.

Therefore, the approach described would only be recommended f o r operator actions associated w i t h proce- dural steps.

Regardless o f the method used, the human e r r o r p r o b a b i l i t i e s used i n these analyses should be supported by data validated f o r the p l a n t being analyzed.

1. I d e n t i f y operator actions - I n t h i s step the procedures associated w i t h each i n i t i a t o r would be reviewed t o i d e n t i f y those operator actions t h a t

7 would have an impact on downcomer temperature.

2.

I d e n t i f y time constraint - I n the case o f each operator action, the transient would be reviewed assuming no operator action t o i d e n t i f y the time- frame available f o r successful comp~etion' o f the operator action.

3.

Assign screening f a i l u r e p r o b a b i l i t i e s - I n t h i s step a conservative value f o r the f a i l u r e o f the operator action would be identified.

For operator actions required by procedures- t o be performed w i t h i n the f i r s t 5 minutes o f the transient, the t i m e - r e l i a b i l i t y curve as presented i n NUREGKR-2815 (Ref. 7)

could be used t o i d e n t i f y a screening value.

After 5 minutes, a value o f 0.9 f o r success and 0.1 f o r f a i l u r e would be assumed f o r a l l operator actions.

The e n t i r e PTS analysis would then be completed using these screening values.

4.

I d e n t i f y dependency factors - I n some instances, there may be coupled f a i l u r e s associated w i t h operator actions j u s t as there were coupled f a i l u r e s

associated with equipment failures.

I n many instances, the potential failure of an operator action may be linked, t o various degrees, to the success or fail- ure of a previous operator action.

Thus, i t is recommended that each operator action be reviewed w i t h respect to dependency.

T h i s can be accomplished using the dependency tables as presented i n the human reliability handbook (Ref. 8).

5. If any of the dominant sequences involve the failure of an operator action, a more comprehensive evaluation of the failure would be performed for that operator action. When necessary, the comprehensive evaluation should be performed using a human reliability methodology.

The acceptability of this methodology for the purpose should be justified by the licensee (Refs. 9 through 13).

3.5 Event Tree Col lapse Collapse the event trees using a frequency screening criterion to form a l i s t of specific sequences and a set of residual groups to be analyzed.

T h i s i s important since the event trees may generate thousands of end states that cannot be individual ly analyzed.

A screening value of 1.0E-7/reactor year i s recommended.

This value should ensure that important sequences are treated individually, and i t should also help to keep the size of the residual small.

This i s particularly important since i t may be necessary t o t r e a t the residual using a bounding consequence condition.

3.5.1 Specific Sequences Those sequences that survive the frequency screening should be defined and their frequency noted.

I t i s recommended that some identification be assigned t o each sequence t o enhance i t s traceability through the remainder of the anal- ysis.

Grouping and identifying each sequence w i t h respect to initiator type may also prove helpful.

3.5.2 Residual Groups Those sequences that do not survive the frequency screening must also be considered.

They should be grouped together based on transient characteristics to form a s e t of residual groups.

The residual groups should be reviewed to identify sequences that should be grouped with previously defined sequences because of transient similarity or should be specifically evaluated because of their severe consequence.

I t i s important to attempt to reduce the size of each residual group since i t will be necessary to assign a bounding consequence that would apply within each group.

Each residual group should be defined and i t s frequency noted.

4. THERMAL-HYDRAULIC ANALYSIS

\\[

This chapter is to present the reactor coolant pressures, temperatures, and heat transfer coefficients at the vessel's interior surface in the beltline region for the set of overcooling sequences that envelops the plant's potential for experiencing a PTS event. A good example is presented in Chapter 4 of Reference 3. Also the chapter is to present the details of the analysis methods used to obtain these fluid conditions and is to include the following sections:

1.

The thermal-hydraul ic analysis plan and 1 ogic.

2.

A description and evaluation of the thermal-hydraul ic models.

3.

A description of any simplified analysis methods used in the study.

4.

A description of the methods used to evaluate the effects of thermal stratification and mixing.

5 .

Graphs of a1 1 the best-estimate thermal -hydraul ic results with their associated uncertainties and a detailed explanation of the transient behavior observed.

Thermal-Hydraulic Analysis Plan This section should out1 ine the logic and identify the subtasks in the thermal-hydraul ic analysis. Subtasks incl ude detai led thermal- hydraul ic systems

1 analysis, simp1 ified thermal-hydraul ic systems analysis, and thermal stratifica- tion analysis. The logic should describe the sampling plan used to select sequences for detailed or simplified analysis. ORNL experience favors selecting detailed thermal-hydraulic analysis sequences, including at least a few severe examples of each type of postulated overcooling transient in order to understand and benchmark the plant behavior for subsequent simplified calculations. The order in which the scenarios are evaluated can result in a considerable reduc- tion in expenditures. By first analyzing the scenarios that are expected to be the bounding cases (i. e. , the most severe), calculations for an entire class of overcooling scenarios may be deemed unnecessary if the bounding case is not of PTS concern. Similarly, careful selection -of the first set of scenarios to be evaluated can permit simple extrapolation or interpolation of the results to other scenarios that share common controlling thermal-hydraulic phenomena.

During the analysis, the sequence identification analyst and the thermal -

hydraulic analyst should coordinate activities to ensure that pertinent details of the delineated sequences are thoroughly understood. Similarly, close coor- dination must be maintained between the thermal-hydraulic analyst and the frac- ture mechanics analyst so that the transient fluid conditions are calculated at the appropriate vessel locations.

