Luca Bevil said:
L:
"Normal" residual heat removal toward "cold shutdown" needs (I'll recap only for the casual reader, I am well aware of your expertise and experience on the topic) not only the regular closed loop functioning of the deputed water lines, but also the outgoing water to be refrigerated in an exchange heat, in the condenser, with secondary loop refrigerant water before being fed-back to the reactor.
The fact that MSIVs and other valves could in fact shut down will prevent immediate drainage but it will not ensure the operability of normal cooling.
If the condenser is located, as it is in Fukushima turbine buildings, it will not survive a "perfect" impact.
Turbine buildings we have seen in Fukushima are of course seismic but they have not walls of 1m + concrete. Nothing even remotely comparable with the Twin Towers or Pentagon structure that were nonetheless tragically penetrated on September the 11th.
They are in fact normal, albeit seismic civil buildings.
With condenser destroyed, widespread damage from jet fuel ignition and explosion, most likely electric switchboard/equipment damaged, residul portion of pipes (if any) that need to be intercepted to allow any "sea water-like" kind of extreme mitigation measure,
I do not think the Fukushima design would have withstood such an impact (on probabilities of such a tragic event I would like not to comment) any better than it did withstood the flooding.
N: Your English is better than my Italian but I think I understand your point as follows:
“Damage to the condenser and closure of the MSIVs and Feedwater isolation valves removes normal cooling. The Turbine Buildings at Fukushima will not withstand the aircraft impact sso the diesels will be destroyed and cooling will be lost.”
If that is not what you meant, please correct me.
First, my disclaimers
I spent more time on this than any previous post on the thread. This qualitative discussion is as far as I can go on this issue. It is based on a couple of open sources and discussions that are public and some amateur speculation about an aircraft approach to Fukushima and what I see on the plant layout drawings posted here. I have not used plant security information for any of the pants that I have worked. I have not seen the DOE national labs analysis or calculations on this topic, notr have I( discussed this scenario with anyone who has.
Next. The Scenario:
First look at the maps that have been posted and the photographs of the Fukushima Site. An aircraft would have to approach from the sea due to higher terrain to the west. The turbine buildings are the first target as the aircraft approaches from that side. Assume the aircraft makes the perfect strike (Low Probability) and manages to destroy the condenser and the diesels as well. The turbine building acts as a first barrier protecting the reactor building and the electrical distribution switchyards beyond that. So the single attack will not take out Offsite Power (low probability) causing an extended station blackout that is not recoverable in a short time (lower probability).
Meanwhile, as you surmise, normal cooling is lost. Battery operated HPCI and RCIC systems provide high pressure makeup and cooling using either the Condensate Storage Tanks or the Torus. Heat is rejected to the torus through the SRVs and high pressure pump steam exhaust. These systems operate independent of AC power providing time if fires or other damage to the switchyard need action. (low failure probability) The plant will be at a condition called Hot Standby and can be stable for several hours. Eventually the plant will be depressurized (Low failure probability) as the torus heats up and loses the ability to condense steamor batteries are exhausted. Then low pressure ECCs system (RHR and Core Spray) need to operate using AC systems powered from the switchyard. (Some possibility of failure if fires continue).
Over at the Spent Fuel Pool if Offsite AC power is available Fuel Pool Cooling continues. (low failure probability) If not fuel pool heatup begins but time is available before boiling begins.
At this point we leave Fukushima. After 9/11 attacks the US NRC ordered significant added capabilities to extend core cooling and makeup and alternative methods of injecting cooling water to the core and spent fuel pools. You would expect that the equipment to perform these functions is self-powered and prepositioned for use. Those capabilities may be delayed until fires are out, but time to extinguish or suppress fires is available according to the analysis and evaluations performed by national labs and NRC. For existing plants core damage may occur (low probability of failure), but the containment function and other safety systems will prevent radiation releases to the public in excess of the legal limits (Very Low probability of failure). For new construction plants, there will be no core damage because this event is now part of design basis (Very low failure probability).
