braidwood, units 1 and 2 and bryon, units 1 and 2, license amendment … · 2013-09-03 · u. s....

J E

RS-13-175

August 21, 2013

U. S. Nuclear Regulatory CommissionATTN: Document Control DeskWashington, DC 20555-0001

Braidwood Station, Units 1 and 2Facility Operating License Nos. NPF-72 and NPF-77NRC Docket Nos. STN 50-456 and STN 50-457

Byron Station, Units 1 and 2Facility Operating License Nos. NPF-37 and NPF-66NRC Docket Nos. STN 50-454 and STN 50-455

Subject:

License Amendment Request to Revise Technical Specifications Section 3.7.2,"Main Steam Isolation Valves (MSIVs)"

Reference:

NRC Memorandum, "Operability Determination for the Callaway Plant TechnicalSpecifications Requirements When One Main Steam Isolation Valve ActuatorTrain is Removed from Service," dated October 19, 2006

In accordance with 10 CFR 50.90, "Application for amendment of license, construction permit,or early site permit," Exelon Generation Company, LLC, (EGC), requests amendments toFacility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station, Units 1 and 2, andFacility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units 1 and 2.

The proposed amendments will revise Technical Specifications (TS) Section 3.7.2, "Main SteamIsolation Valves (MSIVs)," to incorporate the MSIV actuator trains into the Limiting Condition forOperation (LCO) and provide associated Conditions and Required Actions. In addition,Surveillance Requirement (SR) 3.7.2.2 is revised to clearly identify that the MSIV actuator trainsare required to be tested in accordance with the SR.

These changes are considered necessary based on the referenced NRC staff interpretation that

SR 3.7.2.2 requires both actuator trains for a single valve to be surveillance tested. The NRCstaff interpretation results in declaring an MSIV inoperable with one actuator train inoperable.The Completion Time of 8 hours for an inoperable MSIV due to one inoperable actuator train isnot commensurate with the safety significance of an inoperable actuator train. Therefore, newConditions, Required Actions, and Completion Times for inoperable actuator train(s) are beingproposed.

CE

10 CFR 50.90

1

RS-13-175

August 21, 2013

U. S. Nuclear Regulatory Commission A TIN: Document Control Desk Washington, DC 20555-0001

Braidwood Station, Units 1 and 2 Facility Operating License Nos. NPF-72 and NPF-77 NRC Docket Nos. STN 50-456 and STN 50-457

Byron Station, Units 1 and 2 Facility Operating License Nos. NPF-37 and NPF-66 NRC Docket Nos. STN 50-454 and STN 50-455

2000 Office

10 CFR 50.90

Subject: License Amendment Request to Revise Technical Specifications Section 3.7.2, "Main Steam Isolation Valves (MSIVs)"

Reference: NRC Memorandum, "Operability Determination for the Callaway Plant Technical Specifications Requirements When One Main Steam Isolation Valve Actuator Train is Removed from Service," dated October 19, 2006

In accordance with 10 CFR 50.90, "Application for amendment of license, construction permit, or early site permit," Exelon Generation Company, LLC, (EGC), requests amendments to Facility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station, Units 1 and 2, and Facility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units 1 and 2.

The proposed amendments will revise Technical Specifications (TS) Section 3.7.2, "Main Steam Isolation Valves (MSIVs)," to incorporate the MSIV actuator trains into the Limiting Condition for Operation (LCO) and provide associated Conditions and Required Actions. In addition, Surveillance Requirement (SR) 3.7.2.2 is revised to clearly identify that the MSIV actuator trains are required to be tested in accordance with the SR.

These changes are considered necessary based on the referenced NRC staff interpretation that SR 3.7.2.2 requires both actuator trains for a single valve to be surveillance tested. The NRC staff interpretation results in declaring an MSIV inoperable with one actuator train inoperable. The Completion Time of 8 hours for an inoperable MSIV due to one inoperable actuator train is not commensurate with the safety significance of an inoperable actuator train. Therefore, new Conditions, Required Actions, and Completion Times for inoperable actuator train(s) are being proposed.

U. S. Nuclear Regulatory CommissionAugust 21, 2013

This attached amendment request is subdivided as follows:

Attachment 1 provides a description and evaluation of the proposed changes.Attachments 2 and 3 provide the marked-up TS pages for Braidwood Station and ByronStation, respectively, with the proposed changes indicated.Attachments 4 and 5 provide the marked-up TS Bases pages for Braidwood Station andByron Station, respectively, with the proposed changes indicated. The TS Bases pagesare provided for information only and do not require NRC approval.

The proposed change has been reviewed by the Braidwood Station and Byron Station PlantOperations Review Committees and approved by their respective Nuclear Safety ReviewBoards in accordance with the requirements of the EGC Quality Assurance Program.

In accordance with 10 CFR 50.91, "Notice for public comment; State consultation," paragraph(b), EGC is notifying the State of Illinois of this application for license amendment bytransmitting a copy of this letter and its attachments to the designated State Official.

EGC requests approval of the proposed license amendment by August 21, 2014. Onceapproved, the amendment will be implemented within 60 days.

There are no regulatory commitments contained in this letter. Should you have any questionsconcerning this letter, please contact Ms. Dwi Murray at (630) 657-3695.

I declare under penalty of perjury that the foregoing is true and correct. Executed on the 21stday of August 2013.

Respectfully,

David M. GullottManager - LicensingExelon Generation Company, LLC

Attachments:1. Evaluation of Proposed Changes2. Proposed Technical Specifications Changes for Braidwood Station, Units 1 and 23. Proposed Technical Specifications Changes for Byron Station, Units 1 and 24. Proposed Technical Specifications Bases Changes for Braidwood Station, Units 1 and 25. Proposed Technical Specifications Bases Changes for Byron Station, Units 1 and 2

cc:

NRC Regional Administrator - Region IIINRC Senior Resident Inspector - Braidwood StationNRC Senior Resident Inspector - Byron StationIllinois Emergency Management Agency - Division of Nuclear Safety

U. S. Nuclear Regulatory Commission August 21,2013 Page 2

This attached amendment request is subdivided as follows:

Attachment 1 provides a description and evaluation of the proposed changes. Attachments 2 and 3 provide the marked-up TS pages for Braidwood Station and Byron Station, respectively, with the proposed changes indicated. Attachments 4 and 5 provide the marked-up TS Bases pages for Braidwood Station and Byron Station, respectively, with the proposed changes indicated. The TS Bases pages are provided for information only and do not require NRC approval.

The proposed change has been reviewed by the Braidwood Station and Byron Station Plant Operations Review Committees and approved by their respective Nuclear Safety Review Boards in accordance with the requirements of the EGC Quality Assurance Program.

In accordance with 10 CFR 50.91, "Notice for public comment; State consultation," paragraph (b), EGC is notifying the State of Illinois of this application for license amendment by transmitting a copy of this letter and its attachments to the designated State Official.

EGC requests approval of the proposed license amendment by August 21, 2014. Once approved, the amendment will be implemented within 60 days.

There are no regulatory commitments contained in this letter. Should you have any questions concerning this letter, please contact Ms. Dwi Murray at (630) 657-3695.

I declare under penalty of perjury that the foregoing is true and correct. Executed on the 21 st

day of August 2013.

Respectfully,

Attachments: 1. Evaluation of Proposed Changes 2. Proposed Technical Specifications Changes for Braidwood Station, Units 1 and 2 3. Proposed Technical Specifications Changes for Byron Station, Units 1 and 2 4. Proposed Technical Specifications Bases Changes for Braidwood Station, Units 1 and 2 5. Proposed Technical Specifications Bases Changes for Byron Station, Units 1 and 2

cc: NRC Regional Administrator - Region III NRC Senior Resident Inspector - Braidwood Station NRC Senior Resident Inspector - Byron Station Illinois Emergency Management Agency - Division of Nuclear Safety

ATTACHMENT IEvaluation of Proposed Changes

Subject:

License Amendment Request to Revise Technical Specifications Section 3.7.2,"Main Steam Isolation Valves (MSIVs)"

1.0 SUMMARY DESCRIPTION

2.0 DETAILED DESCRIPTION

3.0 TECHNICAL EVALUATION

4.0 REGULATORY EVALUATION

4.1

Applicable Regulatory Requirements/Criteria

4.2

Precedents

4.3

No Significant Hazards Consideration

4.4

Conclusions

5.0 ENVIRONMENTAL CONSIDERATION

6.0 REFERENCES

Page 1 of 12

ATIACHMENT1 Eval uation of Proposed Changes

Subject: License Amendment Request to Revise Technical Specifications Section 3.7.2, "Main Steam Isolation Valves (MSIVs)"





4.1 Applicable Regulatory Requirements/Criteria

4.2 Precedents

4.3 No Significant Hazards Consideration

4.4 Conclusions


6.0 REFERENCES

Page 1 of 12



This evaluation supports a request to amend Facility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station, Units 1 and 2, and Facility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units 1 and 2.

Exelon Generation Company, LLC, (EGC) proposes to revise Technical Specifications (TS)Section 3.7.2, "Main Steam Isolation Valves (MSIVs)," to incorporate the MSIV actuator trainsinto the Limiting Condition for Operation (LCO) and provides associated Conditions andRequired Actions. Additionally, Surveillance Requirement (SR) 3.7.2.2 is revised to clearlyidentify that the MSIV actuator trains are required to be tested in accordance with the SR.

The proposed changes address an NRC staff interpretation that SR 3.7.2.2 requires bothactuator trains for a single valve to be tested (Reference 1). The NRC staff interpretation resultsin declaring an MSIV inoperable when one actuator train is inoperable. The existing CompletionTime of 8 hours for an inoperable MSIV due to one inoperable actuator train is notcommensurate with the safety significance of the condition. Therefore, new Conditions,Required Actions, and Completion Times for inoperable actuator train(s) are being proposed.


TS 3.7.2, "Main Steam Isolation Valves (MSIVs)," specify operability and surveillancerequirements for the MSIVs, which includes Conditions and Required Actions to be enteredwhen one or more MSIVs are inoperable. Currently, TS 3.7. 2 does not specifically address orreflect the two independent actuator trains for one MSIV. Inoperability of one of the two actuatortrains associated with an MSIV does not by itself make the valve incapable of closing since theremaining OPERABLE actuator train can alone effect valve closure on demand. Declaring anMSIV inoperable and entering the Condition(s) and Required Action(s) for an inoperable MSIVdue only to one inoperable actuator train, is unnecessarily restrictive. Therefore, EGC proposesto incorporate requirements specifically for the MSIV actuator trains within TS 3.7 .2 such thatthe specification would include appropriate Conditions and Required Actions to addressinoperable MSIV actuator trains.

Consistent with other Improved Standard Technical Specifications format, the proposedCompletion Times for inoperable MSIV actuator trains are based on a hierarchy of Conditionssuch that shorter Completion Times would be specified for increasingly degraded conditions.Conditions addressing inoperable actuator trains would be specified first in TS 3.7.2, (i.e., listedbefore the Conditions that are currently in place for addressing inoperability of the MSIVsthemselves). Therefore, TS 3.7.2 specifies that when only an actuator train is declaredinoperable, the applicable Condition for the inoperable actuator train would be entered first.Then, depending on the number of actuator trains that are concurrently inoperable and theassociated Required Action for the applicable Condition; or if the applicable Required Actionand Completion Time cannot be met, the MSIV(s) associated with the inoperable actuatortrain(s) would be declared inoperable so that the Condition(s) addressing inoperability of theMSIV(s) would thus be entered.

Page 2 of 12

ATTACHMENT 1 Evaluation of Proposed Changes


This evaluation supports a request to amend Facility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station, Units 1 and 2, and Facility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units 1 and 2.

Exelon Generation Company, LLC, (EGC) proposes to revise Technical Specifications (TS) Section 3.7.2, "Main Steam Isolation Valves (MSIVs)," to incorporate the MSIV actuator trains into the Limiting Condition for Operation (LCO) and provides associated Conditions and Required Actions. Additionally, Surveillance Requirement (SR) 3.7.2.2 is revised to clearly identify that the MSIV actuator trains are required to be tested in accordance with the SR.

The proposed changes address an NRC staff interpretation that SR 3.7.2.2 requires both actuator trains for a single valve to be tested (Reference 1). The NRC staff interpretation results in declaring an MSIV inoperable when one actuator train is inoperable. The existing Completion Time of 8 hours for an inoperable MSIV due to one inoperable actuator train is not commensurate with the safety significance of the condition. Therefore, new Conditions, Required Actions, and Completion Times for inoperable actuator train(s) are being proposed.


TS 3.7.2, "Main Steam Isolation Valves (MSIVs)," specify operability and surveillance requirements for the MSIVs, which includes Conditions and Required Actions to be entered when one or more MSIVs are inoperable. Currently, TS 3.7.2 does not specifically address or reflect the two independent actuator trains for one MSIV. Inoperability of one of the two actuator trains associated with an MSIV does not by itself make the valve incapable of closing since the remaining OPERABLE actuator train can alone effect valve closure on demand. Declaring an MSIV inoperable and entering the Condition(s) and Required Action(s) for an inoperable MSIV due only to one inoperable actuator train, is unnecessarily restrictive. Therefore, EGC proposes to incorporate requirements specifically for the MSIV actuator trains within TS 3.7.2 such that the specification would include appropriate Conditions and Required Actions to address inoperable MSIV actuator trains.

Consistent with other Improved Standard Technical Specifications format, the proposed Completion Times for inoperable MSIV actuator trains are based on a hierarchy of Conditions such that shorter Completion Times would be specified for increasingly degraded conditions. Conditions addressing inoperable actuator trains would be specified first in TS 3.7.2, (Le., listed before the Conditions that are currently in place for addressing inoperability of the MSIVs themselves). Therefore, TS 3.7.2 specifies that when only an actuator train is declared inoperable, the applicable Condition for the inoperable actuator train would be entered first. Then, depending on the number of actuator trains that are concurrently inoperable and the associated Required Action for the applicable Condition; or if the applicable Required Action and Completion Time cannot be met, the MSIV(s) associated with the inoperable actuator train(s) would be declared inoperable so that the Condition(s) addressing inoperability of the MSIV(s) would thus be entered.

Page 2 of 12


The following proposed changes will revise TS 3.7.2:

• LCO 3 .7.2 is revised to include the actuator trains in the LCO. LCO 3.7.2 is revised to state:"Four MSIVs and their associated actuator trains shall be OPERABLE."

• New Conditions A through E are added to TS 3.7.2 to address inoperable MSIV actuatortrains. The existing Conditions that address inoperable valves are relabeled such that thoseConditions would become Conditions F through I for TS 3.7.2. The proposed newConditions related specifically to the actuator trains would address various degrees orcombinations of inoperable actuator trains as follows:

o New Condition A would address the condition of having one MSIV actuator traininoperable (for a single valve). The proposed Required Action for this Condition wouldrequire restoring the inoperable actuator train to OPERABLE status within 7 days.

o New Condition B would address the condition of having two MSIV actuator trainsinoperable for different valves (i.e., one actuator train inoperable for each of two MSIVs)such that the actuator trains are not in the same ESF division. The proposed RequiredAction for this Condition would require restoring at least one actuator train toOPERABLE status within 72 hours.

o New Condition C would address the situation when two MSIV actuator trains areinoperable for different valves and the inoperable actuator trains are both in the sameESF division. The proposed Required Action for this Condition would require restoringat least one actuator train to OPERABLE status within 24 hours.

o New Condition D would address the situation when both actuator trains for one MSIV areinoperable. The Required Action proposed for this Condition would require immediatelydeclaring the affected MSIV inoperable.

o New Condition E would address the condition of having three or more MSIV actuatortrains inoperable, or the condition when, after entering Conditions A, B, or C, it isdetermined that the Required Action and Completion Time of any of those Conditionscannot be met. The Required Action for this Condition would require immediatelydeclaring each affected MSIV inoperable.

