Lessons Learned in the Update of a Safety Limit for the High Flux Isotope Reactor

A recent unreviewed safety question (USQ) regarding a portion of the High Flux Isotope Reactor (HFIR) transient decay heat removal analysis focused on applicability of a heat transfer correlation at the low flow end of reactor operations. During resolution of this issue, review of the correlations used to establish the safety limit (SL) on reactor flux-to-flow ratio revealed the need to change the magnitude of the SL at the low flow end of reactor operations and the need to update the hot spot fuel damage criteria to incorporate current knowledge involving parallel channel flow stability. Because of the original safety design strategy for the reactor, resolution of the issues for the flux-to-flow ratio involved reevaluation of all key process variable SLs and limiting control settings (LCSs) using the current version of the heat transfer analysis code for the reactor. Goals of the work involved updating and upgrading the SL analysis where necessary, while preserving the safety design strategy for the reactor. Changes made include revisions to the safety design criteria at low flows to address the USQ, update of the process- and analysis input-variable uncertainty considerations, and upgrade of the safety design criteria at high flow. The challenges faced during update/upgrade of this SL and LCS are typical of the problems found in the integration of safety into the design process for a complex facility. In particular, the problems addressed in the area of instrument uncertainties provide valuable lessons learned for establishment and configuration control of SLs for large facilities