4.2 Thermal-Hydraulic Models Thjs section and supporting appendices should present a detailed descrip- tion of the thermal-hydraulic computer models used in this analysi

s. The models

should include an accurate representation of the pertinent parts of the primary and secondary systems. This includes the condensate system, the main and auxil- iary feedwater systems, and parts of the steam system. The model should include appropriate secondary-side metal heat capacity. Particular attention should be given to the modeling of control system logic and characteristics such as valve closure times and liquid level measurements. References 14 through 17 illustrate some of the modeling details included in such a study. The thermal-hydraulic models should be capable of predicting single and two-phase flow behavior and critical flow as required. The models should be capable of predicting plant behavior for LOCAs, steamline breaks, and steam generator tube ruptures. In general, a one-dimensional code is suitable for most overcooling transient calculations. However, if any of the control systems are dependent solely on the fluid conditions in a single loop (e.g., reactor coolant pump restart crite- ria), a method of estimating the three-dimensional effects in the downcomer may be necessary for some of the asymmetric cooldown scenarios encountered in the PTS study. Sensitivity of calculated results to the nodalization schemes used should be discussed. The thermal-hydraulic models should be coupled, where appropriate, with neutronic models that have the capability to analyze pressure surges resulting from any relevant sequences involving recriticality.

This section of the report must also present the results of benchmarking the computer models against suitable plant data or data from experimental facilities or incorporate this information by reference to an NRC-approved topical report. As a minimum, the plant data comparison should fully exercise the modeling features that are employed in the thermal-hydraulic computer pro- grams such as the pressurizer (including heaters and sprays), feedwater heaters and liquid level controls, the steam generator liquid level controls, and the turbine bypass (i . e. , steam dump) controls under steady-state and transient con- ditions. If overcooling transients have occurred at the plant or at a similar plant, they should be benchmarked against the computer models. The licensee is encouraged to use codes and methods accepted by the NRC at the time the calcula- tion is performed.

The models should be capable of accurately predicting condensation at all steam-water interfaces in the primary system, especially in the pressurizer during the repressurization phase of an overcool ing event or during refi 11 ing of the primary system with cold safety-injection water. The effects of noncon- densible gases, if present, on system pressure and temperature calculations should be addressed.

All code input and modeling assumptions should be documented and available for NRC review during the analysis review period (normally starting 3 years before the plant exceeds the screening limit and continuing until the evaluation results and any requisite actions are approved by the Commission).

Simplified Analysis Methods This section should present the technical bases for any simplified analysis methods that are applied in the study. This includes the grouping of similar sequences by controlling phenomena and any extrapolations used to modify exist- ing calculations. If a simplified thermal-hydraulic plant model is used to pre- dict portions of the plant transients, all the simplifying assumptions inherent

t o t h i s model should be stated and j u s t i f i e d .

Reference 18 provides examples of how t o group sequences and develop a simplified thermal-hydraulic model suitable i

f o r portions o f the analysis.

i

4.4 Thermal S t r a t i f i c a t i o n Effects Transient thermal-hydraulic computer programs available t o analyze LWR

response t o overcooling scenarios do not model f l u i d behavior with s u f f i c i e n t d e t a i l t o predict the onset o f H P I thermal f l u i d s t r a t i f i c a t i o n i n the cold leg and the subsequent cold l e g and downcomer behavior.

As a result, additional analysis methods may be needed t o determine which transients are affected by thermal s t r a t i f i c a t i o n and the extent o f such effects.

This section should describe and j u s t i f y the thermal f l u i d mixing analysis methods t h a t have been applied i n the study.

References 19 through 24 describe the results o f recent mixing analyses and experiments.

Reference 19 i d e n t i f i e s a useful s t r a t i f i c a t i o n c r i t e r i o n t o determine which overcooling transients w i l l require the additional mixing analysis.

Particular attention should be given t o scenarios t h a t involve H P I under very low flow o r stagnant loop conditions.

When stagnation i s p a r t i a l (i.e.,

not a l l loops stagnate), s t r a t i f i c a t i o n i s expected only w i t h i n the cold legs o f the stagnant loops.

However, scenarios involving complete loop stagnation w i l l require the evaluation o f a transient cooldown i n the presence o f s t r a t i f i e d layers both i n the cold legs and i n a portion o f the downcomer.

The mixing model should include the e f f e c t o f metal heating on the mixing behavior, p a r t i c u l a r l y i n a stagnant flow situation.

Also, the e f f e c t o f noncondensible gases, i f present, should be included.

References 19 through 23 describe tools t h a t have been used f o r such an analysis.

I _

This section should also document the heat transfer correlations applied i n the mixing analysis.

The research e f f o r t s described i n References 18 through

23 indicated t h a t the downcomer heat transfer coefficients generally exceeded

300 Btu/hr-ft2-OF.

These values o f heat transfer c o e f f i c i e n t were generally high enough t o keep the vessel wall surface temperatures w i t h i n a few degrees o f the downcomer f l u i d temperature.

Furthermore, because the vessel wall cool- down was controlled by conduction processes rather than convection processes, the vessel wall surface temperatures were insensitive t o heat transfer coef- f i c i e n t variations due t o changes i n flow and heat transfer regimes.

4.5 Thermal-Hydraulic Analysis Results This section should present graphs o f the best-estimate downcomer pressures, f 1 u i d temperatures, and heat transfer coefficients and t h e i r associated uncer- t a i n t y ranges as a function o f time a t the c r i t i c a l weld areas.

This includes the results o f the detailed thermal-hydraulic model, the simplified model, and mixing analysis calculations.

The duration assumed f o r each overcooling scenario should be j u s t i f i e d .

It i s assumed t h a t a scenario duration o f 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> may be reasonable f o r many cases since the overcool ing transient would probably be i d e n t i f i e d and m i ti gated p r i o r t o t h a t time.

However, there may be scenarios requiring lengthier evaluation periods because the control 1 i ng phenomena delay the scenario's evolution.

I

Also provide a discussion o f the accuracy o f the results, including a demonstration t h a t nodalization and error estimation methods chosen are appro- p r i a t e , and how the predicted p l a n t behavior compared t o p l a n t h i s t o r y and oper- ating experience.

Time-dependent uncertainty estimates f o r the downcomer pres- sure, f l u i d temperature, and heat transfer coefficients a t the c r i t i c a l welds should be provided f o r each scenario.

