Accidents, Safety Analysis & Severe Accidents · C-SA-025
ANS Condition I–IV Classification — Design-Basis Events by Frequency and Consequence, and Their Acceptance Criteria
The more frequent the event, the stricter the criteria: from Condition II with no fuel damage to Condition IV with coolable geometry and 10 CFR 100 doses.
The ANS classification divides the design-basis events of a nuclear plant, by expected frequency and radiological consequence, into Condition I (normal operation and operational transients), II (incidents of moderate frequency), III (infrequent incidents) and IV (limiting faults), and applies stricter acceptance criteria the more frequent the event (ANSI N18.2-1973 → ANS-51.1-1983).
This entry covers the classification scheme and the acceptance criteria for each Condition.
Principle and mechanism
The principle — even out the risk
SRP 15.0 treats risk as "frequency × consequence" and explains that the design should make the risk of AOOs and of postulated accidents roughly comparable. Frequent events are allowed almost no consequences; rare events are allowed larger ones. As the Condition number rises, frequency falls and the allowed consequences grow.
| Condition | Name | Frequency (qualitative) | Approximate value (/reactor-year) | Typical events (usual W and CE FSAR classification) |
|---|---|---|---|---|
| I | Normal operation and operational transients | Continuous, planned operation | — | Startup and shutdown, refuelling, deviations within the T/S, load changes |
| II | Incidents of moderate frequency | May occur during a calendar year | ≥ 10⁻¹ | Uncontrolled bank withdrawal, boron dilution, turbine trip, loss of condenser vacuum, loss of normal feedwater or off-site power |
| III | Infrequent incidents | May occur infrequently during plant life | 10⁻¹ to 10⁻² | Small LOCA, small secondary pipe break, fuel assembly misloading, complete loss of forced flow |
| IV | Limiting faults | Not expected to occur, but postulated | 10⁻² to 10⁻⁶ | Large LOCA, large MSLB or feedwater line break, RCP locked rotor, rod ejection, fuel handling accident |
The original definitions in N18.2 are qualitative. The numbers are ANS-51.1 values as cited in a 2014 conference paper; they are approximate ranges, not regulatory boundaries.
The MSLB is the classic example of classification depending on size: a large break is IV, a small secondary pipe break is III, and an inadvertent opening of an SG safety valve is II. LOCAs follow the same pattern: large is IV, small is III. SGTR is classified as III or IV depending on reactor type and licensing basis (IV in W-type FSARs).
Acceptance criteria by Condition
SRP 15.0 Rev. 3 (2007), II.2, applies the following to licensees whose licensing basis uses the ANS classification.
| Fuel | Pressure (RCS, main steam) | Off-site dose | No escalation | |
|---|---|---|---|---|
| I | Within LCOs and design limits | Within design conditions | Within normal release limits | — |
| II | No damage: MDNBR ≥ 95/95 limit, no centreline melting (SAFDL) | Below 110 % of design pressure | Within 10 CFR 20; operation can resume after shutdown | Must not by itself cause III or IV |
| III | A small fraction of fuel rods may be damaged | Below 110 % (SRP AOO criterion) | PWR: may exceed 10 CFR 20, but no restriction of public use beyond the exclusion area | Must not by itself cause IV |
| IV | Coolable geometry maintained; rods below the limit assumed failed; LOCA: the five criteria of 50.46(b) | Event-specific allowable design limits considering brittle and ductile failure | Within 10 CFR 100 guidelines | No consequential loss of the systems or containment functions needed to cope |
The no-escalation condition differs by Condition. A Condition II event must not, without another independent failure, cause a III or IV event, and a III must not by itself cause a IV. A Condition IV event must not cause the consequential loss of the system functions needed to cope with it. For example, if a Condition II overpressure transient turns into a LOCA because a pressurizer safety valve sticks open, this principle is violated.
For Condition IV, the pressure limit is set by the event-specific SRP section. The 120 % (Service Level C) of the former SRP 15.2.8 (feedwater line break) is an example; it is not used as a general rule.
What it means in a plant
Mapping to 10 CFR, the SRP, ASME and the IAEA
10 CFR 50 Appendix A defines AOOs as "conditions of normal operation which are expected to occur one or more times during the life of the nuclear power unit", with turbine-generator trip, isolation of the main condenser and loss of all off-site power as examples. SRP 15.0 Rev. 3 states AOO = Condition II + III and postulated accident (PA) = Condition IV. New applications are reviewed under the two categories AOO and PA, while existing licensees licensed under the ANS classification may keep using their previous criteria. The ANS standards were withdrawn in 1998, so the SRP calls them "unofficial ANS standards".