We left Fukushima because as I have posted previously Japan told the Convention on Reactor Safety that they have a stable society and therefor no need to address terrorism despite the lessons of 9/11 and the sarin gas attack on the Tokyo subway. I have no idea if a Japanese industry that covered up shroud cracks, used buckets to dump enriched uranium into a criticality accident, ignored tsunami risk and dismissed possibilities of terrorism after being attacked could be safe in any event.
The points above where probability comes into play are my guess of the approach that the National Labs and NRC used in their analysis. The section of the report you quoted tells me that the attacked plant (existing) may be a write-off, but the risk to the public is low.
The confusion about an attack on containment is obvious. In the scenario where the attack is on the turbine building there is a low probability of containment failure, even if core damage occurs. If the initial attack is on containment and a breach is made, then core damage would lead to radiation release to the public. The problem for the terrorist is that a single aircraft cannot easily cause the loss of all the things that need to be taken out to cause both core damage and containment failure.
L:
Having read the excellent technical level of your posts on the long Fuku thread I find hard to believe you would think that specific plant would survive such an accident.
N: I don’t. But as I saw it you were using Fukushima to say that an entire industry was ignoring the terrorist threat because we hadn’t installed missile batteries or built AREVA’s walls. That is so wrong I can’t let it pass unchallenged. There is more than one way to solve a problem. In my honest, professional, and informed opinion, it is really not justified to shut existing US plants down in view of an aircraft attack, but we can agree to disagree on that.
L:
Is it possible that US plants have hardened contermeasures for such ipotetic accident ?
I have no internal knowledge to rule this out but this possibility was not suggested by your posts (that rather focused on the efficiency of security active response), nor it seems to be acknowledged in the linked official document.
It seems unlikely that an effective structural reinforcement of this proportion can in fact be carried out on an existing structure, without disrupting for months normal plant production.
That does no mean I rule out different more limited measures, having been carried out, such as relocating some electrical switchboard or component, it just does not seem such measures would be effective against a direct hit, but I'll be glad to hear your comments on this.
N: Did you mean “hypothetical”? Sorry, those questions about structure reinforcement or relocation of safety equipment are too specific about security issues. They would be possible responses to make a plant more resistant to damage. However, I won’t comment about specific actions.
L:
If in fact that is the case I can only be happy for the US people, but US nuclear security does not solve the problem the world over, our friend Clancy here has just written that the oldest plants in Germany will not resist such an attack.
What is more France and UK opposition to include such scenarios in european nuclear stress test look quite suspicious to me (why oppose such a request, officially made be the EU commissioner on energy, if everything had been considered ?).
N: I’ve probably already been blacklisted by Japan, and shot at by Lithuania, and have fought a skirmish with Italy. Please don’t ask me to take on Germany, France and the UK, too. (Eh, Borek, how is that for diplomacy?) I think those countries have to answer that question, because they haven’t told me..
L:
Since we are discussing in technical terms, the spent fuel pond situation in US mark I reactors is in your opinion safe?
It seems to me rather risky in case of an impact of a plane on that floor with just a few degrees of descent angle...
Then again I am basing my risk perception on the Fuskushima structures that in case of reactor 1 just show a light steel framework, and in case of reactors 3 and 4 just show ordinary concrete pillars.
N: The entire issue of spent fuel is a cesspool that deserves its own thread. Politics, lies, delays, lack of leadership, incompetence, and criminal stupidity are words that come to mind. But I will say this:
The word safe is meaningless. There are risks with spent fuel. The location of the spent fuels pool in a BWR is vulnerable to some damage scenarios. New plant designs relocate the fuel storage to a more protected location. The amount of fuel in spent fuel pools is also a vulnerability. That is where my issues really explode. Is it easy to exploit those vulnerabilities , no, but still easier than I would like. What to do about it is:
- Make a decision whether to reprocess fuel or not.
- Cut through the political BS and designate a geological repository site, even if it is temporary.
- Get as much fuel out of the pools as decay allows.
- Do this before we license another nuclear plant.
My final comment : No decision is a decision to increase risk.