These uncertainties are often l i m i t e d by physical phenomena.

For example, the pressurizer power-operated r e l i e f valve (PORV) setpoints w i l l l i m i t the system pressure f o r certain high-pressure sce- narios.

Therefore, the uncertainty i s l i m i t e d by PORV operating character- i s t i c s .

References 16 and 18 describe some uncertainty analysis techniques.

5. FRACTURE MECHANICS ANALYSIS

For each sequence identified in Chapter 3, "Determination of Detailed PTS

Sequences for Analyses," calculate (or for unimportant sequences, estimate using bounding conditions) the conditional probabi 1 i ty of through-wal 1 crack penetra- tion given the occurrence of the event versus fluence or RTNDT (Although licensees were required to use the method of determining RTNDT (RTpTS) specified in paragraph 50.61(b)(2)

when evaluating their vessel properties with respect to the screening limits, in performing these plant-specific calculations, they are encouraged to use any alternative methods/data/correlations for which they provide justification of applicability to their specific plant.) Specific sequences identified in Section 3.5.1 should be calculated individually in detail. Less important events such as the residual groups identified in Sec- tion 3.5.2 may be conservatively bounded without a calculation for each sequence in the group. A good example is provided in Chapter 5 of Reference 3. Input for these calculations includes the primary system pressure, the temperature of the coolant in the reactor vessel downcomer, the fluid-film heat transfer coefficient adjacent to the vessel wall, all as a function of time, and the vessel properties. The calculations should be performed with a probabilistic fracture mechanics code such as OCA-P or VISA-I1 (Refs. 25 arid 26).

An acceptable procedure to be followed in the fracture mechanics analysis is as follows: A one-dimensional thermal and stress analysis for the vessel wall should be performed. The effect of cladding should be accounted for in both the thermal and stress analyses. The fracture mechanics model can be based on linear elastic fracture mechanics with a specified maximum value of KIc and I

KIa to account for upper-shelf behavior. Plastic instability should be consid- ered in the determination of failure. Warm prestress should not be assumed in evaluations of the postulated transients. Acceptable types of material pro- perties are given in the study of the H. B. Robinson reactor (Ref. 3).

In the Monte Carlo portion of the analysis, as a minimum, each of the following should be assigned distribution functions:

KIc = Static crack initiation fracture toughness KIa = Crack arrest fracture toughness RTNDT = Ni 1 -ducti 1 i ty reference temperature Cu = Concentration of copper, wt-%

Ni = Concentration of nickel, wt-%

F = Fast neutron fluence The functions used should be justified. Examples of these distributions are found in Reference 3.

The following additional information should be supplied:

/

1.

Flaw density - The number o f cracks per u n i t surface area should be established f o r use i n the calculations and should be j u s t i f i e d .

A value o f

0.2 flaw per square meter o f 8-inch-thick material (one flaw/cubic meter) was selected i n References 1, 2, and 3.

2.

Flaw depth density function - The flaw depth density d i s t r i b u t i o n should be established.

The function t o be used can be t h a t specified i n References 1, 2, and 3.

3.

Flaw size, shape, and location - Axial flaws w i t h depths less than

20 percent o f the wall thickness and a l l circumferential flaws should be modeled i n i n f i n i t e length.

Axial flaws with depths greater than 20 percent o f the wall thickness may be modeled i n i n f i n i t e o r f i n i t e length depending on the r e l a t i v e toughness o f the weld regions and plate material.

For instance, the length o f an axial flaw i n an axial weld t h a t suffers severe radiation damage r e l a t i v e t o the plate can be l i m i t e d t o the length o f the weld.

The flaws should be assumed t o be located a t the inner surface o f the vessel and should extend through the cladding t o the inner surface o f the vessel.

Reference 20 provides a comprehensive discussion o f recommendations f o r input distributions t o be used i n probabi 1 i s t i c fracture mechanics calculations.

4.

A l l regions o f the b e l t l i n e should be considered.

This includes axial and circumferential welds as well as the base material.

The f o l low

-

K ~ c

-

-

K ~ a

-

where T = Val 1 temperature R

T

~

~

~

o

= I n i t i a l n i l - d u c t i l i t y reference temperature Exampl

= Increase i n n i l - d u c t i l i t y reference temperature due t o radiation damage, f(Cu,Ni,fluence).

I f plant surveillance data meet the c r i t e r i a f o r c r e d i b i l i t y given i n Reference 27, they may be used as described therein.

es o f these functions are described i n References 3 and 27.

I n reporting the results, the methods used f o r the p r o b a b i l i s t i c vessel- i n t e g r i t y analysis should be described, t h e i r limitations f o r t h i s analysis identified, and the impact o f uncertainties i n the resulting vessel f a i l u r e probabilities estimated.

Discussion o f the analysis should include a l i s t i n g of the assumptions used, t h e i r bases, and a discussion o f the s e n s i t i v i t y o f the results t o variations i n the assumptions.

Vessel dimensions and material properties used should be given.

For each transient of interest, a deterministic analysis that includes a i

set of critical crack-depth curves as functions of time (see Refs. 1, 2, and 3),

i - e . , a plot of crack depths corresponding to initiation and arrest events versus L

time, should be carried out.

This plot should also have curves indicating the depth of crack a t which upper-shelf toughness i s effective.

These results should correspond to minus two sigma values for KIc and KIa, plus two sigma values for RTNDT, and plus two sigma values for the copper and nickel contents as well as plus two sigma for the fluence value.

These curves, which graphically represent the worst-case condition for each transient of interest, will be used i n the evaluation of the critical time interval from the initiation of the transient during which mitigating action can occur.

6.

INTEGRATION OF ANALYSES

-

I n t h i s chapter, the event frequencies are coupled with the results o f the fracture mechanics analysis t o obtain an integrated frequency o f vessel through- wall cracking due t o PTS.

An example o f one acceptable method i s presented i n Chapter 6 o f Reference 3.