• SR 3.7.2.2 is revised to clearly identify that the MSIV actuator trains are required to betested in accordance with the SR. SR 3.7.2.2 is revised to state: "Verify each actuator trainactuates the MSIV to the isolation position on an actual or simulated actuation signal."

Attachments 2 and 3 provide the marked up TS pages for Braidwood and Byron Stations,respectively, for the proposed changes.

Attachments 4 and 5 include the marked up TS Bases pages associated with the proposedchanges and are provided for information only.

Page 3 of 12


The following proposed changes will revise TS 3.7.2:

• LCO 3.7.2 is revised to include the actuator trains in the LCO. LCO 3.7.2 is revised to state: "Four MSIVs and their associated actuator trains shall be OPERABLE."

• New Conditions A through E are added to TS 3.7.2 to address inoperable MSIV actuator trains. The existing Conditions that address inoperable valves are relabeled such that those Conditions would become Conditions F through I for TS 3.7.2. The proposed new Conditions related specifically to the actuator trains would address various degrees or combinations of inoperable actuator trains as follows:

o New Condition A would address the condition of having one MSIV actuator train inoperable (for a single valve). The proposed Required Action for this Condition would require restoring the inoperable actuator train to OPERABLE status within 7 days.

o New Condition B would address the condition of having two MSIV actuator trains inoperable for different valves (Le., one actuator train inoperable for each of two MSIVs) such that the actuator trains are not in the same ESF division. The proposed Required Action for this Condition would require restoring at least one actuator train to OPERABLE status within 72 hours.

o New Condition C would address the situation when two MSIV actuator trains are inoperable for different valves and the inoperable actuator trains are both in the same ESF division. The proposed Required Action for this Condition would require restoring at least one actuator train to OPERABLE status within 24 hours.

o New Condition D would address the situation when both actuator trains for one MSIV are inoperable. The Required Action proposed for this Condition would require immediately declaring the affected MSIV inoperable.

o New Condition E would address the condition of having three or more MSIV actuator trains inoperable, or the condition when, after entering Conditions A, B, or C, it is determined that the Required Action and Completion Time of any of those Conditions cannot be met. The Required Action for this Condition would require immediately declaring each affected MSIV inoperable.

• SR 3.7.2.2 is revised to clearly identify that the MSIV actuator trains are required to be tested in accordance with the SR. SR 3.7.2.2 is revised to state: "Verify each actuator train actuates the MSIV to the isolation position on an actual or simulated actuation signaL"

Attachments 2 and 3 provide the marked up TS pages for Braidwood and Byron Stations, respectively, for the proposed changes.

Attachments 4 and 5 include the marked up TS Bases pages associated with the proposed changes and are provided for information only.

Page 3 of 12



Background

On July 13, 2006, at a NRC inspection exit meeting, the NRC identified a potential Green findingand associated non-cited violation for Wolf Creek for a violation of TS 3.7.2 in that a MSIV wasnot restored to OPERABLE status within the 8 hour Completion Time as required by TS 3.7.2,Required Action A.1. Shortly after the exit meeting, licensee requested a meeting with the NRC

staff to present information regarding the Wolf Creek analyses and compliance with TechnicalSpecifications. The licensee was notified subsequent to the exit meeting and prior to a meetingwith the NRC staff that the potential Green finding and associated non-cited violation was beingwithdrawn pending further review.

On August 16, 2006, Wolf Creek and Callaway Plant personnel met with the NRC staff (NRRand Region IV personnel) to provide information on the MSIV operation, design bases, safetyanalyses, and Technical Specifications. The meeting was an informational meeting and theNRC did not provide a specific position at the meeting (Reference 2).

On August 21, 2006, the NRC Project Manager communicated to Wolf Creek personnel that theposition that SR 3.7.2.2 is interpreted by the NRC staff that the SR requires both actuator trainsbe surveillance tested. Since SR 3.0.1 requires SRs to be met and that failure to meet a SR,whether such failure is experienced during the performance of the SR or between performancesof the SR, shall be a failure to meet the LCO. Therefore, the failure of an actuator train is afailure to meet the SR which results in LCO 3.7.2 not being met and the MSIV should bedeclared inoperable absent any specific Conditions associated to actuator trains.

On October 19, 2006, the NRC concluded in a memorandum (Reference 1) that the loss of anMSIV actuator train would result in Callaway having to declare the associated MSIV inoperable.

The NRC staff interpretation results in declaring an MSIV inoperable for those plants with dualMSIV actuator trains when one actuator train is inoperable. The existing Completion Time foran inoperable MSIV does not typically provide a reasonable amount of time to effect repairs toone inoperable actuator train. Declaring an MSIV inoperable and having to enter theCondition(s) and Required Action(s) for an MSIV inoperable due only to one inoperable actuatortrain is unnecessarily restrictive. Therefore, EGC proposes to incorporate requirementsspecifically for the MSIV actuator trains within TS 3.7.2 such that the specification would includeConditions and Required Actions to address inoperable MSIV actuator trains.

Technical Analysis

Main Steam Isolation Valves (MSIVs)

The MSIVs isolate steam flow from the secondary side of the steam generators following asteam line isolation signal. One MSIV is installed in each of the main steam lines outside thecontainment and downstream of the main steam safety valves. The MSIVs prevent uncontrolledblowdown from more than one steam generator in the event of a postulated design basisaccident. Each MSIV is a gate valve with a double gate design that is hydraulically operated.As described in the Updated Final Safety Analysis Report (UFSAR), the valve is designed to

Page 4 of 12



Background

On July 13, 2006, at a NRC inspection exit meeting, the NRC identified a potential Green finding and associated non-cited violation for Wolf Creek for a violation of TS 3.7.2 in that a MSIV was not restored to OPERABLE status within the 8 hour Completion Time as required by TS 3.7.2, Required Action A.1. Shortly after the exit meeting, licensee requested a meeting with the NRC staff to present information regarding the Wolf Creek analyses and compliance with Technical Specifications. The licensee was notified subsequent to the exit meeting and prior to a meeting with the NRC staff that the potential Green finding and associated non-cited violation was being withdrawn pending further review.

On August 16, 2006, Wolf Creek and Callaway Plant personnel met with the NRC staff (NRR and Region IV personnel) to provide information on the MSIV operation, design bases, safety analyses, and Technical Specifications. The meeting was an informational meeting and the NRC did not provide a specific position at the meeting (Reference 2).

On August 21, 2006, the NRC Project Manager communicated to Wolf Creek personnel that the position that SR 3.7.2.2 is interpreted by the NRC staff that the SR requires both actuator trains be surveillance tested. Since SR 3.0.1 requires SRs to be met and that failure to meet a SR, whether such failure is experienced during the performance of the SR or between performances of the SR, shall be a failure to meet the LCO. Therefore, the failure of an actuator train is a failure to meet the SR which results in LCO 3.7.2 not being met and the MSIV should be declared inoperable absent any specific Conditions associated to actuator trains.

On October 19, 2006, the NRC concluded in a memorandum (Reference 1) that the loss of an MSIV actuator train would result in Callaway having to declare the associated MSIV inoperable.

The NRC staff interpretation results in declaring an MSIV inoperable for those plants with dual MSIV actuator trains when one actuator train is inoperable. The existing Completion Time for an inoperable MSIV does not typically provide a reasonable amount of time to effect repairs to one inoperable actuator train. Declaring an MSIV inoperable and having to enter the Condition(s) and Required Action(s) for an MSIV inoperable due only to one inoperable actuator train is unnecessarily restrictive. Therefore, EGC proposes to incorporate requirements specifically for the MSIV actuator trains within TS 3.7.2 such that the specification would include Conditions and Required Actions to address inoperable MSIV actuator trains.

Technical Analvsis

Main Steam Isolation Valves (MSIVs)

The MSIVs isolate steam flow from the secondary side of the steam generators following a steam line isolation signal. One MSIV is installed in each of the main steam lines outside the containment and downstream of the main steam safety valves. The MSIVs prevent uncontrolled blowdown from more than one steam generator in the event of a postulated design basis accident. Each MSIV is a gate valve with a double gate design that is hydraulically operated. As described in the Updated Final Safety Analysis Report (UFSAR), the valve is designed to

Page 4 of 12


close in less than 5 seconds based on the limiting accident of a steam line break outside thecontainment to limit cool down rate of the reactor coolant system.

Each MSIV is equipped with two redundant hydraulic actuator trains such that either actuatortrain can independently perform the safety function to fast-close the valve on demand. TheMSIVs fail as is on loss of control or actuation power and are interlocked with the EngineeredSafety Features (ESF) system to auto close on the following main steam line isolation signals:manual; low steam line pressure; high negative rate steam line pressure; containment pressurehigh-high (Hi-2).

MSIV Actuator Train

The Braidwood and Byron Stations' MSIV configuration consists of four valves per unit with onevalve per loop. The MSIVs are hydraulically actuated double disk gate valves. The actuatorsystem is designed to provide a rapid closure in the event of a receipt of an isolation signal.The electrical design of the MSIV control circuit has independent and redundant "Active" train(Train A) and "Standby" train (Train B) actuator components. Both the active and standby trainsare activated by the main steam line isolation signals. Each train is powered from a separateESF division that is actuated by a separate and independent MSIV emergency closure signal.

For the 'A' and 'D' MSIVs, the active trains are powered by the Division 1 ESF bus, while thestandby trains are powered by the Division 2 ESF bus. Conversely, the 'B' and 'C' MSIVs activetrains are powered by the Division 2 ESF bus, while the standby trains are powered by theDivision 1 ESF bus. Both MSIV actuator trains (active and standby) will receive automaticclosure signals on low steam line pressure signals in any one steam line, high negative steampressure rate signals in any steam line, or on a high-high containment pressure signal. Uponreceipt of a closure signal, one MSIV control solenoid valve per individual train energizes,allowing pilot air to shuttle a four-way valve per individual train in the necessary position to allowpressurized hydraulic fluid to flow from the charged accumulators to the hydraulic cylinder,causing the double disk gate valve to close and isolate the associated steam line within the 5seconds closure criterion.

Because of complete redundancy (i.e., independent active train and standby train components),the actuator is capable of performing its fast closure function with either one of the two hydraulicsystems. Assuming a single failure of one of the redundant actuator trains, the valve will closewithin five seconds. When both the active and standby trains actuator components are utilized,as is the case upon receipt of a low steam line pressure, high-high containment pressure,manual, or high negative rate steam line pressure signal, the valve will close in less than 5seconds.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at theMSIV location. The actuator train does not include any portion of the analog channels orprotection system actuation logic and actuation relays that provide inputs to the valve actuatortrains. The Engineered Safety Features Actuation System (ESFAS) Instrumentationspecification provides separate Conditions, Required Actions, and Surveillance Requirementsfor the analog channels and protection system logic and relays.

Page 5 of 12


close in less than 5 seconds based on the limiting accident of a steam line break outside the containment to limit cool down rate of the reactor coolant system.

Each MSIV is equipped with two redundant hydraulic actuator trains such that either actuator train can independently perform the safety function to fast-close the valve on demand. The MSIVs fail as is on loss of control or actuation power and are interlocked with the Engineered Safety Features (ESF) system to auto close on the following main steam line isolation signals: manual; low steam line pressure; high negative rate steam line pressure; containment pressure high-high (Hi-2).

MSIV Actuator Train

The Braidwood and Byron Stations' MSIV configuration consists of four valves per unit with one valve per loop. The MSIVs are hydraulically actuated double disk gate valves. The actuator system is designed to provide a rapid closure in the event of a receipt of an isolation signal. The electrical design of the MSIV control circuit has independent and redundant "Active" train (Train A) and "Standby" train (Train B) actuator components. Both the active and standby trains are activated by the main steam line isolation signals. Each train is powered from a separate ESF division that is actuated by a separate and independent MSIV emergency closure signal.

For the 'A' and '0' MSIVs, the active trains are powered by the Division 1 ESF bus, while the standby trains are powered by the Division 2 ESF bus. Conversely, the 'B' and 'C' MSIVs active trains are powered by the Division 2 ESF bus, while the standby trains are powered by the Division 1 ESF bus. Both MSIV actuator trains (active and standby) will receive automatic closure signals on low steam line pressure signals in anyone steam line, high negative steam pressure rate signals in any steam line, or on a high-high containment pressure signal. Upon receipt of a closure signal, one MSIV control solenoid valve per individual train energizes, allowing pilot air to shuttle a four-way valve per individual train in the necessary position to allow pressurized hydraulic fluid to flow from the charged accumulators to the hydraulic cylinder, causing the double disk gate valve to close and isolate the associated steam line within the 5 seconds closure criterion.

Because of complete redundancy (Le., independent active train and standby train components), the actuator is capable of performing its fast closure function with either one of the two hydraulic systems. Assuming a single failure of one of the redundant actuator trains, the valve will close within five seconds. When both the active and standby trains actuator components are utilized, as is the case upon receipt of a low steam line pressure, high-high containment pressure, manual, or high negative rate steam line pressure signal, the valve will close in less than 5 seconds.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at the MSIV location. The actuator train does not include any portion of the analog channels or protection system actuation logic and actuation relays that provide inputs to the valve actuator trains. The Engineered Safety Features Actuation System (ESFAS) Instrumentation specification provides separate Conditions, Required Actions, and Surveillance Requirements for the analog channels and protection system logic and relays.

Page 5 of 12

ATTACHMENT 1Evaluation of Proposed Changes

Justification for the Completion Times is as follows:

• Condition A - With only a single actuator train inoperable on one MSIV, a Completion Timeof 7 days for Required Action A.1 is reasonable due to the fact that with one actuator traininoperable and the dual-redundant actuator design, the affected valve would still be capableof closing on demand (assuming no additional failures) via the remaining OPERABLEactuator train. The proposed 7 day Completion Time takes into account the designredundancy, reasonable time for repairs, and the low probability of a design basis accidentoccurring during this period.

• Condition B - With one inoperable actuator train on one MSIV and one inoperable actuatortrain on another MSIV, such that the actuator trains are not in the same ESF division, aCompletion Time of 72 hours for Required Action B.1 is reasonable. This is based on thedual-redundant actuator train design which ensures that with only one actuator traininoperable on each of the affected MSIVs, each MSIV would still be capable of closing ondemand, assuming no additional failures. Compared to Condition A however, it isappropriate to have a shorter Completion Time for Condition B since with an actuator traininoperable on each of two MSIVs, there is an increased likelihood that an additional failure(such as the failure of an actuation logic train) would cause an MSIV to fail to close.

