BLD-NUCL84-07 · Lesson 6 · 25 clock hours · practice
Controlled Shutdown and Cooldown Operations
Objective. Students execute a planned controlled reactor shutdown from full power to cold shutdown, maintaining cooldown rate within procedural limits and completing all required hold points.
⚠ Pending professional review
This lesson, its worked examples and its practice questions has not yet been verified by a licensed professional engineer or master tradesperson or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
Controlled Shutdown and Cooldown Operations
A planned controlled shutdown is one of the most procedurally demanding evolutions a nuclear plant crew performs. Unlike a reactor trip, a controlled shutdown gives the crew time to follow a structured sequence, verify system alignments, and manage the reactor coolant system (RCS) temperature at a rate that protects plant equipment. Understanding why each limit exists—not just what the limit is—is essential for safe, competent operation.
Why Cooldown Rate Limits Exist
The reactor coolant system pressure boundary—primarily the reactor pressure vessel (RPV), primary piping, and pressurizer—is made of thick carbon steel and low-alloy steel. These materials are susceptible to a phenomenon called pressurized thermal shock (PTS) and, more broadly, to thermal fatigue when temperature changes occur too rapidly. Fast cooldown creates large thermal gradients across the vessel wall: the inner surface cools quickly while the outer surface lags behind. This sets up tensile stress on the inner surface. In the presence of any pre-existing flaws, rapid cooldown combined with system pressure can propagate those flaws.
Reactor coolant system technical specifications and plant normal operating procedures (NOPs) establish a maximum cooldown rate—commonly expressed in degrees Fahrenheit per hour—to keep thermal stresses within design limits. Exceeding this rate is a procedure violation and a potential technical specification violation. Never override or dismiss a rate alarm without immediate corrective action.
Phases of a Controlled Shutdown
Power reduction: The reactor operator (RO) reduces reactor power in a controlled fashion, typically by inserting control rods following the power reduction curve in the NOP. Reactor power is monitored on nuclear instrumentation. The shift supervisor coordinates with the grid operator if the unit is on-line.
Reactor trip or final rod insertion: At the prescribed power level, the final control rods are inserted (or a manual trip is initiated) to achieve subcritical conditions. The RO verifies neutron flux is decreasing and that all rods are fully inserted per the rod position indication system.
Decay heat removal transition: Even after shutdown, decay heat from fission product decay continues to heat the core. Initially, the main steam system and steam generators (in a pressurized water reactor, PWR) or the main condenser (in a boiling water reactor, BWR) remove this heat. As temperature and pressure drop, the crew transitions to residual heat removal (RHR) or shutdown cooling systems per procedural hold points.
Hold points: The NOP defines specific temperatures and pressures at which the crew must pause, verify system conditions, and obtain shift supervisor authorization before proceeding. Common hold points include the temperature at which RHR suction valve interlock permissives are satisfied and the temperature below which the reactor coolant pump (RCP) operation restrictions apply.
Cold shutdown definition: Cold shutdown is a defined plant condition—typically with the reactor subcritical, RCS temperature below a defined value (such as 200°F in many plants), and the reactor coolant system depressurized to low pressure. The specific values are plant-specific and defined in technical specifications.
Safety System Valve Alignments During Cooldown
As the RCS cools, several valve alignments change. Key items include:
- RHR system suction valves: Interlock logic prevents opening these valves above a set RCS pressure to protect RHR system design pressure limits. The crew must verify RCS pressure is below the interlock setpoint before attempting to open.
- Pressurizer PORVs and spray valves: Used to control pressure during cooldown; position and operability must be confirmed per the NOP.
- Safety injection accumulator isolation: In many PWR designs, accumulators are isolated at low RCS pressure during cold shutdown to prevent nitrogen injection.
- High-pressure injection system alignment: Must be maintained operable per technical specifications until specific cold shutdown conditions are confirmed.
All valve manipulations must be performed per the written procedure step, with the field operator providing verbal confirmation and the control room operator logging the completed step on the communication log.
Communication and Role Responsibilities
Clear three-way communication—initiate, repeat back, verify—is required for every significant plant action. The shift supervisor has overall authority and responsibility for the evolution. The RO executes panel actions and monitors plant parameters. The field operator (auxiliary operator) performs local manipulations and reports status. When a parameter approaches a limit, the RO calls it out immediately, the shift supervisor evaluates, and the crew takes corrective action before the limit is exceeded.