A table t h a t supplies the following information f o r each specific sequence and residual group i d e n t i f i e d i n Section 3.5 should be provided.

These results are t o be provided f o r the operating time a t which the reactor w i l l reach the PTS screening c r i t e r i o n and f o r any additional operation

1 i f e bei ng requested:

O

Sequence identification.

O

Type o f i n i t i a t o r (smal 1-break LOCA with low decay heat, large steamline break a t f u l l power, etc.).

O

Estimated sequence frequency.

O

Method used t o determine conditional through-wal 1 crack penetration probabi 1 i ty.

O

Sequence conditional through-wal 1 crack penetration probabi l i ty."

O

Frequency o f through-wall cracking due t o sequence obtained by the product o f sequence frequency and sequence conditional through-wall crack penetration probabi 1 i ty.

For each dominant sequence, a section o r table should be provided t h a t sup- p l i e s (1) specific reference t o the graph o f temperature, pressure, and flow as provided i n Chapter 4, "Thermal-Hydraulic Analysisn; (2) a time-line description o f the accident sequence noting important operator actions, control actions, protection system actions, equipment faults, and vessel f a i l ure; and (3) fre- quency of through-wall crack penetration as a function o f fluence o r RTNDT-

Results should then be summed within each i n i t i a t o r type t o provide a fre- quency o f through-wall crack penetration as a function o f i n i t i a t o r type.

The discussion should explain why each i n i t i a t o r type i s or i s not impor- t a n t t o PTS.

Finally, the results should be summed over a l l i n i t i a t o r types t o provide an integrated frequency o f through-wall cracking f o r the vessel.

This inte- grated value should be reported as a function o f fluence, or RTNDTy and p l o t t e d with uncertainty values as determined i n Chapter 7, "Sensitivity and Uncertainty Analyses o f Through-Wall Crack Frequency," and included on the p l o t .

The dis- cussion should i d e n t i f y important operator actions, control actions, and p l a n t features t h a t can cause o r prevent vessel failure.

he conditional through-wall crack penetration probability i s the probability of a through-wall crack as determined by the fracture mechanics analysis, given t h a t the event occurs.

7.

SENSITIVITY AND UNCERTAINTY ANALYSES OF THROUGH-WALL CRACK FREQUENCY

I n order f o r the results o f the probabilistic analysis t o be useful f o r regulatory decisionmaking, the s e n s i t i v i t y o f the results t o input parameters and assumptions should be determined, the major sources o f uncertainty should be identified, and the magnitude o f the uncertainty should be estimated.

I n t h i s chapter, the results and the procedures used t o perform each o f these processes are t o be documented.

A good example i s given i n Chapter 7 o f Reference 3.

Portions o f t h a t analysis, or other analyses, may be referenced i n l i e u o f por- tions o f the analysis described i n t h i s chapter, provided the licensee demon- strates the appl icabi 1 i t y o f the referenced analyses t o the specific plant.

7.1 Sensitivity Analysis Perform a s e n s i t i v i t y analysis t o estimate the change i n the through-wall crack frequency f o r a known change o f a single parameter.

Parameters examined i n the s e n s i t i v i t y analysis should include (1) the i n i t i a t i n g event and event tree branch frequencies, (2) the thermal -hydraul i c variabl es (temperature, pres- sure, etc. ), and (3) the fracture mechanics variables (fluence, flaw density, etc.).

Where appropriate, 68th percentile (1-sigma) values should be used t o represent the change i n the parameter.

This should provide a s u f f i c i e n t change t o i l l u s t r a t e the effects o f the change, and the use o f the 68th percentile value whenever possible w i l l help t o define the important v a r i a b i l i t i e s .

I n the case o f temperature and pressure, however, the 68th percentile values may vary from one sequence t o another.

I n t h i s case, it may be easier t o i d e n t i f y a representative change i n the parameter t h a t could then be used f o r a l l sequences rather than t o t r y t o use the 68th percentile values.

1.

Each variable examined i n the s e n s i t i v i t y analysis should be l i s t e d along w i t h the change i n the variable.

I n the cases i n which changes are represented by using 68th percentile values, some explanation should be provided t o document the reasons the value i s considered a 68th percentile value.

I n those cases i n which something other than a 68th percentile value i s chosen, discussion should center around the reasons f o r choosing the value used.

Sensitivity factors should be obtained by dividing the through-wal 1 crack frequency obtained with the changed variable by the through-wall crack frequency obtained with each variable a t i t s mean value.

Supply the s e n s i t i v i t y factors obtained f o r both positive and negative changes i n each o f the variables.

The s e n s i t i v i t y factors obtained f o r changes made i n the PTS-adverse direction should be ranked according t o magnitude and provided i n table form.

Uncertainty Analysis

7.2.1 Parameter Uncertainties Each step i n the p r o b a b i l i s t i c analysis should include an uncertainty anal- ysis.

This should include uncertainty i n frequency o f occurrence o f a sequence, uncertainty i n temperatures and pressures reached during the sequence, including t h a t resulting from the nodal i z a t i o n scheme chosen as discussed i n Section 4.5, and uncertainty i n the fracture mechanics model for vessel f a i l u r e given the transients.

For the following reasons, a Monte Carlo simulation i s appropriate for

,I

portions of the PTS uncertainty analysis.

O

The temperature and pressure error di s t r i buti ons are not symmetric.

O

The fracture mechanics results are nonlinear with respect to variations i n input parameters, particularly the temperature and pressure time hi stories.

O

The results of the Monte Car10 analysis can indicate the shape of the output distribution.

The Monte Carlo approach would involve four steps as described below:

1.

Develop a statistical distribution for each variable used in the calculation - T h i s step will involve the representatioh of each variable as a distribution w i t h 5th and 95th percentiles as previously identified.

The shapes of the distributions selected should be discussed.

2.

Select a random value from each distribution - A random sampling code should be used to sample from each of the distributions.