• Condition C - With one inoperable actuator train on one MSIV and one inoperable actuatortrain on another MSIV, but with both inoperable actuator trains in the same ESF division, aCompletion Time of 24 hours for Required Action C.1 is appropriate. Like the above cases,the dual-redundant actuator train design for each MSIV ensures that a single inoperableactuator train for any valve would not prevent the affected valve from closing on demand. Inthis regard, 24 hour Completion Time is reasonable and conservative since only oneactuator train per valve is permitted to be inoperable (for two MSIVs), so that the remainingOPERABLE actuator train on each affected MSIV remains capable of effecting valve closureon demand (assuming no additional failures). A Completion Time of 24 hours is alsoconsidered appropriate given the low probability of an event occurring during such aninterval that would demand MSIV closure. Additionally, the Completion Time is consistentwith Condition G of TS 3.3.2, "Engineered Safety Feature Actuation System (ESFAS)Instrumentation," which provides a 24-hour Completion Time for restoring one train toOPERABLE status. Condition G is applicable to Function 4.b (Steam Line Isolation -Automatic Actuation Logic and Actuation Relays) which provides the actuation logic from theSolid State Protection System to the actuator trains. A loss of one actuation logic trainwould be equivalent to a loss of all actuator trains that receive a signal from that actuationlogic.

However, compared to the Required Action for Condition B above, a shorter CompletionTime for Condition C is appropriate since with two actuator trains inoperable in the sameESF division, an additional failure such as the failure of an actuation logic train in the otherESF division could cause both affected MSIVs to fail to close on demand.

• For Conditions D and E, the Completion Time of "immediately" is conservative andappropriate. For Condition D, for example, when both actuator trains for one MSIV areinoperable, it is appropriate to require immediately declaring the valve inoperable sincehaving both actuator trains inoperable would constitute a condition that renders the affected

Page 6 of 12


Justification for the Completion Times is as follows:

• Condition A - With only a single actuator train inoperable on one MSIV, a Completion Time of 7 days for Required Action A.1 is reasonable due to the fact that with one actuator train inoperable and the dual-redundant actuator design, the affected valve would still be capable of closing on demand (assuming no additional failures) via the remaining OPERABLE actuator train. The proposed 7 day Completion Time takes into account the design redundancy, reasonable time for repairs, and the low probability of a design basis accident occurring during this period.

• Condition B - With one inoperable actuator train on one MSIV and one inoperable actuator train on another MSIV, such that the actuator trains are not in the same ESF division, a Completion Time of 72 hours for Required Action B.1 is reasonable. This is based on the dual-redundant actuator train design which ensures that with only one actuator train inoperable on each of the affected MSIVs, each MSIV would still be capable of closing on demand, assuming no additional failures. Compared to Condition A however, it is appropriate to have a shorter Completion Time for Condition B since with an actuator train inoperable on each of two MSIVs, there is an increased likelihood that an additional failure (such as the failure of an actuation logic train) would cause an MSIV to fail to close.

• Condition C - With one inoperable actuator train on one MSIV and one inoperable actuator train on another MSIV, but with both inoperable actuator trains in the same ESF division, a Completion Time of 24 hours for Required Action C.1 is appropriate. Like the above cases, the dual-redundant actuator train design for each MSIV ensures that a single inoperable actuator train for any valve would not prevent the affected valve from closing on demand. In this regard, 24 hour Completion Time is reasonable and conservative since only one actuator train per valve is permitted to be inoperable (for two MSIVs), so that the remaining OPERABLE actuator train on each affected MSIV remains capable of effecting valve closure on demand (assuming no additional failures). A Completion Time of 24 hours is also considered appropriate given the low probability of an event occurring during such an interval that would demand MSIV closure. Additionally, the Completion Time is consistent with Condition G of TS 3.3.2, "Engineered Safety Feature Actuation System (ESFAS) Instrumentation," which provides a 24-hour Completion Time for restoring one train to OPERABLE status. Condition G is applicable to Function 4.b (Steam Line IsolationAutomatic Actuation Logic and Actuation Relays) which provides the actuation logic from the Solid State Protection System to the actuator trains. A loss of one actuation logic train would be equivalent to a loss of all actuator trains that receive a signal from that actuation logic.

However, compared to the Required Action for Condition B above, a shorter Completion Time for Condition C is appropriate since with two actuator trains inoperable in the same ESF division, an additional failure such as the failure of an actuation logic train in the other ESF division could cause both affected MSIVs to fail to close on demand.

• For Conditions D and E, the Completion Time of "immediately" is conservative and appropriate. For Condition D, for example, when both actuator trains for one MSIV are inoperable, it is appropriate to require immediately declaring the valve inoperable since having both actuator trains inoperable would constitute a condition that renders the affected

Page 6 of 12


MSIV incapable of closing on demand.

With respect to Condition E, for the Condition when the Required Action and associatedCompletion Time of Condition A, B, or C is not met, it follows that the affected MSIVs)should immediately be declared inoperable since the assumption is that the CompletionTime(s) of Condition A, B, or C has expired or cannot be met. This "default" Condition is inkeeping with the intent that when only the actuator trains for affected MSIVs are inoperable(and not the valves themselves), the Conditions and Required Actions for the inoperablevalve actuator trains should be entered first, and then if those Required Actions cannot bemet, the affected MSIVs should be declared inoperable so that the Conditions and RequiredActions for the inoperable valves are then entered. Required Action E.1 ensures theaffected MSIVs) are promptly declared inoperable. This format or approach is consistent

with other Technical Specifications and the format of the Improved Standard TechnicalSpecifications (NUREG-1431).

For the other portion of Condition E, i.e., for the condition when three or more actuator trainsare inoperable, it is conservative and appropriate as well to immediately declare the affectedMSIVs inoperable for this condition. For the situation of having three inoperable actuatortrains, for example, such a condition could involve two inoperable actuator trains on onevalve and one inoperable actuator train on another valve, or one inoperable actuator train oneach of three valves. In each case, the inoperable actuator trains could all be in the sameESF division or be staggered among the two ESF divisions. In the former case, a singleassumed failure such as an instrument logic train failure could cause one or two valves tofail to close on demand. In the latter case, such a single failure could cause either none ofthe valves to fail to close on demand, or all three to fail to close on demand. Thus,immediately declaring the affected MSIVs inoperable is appropriate. In any case, theconditions addressed by Condition E would constitute an inoperability that exceeds thescope of any of the conditions addressed by Conditions A, B. or C, and it is conservative inthis case to simply require declaring all of the affected MSIVs inoperable.

• The Bases of Surveillance Requirements (SR) 3.7.2.2 are revised to clearly identify that theMSIV actuator trains are required to be tested in accordance with the SR. Since the currentSR do not clearly articulate applicability to the actuator trains and the NRC staffinterpretation is that the actuator trains are encompassed within the SR, a revision to the SRBases to clarify this point is appropriate.

A probabilistic risk analysis (PRA) was performed to evaluate the risk impacts of the proposedCompletion Times associated with the MSIV actuator trains. This risk analysis was not used toestablish the proposed Completion Times; however, it was used to validate the acceptability ofthe proposed Completion Times. The risk analysis followed the guidance suggested inRegulatory Guide (RG)1.174 and RG 1.177 to determine the significance of the proposedCompletion Times.

The risk analysis examined two sets of risk metrics, which are the change in annual average

core damage frequency (CDF)/Iarge early release frequency (LERF), and the incrementalconditional core damage probability (ICCDP)/incremental conditional large early releaseprobability (ICLERP). The risk analysis modeled the allowed outage times (AOTs) proposed asCompletion Times for TS Conditions A, B, and C. The calculation used in the analysis

Page 7 of 12

ATIACHMENT1 Evaluation of Proposed Changes

MSIV incapable of closing on demand.

With respect to Condition E, for the Condition when the Required Action and associated Completion Time of Condition A, B, or C is not met, it follows that the affected MSIV(s) should immediately be declared inoperable since the assumption is that the Completion Time(s) of Condition A, B, or C has expired or cannot be met. This "default" Condition is in keeping with the intent that when only the actuator trains for affected MSIVs are inoperable (and not the valves themselves), the Conditions and Required Actions for the inoperable valve actuator trains should be entered first, and then if those Required Actions cannot be met, the affected MSIVs should be declared inoperable so that the Conditions and Required Actions for the inoperable valves are then entered. Required Action E.1 ensures the affected MSIV(s) are promptly declared inoperable. This format or approach is consistent with other Technical Specifications and the format of the Improved Standard Technical Specifications (NUREG-1431).

For the other portion of Condition E, i.e., for the condition when three or more actuator trains are inoperable, it is conservative and appropriate as well to immediately declare the affected MSIVs inoperable for this condition. For the situation of having three inoperable actuator trains, for example, such a condition could involve two inoperable actuator trains on one valve and one inoperable actuator train on another valve, or one inoperable actuator train on each of three valves. In each case, the inoperable actuator trains could all be in the same ESF division or be staggered among the two ESF divisions. In the former case, a single assumed failure such as an instrument logic train failure could cause one or two valves to fail to close on demand. In the latter case, such a single failure could cause either none of the valves to fail to close on demand, or all three to fail to close on demand. Thus, immediately declaring the affected MSIVs inoperable is appropriate. In any case, the conditions addressed by Condition E would constitute an inoperability that exceeds the scope of any of the conditions addressed by Conditions A, B. or C, and it is conservative in this case to simply require declaring all of the affected MSIVs inoperable.

• The Bases of Surveillance Requirements (SR) 3.7.2.2 are revised to clearly identify that the MSIV actuator trains are required to be tested in accordance with the SR. Since the current SR do not clearly articulate applicability to the actuator trains and the NRC staff interpretation is that the actuator trains are encompassed within the SR, a revision to the SR Bases to clarify this point is appropriate.

A probabilistic risk analysis (PRA) was performed to evaluate the risk impacts of the proposed Completion Times associated with the MSIV actuator trains. This risk analysis was not used to establish the proposed Completion Times; however, it was used to validate the acceptability of the proposed Completion Times. The risk analysis followed the guidance suggested in Regulatory Guide (RG) 1.174 and RG 1.177 to determine the significance of the proposed Completion Times.

The risk analysis examined two sets of risk metrics, which are the change in annual average core damage frequency (CDF)lIarge early release frequency (LERF), and the incremental conditional core damage probability (ICCDP)/incremental conditional large early release probability (ICLERP). The risk analysis modeled the allowed outage times (AOTs) proposed as Completion Times for TS Conditions A, B, and C. The calculation used in the analysis

Page 7 of 12


represented the proposed Completion Times for each condition's configuration over the fuelcycle for each Braidwood and Byron Stations' unit.

Based on the analysis, the risk metrics results for each Braidwood and Byron Stations' unit arewell below the recommended values of RG 1.174 and RG 1.177 as shown in the following table,which demonstrates that the risk of the proposed Completion Times are acceptable.

Proposed Completion Times Risk Results

Risk Metric Target Braidwood Unit I Braidwood Unit 2 Byron Unit I Byron Unit 2OCDF 1.0E-6 9.17E-10 9.17E-10 9.17E-10 9.39E-10ALERF 1.0E-7 7.82E-11 9.79E-1 1 7.49E-11 1.06E-10ICCDP 5.0E-7 1.01E-10 1.01 E-10 1.01 E-10 1.04E-10ICLERP 5.0E-8 1.01 E-11 1.26E-11 9.59E-12 1.21 E-11


4.1

Applicable Regulatory Requirements /Criteria

The following NRC requirements and guidance documents are applicable to the review of theproposed changes.

10 CFR 50, Appendix A, General Design Criterion (GDC) 2, "Design bases for protectionagainst natural phenomena," requires that the safety related portion of the Main Steam SupplySystem be protected from the effects of natural phenomena, such as earthquakes, tornadoes,hurricanes, floods, and external missiles.

10 CFR 50, Appendix A, GDC 4, "Environmental and dynamic effects design bases," requiresthat the Main Steam Supply System be designed to remain functional after a safe shutdownearthquake or to perform its intended function following postulated hazards such as internalmissiles, or pipe break.

10 CFR 50, Appendix A, GDC 22, "Protection system independence," requires that the MainSteam Supply System be designed to assure that the effects of natural phenomena, and ofnormal operating, maintenance, testing, and postulated accident conditions on redundantchannels do not result in loss of the protection function, or be demonstrated to be acceptable onsome other defined basis.

10 CFR 50, Appendix A, GDC 34, "Residual heat removal," requires that componentredundancy be provided for the Main Steam Supply System so that safety functions can beperformed, assuming a single active component failure coincident with the loss of offsite power.

10 CFR 50, Appendix A, GDC 57, "Closed system isolation valves," requires that the MainSteam Supply System line that penetrates primary reactor containment and is not part of thereactor coolant pressure boundary or is not connected directly to the containment atmosphereshall have at least one containment isolation valve. This valve shall be either automatic, or

Page 8 of 12


represented the proposed Completion Times for each condition's configuration over the fuel cycle for each Braidwood and Byron Stations' unit.

Based on the analysis, the risk metrics results for each Braidwood and Byron Stations' unit are well below the recommended values of RG 1.174 and RG 1.177 as shown in the following table, which demonstrates that the risk of the proposed Completion Times are acceptable.

Proposed Completion Times Risk Results

Risk Metric Target Braidwood Unit 1 Braidwood Unit 2 Byron Unit 1 Byron Unit 2 boCDF 1.0E-6 9.17E-10 9.17E-10 9.17E-10 9.39E-10 boLERF 1.0E-7 7.S2E-11 9.79E-11 7.49E-11 1.06E-10 ICCDP 5.0E-7 1.01E-10 1.01 E-10 1.01E-10 1.04E-10 ICLERP 5.0E-S 1.01E-11 1.26E-11 9.59E-12 1.21 E-11


4.1 Applicable Regulatory Requirements/Criteria

The following NRC requirements and guidance documents are applicable to the review of the proposed changes.

10 CFR 50 , Appendix A, General Design Criterion (GDC) 2, "Design bases for protection against natural phenomena," requires that the safety related portion of the Main Steam Supply System be protected from the effects of natural phenomena, such as earthquakes, tornadoes, hurricanes, floods, and external missiles.

1 0 CFR 50 , Appendix A, GDC 4, "Environmental and dynamic effects design bases," requires that the Main Steam Supply System be designed to remain functional after a safe shutdown earthquake or to perform its intended function following postulated hazards such as internal missiles, or pipe break.

10 CFR 50, Appendix A, GDC 22, "Protection system independence," requires that the Main Steam Supply System be designed to assure that the effects of natural phenomena, and of normal operating, maintenance, testing, and postulated accident conditions on redundant channels do not result in loss of the protection function, or be demonstrated to be acceptable on some other defined basis.

10 CFR 50, Appendix A, GDC 34, "Residual heat removal," requires that component redundancy be provided for the Main Steam Supply System so that safety functions can be performed, assuming a single active component failure coincident with the loss of offsite power.

10 CFR 50, Appendix A, GDC 57, "Closed system isolation valves," requires that the Main Steam Supply System line that penetrates primary reactor containment and is not part of the reactor coolant pressure boundary or is not connected directly to the containment atmosphere shall have at least one containment isolation valve. This valve shall be either automatic, or

Page S of 12


locked closed, or capable of remote manual operation, be located outside containment and asclose to the containment as practical.