Using Simulator Playback for Learning
After the evolution, the simulator playback function lets you view your own cooldown rate trend as a time plot. Examine every segment where the rate increased. Ask: What was I doing at that moment? Was I draining RCS inventory too fast? Did auxiliary feedwater flow spike? Did I open a steam dump valve too wide? The technical narrative you write connects your specific control actions to the physical mechanism of thermal stress. This is the kind of cause-and-effect thinking that the NRC oral board will test directly.
Safety Reminders
- Procedure compliance is non-negotiable. Technical specifications are backed by law. An unauthorized cooldown rate exceedance requires immediate entry into the appropriate action level.
- Lockout/tagout (LOTO): As systems are taken out of service during cooldown, LOTO must be applied per the plant's energy control program before any maintenance begins.
- Radiation protection: RCS dose rates can change during cooldown as activated corrosion products shift. Wear required dosimetry; follow the radiological work permit (RWP) for any field work.
- PPE: Hard hat, safety glasses, and hearing protection apply in applicable plant areas; anti-contamination clothing and respirators apply as directed by the radiation protection technician.
Key terms10
Controlled ShutdownA planned, procedurally directed reduction of reactor power to subcritical followed by cooldown of the reactor coolant system, as opposed to an automatic or manual reactor trip response to an abnormal event.
Cooldown Rate LimitThe maximum allowable rate of temperature decrease in the reactor coolant system, expressed in degrees Fahrenheit per hour, established in plant technical specifications and NOPs to prevent thermal shock damage to the pressure boundary.
Cold ShutdownA defined plant condition in which the reactor is subcritical, RCS temperature is below the plant-specific limit stated in technical specifications (often around 200°F), and RCS pressure is reduced; exact values are plant-specific.
Residual Heat Removal (RHR)A system (also called shutdown cooling in some designs) that circulates reactor coolant through a heat exchanger to remove decay heat after the reactor is shut down and the main heat removal paths are no longer available.
Hold PointA procedurally required pause during a plant evolution at a specified plant condition—such as a temperature or pressure value—where the crew must verify alignments and obtain authorization before proceeding to the next phase.
Pressurized Thermal Shock (PTS)A condition in which rapid cooling of the reactor pressure vessel combined with system pressure creates high tensile stress on the inner vessel wall, potentially propagating pre-existing flaws; it is the primary physical basis for cooldown rate limits.
Three-Way CommunicationThe standard nuclear plant verbal communication protocol: the initiator states the action, the receiver repeats it back exactly, and the initiator confirms correctness before the action is taken.
Normal Operating Procedure (NOP)A plant-approved, step-by-step written procedure governing routine or planned operational evolutions such as plant startup, power changes, shutdown, and cooldown.
Decay HeatHeat generated in the reactor core after shutdown by the radioactive decay of fission products; it decreases over time but remains significant for hours to days and must be continuously removed to prevent fuel damage.
Radiological Work Permit (RWP)A document issued by the radiation protection organization that specifies the dose rate conditions, required PPE, dosimetry requirements, and work controls for a specific task in a radiologically controlled area.
Worked examples4
1. Your plant NOP specifies a maximum cooldown rate of 100°F/hour. At 0800 the RCS average temperature (T-avg) is 545°F. What is the minimum permissible T-avg at 0900, and at 1000?
- Step 1: Identify the limit. Maximum cooldown rate = 100°F/hour; you may not decrease temperature by more than 100°F in any one-hour period.
- Step 2: Calculate minimum T-avg at 0900. T-avg at 0800 = 545°F. Subtract maximum allowable drop: 545°F − 100°F = 445°F. T-avg must not be lower than 445°F at 0900.
- Step 3: Calculate minimum T-avg at 1000. Starting from the 0900 minimum of 445°F: 445°F − 100°F = 345°F. T-avg must not be lower than 345°F at 1000.
- Step 4: State the rule for monitoring. These are minimum temperature floors. If the actual temperature at any time is below the floor for that hour, the cooldown rate limit has been exceeded and the crew must immediately slow the cooldown and enter the applicable procedure or technical specification action level.