3.

Calculate a through-wall crack frequency estimate based on values obtained in the previous step - In this step, the through-wall crack frequency i s obtained based on the randomly selected variables.

This requires under- standing the form of the relationship between each input variable and through- wall crack frequencies.

For some variables such as initiating event and branch frequencies and flaw density, this is simple since the through-wall crack frequency i s directly proportional to the value of these parameters over the range of variable val ues considered.

Other vari abl es such as temperature and pressure may require the development of an appropriate relationship.

In such cases i n which the effect of a variable change may be dependent on the value of another variable, response-surface techniques may be used to estimate important interaction effects.

4.

Summarize the resulting estimates and approximate frequency distribu- tion - Steps 2 and 3 are repeated until a statistically valid number of t r i a l s have been- performed.

A distribution of through-wall crack frequencies i s then produced from the results of the trials.

The 95th and 5th percentiles and the mean (expected value) of this distribution should be identified and discussed.

7.2.2 Model i ng Uncertai nties (Bi ases)

During the process of performing the PTS analysis, the analyst will make simplifying assumptions i n order to make the analysis tractable.

Such assump- tions include decisions on thermal-hydraulic models, fracture mechanics models, grouping of sequences both for thermal-hydraulic analysis and fracture mechanics analysis, nodalization i n the thermal-hydraulic models, etc.

These assumptions can introduce conservative or nonconservative biases into the analysis.

These biases should be identified and their potential impact on the results discussed.

In this section, important assumptions made as part of the analysis should be

1 isted.

Each assumption should be identified as being either conservative or nonconservative.

A discussion should be supplied for each assumption w i t h respect t o i t s impact on the overall value of through-wall crack frequency.

Whenever excess conservatism or nonconservatism i s suspected to be present i n an assumption, an alternative assumption should also be used in the full calcu- lation procedure and the impacts on the overall result compared.

8.

EFFECT OF CORRECTIVE ACTIONS ON VESSEL THROUGH-WALL CRACK FREQUENCY

This chapter i s t o summarize the licensee's program o f corrective measures.

Each corrective measure considered by the licensee should be presented and ex- plained.

I n each case, the reasons f o r considering the action as a corrective measure are t o be documented, and the estimated impact o f the action with respect t o through-wall crack frequency provided.

Corrective actions t h a t are t o be considered include, but are not l i m i t e d to, those discussed i n the remaining sections o f the chapter.

An example can be found i n Chapter 8 o f Reference 3.

8.1 F l ux Reduction Program Early analysis and implementation o f such flux reductions as are reasonably practicable t o avoid reaching the screening c r i t e r i o n are already being required and accomplished i n accordance with the PTS rule, § 50.61.

Further f l u x reduc- tions t o c r i t i c a l areas o f the vessel wall t h a t would reduce the r i s k o f con- tinued operation beyond the screening c r i t e r i o n should be considered.

I f such additional f l u x reductions are needed, i n view o f the i r r e v e r s i b i l i t y o f embr-ittlement, the .Ticensee should consider early implementation before reaching the screening criterion.

For licensees who are considering applications t o extend the operating license beyond i t s present expiration date, i t may be pru- dent t o implement the reduction as early as possible t o avoid the necessity o f vessel annealing or replacement.

8.2 Operating Procedures and Training Program Improvements Operator actions and associated p l a n t response play a key r o l e i n the i n i t i a t i o n and mitigation o f PTS events.

Therefore, ensure t h a t the actions are based on approved technical guidelines t h a t include an integrated'evaluation o f relevant technical considerations, including, but not l i m i t e d to, PTS, core cooling, environmental releases, and containment i n t e g r i t y .

The evaluation should address the following types o f concerns:

Frequent real i s t i c "team" t r a i n i n g should be conducted, exposing the operators t o potential PTS transients and t h e i r precursor events.

The t r a i n i n g should give the operators actual practice i n controlling reactor system pressure and cooldown rates during PTS situations.

Specific t r a i n i n g should include, but not be l i m i t e d to, reactor cool- ant pump t r i p c r i t e r i a , the HPI t h r o t t l i n g c r i t e r i o n , control o f natural circulation, recovery from inade,quate core cooling, recovery from s o l i d plant operations, and the use o f PORVs t o control primary overpressure.

O

Instructions should be based on analyses t h a t include consideration o f system response delay times (e. g. , loop transport time, thermal transport time).

O

Whether o r not there i s a need f o r cooldown rate l i m i t s f o r periods shorter than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> should be evaluated.

O

Methods f o r control 1 i n g cooldown rates should be provided.

Reference should be made t o these methods with respect t o the dominant PTS

r i s k sequences whenever possible.

O

Guidance should be provided for the operator if cool down rates or i

pressure-temperature limits are exceeded. These guidelines should L

take into account potential core cooling, environmental release, or containment integrity problems that could exist as a result of respond- ing to the abnormal cooldown rate. These guidelines should leave little doubt as to when PTS concerns are more important than other safety issues and when other safety issues assume primary importance over PTS concerns. It should be emphasized how the guidelines were evaluated and optimized in light of any competing risks that might arise from events other than PTS events to ensure that plant safety is appropriately balanced.

O

The desired region of operation between the pressure-temperature 1 imi t and the limit determined by avoidance of saturation conditions should be evaluated to determine if it can be revised to minimize total risk due to plant operation from PTS plus non-PTS events.

O

Instructions for control 1 ing pressure following depressurization transients should be provided.

O

Instructions should be available for the condition where natural

,circulation is lost and the primary system main circulation pumps are not available.

Portions of the above may be provided by incorporation by reference, for example, to the plant-specific Emergency Response Guidelines. However, a sum- mary discussion re1 ati ng the referenced material to the overall subject should be provided.

8.3 Inservice Inspection and Nondestructive Examination Program The use of state-of-the-art nondestructive examination (NDE) techniques could provide an opportunity to decrease any conservatism that might exist in the flaw density value used in the analysis. This decrease in conservatism, however, may be less important than the decrease in uncertainty in the actual flaw density that may result from an examination of this type.