10 CFR 50.36(c)(2), "Limiting conditions for operation," paragraph (i) defines the limitingconditions for operation as the lowest functional capability or performance levels of equipmentrequired for safe operation of the facility. When a limiting condition for operation of a nuclearreactor is not met, the licensee shall shut down the reactor or follow any remedial actionpermitted by the technical specifications until the condition can be met. Furthermore, Criterion 3of 10 CFR 50.36(c)(2)(ii) requires that a TS LCO must be established for a structure, system, orcomponent that is part of the primary success path and functions to mitigate a design basisaccident or transient that either assumes the failure of or presents a challenge to the integrity ofa fission product barrier.

10 CFR 50.36(c)(3), "Surveillance requirements," defines surveillance requirements asrequirements relating to test, calibration, or inspection to assure that the necessary quality ofsystems and components is maintained, that facility operation will be within safety limits, andthat the limiting conditions for operation will be met.

The proposed changes do not affect the MSIVs and associated actuator train design andoperation, which continue to meet all the GDC requirements. The proposed TS changes areconsistent with and in compliance with the above regulatory requirements and criteria.Therefore, the proposed changes will assure safe operation by continuing to meet applicableregulations and requirements.

4.2

Precedents

The NRC has approved similar license amendment requests to revise TS for main steamisolation valves actuator trains as follows:

1. Letter from Jack Donohew (NRC) to Charles Naslund (Union Electric Company), "CallawayPlant, Unit 1 - Issuance of Amendment Re: Main Steam Isolation Valve Actuator Trains(TAC No. MC7212)," dated June 16, 2006 (ADAMS Accession Number ML0608101690).

2. Letter from Jack Donohew (NRC) to Rick Muench (Wolf Creek Nuclear OperatingCompany), 'Wolf Creek Generating Station - Issuance of Amendment Re: Addition of

Actuator Trains to Main Steam and Main Feedwater Isolation Valves TechnicalSpecifications (TAC No. MD2895)," dated November 7, 2006 (ADAMS Accession NumberML062610085).

3. Letter from Jack Donohew (NRC) to James Levine (Arizona Public Service Company), "PaloVerde Nuclear Generating Station, Units 1, 2, and 3 - Issuance of Amendments Re: MainSteam Isolation Valve Actuator Trains (TAC Nos. MD3066, MD3067, and MD3068)," datedNovember 17, 2006 (ADAMS Accession Number ML063110505).

Page 9 of 12

ATIACHMENT 1 Evaluation of Proposed Changes

locked closed, or capable of remote manual operation, be located outside containment and as close to the containment as practical.

10 CFR 50.36(c)(2), "Limiting conditions for operation," paragraph (i) defines the limiting conditions for operation as the lowest functional capability or performance levels of equipment required for safe operation of the facility. When a limiting condition for operation of a nuclear reactor is not met, the licensee shall shut down the reactor or follow any remedial action permitted by the technical specifications until the condition can be met. Furthermore, Criterion 3 of 10 CFR 50.36(c)(2)(ii) requires that a TS LCO must be established for a structure, system, or component that is part of the primary success path and functions to mitigate a design basis accident or transient that either assumes the failure of or presents a challenge to the integrity of a fission product barrier.

10 CFR 50.36(c)(3), "Surveillance requirements," defines surveillance requirements as requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions for operation will be met.

The proposed changes do not affect the MSIVs and associated actuator train design and operation, which continue to meet all the GDC requirements. The proposed TS changes are consistent with and in compliance with the above regulatory requirements and criteria. Therefore, the proposed changes will assure safe operation by continuing to meet applicable regulations and requirements.

4.2 Precedents

The NRC has approved similar license amendment requests to revise TS for main steam isolation valves actuator trains as follows:

1. Letter from Jack Donohew (NRC) to Charles Naslund (Union Electric Company), "Callaway Plant, Unit 1 - Issuance of Amendment Re: Main Steam Isolation Valve Actuator Trains (TAC No. MC7212)," dated June 16, 2006 (ADAMS Accession Number ML06081 01690).

2. Letter from Jack Donohew (NRC) to Rick Muench (Wolf Creek Nuclear Operating Company), 'Wolf Creek Generating Station - Issuance of Amendment Re: Addition of Actuator Trains to Main Steam and Main Feedwater Isolation Valves Technical Specifications (TAC No. MD2895)," dated November 7,2006 (ADAMS Accession Number ML06261 0085).

3. Letter from Jack Donohew (NRC) to James Levine (Arizona Public Service Company), "Palo Verde Nuclear Generating Station, Units 1, 2, and 3 - Issuance of Amendments Re: Main Steam Isolation Valve Actuator Trains (TAC Nos. MD3066, MD3067, and MD3068)," dated November 17, 2006 (ADAMS Accession Number ML063110505).

Page 9 of 12


4.3

No Significant Hazards Consideration

In accordance with 10 CFR 50.90, Exelon Generation Company, LLC, (EGC), is requestingamendments to Facility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station,Units 1 and 2, and Facility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units1 and 2.

The proposed changes will revise Technical Specification (TS) 3.7.2, "Main Steam IsolationValves (MSIVs)," to incorporate the MSIV actuator trains into the Limiting Condition forOperation (LCO) and provides associated Conditions and Required Actions. Additionally,Surveillance Requirement (SR) 3.7.2.2 is revised to clearly identify that the MSIV actuator trainsare required to be tested in accordance with the SR. The proposed changes will address NRCstaff interpretation that SR 3.7.2.2 requires both actuator trains for a single valve to be tested.The NRC staff interpretation results in declaring an MSIV inoperable when one actuator train isinoperable. The existing Completion Time of 8 hours for an inoperable MSIV due to oneinoperable actuator train is not commensurate with the safety significance of the condition.Therefore, new Conditions, Required Actions, and Completion Times for inoperable actuatortrain(s) are being proposed.

EGC has evaluated whether or not a significant hazards consideration is involved with theproposed amendment by focusing on the three standards set forth in 10 CFR 50.92(c),"Issuance of amendment," as discussed below:

1. Does the proposed amendment involve a significant increase in the probability orconsequences of an accident previously evaluated?

Response: No.

The proposed changes provide requirements for MSIVs that have dual actuators whichreceive signals from separate instrumentation trains. The design and functionalperformance requirements, operational characteristics, and reliability of the MSIVs andactuator trains are unchanged. There is no impact on the design safety function of theMSIVs to close (as an accident mitigator), nor is there any change with respect toinadvertent closure of an MSIV (as a potential transient initiator). Since no failure mode orinitiating condition that could cause an accident (including any plant transient) is created oraffected, the change cannot involve a significant increase in the probability of an accidentpreviously evaluated.

With regard to the consequences of an accident and the equipment required for mitigation ofthe accident, the proposed changes involve no design or physical changes to the MSIVs orany other equipment required for accident mitigation. With respect to MSIV actuator trainCompletion Times, the consequences of an accident are independent of equipmentCompletion Times as long as adequate equipment availability is maintained. The proposedMSIV actuator Completion Times take into account the redundancy of the actuator trainsand are limited in extent consistent with other Completion Times specified in the TechnicalSpecifications. Adequate equipment availability would therefore continue to be required bythe Technical Specifications. On this basis, the consequences of applicable, analyzedaccidents are not significantly affected by the proposed changes.

Page 10 of 12


4.3 No Significant Hazards Consideration

In accordance with 10 CFR 50.90, Exelon Generation Company, LLC, (EGC), is requesting amendments to Facility Operating License Nos. NPF-72 and NPF-77 for Braidwood Station, Units 1 and 2, and Facility Operating License Nos. NPF-37 and NPF-66 for Byron Station, Units 1 and 2.

The proposed changes will revise Technical Specification (TS) 3.7.2, "Main Steam Isolation Valves (MSIVs)," to incorporate the MSIV actuator trains into the Limiting Condition for Operation (LCO) and provides associated Conditions and Required Actions. Additionally, Surveillance Requirement (SR) 3.7.2.2 is revised to clearly identify that the MSIV actuator trains are required to be tested in accordance with the SR. The proposed changes will address NRC staff interpretation that SR 3.7.2.2 requires both actuator trains for a single valve to be tested. The NRC staff interpretation results in declaring an MSIV inoperable when one actuator train is inoperable. The existing Completion Time of 8 hours for an inoperable MSIV due to one inoperable actuator train is not commensurate with the safety significance of the condition. Therefore, new Conditions, Required Actions, and Completion Times for inoperable actuator train(s) are being proposed.

EGC has evaluated whether or not a significant hazards consideration is involved with the proposed amendment by focusing on the three standards set forth in 10 CFR 50.92(c), "Issuance of amendment," as discussed below:

1. Does the proposed amendment involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No.

The proposed changes provide requirements for MSIVs that have dual actuators which receive signals from separate instrumentation trains. The design and functional performance requirements, operational characteristics, and reliability of the MSIVs and actuator trains are unchanged. There is no impact on the design safety function of the MSIVs to close (as an accident mitigator), nor is there any change with respect to inadvertent closure of an MSIV (as a potential transient initiator). Since no failure mode or initiating condition that could cause an accident (including any plant transient) is created or affected, the change cannot involve a significant increase in the probability of an accident previously evaluated.

With regard to the consequences of an accident and the equipment required for mitigation of the accident, the proposed changes involve no design or physical changes to the MSIVs or any other equipment required for accident mitigation. With respect to MSIV actuator train Completion Times, the consequences of an accident are independent of equipment Completion Times as long as adequate equipment availability is maintained. The proposed MSIV actuator Completion Times take into account the redundancy of the actuator trains and are limited in extent consistent with other Completion Times specified in the Technical Specifications. Adequate equipment availability would therefore continue to be required by the Technical Specifications. On this basis, the consequences of applicable, analyzed accidents are not significantly affected by the proposed changes.

Page 10 of 12


Therefore, the proposed changes do not involve a significant increase in the probability orconsequences of an accident previously evaluated.

2. Does the proposed amendment create the possibility of a new or different kind of accidentfrom any accident previously evaluated?

Response: No.

The proposed changes to incorporate requirements for the MSIV actuator trains do notinvolve any design or physical changes to the facility, including the MSIVs and actuatortrains themselves. No physical alteration of the plant is involved, as no new or different typeof equipment is to be installed. The proposed changes do not alter any assumptions madein the safety analyses, nor do they involve any changes to plant procedures for ensuring thatthe plant is operated within analyzed limits. As such, no new failure modes or mechanismsthat could cause a new or different kind of accident from any previously evaluated are beingintroduced.

Therefore, the proposed changes do not create the possibility of a new or different kind ofaccident from any accident previously evaluated.

3. Does the proposed amendment involve a significant reduction in margin of safety?

Response: No.

The proposed changes to incorporate requirements for the MSIV actuator trains do not alterthe manner in which safety limits or limiting safety system settings are determined. Nochanges to instrument/system actuation setpoints are involved. The safety analysisacceptance criteria are not affected by this change and the proposed changes will not permitplant operation in a configuration outside the design basis.

Therefore, the proposed changes do not involve a significant reduction in a margin of safety.

Based on the above, EGC concludes that the proposed amendments do not involve a significanthazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, afinding of no significant hazards consideration is justified.

4.4

Conclusions

In conclusion, based on the considerations discussed above, (1) there is reasonable assurancethat the health and safety of the public will not be endangered by operation in the proposedmanner, (2) such activities will be conducted in compliance with the Commission's regulations,and (3) the issuance of the amendment will not be inimical to the common defense and securityor to the health and safety of the public.

Page 11 of 12


Therefore, the proposed changes do not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed amendment create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No.

The proposed changes to incorporate requirements for the MSIV actuator trains do not involve any design or physical changes to the facility, including the MSIVs and actuator trains themselves. No physical alteration of the plant is involved, as no new or different type of equipment is to be installed. The proposed changes do not alter any assumptions made in the safety analyses, nor do they involve any changes to plant procedures for ensuring that the plant is operated within analyzed limits. As such, no new failure modes or mechanisms that could cause a new or different kind of accident from any previously evaluated are being introduced.

Therefore, the proposed changes do not create the possibility of a new or different kind of accident from any accident previously evaluated.

3. Does the proposed amendment involve a significant reduction in margin of safety?

Response: No.

The proposed changes to incorporate requirements for the MSIV actuator trains do not alter the manner in which safety limits or limiting safety system settings are determined. No changes to instrument/system actuation setpoints are involved. The safety analysis acceptance criteria are not affected by this change and the proposed changes will not permit plant operation in a configuration outside the design basis.

Therefore, the proposed changes do not involve a significant reduction in a margin of safety.

Based on the above, EGC concludes that the proposed amendments do not involve a significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, a finding of no significant hazards consideration is justified.

4.4 Conclusions

In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commission's regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

Page 11 of 12



EGC has evaluated the proposed amendments for environmental considerations. The reviewhas resulted in the determination that the proposed amendment would change a requirementwith respect to installation or use of a facility component located within the restricted area, asdefined in 10 CFR 20, or would change an inspection or surveillance requirement. However,the proposed amendments do not involve (i) a significant hazards consideration, (ii) a significantchange in the types or significant increase in the amounts of any effluent that may be releasedoffsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure.Accordingly, the proposed amendments meet the eligibility criterion for categorical exclusion setforth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impactstatement or environmental assessment need be prepared in connection with the proposedamendments.

6.0 REFERENCES

1. NRC Memorandum, "Operability Determination for the

Callaway Plant TechnicalSpecifications Requirements When One Main Steam Isolation Valve Actuator Train isRemoved from Service," dated October 19, 2006 (ADAMS Accession NumberML061730396)

2. Summary of August 16, 2006, Meeting with Representatives of Wolf Creek NuclearOperating Corporation and Union Electric Company dated September 20, 2006 (ADAMSAccession Number ML062410484)

3. Technical Specification Task Force (TSTF) Improved Standard Technical SpecificationsChange Traveler, TSTF-504-T, Revision 0, "Revised the MSIV and MFIV Specifications toProvide Actions for Actuator Trains," dated September 14, 2007

Page 12 of 12

ATIACHMENT1 Evaluation of Proposed Changes


EGC has evaluated the proposed amendments for environmental considerations. The review has resulted in the determination that the proposed amendment would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, or would change an inspection or surveillance requirement. However, the proposed amendments do not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluent that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed amendments meet the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed amendments.

6.0 REFERENCES

1. NRC Memorandum, "Operability Determination for the Callaway Plant Technical Specifications Requirements When One Main Steam Isolation Valve Actuator Train is Removed from Service," dated October 19,2006 (ADAMS Accession Number ML061730396)

2. Summary of August 16,2006, Meeting with Representatives of Wolf Creek Nuclear Operating Corporation and Union Electric Company dated September 20, 2006 (ADAMS Accession Number ML06241 0484)

3. Technical Specification Task Force (TSTF) Improved Standard Technical Specifications Change Traveler, TSTF-504-T, Revision 0, "Revised the MSIV and MFIV Specifications to Provide Actions for Actuator Trains," dated September 14, 2007

Page 12 of 12

ATTACHMENT 2Proposed Technical Specifications Changes for Braidwood Station, Units I and 2

Braidwood Station, Units I and 2

Facility Operating License Nos. NPF-72 and NPF-77

Mark -up of Technical Specifications Page

3.7.2-1

3.7.2-2

ATTACHMENT 2 Proposed Technical Specifications Changes for Braidwood Station, Units 1 and 2

Braidwood Station, Units 1 and 2


Mark-up of Technical Specifications Page

3.7.2- 1 3.7.2 - 2

MSIVs3.7.2

3.7 PLANT SYSTEMS

3.7.2 Main Steam Isolation Valves (MSIVs)

and their associated actuator trains

LCO 3. 7.2

Four MSIVs shall be OPERABLE.