Answer: Minimum T-avg at 0900 = 445°F; minimum T-avg at 1000 = 345°F. Any reading below these values at those times means the 100°F/hour limit has been exceeded.
2. During simulator playback you identify that T-avg dropped from 480°F to 362°F between 1015 and 1115. Did you exceed the 100°F/hour cooldown rate limit? By how much?
- Step 1: Calculate the actual cooldown rate. Temperature change = 480°F − 362°F = 118°F over 1 hour (1015 to 1115).
- Step 2: Compare to the limit. Limit = 100°F/hour. Actual rate = 118°F/hour.
- Step 3: Determine the exceedance. 118°F/hour − 100°F/hour = 18°F/hour in excess of the limit.
- Step 4: State the consequence. The limit was exceeded by 18°F/hour. This requires entry into the applicable corrective action or technical specification action level, documentation, and identification of the root cause for the technical narrative.
Answer: Yes, the limit was exceeded. The actual rate was 118°F/hour, which is 18°F/hour above the 100°F/hour limit.
3. The RHR system suction valve interlock prevents opening until RCS pressure is at or below 350 psig. Current RCS pressure is 425 psig. You need to depressurize before opening the valve. If the pressurizer is being cooled at a rate that lowers pressure by 25 psig per 10 minutes, how long must you wait before the permissive is satisfied?
- Step 1: Determine the required pressure reduction. 425 psig − 350 psig = 75 psig must be removed.
- Step 2: Find the depressurization rate per minute. 25 psig per 10 minutes = 2.5 psig per minute.
- Step 3: Calculate the time required. Time = pressure reduction needed ÷ rate = 75 psig ÷ 2.5 psig/min = 30 minutes.
- Step 4: Apply operational conservatism. In practice, verify that RCS pressure indication reads at or below 350 psig on the required instruments before attempting to open the valve, and confirm the interlock permissive light is satisfied. Do not rely solely on the calculation.
Answer: Approximately 30 minutes at the stated depressurization rate. Always verify by direct indication before attempting to open the valve.
4. Your cooldown will take T-avg from 545°F down to 200°F (cold shutdown) at the maximum allowed rate of 100°F/hour, with a mandatory 30-minute hold at 350°F. How many total hours will the cooldown take at minimum?
- Step 1: Calculate Phase 1 — from 545°F to 350°F. Temperature change = 545°F − 350°F = 195°F. Time = 195°F ÷ 100°F/hour = 1.95 hours.
- Step 2: Add the mandatory hold. Hold = 30 minutes = 0.5 hours.
- Step 3: Calculate Phase 2 — from 350°F to 200°F. Temperature change = 350°F − 200°F = 150°F. Time = 150°F ÷ 100°F/hour = 1.5 hours.
- Step 4: Sum all phases. Total minimum time = 1.95 hours + 0.5 hours + 1.5 hours = 3.95 hours, approximately 3 hours and 57 minutes.
- Step 5: Note operational reality. Additional time is needed for procedure steps, hold-point verifications, and conservative margin to avoid approaching the rate limit; actual evolution will be longer.
Answer: The theoretical minimum is approximately 3 hours and 57 minutes (3.95 hours). Real evolutions take longer due to procedure steps, margins, and additional hold points.
In class: Pre-exercise review of the shutdown NOP, with students identifying the maximum cooldown rate limit, required hold temperatures, and safety system valve positions required during cooldown; instructor verifies student pre-exercise briefs. · Full shutdown evolution on the simulator: students rotate through reactor operator, field operator communication, and shift supervisor roles, coordinating verbal communications and completing procedure steps without prompting. · Students use the simulator's playback function to review their own cooldown rate trend, identify any period where rate approached the limit, and write a one-page technical narrative explaining their control actions and the physical basis for the cooldown rate restriction.
Materials: Simulator at full-power steady-state initial conditions, shutdown and cooldown NOP, cooldown rate limit reference, communication log forms, simulator playback capability, technical narrative template
Check: Cooldown rate must remain within procedural limits throughout the evolution (any exceedance = automatic fail requiring repeat); procedural step completion checklist graded by instructor—95% of steps completed correctly in sequence required to pass.
Practice check7
Answer each question, then check it. Nothing is recorded; this is your own practice.
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.