Existing inservice inspection programs should be reevaluated to consider incorporation of state-of-the-art examination techniques for inspecting the clad-base metal interface and the near-surface area. This includes plant-unique consideration of the clad surface conditions. Considerati on should be given to increased frequency of inspections.

The reliability of the NDE method selected to detect small flaws should be documented.

8.4 Plant Modifications All plant modifications should be evaluated and optimized in light of any com- peting risks that might arise from events other than PTS events to ensure that overall plant safety is appropriately balanced. PI ant modifications that may be considered include the following:

1.

Instrumentation, Controls, and Operation a.

Reactor vessel downcomer water temperature monitor.

b.

Instantaneous and integrated reactor coolant system cooldown rate monitors.

c.

Steam dump interlock.

d.

Feedwater i sol ation/f low control 1 ogic.

e.

Reactor coolant system .pressure and temperature monitors.

f.

Control system to prevent repressurization of the reactor primary coolant system during overcooling events.

g.

Monitor to measure margin between vessel inner-surface temperature and current RTNDT at that location.

h.

Diagnostic instrumentation and displays.

i.

Primary coolant system pump trip logic..

j.

Automatic isolation of auxiliary feedwater to broken steam

1 i nedgenerators.

2.

Increased Temperature of Emergency Core Cooling Water and Emergency Feedwater If plant modifications are proposed to prevent overcooling, the report should include an evaluation of undesirable side effects (i.e., undercooling)

and a discussion of steps planned to ensure that the modifications represent a net improvement in safety when PTS and non-PTS related events are considered.

8.5 In Si tu Anneal i ng If in situ annealing is part of the licensee's program of corrective mea- sures, the licensee should describe the program to ensure that annealing will achieve the planned increase in vessel toughness, the surveillance program to monitor vessel toughness after annealing, the program directed toward code requalification after annealing, and the program to ensure that annealing does not introduce other safety problems.

9.

FURTHER ANALYSES

The PTS rule (Q

50.61 of 10 CFR Part 50) requires Commission approval for plant operation with RTpTS values above 270°F.

This regulatory guide out1 ines the analyses that should be performed in support of any request to operate a t R

T

~

~

~

values in excess of 270°F, as required in paragraphs 50,6l(b)(4) and

50.61(b)(5), and states that the s t a f f ' s primary acceptance criterion wi 11 be licensee demonstration that expected through-wall crack frequency will be below

5 x per reactor year for such operation.

In the event that a licensee i s unable to meet this primary acceptance criterion, he may request Commission approval for continued operation under the provisions of paragraph 50.61(b)(6), which allows the submittal of further anal- yses.

The content of these further analyses would be determined by the licensee and might include topics such as overall plant risk analyses that are beyond the scope of the vessel failure analyses covered by this regulatory guide.

10.

RESULTS AND CONCLUSIONS REGARDING PTS ANALYSES

1 This chapter i s to summarize the models used and the results obtained and provide the conclusions reached with respect to continued operation of the plant.

10.1 Summary of Analysis In this section the major findings of each aspect of the PTS analysis, as described i n the previous chapters, should be presented.

These should include:

O

Expected (mean) value of frequency of reactor vessel through-wall crack penetration versus time, w i t h uncertainty bound (95th percentile).

O

Identi f ication of dominant accident sequences.

O

If sensitivi ty/uncertainty analysis shows that slightly different assumptions could lead to different dominant sequences, identification of these assumptions and discussion of the impact on results given the different assumptions.

O

Identification of important operator actions, control actions, and plant features that can increase or decrease the frequency or severity of overcooling transients, and whether these have been appropriately balanced to ensure optimum overall plant safety.

O

Major sources and magnitudes of uncertainty i n the analysis.

O

The re1 ative effectiveness of potential a1 ternati ve corrective measures in reducing the expected (mean) value of through-wall crack penetration.

O

The program of planned corrective measures.

10.2 Basis for Continued Operation Finally, as part o f the plant-specific analysis package, the licensee should provide a basis for concluding whether or not continued plant operation i s justified.

The basis for continued operation should include comparison with NRC's PTS acceptance criteria given in the Introduction to this guide.

REFERENCES

I -i

1.

T. 3. Burns e t a1 . , "Preliminary Development o f an Integrated Approach t o the Evaluation o f Pressurized Thermal Shock Risk As Applied t o the Oconee Unit 1 Nuclear Power Plant," Oak Ridge National Laboratory, U.S.

Nuclear Regulatory Commission (USNRC) Report NUREG/CR-3770 (ORNL/TM-9176),

May 1986.

2.

D. L. Selby e t al., "Pressurized Thermal Shock Evaluation o f the Calvert C l i f f s Unit 1 Nuclear Power Plant," Oak Ridge National Laboratory, USNRC

Report NUREG/CR-4022 (ORNL/TM-9408),

November 1985.

3.

D. L. Selby e t al., "Pressurized Thermal Shock Evaluation o f the H. B.

Robi nson Unit 2 Nuclear Power Plant ,'I Oak Ridge National Laboratory, USNRC Report NUREG/CR-4183 (ORNL/TM-9567),

November 1985.

4.

USNRC, "Pressurized Thermal Shock (PTS) ,'I SECY-82-465, November 23, 1982.

5.

Appendix F t o "Integrated Plant Safety Assessment Report, Systematic Evaluation Program, San Onofre Nuclear Generating Station Unit 1," USNRC

Report NUREG-0829, Apri 1 1985.

6.

L. Potash, "ConfusionMatrix,"

SectionC.1.2of Appendix C inl'OconeePRA,"

Electric Power Research I n s t i t u t e , Palo Alto, CA, and Duke Power Co.,

Char1 otte, NC, NSAC/60, Vol . 4, 1984.

7.

R.

A.