APPLICABILITY:

MODE 1,MODES 2 and 3 except when all MSIVs are closed.

ACTIONS

CONDITION

REQUIRED ACTION COMPLETION TIME

A. One MSIV inoperable in ,_A. 1

Restore MSIV toMODE 1. OPERABLE status.

ST 18 hours

19. Required Action and

4.1

4

associated CompletionTime of Condition A

Fnot met.

C.

--------- NOTE --------- I €.1

Close MSIV.Separate Conditionentry is allowed for

AND

Be in MODE 2. 6 hours

8 hours

each MSIV.----------------------

E.2

^ Verify MSIV isclosed.

Once per 7 days

1=}. Required Action and

1

Be in MODE 3.associated CompletionTime of Condition -G

ANDnot met.

f

.9.2

Be in MODE 4.

6 hours

12 hours

BRAIDWOOD - UNITS 1 & 2

3.7.2 - 47

Amendment 9

3.7 PLANT SYSTEMS


LCO 3.7.2

APPLICABILITY: MODE 1,

MSIVs 3.7.2

MODES 2 and 3 except when all MSIVs are closed.

ACTIONS CONDITION

One MSIV inoperable in A.l MODE 1. F

~. Required Action and associated Completion Time of Condition A not met.

t. ---------NOTE--------- f.l Separate Condition entry is allowed for each MSIV.

One or more MSIV inoperable in MODE 2

REQU I RED ACTI ON

Restore MSIV to OPERABLE status.

Be in MODE 2.

Close MSIV.

Verify MSIV is closed.

or 3. H~--------~----'

B. Required Action and associated Completion Time of Condition f not met. H


Be in MODE 3.

Be in MODE 4.

3.7.2 --1-

COMPLETION TIME

8 hours

6 hours

8 hours

Once per 7 days

6 hours

12 hours

Amendment 00

INSERT 1

CONDITION REQUIRED ACTION COMPLETION TIME

A. One MSIV actuator train A.1 Restore MSIV actuator train 7 daysinoperable. to OPERABLE status.

B. Two MSIVs each with B.1 Restore one MSIV actuator 72 hoursone actuator train train to OPERABLE status.inoperable such that theinoperable actuatortrains are in differentESF Divisions.

C. Two MSIVs each with C .1 Restore one MSIV actuator 24 hoursone actuator train train to OPERABLE status.inoperable and bothinoperable actuatortrains are in the sameESF Division.

D. Two MSIV actuator D.1 Declare the affected MSIV Immediatelytrains inoperable on the inoperable.same MSIV.

E. Three or more MSIV E.1 Declare each affected Immediatelyactuator trains MSIV inoperable.inoperable.

OR

Required Action andassociated CompletionTime of Condition A, B,or C not met.

INSERT 1


A. One MSIV actuator train A.1 Restore MSIV actuator train 7 days inoperable. to OPERABLE status.

B. Two MSIVs each with B.1 Restore one MSIV actuator 72 hours one actuator train train to OPERABLE status. inoperable such that the inoperable actuator trains are in different ESF Divisions.

C. Two MSIVs each with C.1 Restore one MSIV actuator 24 hours one actuator train train to OPERABLE status. inoperable and both inoperable actuator trains are in the same ESF Division.

D. Two MSIV actuator D.1 Declare the affected MSIV Immediately trains inoperable on the inoperable. same MSIV.

E. Three or more MSIV E.1 Declare each affected Immediately actuator trains MSIV inoperable. inoperable.

OR

Required Action and associated Completion Time of Condition A, B, or C not met.

MSIVs3.7.2

SURVEILLANCE REQUIREMENTS

SURVEILLANCE

SR 3.7.2.1

-------------------NOTE--------------------Only required to be performed in MODES 1and 2.

Verify closure time of each MSIV is< 5 seconds.

SR 3.7.2.2

------------------- NOTE --------------------Only required to be performed in MODES 1and 2.

a ain actuates the

Verify eachMSIV

e iso a ionpo sition on an actual or simulatedactuation signal.

FREQUENCY

In accordancewith theInserviceTesting Program

In accordancewith theSurveillanceFrequencyControl Program


3.7.2 - -2

Amendment

MSIVs 3.7.2


SR 3.7.2.1

SR 3.7.2.2

SURVEILLANCE

-------------------NOTE--------------------Only required to be performed in MODES 1 and 2.

Verify closure time of each MSIV is ~ 5 seconds.


FREQUENCY

In accordance with the Inservice Testing Program

Ve rify ea ch MS I V -NA~~Tn:-rrjp"""=lSnlriflrirl1 I n a cco rd a nce position on an actual with the actuation signal. Surveillance

Frequency Control Program

BRAIDWOOD - UNITS 1 & 2 3.7.2--2: Amendment 1651165

ATTACHMENT 3Proposed Technical Specifications Changes for Byron Station, Units I and 2

Byron Station, Units I and 2



3.7.2-1

3.7.2-2

ATTACHMENT 3 Proposed Technical Specifications Changes for Byron Station, Units 1 and 2

Byron Station, Units 1 and 2

Facility Operating license Nos. NPF-37 and NPF-66


3.7.2- 1 3.7.2-2

MSIVs3.7.2

3.7 PLANT SYSTEMS


end their associated actuator trains

[CO 3. 7.2

Four MSIVs shall be OPERABLE.

APPLICABILITY:

MODE 1,MODES 2 and 3 except when all MSIVs are closed.

ACTIONS

CONDITION

MISERY 1A. One MSIV inoperable in X4.1^s MODE 1.

REQUIRED ACTION COMPLETION TIME

Restore MSIV toOPERABLE status.

8 hours

-R. Required Action andassociated CompletionTime of Condition Anot met.

.

--------- NOTE ---------Separate Conditionentry is allowed foreach MSIV.

One or more MSIVinoperable in MODE 2or 3.

-B..1

Be in MODE 2.

Close MSIV.

G.2 \ Verify MSIV isclosed.

6 hours

8 hours

Once per 7 days

6 hours

G.l

-B. Required Action and

I B.1

Be in MODE 3.associated CompletionTime of Condition 4-2 / I ANDnot met.

B.2


BYRON - UNITS 1 & 2 3.7.2 - -1

Amendment

3.7 PLANT SYSTEMS


LCO 3.7.2 Four MS

APPLICABI LITY: MODE 1,

MSIVs 3.7.2

MODES 2 and 3 except when all MSIVs are closed.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME

One MSIV inoperable in A.l Restore MSIV to 8 hours it MODE 1. [] OPERABLE status.

-8-. Required Action and associated Completion Time of Condition A


not met.

-G. ---------NOTE--------- -G. 1 Close MSIV. 8 hours Separate Condition entry is allowed for each MSIV. ---------------------- Verify MSIV is

closed. Once per 7 days

One or more MSIV inoperable in MODE 2 or 3.

B. Required Action and B.l Be in MODE 3. 6 hours associated Completion Time of Condition -G not met.


BYRON - UNITS 1 & 2 3.7.2 --3: Amendment .f.(f6.

INSERT 1


A. One MSIV actuator train A.1 Restore MSIV actuator train 7 daysinoperable. to OPERABLE status.

B. Two MSIVs each with B.1 Restore one MSIV actuator 72 hoursone actuator train train to OPERABLE status.inoperable such that theinoperable actuatortrains are in differentESF Divisions.

C. Two MSIVs each with C.1 Restore one MSIV actuator 24 hoursone actuator train train to OPERABLE status.inoperable and bothinoperable actuatortrains are in the sameESF Division.

D. Two MSIV actuator D.1 Declare the affected MSIV Immediatelytrains inoperable on the inoperable.same MSIV.

E. Three or more MSIV E.1 Declare each affected Immediatelyactuator trains MSIV inoperable.inoperable.

OR

Required Action andassociated CompletionTime of Condition A, B,or C not met.

INSERT 1


A, One MSIV actuator train A,1 Restore MSIV actuator train 7 days inoperable. to OPERABLE status.

B. Two MSIVs each with B.1 Restore one MSIV actuator 72 hours one actuator train train to OPERABLE status. inoperable such that the inoperable actuator trains are in different ESF Divisions.

C. Two MSIVs each with C.1 Restore one MSIV actuator 24 hours one actuator train train to OPERABLE status. inoperable and both inoperable actuator trains are in the same ESF Division.

D. Two MSIV actuator 0.1 Declare the affected MSIV Immediately trains inoperable on the inoperable. same MSIV.

E. Three or more MSIV E.1 Declare each affected Immediately actuator trains MSIV inoperable. inoperable.

OR

Required Action and associated Completion Time of Condition A, B, or C not met.

MSIVs3.7.2


SURVEILLANCE

SR 3.7.2.1


Verify closure time of each MSIV is<_ 5 seconds.

SR 3.7.2.2


actuator train actuates the jVerify each+MSIV , 1 tee er to the i so] ati onposition on an actual or simulatedactuation signal.

FREQUENCY

In accordancewith theInserviceTesting Program

In accordancewith theSurveillanceFrequencyControl Program

BYRON - UNITS 1 & 2

3.7. 2 -2-

Amendment 441417-1


SR 3.7.2.1

SR 3.7.2.2

SURVEILLANCE


Verify closure time of each MSIV is :::; 5 seconds.

-------------------NOTE--------------------Only required to be performed in MODES 1 and 2. -----------~- -----r~~t~~t;~ t~~i~-~~t~~t~~-th~ r Verify each MSIV actuates to the isolatlon position on an actual or simulated actuation signal.

BYRON - UNITS 1 & 2 3.7.2 --2:

MSIVs 3.7.2

FREQUENCY

In accordance with the Inservice Testing Program

In accordance with the Surveillance Frequency Control Program

Amendment 1711171

ATTACHMENT 4Proposed Technical Specifications Bases Changes for Braidwood Station, Units I and 2



Mark-up of Technical Specifications Bases Pages

B 3.7.2 - 1

B 3.7.2 - 3

B 3.7.2 - 4

B 3.7.2 - 5

B 3.7.2 - 6

ATTACHMENT 4 Proposed Technical Specifications Bases Changes for Braidwood Station, Units 1 and 2




83.7.2-1 83.7.2-3 83.7.2-4 83.7.2-5 83.7.2-6

B 3.7 PLANT SYSTEMS

B 3.7.2 Main Steam Isolation Valves (MSIVs)

BASES

BACKGROUND

The MSIVs isolate steam flow from the secondary side of thesteam generators following a High Energy Line Break (HELB).MSIV closure terminates flow from the unaffected (intact)steam generators.

One MSIV is located in each main steam line outside, butclose to containment. The MSIVs are downstream from theMain Steam Safety Valves (MSSVs), to prevent MSSV isolationfrom the steam generators by MSIV closure. Closing theMSIVs isolates each steam generator from the others, andisolates the turbine, Steam Dump System, and other auxiliarysteam supplies from the steam generators.

The MSIVs close on a main steam isolation signal generatedby Steam Line Low Pressure, Steam Line High Negative Rate,or High-2 containment pressure. The MSIVs fail as is onloss of control or actuation power.

Each MSIV has an MSIV bypass valve. Although these bypassvalves are normally closed, they receive the same automaticclosure signal as do their associated MSIVs. The MSIVs mayalso be actuated manually.

A description of the MSIVs is found in the UFSAR,Section 10.3 (Ref. 1).


B 3.7.2 - -1

Revision-9

B 3.7 PLANT SYSTEMS


BASES

BACKGROUND The MSIVs isolate steam flow from the secondary side of the steam generators following a High Energy Line Break (HELB). MSIV closure terminates flow from the unaffected (intact) steam generators.

One MSIV is located in each main steam line outside, but close to containment. The MSIVs are downstream from the Main Steam Safety Valves (MSSVs), to prevent MSSV isolation from the steam generators by MSIV closure. Closing the MSIVs isolates each steam generator from the others, and isolates the turbine, Steam Dump System, and other auxiliary steam supplies from the steam generators.

i--~

The MSIVs close on a main steam isolation signal generated by Steam Line Low Pressure, Steam Line High Negative Rate, or High-2 containment pressure. The MSIVs fail as is on loss of control or actuation power.

Each MSIV has an MSIV bypass valve. Although these bypass valves are normally closed, they receive the same automatic closure signal as do their associated MSIVs. The MSIVs may also be actuated manually.

A description of the MSIVs is found in the UFSAR, Section 10.3 (Ref. 1).

BRAIDWOOD - UNITS 1 & 2 B3.7.2--±- Revision .g.

BASES

APPLICABLE

The design basis of the MSIVs is established by theSAFETY ANALYSES

analysis for the large Steam Line Break (SLB) outsidecontainment, discussed in the UFSAR, Section 15.1.5(Ref. 2). It is also affected by the accident analysis ofthe SLB events presented in the UFSAR, Section 6.2 (Ref. 3).The design precludes the blowdown of more than one steamgenerator, assuming a single active component failure (e.g.,the failure of one MSIV to close on demand).

The accident analysis compares several different SLB eventsagainst different acceptance criteria. The large SLBoutside containment upstream of the MSIV is limiting foroffsite dose, although a break in this short section of mainsteam header has a very low probability. The large SLBinside containment at hot zero power is the limiting casefor a post trip return to power. The analysis includesscenarios with offsite power available, and with a loss ofoffsite power following turbine trip. With offsite poweravailable, the reactor coolant pumps continue to circulatecoolant through the steam generators, maximizing the ReactorCoolant System (RCS) cooldown. With a loss of offsitepower, the response of mitigating systems is delayed.Significant single failures considered include failure of anMSIV to close.

The MSIVs serve only a safety function and remain openduring power operation. These valves operate under thefollowing situations:

a.

An HELB inside containment. In order to maximize themass and energy release into containment, the analysisassumes that the MSIV in the affected steam generatorremains open. For this accident scenario, steam isdischarged into containment from all steam generatorsuntil the remaining MSIVs close. After MSIV closure,steam is discharged into containment only from theaffected steam generator and from the residual steamin the main steam header downstream of the closedMSIVs in the unaffected loops. Closure of the MSIVsisolates the break from the unaffected steamgenerators.


B 3.7.2 - 2

Revision 0

BASES

APPLICABLE The design basis of the MSIVs is established by the SAFETY ANALYSES analysis for the large Steam Line Break (SLB) outside

containment, discussed in the UFSAR, Section 15.1.5 (Ref. 2). It is also affected by the accident analysis of the SLB events presented in the UFSAR, Section 6.2 (Ref. 3). The design precludes the blowdown of more than one steam generator, assuming a single active component failure (e.g., the failure of one MSIV to close on demand).

The accident analysis compares several different SLB events against different acceptance criteria. The large SLB outside containment upstream of the MSIV is limiting for offsite dose, although a break in this short section of main steam header has a very low probability. The large SLB inside containment at hot zero power is the limiting case for a post trip return to power. The analysis includes scenarios with offsite power available, and with a loss of offsite power following turbine trip. With offsite power available, the reactor coolant pumps continue to circulate coolant through the steam generators, maximizing the Reactor Coolant System (RCS) cool down. With a loss of offsite power, the response of mitigating systems is delayed. Significant single failures considered include failure of an MSIV to close.