Bari e t al. , "Probability Safety Analysis Procedures Guide,"

k Brookhaven National Laboratory, Revision 1 t o USNRC Report NUREGKR-2815, August 1985.

8.

A. D. Swain and H. E. Guttmann, "Handbook o f Human R e l i a b i l i t y Analysis with Emphasis on Nuclear Power Plant Applications ,I1 Sandia National Laboratories, USNRC Report NUREGKR-1278 (SAND80-0200),

October 1983.

9.

M.

K. Comer e t al., "Generating Human R e l i a b i l i t y Estimates Using Expert Judgment ,It General Physics Corporati on, USNRC Report NUREGAR-3688, Vol s. 1 and 2, January 1985.

10.

D.

E. Embrey, "The Use o f Performance Shaping Factors and Quantified Expert Judgment i n the Evaluation o f Human R e l i a b i l i t y :

An I n i t i a l Appraisal , " Broo khaven National Laboratory, USNRC Report NUREGKR-2986 (BNL-NUREG-51591),

October 1983.

11.

0. A.

Seaver and W.

G. S t i l l w e l l , "Procedures f o r Using Expert Judgment To Estimate Human Error Probabi 1 i t i e s i n Nuclear Power Plant Operations ,"

Sandia Nattonal Laboratories, USNRC Report NUREGAR-2743 (SAND82-7054),

April 1983.

12.

Organi sation f o r Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety o f Nuclear I n s t a l lations, "Assessing Human Re1 i a b i l i t y i n Nuclear Power Plants ," May 1983.

13.

Organisation f o r Economic Co-operation and Development, Nuclear Energy Agency, Committee on the Safety o f Nuclear I n s t a l 1 ations , "Expert Judgment o f Human Reliability," CSNI Report No. 88, January 1985.

0. Bassett e t a1 . , "TRAC Analyses o f Severe Overcool i n g Transients f o r the Oconee 1 PWR,"

Los Alamos S c i e n t i f i c Laboratory (LASL),

USNRC Report NUREG/CR-3706, August 1985.

C. D. Fletcher e t al., "RELAP 5 Thermal-Hydraulic Analysis o f PTS Sequences f o r the Oconee 1 PWR,"

EG&G, USNRC Report NUREG/CR-3761, July 1984.

3. Koenig, G. Spriggs, and R. Smith, "TRAC-PF1 Analyses o f Potential PTS

Transients a t a Combustion Engineering PWR,"

LASL, USNRC Report NUREGKR-4109, Apri 1 1985.

C. D. Fletcher e t al., "RELAP 5 Thermal-Hydraulic Analyses o f PTS Sequences f o r H. B. Robinson Unit 2 PWR,"

EG&G, USNRC Report NUREG/CR-3977, A p r i l 1985.

C. D. Fletcher, C. B. Davis, and D. M. Ogden, "Th6rmal-Hydraulic Analyses o f Overcooling Sequences f o r the H. B. Robinson Unit 2 PTS Study,"

EG&G,

USNRC Report NUREGAR-3935, July 1985.

T. G. Theofanous e t al., "Decay o f Buoyancy Driven S t r a t i f i e d Layers w i t h Appl ication t o PTS ,I1 Purdue University , USNRC Report NUREG/CR-3700,

May 1984.

T. G. Theofanous e t al. , "REMIX:

Computer Program f o r Temperature Transients Due t o High Pressure I n j e c t i o n i n a Stagnant Loop," Purdue University , USNRC Report NUREGKR-3701, May 1986.

T. G. Theofanous e t al., "Buoyancy Effects on Overcooling Transients Calculated f o r the USNRC Pressurized Thermal Shock Study," Purdue University , USNRC Report NUREG/CR-3702, May 1986.

Bart Daly, "Three-Dimensional Calculations o f Transient Fluid-Thermal Mixing i n the Downcomer o f the Calvert C l i f f s - 1 Plant Using SOLA-PTS,"

LASL, USNRC Report NUREG/CR-3704, Apri 1 1984.

Martin Torrey and Bart Daly, "SOLA-PTS:

A Transient 3-D Algorithm f o r F l uid-Thermal Mixing and Wall Heat Transfer i n Complex Geometries," LASL,

USNRC Report NUREG/CR-3822, July 1984.

F. X.

Do1 an e t a1 . , "Faci 1 i ty and Test Design Report:

1/2-Scal e Thermal Mixing Project ," USNRC Report NUREGAR-3426, Vols. 1 and 2, September 1985.

R. D. Cheverton and D. G. Ball, "OCA-P, A Deterministic and Probabilistic Fracture-Mechanics Code f o r Application t o Pressure Vessels ,I1 Oak Ridge National Laboratory, USNRC Report NUREG/CR-3618 (ORNL-5991),

July 1984.

F. A. Simonen e t al., "VISA-I1 - A Computer Code f o r Predicting the Proba- b i 1 i t y o f Reactor Vessel Fai 1 ure ,I1 Battel l e Pacific Northwest Laboratories, USNRC Report NUREG/CR-4486, Apri 1 1986.

USNRC Regulatory Guide 1.99, "Effects o f Residual Elements on Predicted Radiation Damage t o Reactor Vessel Materials. "

REGULATORY ANALYSIS

The pressurized thermal shock (PTS) rule, § 50.61 of 10 CFR Part 50

(July 23, 1985--50 FR 29937), requires collection and reporting of material properties data, analyses of flux reduction options, and detailed plant-specific PTS risk analyses for those plants that reach the screening criterion based on RTNDT,* as specified in the rule, during the term of the operating 1 icense.

The regulatory guide addresses the detailed plant-specific risk analysis requirement, providing recommendations regarding how licensees should perform and how the NRC

staff should review those analyses.

Neither the PTS rule nor the regulatory guide requires specific corrective actions.

The guide merely provides guidance for the performance of the analyses required by the rule to identify and select necessary corrective actions.

There- fore, i n accordance w i t h the Commission's Regulatory Analysis Guide1 ines (NUREG/

BR-0058, Revision l), this regulatory analysis does not provide extensive and detai led assessment of required, specific corrective actions.

The background material, nature of the problem, objectives, and costs, etc.,

of the PTS rule's requirements are covered in the regulatory analysis prepared as part of the rulemaking proceeding (Enclosure B to SECY-83-288, Proposed Pressurized Thermal Shock (PTS) Rule, July 15, 1983, and Enclosure D to SECY-85-60, Fi nal Pressurized Thermal Shock (PTS) Rul e, February 20, 1985).

This regulatory analysis therefore addresses only (1) the need for publishing guidance regarding how licensees should perform the required plant-specific analyses, (2) the appropriateness of this particular guidance, and (3) the basis i

for the NRC staff acceptance criteria provided in the subject guide.

,

Need for Guidance The NRC staff has gained considerable experience concerning PTS risk analyses.

This experience has come from performance of analyses by the staff, from prototype plant-specific analyses performed by national laboratories and sponsored by NRC, and from review of industry-sponsored analyses.

The regula- tory guide reflects the lessons learned from this experience and will aid

1 icensees in performing analyses that wi 11 efficiently derive risk estimates in the form the NRC needs for use in evaluating their conformance with the regulations.

This need for guidance i s particularly acute since the plant-specific PTS

analyses should use a probabi 1 i s t i c risk analysis (PRA) approach, as opposed to the more traditional design basis accident (DBA) approach, as explained be1 ow.

The PTS risk i s developed as the sum of the small risks resulting from each of a large number of possible (but unlikely) PTS events.

The regulatory guide accordingly describes acceptable methods to identify as many as possible of the potential PTS events, group them, calculate the frequencies and conse- quences of each group, determine the risk due to each group by multiplying the predicted frequency by the calculated consequences, and then sum the results

"Reference Temperature for the Nil Ductility Transition, a measure of the temperature range i n which the materials' ductility changes most rapidly with changes i n temperature.

from a1 1 groups t o obtain t o t a l PTS r i s k estimates t h a t can be compared w i t h the acceptance c r i t e r i a given i n the regulatory guide.

The DBA approach, on the other hand, would attempt t o define a worst cred- i b l e event (the "design basis accident") and then show t h a t (1) consequences from t h a t event are acceptable and (2) a l l other credible events are less severe and therefore acceptable.

The s t a f f has determined t h a t t h i s DBA approach i s not appropriate f o r plant-specific PTS analyses because the t o t a l r i s k from a l l credible PTS events can be s i g n i f i c a n t even though each event i n d i v i d u a l l y i s less severe than the DBA.

The NRC s t a f f therefore believes t h a t t h i s guide w i l l encourage licensees t o use the acceptable PRA approach and not waste time and resources on the more t r a d i t i o n a l DBA approach.

2.

J u s t i f i c a t i o n o f This.Particular Guidance The NRC staff has performed prototype plant-specific analyses f o r three plants.

They constitute the most detai 1 ed, thorough ana.lyses performed t o date, and the lessons learned i n t h e i r performance are r e f l e c t e d i n the guide.

The NRC s t a f f has incorporated i n t o the guide descriptions o f the best methods found regarding how t o assemble d e t a i l s o f a p l a n t ' s design (and t o what level those d e t a i l s should be included), how t o use event t r e e methodologies t o i d e n t i f y and group potential PTS events, how t o calculate severity o f the events, how t o integrate the r e s u l t i n g r i s k , and many other subjects.

The s t a f f believes t h a t the benefit o f t h i s experience i s presented i n t h i s guide, and i t s use by li- censees w i l l enable them t o avoid many o f the false s t a r t s and errors made by the s t a f f and t h e i r contractors i n performing the prototype analyses, thereby saving time! and resources.

3.

J u s t i f i c a t i o n o f Acceptance C r i t e r i a The guide states that, i n judgi ng the acceptabi 1 i t y o f conti nued operation beyond the PTS screening c r i t e r i o n , the s t a f f w i l l accept any analyses performed w i t h acceptable methods such as those described i n the subject regulatory guide t h a t predict a through-wall crack penetration frequency less than 5 x per reactor year.

The mean frequency o f reactor vessel through-wall crack penetration i s used as the principal acceptance c r i t e r i o n because the s t a f f ' s analyses p r e d i c t t h a t there i s a high l i k e l i h o o d o f core damage i n the event o f such cracks.

Core damage events have potential public health and safety consequences t h a t are d i f f i c u l t t o analyze w i t h certainty.

They would also have severe economic impacts upon the licensee and the public who w i l l pay for cleanup and replace- ment power.

For a l l these reasons, reactor vessel through-wall crack penetra- t i o n frequency i s used as the p r i n c i p a l acceptance c r i t e r i o n .

The p a r t i c u l a r value o f 5 x mean frequency per reactor year was selected as an achievable, r e a l i s t i c goal t h a t w i l l r e s u l t i n an acceptable level o f r i s k . It i s believed t h a t t h i s value i s acceptably low considering t h a t pressure vessel f a i l u r e i s not p a r t o f the design basis o f the p l a n t and therefore must have a frequency low enough t o be considered incredible.

When the various (unquantifiable)

biases t h a t are inherent i n the analyses are taken i n t o account a t l e a s t q u a l i t a t i v e l y , such as the i m p l i c i t assumption t h a t "core damage" i s equivalent

to "core melt," this value probably results in a core me1 t mean frequency close I

I

to one per mil 1 ion reactor years.

k In the opinion of the NRC staff, there are no practical quantities on which t o base the acceptance criteria other than reactor vessel through-wall cracks (i.

e., vessel failure).

UNITED STATES

NUCLEAR REGULATORY COMMISSION

WASHINGTON, D.C. 20555 OFFICIAL BUSINESS

PENALTY FOR PRIVATE USE, $300

USNRC

PERMIT No. G-67

1 I

I