The MSIVs serve only a safety function and remain open during power operation. These valves operate under the following situations:

a. An HELB inside containment. In order to maximize the mass and energy release into containment, the analysis assumes that the MSIV in the affected steam generator remains open. For this accident scenario, steam is discharged into containment from all steam generators until the remaining MSIVs close. After MSIV closure, steam is discharged into containment only from the affected steam generator and from the residual steam in the main steam header downstream of the closed MSIVs in the unaffected loops. Closure of the MSIVs isolates the break from the unaffected steam generators.

BRAIDWOOD - UNITS 1 & 2 B 3.7.2 - 2 Revision 0

BASES

APPLICABLE SAFETY ANALYSES (continued)

b. A break outside of containment and upstream from theMSIVs is not a containment pressurization concern.The uncontrolled blowdown of more than one steamgenerator must be prevented to limit the potential foruncontrolled RCS cooldown and positive reactivityaddition. Closure of the MSIVs isolates the break andlimits the blowdown to a single steam generator.

c. A break downstream of the MSIVs will be isolated bythe closure of the MSIVs.

d. Following a steam generator tube rupture, closure ofthe MSIVs isolates the ruptured steam generator fromthe intact steam generators to minimize radiologicalreleases.

e. The MSIVs are also utilized during other events suchas a feedwater line break. This event is lesslimiting so far as MSIV OPERABILITY is concerned.

The MSIVs satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii). andthe€r

associated

actuator[CO

This [CO requires that four MSIVs in the steam lines be

trainsOPERABLE. The MSIVs are considered OPERABLE when theisolation times are within limits, and they close on anisolation actuation signal.

E2T B

^^This LCO provides assurance that the MSIVs will performtheir design safety function to mitigate the consequences ofaccidents that could result in exposures comparable to the10 CFR 50.67 (Ref. 4) limits or the NRC staff approvedlicensing basis.

BRAIDW00D - UNITS 1 & 2

B 3.7.2 - -3

Revision 61

BASES


LCO

b. A break outside of containment and upstream from the MSIVs is not a containment pressurization concern. The uncontrolled blowdown of more than one steam generator must be prevented to limit the potential for uncontrolled RCS cooldown and positive reactivity addition. Closure of the MSIVs isolates the break and limits the blowdown to a single steam generator.

c. A break downstream of the MSIVs will be isolated by the closure of the MSIVs.

d. Following a steam generator tube rupture, closure of the MSIVs isolates the ruptured steam generator from the intact steam generators to minimize radiological releases.

e. The MSIVs are also utilized during other events such as a feedwater line break. This event is less limiting so far as MSIV OPERABILITY is concerned.

The MSIVs satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).

This LCO requires that four MSIVs in the steam lines be OPERABLE. The MSIVs are considered OPERABLE when the isolation times are within limits, and they close on an

ation actuation signal.

s LCO provides assurance that the MSIVs will perform their design safety function to mitigate the consequences of accidents that could result in exposures comparable to the 10 CFR 50.67 (Ref. 4) limits or the NRC staff approved licensing basis.

BRAIDWOOD - UNITS 1 & 2 B 3.7.2 - 3 Revision €±

and required

BASES

actuator trains

APPLICABILITY

The MSIVs'must be OPERABLE in MODE 1, and in MODES 2 and 3except when closed, when there is significant mass andenergy in the RCS and steam generators. When the MSIVs areclosed, they are already performing the safety function. InMODE 4 the steam generator energy is low.

In MODE 5 or 6, the steam generators do not contain muchenergy because their temperature is below the boiling pointof water; therefore, the MSIVs are not required forisolation of potential high energy secondary system pipebreaks in these MODES.

A.IN E T I

With one MSIV inoperable in MODE 1, action must be taken torestore OPERABLE status within 8 hours. Some repairs to theMSIV can be made with the unit hot. The 8 hour CompletionTime is reasonable, considering the low probability of anaccident occurring during this time period that wouldrequire a closure of the MSIVs.

The 8 hour Completion Time is greater than that normallyallowed for containment isolation valves because the MSIVsare valves that isolate a closed system penetratingcontainment. These valves differ from other containmentisolation valves in that the closed system provides anadditional means for containment isolation.

8.1

If the MSIV cannot be restored to OPERABLE status within8 hours, the unit must be placed in a MODE in which theLCO does not apply. To achieve this status, the unit mustbe placed in MODE 2 within 6 hours and Condition € ould beentered. The Completion Time is reasonable, based onoperating experience, to reach MODE 2 and to close the MSIVsin an orderly manner and without challenging plant systems.

ACTIONS

INSERT D


B 3.7.2 - 4

Revision 0

BASES

APPLICABI LITY

ACTIONS

The MSIVs must be OPERABLE in MODE 1, and in MODES 2 and 3 except when closed, when there is significant mass and energy in the RCS and steam generators. When the MSIVs are closed, they are already performing the safety function. In MODE 4 the steam generator energy is low.

In MODE 5 or 6, the steam generators do not contain much energy because their temperature is below the boiling point of water; therefore, the MSIVs are not required for isolation of potential high energy secondary system pipe breaks in these MODES.

With one MSIV inoperable in MODE 1, action must be taken to restore OPERABLE status within 8 hours. Some repairs to the MSIV can be made with the unit hot. The 8 hour Completion Time is reasonable, considering the low probability of an accident occurring during this time period that would

re a closure of the MSIVs.

8 hour Completion Time is greater than that normally allowed for containment isolation valves because the MSIVs are valves that isolate a closed system penetrating containment. These valves differ from other containment isolation valves in that the closed system provides an additional means for containment isolation.

If the MSIV cannot be restored to OPERABLE status within 8 hours, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in MODE 2 within 6 hours and Condition t ould be entered. The Completion Time is reasonable, based on operating experience, to reach MODE 2 and to close the MSIVs in an orderly manner and without challenging plant systems.

BRAIDWOOD - UNITS 1 & 2 B 3.7.2-4 Revision .g.

BASES

ACTIONS (continued)

.27

Condition€ is modified by a Note indicating that separateCondition entry is allowed for each MSIV.

Since the MSIVs are required to be OPERABLE in MODES 2and 3, the inoperable MSIVs may either be restored toOPERABLE status or closed. When closed, the MSIVs arealready in the position required by the assumptions in thesafety analysis.

The 8 hour Completion Time is consistent with that allowedi n Condition P4.

For inoperable MSIVs that cannot be restored to OPERABLEstatus within the specified Completion Time, but are closed,the inoperable MSIVs must be verified on a periodic basis tobe closed. This is necessary to ensure that the assumptionsin the safety analysis remain valid. The 7 day CompletionTime is reasonable, based on engineering judgment, in viewof MSIV status indications available in the control room,and other administrative controls, to ensure that thesevalves are in the closed position.

If the MSIVs cannot be restored to OPERABLE status or arenot closed within the associated Completion Time, the unitmust be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed at least inMODE 3 within 6 hours, and in MODE 4 within 12 hours. Theallowed Completion Times are reasonable, based on operatingexperience, to reach the required unit conditions fromMODE 2 conditions in an orderly manner and withoutchallenging plant systems.


B 3.7.2 --5

Revision 4

BASES

ACTIONS (continued)

Condition ~ is modified by a Note indicating that separate Condition entry is allowed for each MSIV.

Since the MSIVs are required to be OPERABLE in MODES 2 and 3, the inoperable MSIVs may either be restored to OPERABLE status or closed. When closed, the MSIVs are already in the position required by the assumptions in the safety analysis.

The 8 hour Completion Time is consistent with that allowed in Condition A~

For inoperable MSIVs that cannot be restored to OPERABLE status within the specified Completion Time, but are closed, the inoperable MSIVs must be verified on a periodic basis to be closed. This is necessary to ensure that the assumptions in the safety analysis remain valid. The 7 day Completion Time is reasonable, based on engineering judgment, in view of MSIV status indications available in the control room, and other administrative controls, to ensure that these

~lves are in the closed position.

~.g.~B.2

If the MSIVs cannot be restored to OPERABLE status or are not closed within the associated Completion Time, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed at least in MODE 3 within 6 hours, and in MODE 4 within 12 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from MODE 2 conditions in an orderly manner and without challenging plant systems.

BRAIDWOOD - UNITS 1 & 2 B 3.7.2-'§' Revision .g.

BASES

on an actual or simulated actuationSURVEILLANCE

SR 3.7.2.1REQUIREMENTS

signal [from each actuator train]

This SR verifies that MSIV closure time is <_ 5 seconds. TheMSIV closure time is assumed in the accident and containmentanalyses. This Surveillance is normally performed uponreturning the unit to operation following a refuelingoutage. Based on ASME Code (Ref. 5), the MSIVs are notclosure time tested at power.

The Frequency is in accordance with the Inservice TestingProgram. This test is conducted in MODE 3 with the unit atoperating temperature and pressure. This SR is modified bya Note. This Note allows entry into and operation in MODE 3prior to performing the SR. This allows a delay of testinguntil MODE 3, to establish conditions consistent with thoseunder which the acceptance criterion was generated.

SR. 3.7.2.2

actuator train can close its respective

This SR verifies that each MSIV can-eTe5e on an actual orsimulated actuation signal. This Surveillance is normallyperformed upon returning the unit to operation following arefueling outage. The Surveillance Frequency is controlledunder the Surveillance Frequency Control Program.

This SR is modified by a Note. This Note allows entry intoand operation in MODE 3 prior to performing the SR. Thisallows a delay of testing until MODE 3, to establishconditions consistent with those under which the acceptancecriterion was generated.

REFERENCES

1.

UFSAR, Section 10.3.

2. UFSAR, Section 15.1.5.

3. UFSAR, Section 6.2.

4. 10 CFR 50.67.

5. ASME Code for Operation and Maintenance of NuclearPower.


B 3.7.2 - 6

Revision 89,

BASES


REFERENCES

SR 3.7.2.1

This SR verifies that MSIV closure time is ~ 5 seconds. The MSIV closure time is assumed in the accident and containment analyses. This Surveillance is normally performed upon returning the unit to operation following a refueling outage. Based on ASME Code (Ref. 5), the MSIVs are not closure time tested at power.

The Frequency is in accordance with the Inservice Testing Program. This test is conducted in MODE 3 with the unit at operating temperature and pressure. This SR is modified by a Note. This Note allows entry into and operation in MODE 3 prior to performing the SR. This allows a delay of testing until MODE 3, to establish conditions consistent with those under which the acceptance criterion was generated.

SR 3.7.2.2

This SR verifies that each MSIV can close on an actual or simulated actuation signal. This Surveillance is normally performed upon returning the unit to operation following a refueling outage. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by a Note. This Note allows entry into and operation in MODE 3 prior to performing the SR. This allows a delay of testing until MODE 3, to establish conditions consistent with those under which the acceptance criterion was generated.




4. 10 CFR 50.67.

5. ASME Code for Operation and Maintenance of Nuclear Power.

BRAIDWOOD - UNITS 1 & 2 B 3.7.2-.e Revi si on .gs.

INSERT A

The MSIV is a gate valve with dual-redundant hydraulic actuator trains. Either actuator train canindependently perform the safety function to fast-close the MSIV on demand. Each actuatortrain consists of a hydraulic accumulator controlled by solenoid valves on the associated MSIV.For each MSIV, one actuator train is associated with ESF Division 1, and one actuator train isassociated with ESF Division 2.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at theMSIV location. The actuator train does not include any portion of the analog channels orprotection system actuation logic and actuation relays that provide inputs to the valve actuatortrains. LCO 3.3.2, "Engineered Safety Features Actuation System (ESFAS) Instrumentation,"provides separate Conditions, Required Actions, and Surveillance Requirements for the analogchannels and protection system logic and relays.

INSERT B

An MSIV actuator train is considered OPERABLE when it is capable of fast-closing theassociated MSIV on demand and within the required isolation time. This includes havingadequate accumulator pressure to support fast-closure of the MSIV within the required isolationtime.

INSERT C

A.1

With a single actuator train inoperable on one MSIV, action must be taken to restore theinoperable actuator train to OPERABLE status within 7 days. The 7-day Completion Time isreasonable in light of the dual-redundant actuator train design such that with one actuator traininoperable, the affected MSIV is still capable of closing on demand via the remainingOPERABLE actuator train. The 7-day Completion Time takes into account the redundantOPERABLE actuator train to the MSIV, reasonable time for repairs, and the low probability of anevent occurring that requires the inoperable actuator train to the affected MSIV.

B.1

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIVinoperable, such that the inoperable actuator trains are not in the same ESF Division, actionmust be taken to restore one of the inoperable actuator trains to OPERABLE status within 72hours. With one actuator train inoperable on two different MSIVs that are not in the same ESFDivision, there is an increased likelihood that an additional failure (such as the failure of anactuator logic train) could cause one MSIV to fail to close. The 72-hour Completion Time isreasonable since the dual-redundant actuator train design ensures that with only one actuatortrain on each of two affected MSIVs inoperable, each MSIV is still capable of closing ondemand.

C.1

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIVinoperable, such that both inoperable actuator trains are in the same ESF Division, action mustbe taken to restore one of the inoperable actuator trains to OPERABLE status within 24 hours.The 24-hour Completion Time provides a reasonable amount of time for restoring at least one

INSERT A

The MSIV is a gate valve with dual-redundant hydraulic actuator trains. Either actuator train can independently perform the safety function to fast-close the MSIV on demand. Each actuator train consists of a hydraulic accumulator controlled by solenoid valves on the associated MSIV. For each MSIV, one actuator train is associated with ESF Division 1, and one actuator train is associated with ESF Division 2.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at the MSIV location. The actuator train does not include any portion of the analog channels or protection system actuation logic and actuation relays that provide inputs to the valve actuator trains. LCO 3.3.2, "Engineered Safety Features Actuation System (ESFAS) Instrumentation," provides separate Conditions, Required Actions, and Surveillance Requirements for the analog channels and protection system logic and relays.

INSERTB

An MSIV actuator train is considered OPERABLE when it is capable of fast-closing the associated MSIV on demand and within the required isolation time. This includes having adequate accumulator pressure to support fast-closure of the MSIV within the required isolation time.

INSERTC

With a single actuator train inoperable on one MSIV, action must be taken to restore the inoperable actuator train to OPERABLE status within 7 days. The 7 -day Completion Time is reasonable in light of the dual-redundant actuator train design such that with one actuator train inoperable, the affected MSIV is still capable of closing on demand via the remaining OPERABLE actuator train. The 7 -day Completion Time takes into account the redundant OPERABLE actuator train to the MSIV, reasonable time for repairs, and the low probability of an event occurring that requires the inoperable actuator train to the affected MSIV.

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIV inoperable, such that the inoperable actuator trains are not in the same ESF Division, action must be taken to restore one of the inoperable actuator trains to OPERABLE status within 72 hours. With one actuator train inoperable on two different MSIVs that are not in the same ESF Division, there is an increased likelihood that an additional failure (such as the failure of an actuator logic train) could cause one MSIV to fail to close. The 72-hour Completion Time is reasonable since the dual-redundant actuator train design ensures that with only one actuator train on each of two affected MSIVs inoperable, each MSIV is still capable of closing on demand.

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIV inoperable, such that both inoperable actuator trains are in the same ESF Division, action must be taken to restore one of the inoperable actuator trains to OPERABLE status within 24 hours. The 24-hour Completion Time provides a reasonable amount of time for restoring at least one

actuator train since the dual-redundant actuator train design for each MSIV ensures that asingle inoperable actuator train cannot prevent the affected MSIV(s) from closing on demand.With two actuator trains inoperable in the same ESF Division, an additional failure (such as thefailure of an actuator logic train in the other ESF Division) could cause both affected MSIVs tofail to close on demand. The 24 hour Completion Time takes into the redundant OPERABLEactuator trains to the affected MSIVs and the low probability of an event occurring that requiresthe inoperable actuator trains to the affected MSIVs.

D.1

Required Action D.1 provides assurance that the appropriate Condition is entered for theaffected MSIV if its associated actuator trains become inoperable. Failure of both actuatortrains for a single MSIV results in the inability to close the affected MSIV on demand.

E.1

With three or more MSIV actuator trains inoperable or when Required Action A.1, B.1, or C.1are not completed within the required Completion Time, the affected MSIVs may be incapable ofclosing on demand and must be immediately declared inoperable. Having three actuator trainsinoperable could involve two inoperable actuator trains on one MSIV and one inoperableactuator train on another MSIV, or an inoperable actuator train on each of three MSIVs, forwhich the inoperable actuator trains could all be in the same ESF Division or be staggeredamong the two ESF Divisions.

Depending on which of these conditions or combinations is in effect, the condition orcombination could mean that all of the affected MSIVs remain capable of closing on demand(due to the dual-redundant actuator train design), or that at least one MSIV is inoperable, or thatwith an additional single failure up to three MSIVs could be incapable of closing on demand.Therefore, in some cases, immediately declaring the affected MSIVs inoperable is conservative(when some or all of the affected MSIVs may still be capable of closing on demand even with asingle additional failure), while in other cases it is appropriate (when at least one of the MSIVswould be inoperable, or up to three could be rendered inoperable by an additional single failure).Required Action E.1 is conservatively based on the worst-case condition and therefore requiresimmediately declaring all the affected MSIVs inoperable.

INSERT D

Condition F is entered when one MSIV is inoperable in MODE 1, including when both actuatortrains for one MSIV are inoperable. When only one actuator train is inoperable on one MSIV,Condition A applies.

actuator train since the dual-redundant actuator train design for each MSIV ensures that a single inoperable actuator train cannot prevent the affected MSIV(s) from closing on demand. With two actuator trains inoperable in the same ESF Division, an additional failure (such as the failure of an actuator logic train in the other ESF Division) could cause both affected MSIVs to fail to close on demand. The 24 hour Completion Time takes into the redundant OPERABLE actuator trains to the affected MSIVs and the low probability of an event occurring that requires the inoperable actuator trains to the affected MSIVs.

Required Action D.1 provides assurance that the appropriate Condition is entered for the affected MSIV if its associated actuator trains become inoperable. Failure of both actuator trains for a single MSIV results in the inability to close the affected MSIV on demand.

With three or more MSIV actuator trains inoperable or when Required Action A.1, B.1, or C.1 are not completed within the required Completion Time, the affected MSIVs may be incapable of closing on demand and must be immediately declared inoperable. Having three actuator trains inoperable could involve two inoperable actuator trains on one MSIV and one inoperable actuator train on another MSIV, or an inoperable actuator train on each of three MSIVs, for which the inoperable actuator trains could all be in the same ESF Division or be staggered among the two ESF Divisions.

Depending on which of these conditions or combinations is in effect, the condition or combination could mean that all of the affected MSIVs remain capable of closing on demand (due to the dual-redundant actuator train design), or that at least one MSIV is inoperable, or that with an additional single failure up to three MSIVs could be incapable of closing on demand. Therefore, in some cases, immediately declaring the affected MSIVs inoperable is conservative (when some or all of the affected MSIVs may still be capable of closing on demand even with a single additional failure), while in other cases it is appropriate (when at least one of the MSIVs would be inoperable, or up to three could be rendered inoperable by an additional single failure). Required Action E.1 is conservatively based on the worst-case condition and therefore requires immediately declaring all the affected MSIVs inoperable.

INSERTD

Condition F is entered when one MSIV is inoperable in MODE 1, including when both actuator trains for one MSIV are inoperable. When only one actuator train is inoperable on one MSIV, Condition A applies.

ATTACHMENT 5Proposed Technical Specifications Bases Changes for Byron Station, Units I and 2

Byron Station, Units I and 2

Facility Operating License Nos. NPF -37 and NPF-66


B 3.7.2 - 1

B 3.7.2 - 3

B 3.7.2 - 4

B 3.7.2 - 5

B 3.7.2 - 6

ATTACHMENT 5 Proposed Technical Specifications Bases Changes for Byron Station, Units 1 and 2

Byron Station, Units 1 and 2

Facility Operating License Nos. NPF·37 and NPF-66


83.7.2-1 83.7.2-3 83.7.2-4 83.7.2-5 83.7.2-6

MSIVsB 3.7.2

B 3.7 PLANT SYSTEMS


BASES

BACKGROUND

The MSIVs isolate steam flow from the secondary side of thesteam generators following a High Energy Line Break (HELB).MSIV closure terminates flow from the unaffected (intact)steam generators.

One MSIV is located in each main steam line outside, butclose to containment. The MSIVs are downstream from theMain Steam Safety Valves (MSSVs), to prevent MSSV isolationfrom the steam generators by MSIV closure. Closing theMSIVs isolates each steam generator from the others, andisolates the turbine, Steam Dump System, and other auxiliarysteam supplies from the steam generators.

INSERT A

The MSIVs close on a main steam isolation signal generatedby Steam Line Low Pressure, Steam Line High Negative Rate,or High-2 containment pressure. The MSIVs fail as is onloss of control or actuation power.

Each MSIV has an MSIV bypass valve. Although these bypassvalves are normally closed, they receive the same automaticclosure signal as do their associated MSIVs. The MSIVs mayalso be actuated manually.

A description of the MSIVs is found in the UFSAR,Section 10.3 (Ref. 1).

BYRON - UNITS 1 & 2

B 3.7.2 - -1

Revision 0

MSIVs B 3.7.2

B 3.7 PLANT SYSTEMS


BASES

BACKGROUND The MSIVs isolate steam flow from the secondary side of the steam generators following a High Energy Line Break (HELB). MSIV closure terminates flow from the unaffected (intact) steam generators.

One MSIV is located in each main steam line outside, but close to containment. The MSIVs are downstream from the Main Steam Safety Valves (MSSVs), to prevent MSSV isolation from the steam generators by MSIV closure. Closing the MSIVs isolates each steam generator from the others, and isolates the turbine, Steam Dump System, and other auxiliary

supplies from the steam generators.

MSIVs close on a main steam isolation signal generated by Steam Line Low Pressure, Steam Line High Negative Rate, or High-2 containment pressure. The MSIVs fail as is on loss of control or actuation power.

Each MSIV has an MSIV bypass valve. Although these bypass valves are normally closed, they receive the same automatic closure signal as do their associated MSIVs. The MSIVs may also be actuated manually.

A description of the MSIVs is found in the UFSAR, Section 10.3 (Ref. 1).

BYRON - UNITS 1 & 2 B 3.7.2 - ± Revision ~

MSIVsB 3.7.2

BASES

APPLICABLE

The design basis of the MSIVs is established by theSAFETY ANALYSES

analysis for the large Steam Line Break (SLB) outsidecontainment, discussed in the UFSAR, Section 15.1.5(Ref. 2). It is also affected by the accident analysis ofthe SLB events presented in the UFSAR, Section 6.2 (Ref. 3).The design precludes the blowdown of more than one steamgenerator, assuming a single active component failure (e.g.,the failure of one MSIV to close on demand).

The accident analysis compares several different SLB eventsagainst different acceptance criteria. The large SLBoutside containment upstream of the MSIV is limiting foroffsite dose, although a break in this short section of mainsteam header has a very low probability. The large SLBinside containment at hot zero power is the limiting casefor a post trip return to power. The analysis includesscenarios with offsite power available, and with a loss ofoffsite power following turbine trip. With offsite poweravailable, the reactor coolant pumps continue to circulatecoolant through the steam generators, maximizing the ReactorCoolant System (RCS) cooldown. With a loss of offsitepower, the response of mitigating systems is delayed.Significant single failures considered include failure of anMSIV to close.

The MSIVs serve only a safety function and remain openduring power operation. These valves operate under thefollowing situations:

a.

An HELB inside containment. In order to maximize themass and energy release into containment, the analysisassumes that the MSIV in the affected steam generatorremains open. For this accident scenario, steam isdischarged into containment from all steam generatorsuntil the remaining MSIVs close. After MSIV closure,steam is discharged into containment only from theaffected steam generator and from the residual steamin the main steam header downstream of the closedMSIVs in the unaffected loops. Closure of the MSIVsisolates the break from the unaffected steamgenerators.

BYRON - UNITS 1 & 2

B 3.7.2 - 2

Revision 0

BASES

MSIVs B 3.7.2

APPLICABLE The design basis of the MSIVs is established by the SAFETY ANALYSES analysis for the large Steam Line Break (SLB) outside

containment, discussed in the UFSAR, Section 15.1.5 (Ref. 2). It is also affected by the accident analysis of the SLB events presented in the UFSAR, Section 6.2 (Ref. 3). The design precludes the blowdown of more than one steam generator, assuming a single active component failure (e.g., the failure of one MSIV to close on demand).

The accident analysis compares several different SLB events against different acceptance criteria. The large SLB outside containment upstream of the MSIV is limiting for offsite dose, although a break in this short section of main steam header has a very low probability. The large SLB inside containment at hot zero power is the limiting case for a post trip return to power. The analysis includes scenarios with offsite power available, and with a loss of offsite power following turbine trip. With offsite power available, the reactor coolant pumps continue to circulate coolant through the steam generators, maximizing the Reactor Coolant System (RCS) cool down. With a loss of offsite power, the response of mitigating systems is delayed. Significant single failures considered include failure of an MSIV to close.

The MSIVs serve only a safety function and remain open during power operation. These valves operate under the following situations:

a. An HELB inside containment. In order to maximize the mass and energy release into containment, the analysis assumes that the MSIV in the affected steam generator remains open. For this accident scenario, steam is discharged into containment from all steam generators until the remaining MSIVs close. After MSIV closure, steam is discharged into containment only from the affected steam generator and from the residual steam in the main steam header downstream of the closed MSIVs in the unaffected loops. Closure of the MSIVs isolates the break from the unaffected steam generators.

BYRON - UNITS 1 & 2 B 3.7.2 - 2 Revision 0

MSIVsB 3.7.2

BASES


b. A break outside of containment and upstream from theMSIVs is not a containment pressurization concern.The uncontrolled blowdown of more than one steamgenerator must be prevented to limit the potential foruncontrolled RCS cooldown and positive reactivityaddition. Closure of the MSIVs isolates the break andlimits the blowdown to a single steam generator.

c. A break downstream of the MSIVs will be isolated bythe closure of the MSIVs.

d. Following a steam generator tube rupture, closure ofthe MSIVs isolates the ruptured steam generator fromthe intact steam generators to minimize radiologicalreleases.

e. The MSIVs are also utilized during other events suchas a feedwater line break. This event is lesslimiting so far as MSIV OPERABILITY is concerned.


actuatorThis LCO requires that four MSIVsfin the steam lines be

treonsOPERABLE. The MSIVs are considered OPERABLE when theisolation times are within limits, and they close on anisolation actuation signal.

This LCO provides assurance that the MSIVs will performtheir design safety function to mitigate the consequences ofaccidents that could result in exposures comparable to the10 CFR 50.67 (Ref. 4) limits or the NRC staff approvedlicensing basis.

and theirassociated

LCO

NSERT B

BYRON - UNITS 1 & 2

B 3.7.2 - -3

Revision

BASES

MSIVs B 3.7.2


LCO

b. A break outside of containment and upstream from the MSIVs is not a containment pressurization concern. The uncontrolled blowdown of more than one steam generator must be prevented to limit the potential for uncontrolled RCS cooldown and positive reactivity addition. Closure of the MSIVs isolates the break and limits the blowdown to a single steam generator.

c. A break downstream of the MSIVs will be isolated by the closure of the MSIVs.

d. Following a steam generator tube rupture, closure of the MSIVs isolates the ruptured steam generator from the intact steam generators to minimize radiological releases.

e. The MSIVs are also utilized during other events such as a feedwater line break. This event is less limiting so far as MSIV OPERABILITY is concerned.


This LCO requires that four MSIVs in the steam lines be OPERABLE. The MSIVs are considered OPERABLE when the isolation times are within limits, and they close on an isolation actuation signal.

B I---~ 1.....-__ ---' Thi s LCO provi des assurance that the MSIVs wi 11 perform

their design safety function to mitigate the consequences of accidents that could result in exposures comparable to the 10 CFR 50.67 (Ref. 4) limits or the NRC staff approved licensing basis.

BYRON - UNITS 1 & 2 B 3.7.2 - 3 Revi s ion .§.5.

MSIVsB 3.7.2

BASES

and requiredactuator trains

APPLICABILITY

The MSIVsTmust be OPERABLE in MODE 1, and in MODES 2 and 3except when closed, when there is significant mass andenergy in the RCS and steam generators. When the MSIVs areclosed, they are already performing the safety function. InMODE 4 the steam generator energy is low.

In MODE 5 or 6, the steam generators do not contain muchenergy because their temperature is below the boiling pointof water; therefore, the MSIVs are not required forisolation of potential high energy secondary system pipebreaks in these MODES.

ACTIONS

.4.ERT C

INSERT D

With one MSIV inoperable in MODE 1, action must be taken torestore OPERABLE status within 8 hours. Some repairs to theMSIV can be made with the unit hot. The 8 hour CompletionTime is reasonable, considering the low probability of anaccident occurring during this time period that wouldrequire a closure of the MSIVs.

The 8 hour Completion Time is greater than that normallyallowed for containment isolation valves because the MSIVsare valves that isolate a closed system penetratingcontainment. These valves differ from other containmentisolation valves in that the closed system provides anadditional means for containment isolation.

If the MSIV cannot be restored to OPERABLE statu within8 hours, the unit must be placed in a MODE in which theLCO does not apply. To achieve this status, th

nit mustbe placed in MODE 2 within 6 hours and Condition would beentered. The Completion Time is reasonable, based onoperating experience, to reach MODE 2 and to close the MSIVsin an orderly manner and without challenging plant systems.

BYRON - UNITS 1 & 2

B 3.7.2 - 4

Revision -G

BASES

APPLICABI LITY

ACTIONS

MSIVs B 3.7.2

The MSIVs must be OPERABLE in MODE 1, and in MODES 2 and 3 except when closed, when there is significant mass and energy in the RCS and steam generators. When the MSIVs are closed, they are already performing the safety function. In MODE 4 the steam generator energy is low.

In MODE 5 or 6, the steam generators do not contain much energy because their temperature is below the boiling point of water; therefore, the MSIVs are not required for isolation of potential high energy secondary system pipe breaks in these MODES.

With one MSIV inoperable in MODE 1, action must be taken to restore OPERABLE status within 8 hours. Some repairs to the MSIV can be made with the unit hot. The 8 hour Completion Time is reasonable, considering the low probability of an accident occurring during this time period that would

re a closure of the MSIVs.

8 hour Completion Time is greater than that normally allowed for containment isolation valves because the MSIVs are valves that isolate a closed system penetrating containment. These valves differ from other containment isolation valves in that the closed system provides an additional means for containment isolation .

.g.. 1

If the MSIV cannot be restored to OPERABLE statu within 8 hours, the unit must be placed in a MODE in wh ch the LCO does not apply. To achieve this status, th nit must be placed in MODE 2 within 6 hours and Condition ~ would be entered. The Completion Time is reasonable, based on operating experience, to reach MODE 2 and to close the MSIVs in an orderly manner and without challenging plant systems.

BYRON - UNITS 1 & 2 B 3.7.2-4 Revision .g.

MSIVsB 3.7.2

BASES

ACTIONS (continued)

-G.1 and -G.2

Condition E is modified by a Note indicating that separateCondition entry is allowed for each MSIV.

Since the MSIVs are required to be OPERABLE in MODES 2and 3, the inoperable MSIVs may either be restored toOPERABLE status or closed. When closed, the MSIVs arealready in the position required by the assumptions in thesafety analysis.

The 8 hour Completion Time is consistent with that allowedin Condition #

F

For inoperable MSIVs that cannot be restored to OPERABLEstatus within the specified Completion Time, but are closed,the inoperable MSIVs must be verified on a periodic basis tobe closed. This is necessary to ensure that the assumptionsin the safety analysis remain valid. The 7 day CompletionTime is reasonable, based on engineering judgment, in viewof MSIV status indications available in the control room,and other administrative controls, to ensure that thesevalves are in the closed position.

If the MSIVs cannot be restored to OPERABLE status or arenot closed within the associated Completion Time, the unitmust be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed at least inMODE 3 within 6 hours, and in MODE 4 within 12 hours. Theallowed Completion Times are reasonable, based on operatingexperience, to reach the required unit conditions fromMODE 2 conditions in an orderly manner and withoutchallenging plant systems.

BYRON - UNITS 1 & 2

B 3.7.2 - -5

Revision f

BASES

MSIVs B 3.7.2

ACTIONS (continued) ;----1

Condition t is modified by a Note indicating that separate Condition entry is allowed for each MSIV.

Since the MSIVs are required to be OPERABLE in MODES 2 and 3, the inoperable MSIVs may either be restored to OPERABLE status or closed. When closed, the MSIVs are already in the position required by the assumptions in the safety analysis.

The B hour Completion Time is consistent with that allowed in Condition A=E----[] For inoperable MSIVs that cannot be restored to OPERABLE status within the specified Completion Time, but are closed, the inoperable MSIVs must be verified on a periodic basis to be closed. This is necessary to ensure that the assumptions in the safety analysis remain valid. The 7 day Completion Time is reasonable, based on engineering judgment, in view of MSIV status indications available in the control room, and other administrative controls, to ensure that these

~es :re in the closed position.

- ~ft.1~ft.2

If the MSIVs cannot be restored to OPERABLE status or are not closed within the associated Completion Time, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed at least in MODE 3 within 6 hours, and in MODE 4 within 12 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from MODE 2 conditions in an orderly manner and without challenging plant systems.

BYRON - UNITS 1 & 2 B 3.7.2-'§' Revision .g.

MSIVsB 3.7.2

. . .Ion an actual or simulated actuation

SR 372 1 signal [from each actuator train]

This SR verifies that MSIV closure time is <_ 5 seconds. TheMSIV closure time is assumed in the accident and containmentanalyses. This Surveillance is normally performed uponreturning the unit to operation following a refuelingoutage. Based on ASME Code (Ref. 5), the MSIVs are notclosure time tested at power.

The Frequency is in accordance with the Inservice TestingProgram. This test is conducted in MODE 3 with the unit atoperating temperature and pressure. This SR is modified bya Note. This Note allows entry into and operation in MODE 3prior to performing the SR. This allows a delay of testinguntil MODE 3, to establish conditions consistent with thoseunder which the acceptance criterion was generated.

SR 3.7.2.2

actuator train can close its respective

This SR verifies that each MSIV e fl eTe on an actual orsimulated actuation signal. This Surveillance is normallyperformed upon returning the unit to operation following arefueling outage. The Surveillance Frequency is controlledunder the Surveillance Frequency Control Program.

This SR is modified by a Note. This Note allows entry intoand operation in MODE 3 prior to performing the SR. Thisallows a delay of testing until MODE 3, to establishconditions consistent with those under which the acceptancecriterion was generated.

REFERENCES

1.

UFSAR, Section 10.3.



4. 10 CFR 50.67.

5. ASME Code for Operation and Maintenance of NuclearPower Plants.

BYRON - UNITS 1 & 2

B 3.7.2 - 6

Revision

BASES

SURVEILLANCEREQUIREMENTS

BASES

SURVEI LLANCE REQUIREMENTS

REFERENCES

MSIVs B 3.7.2

This SR verifies that MSIV closure time is ~ 5 seconds. The MSIV closure time is assumed in the accident and containment analyses. This Surveillance is normally performed upon returning the unit to operation following a refueling outage. Based on ASME Code (Ref. 5), the MSIVs are not closure time tested at power.

The Frequency is in accordance with the Inservice Testing Program. This test is conducted in MODE 3 with the unit at operating temperature and pressure. This SR is modified by a Note. This Note allows entry into and operation in MODE 3 prior to performing the SR. This allows a delay of testing until MODE 3, to establish conditions consistent with those under which the acceptance criterion was generated.

SR 3.7.2.2

This SR verifies that each MSIV can close on an actual or simulated actuation signal. This Surveillance is normally performed upon returning the unit to operation following a refueling outage. The Surveillance Frequency is controlled under the Surve; 11 ance Frequency Control Program.

This SR is modified by a Note. This Note allows entry into and operation in MODE 3 prior to performing the SR. This allows a delay of testing until MODE 3, to establish conditions consistent with those under which the acceptance criterion was generated.




4. 10 CFR 50.67.

5. ASME Code for Operation and Maintenance of Nuclear Power Plants.

BYRON - UNITS 1 & 2 83.7.2--6- Revi si on ::p;j

INSERT A

The MSIV is a gate valve with dual-redundant hydraulic actuator trains. Either actuator train canindependently perform the safety function to fast-close the MSIV on demand. Each actuatortrain consists of a hydraulic accumulator controlled by solenoid valves on the associated MSIV.For each MSIV, one actuator train is associated with ESF Division 1, and one actuator train isassociated with ESF Division 2.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at theMSIV location. The actuator train does not include any portion of the analog channels orprotection system actuation logic and actuation relays that provide inputs to the valve actuatortrains. LCO 3.3.2, "Engineered Safety Features Actuation System (ESFAS) Instrumentation,"provides separate Conditions, Required Actions, and Surveillance Requirements for the analogchannels and protection system logic and relays.

INSERT B

An MSIV actuator train is considered OPERABLE when it is capable of fast-closing theassociated MSIV on demand and within the required isolation time. This includes havingadequate accumulator pressure to support fast-closure of the MSIV within the required isolationtime.

INSERT C

A.1

With a single actuator train inoperable on one MSIV, action must be taken to restore theinoperable actuator train to OPERABLE status within 7 days. The 7-day Completion Time isreasonable in light of the dual-redundant actuator train design such that with one actuator traininoperable, the affected MSIV is still capable of closing on demand via the remainingOPERABLE actuator train. The 7-day Completion Time takes into account the redundantOPERABLE actuator train to the MSIV, reasonable time for repairs, and the low probability of anevent occurring that requires the inoperable actuator train to the affected MSIV.

B.1

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIVinoperable, such that the inoperable actuator trains are not in the same ESF Division, actionmust be taken to restore one of the inoperable actuator trains to OPERABLE status within 72hours. With one actuator train inoperable on two different MSIVs that are not in the same ESFDivision, there is an increased likelihood that an additional failure (such as the failure of anactuator logic train) could cause one MSIV to fail to close. The 72-hour Completion Time isreasonable since the dual-redundant actuator train design ensures that with only one actuatortrain on each of two affected MSIVs inoperable, each MSIV is still capable of closing ondemand.

C.1

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIVinoperable, such that both inoperable actuator trains are in the same ESF Division, action mustbe taken to restore one of the inoperable actuator trains to OPERABLE status within 24 hours.The 24-hour Completion Time provides a reasonable amount of time for restoring at least one

INSERT A

The MSIV is a gate valve with dual-redundant hydraulic actuator trains. Either actuator train can independently perform the safety function to fast-close the MSIV on demand. Each actuator train consists of a hydraulic accumulator controlled by solenoid valves on the associated MSIV. For each MSIV, one actuator train is associated with ESF Division 1, and one actuator train is associated with ESF Division 2.

A pneumatic and hydraulic actuator train is composed solely of skid-mounted components at the MSIV location. The actuator train does not include any portion of the analog channels or protection system actuation logic and actuation relays that provide inputs to the valve actuator trains. LCO 3.3.2, "Engineered Safety Features Actuation System (ESFAS) Instrumentation," provides separate Conditions, Required Actions, and Surveillance Requirements for the analog channels and protection system logic and relays.

INSERT B

An MSIV actuator train is considered OPERABLE when it is capable of fast-closing the associated MSIV on demand and within the required isolation time. This includes having adequate accumulator pressure to support fast-closure of the MSIV within the required isolation time.

INSERTC

With a single actuator train inoperable on one MSIV, action must be taken to restore the inoperable actuator train to OPERABLE status within 7 days. The 7-day Completion Time is reasonable in light of the dual-redundant actuator train design such that with one actuator train inoperable, the affected MSIV is still capable of closing on demand via the remaining OPERABLE actuator train. The 7-day Completion Time takes into account the redundant OPERABLE actuator train to the MSIV, reasonable time for repairs, and the low probability of an event occurring that requires the inoperable actuator train to the affected MSIV.

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIV inoperable, such that the inoperable actuator trains are not in the same ESF Division, action must be taken to restore one of the inoperable actuator trains to OPERABLE status within 72 hours. With one actuator train inoperable on two different MSIVs that are not in the same ESF Division, there is an increased likelihood that an additional failure (such as the failure of an actuator logic train) could cause one MSIV to fail to close. The 72-hour Completion Time is reasonable since the dual-redundant actuator train design ensures that with only one actuator train on each of two affected MSIVs inoperable, each MSIV is still capable of closing on demand.

With one actuator train on one MSIV inoperable; and one actuator train on an additional MSIV inoperable, such that both inoperable actuator trains are in the same ESF Division, action must be taken to restore one of the inoperable actuator trains to OPERABLE status within 24 hours. The 24-hour Completion Time provides a reasonable amount of time for restoring at least one

actuator train since the dual-redundant actuator train design for each MSIV ensures that asingle inoperable actuator train cannot prevent the affected MSIV(s) from closing on demand.With two actuator trains inoperable in the same ESF Division, an additional failure (such as thefailure of an actuator logic train in the other ESF Division) could cause both affected MSIVs tofail to close on demand. The 24 hour Completion Time takes into the redundant OPERABLEactuator trains to the affected MSIVs and the low probability of an event occurring that requiresthe inoperable actuator trains to the affected MSIVs.

D.1

Required Action D.1 provides assurance that the appropriate Condition is entered for theaffected MSIV if its associated actuator trains become inoperable. Failure of both actuatortrains for a single MSIV results in the inability to close the affected MSIV on demand.

E.1

With three or more MSIV actuator trains inoperable or when Required Action A.1, B.1, or C.1are not completed within the required Completion Time, the affected MSIVs may be incapable ofclosing on demand and must be immediately declared inoperable. Having three actuator trainsinoperable could involve two inoperable actuator trains on one MSIV and one inoperableactuator train on another MSIV, or an inoperable actuator train on each of three MSIVs, forwhich the inoperable actuator trains could all be in the same ESF Division or be staggeredamong the two ESF Divisions.

Depending on which of these conditions or combinations is in effect, the condition orcombination could mean that all of the affected MSIVs remain capable of closing on demand(due to the dual-redundant actuator train design), or that at least one MSIV is inoperable, or thatwith an additional single failure up to three MSIVs could be incapable of closing on demand.Therefore, in some cases, immediately declaring the affected MSIVs inoperable is conservative(when some or all of the affected MSIVs may still be capable of closing on demand even with asingle additional failure), while in other cases it is appropriate (when at least one of the MSIVswould be inoperable, or up to three could be rendered inoperable by an additional single failure).Required Action E.1 is conservatively based on the worst-case condition and therefore requiresimmediately declaring all the affected MSIVs inoperable.

INSERT D

Condition F is entered when one MSIV is inoperable in MODE 1, including when both actuatortrains for one MSIV are inoperable. When only one actuator train is inoperable on one MSIV,Condition A applies.

actuator train since the dual-redundant actuator train design for each MSIV ensures that a single inoperable actuator train cannot prevent the affected MSIV(s) from closing on demand. With two actuator trains inoperable in the same ESF Division, an additional failure (such as the failure of an actuator logic train in the other ESF Division) could cause both affected MSIVs to fail to close on demand. The 24 hour Completion Time takes into the redundant OPERABLE actuator trains to the affected MSIVs and the low probability of an event occurring that requires the inoperable actuator trains to the affected MSIVs.

Required Action D.1 provides assurance that the appropriate Condition is entered for the affected MSIV if its associated actuator trains become inoperable. Failure of both actuator trains for a single MSIV results in the inability to close the affected MSIV on demand.

With three or more MSIV actuator trains inoperable or when Required Action A.1, B.1, or C.1 are not completed within the required Completion Time, the affected MSIVs may be incapable of closing on demand and must be immediately declared inoperable. Having three actuator trains inoperable could involve two inoperable actuator trains on one MSIV and one inoperable actuator train on another MSIV, or an inoperable actuator train on each of three MSIVs, for which the inoperable actuator trains could all be in the same ESF Division or be staggered among the two ESF Divisions.

Depending on which of these conditions or combinations is in effect, the condition or combination could mean that all of the affected MSIVs remain capable of closing on demand (due to the dual-redundant actuator train design), or that at least one MSIV is inoperable, or that with an additional single failure up to three MSIVs could be incapable of closing on demand. Therefore, in some cases, immediately declaring the affected MSIVs inoperable is conservative (when some or all of the affected MSIVs may still be capable of closing on demand even with a single additional failure), while in other cases it is appropriate (when at least one of the MSIVs would be inoperable, or up to three could be rendered inoperable by an additional single failure). Required Action E.1 is conservatively based on the worst-case condition and therefore requires immediately declaring all the affected MSIVs inoperable.

INSERT 0

Condition F is entered when one MSIV is inoperable in MODE 1, including when both actuator trains for one MSIV are inoperable. When only one actuator train is inoperable on one MSIV, Condition A applies.

braidwood, units 1 and 2 and bryon, units 1 and 2, license amendment … · 2013-09-03 · u. s....

Documents