The ASME III service levels (A Normal, B Upset, C Emergency, D Faulted) are load-combination levels for components; they are often compared with the event classes because their frequency bands overlap. IAEA SSR-2/1 Rev. 1 (2016) divides plant states into operational states (NO, AOO) and accident conditions (DBA, DEC). Condition II corresponds to AOO, but where Condition III sits depends on the framework. The SRP groups III with AOOs, yet a small LOCA is also part of the 50.46 LOCA spectrum analysis and is treated like a DBA in practice. Condition IV corresponds to DBA, and DEC (multiple failures, core melt) lies outside the ANS classification. ATWS, "an AOO plus failure to scram", is beyond the design basis, so it is not Condition IV; it is treated separately in SRP 15.8.
Example — loss of condenser vacuum is Condition II
Loss of condenser vacuum is event 15.2.3 in an RG 1.70-format SAR and an AOO in the SRP 15.2.1–15.2.5 group. It is classified as moderate frequency (Condition II). Low vacuum trips the turbine, the condenser interlock blocks steam dump, and depending on the design the main feedwater pumps also trip. Secondary heat removal drops sharply, RCS temperature and pressure rise, and the reactor trips. Heat is then discharged through the main steam safety valves and atmospheric dump valves, and auxiliary feedwater restores the SG levels. Even if the pressurizer safety valves open, the discharge goes to the relief tank inside containment. The criteria are pressure below 110 % and MDNBR ≥ the limit; there is no fuel damage and the effect on containment is negligible.
Fuel rod design criteria in Conditions I and II
Because no fuel rod failure is allowed in Conditions I and II, every SAFDL item must be met: MDNBR, no centreline melting, cladding strain and fatigue, internal pressure and so on. From Condition III onward a small number of failures is allowed, and that number is carried into the dose analysis.
Regulatory and design criteria
The ANS standards and the US NRC documents that use them are the main references, for example:
| Basis | Key point |
|---|---|
| ANSI N18.2-1973 → ANS-51.1-1983 (R1988) | Definition of Conditions I–IV; the 1983 edition subdivides into PC-1 to PC-5; withdrawn 1998 |
| NUREG-0800 SRP 15.0 Rev. 3 (March 2007) | AOO = II + III, PA = IV; II.2 acceptance criteria; ATWS in 15.8 |
| 10 CFR 50 Appendix A (definitions, GDC 10, 15, 20) | AOO definition; SAFDLs and RCPB design conditions not exceeded in AOOs |
| 10 CFR 50.46(b), 10 CFR 100 (now 50.67) | Five LOCA criteria; off-site dose for postulated accidents |
| RG 1.70 Rev. 3 (1978), Chapter 15 | Moderate frequency, infrequent incidents, limiting faults; sections by event type |
How the framework has evolved
- "ANSI N18.2" and "ANSI/ANS-51.1" are the same lineage, and the standard was withdrawn in 1998.
- SRP 15.0 moved to the two categories AOO and PA in Rev. 3 (2007), and the IAEA formalized DEC in 2012 and 2016.
Easily confused pairs
| ANS Condition | 10 CFR / SRP | ASME service level | IAEA plant states | |
|---|---|---|---|---|
| Basis | Frequency + consequence | Frequency (expected during life or not) | Component load combination | Frequency + consequence + design scope |
| Categories | I, II, III, IV | Normal, AOO, PA | A, B, C, D | NO, AOO, DBA, DEC |
| Where III sits | Infrequent incidents | AOO | Mostly B to C | AOO or DBA, by event |
| Beyond design basis | Not covered | ATWS (15.8), SBO separately | — | DEC |
Nor is there a one-to-one match with the levels of defence in depth: II is level 2, IV is level 3, and III spans levels 2 and 3 depending on the framework.
Key points at a glance
- Definition: design-basis events in four classes by frequency and consequence; the more frequent, the stricter the criteria (N18.2-1973 → ANS-51.1-1983).
- I Normal operation and operational transients: startup, shutdown, load changes; within operating limits.
- II Moderate frequency (≥ 10⁻¹/yr): turbine trip, loss of condenser vacuum and others — no fuel damage, pressure < 110 %, operation can resume.
- III Infrequent (10⁻¹ to 10⁻²): small LOCA and others — a small fraction of fuel damage allowed, may exceed 10 CFR 20.
- IV Limiting faults (< 10⁻²): large LOCA, MSLB, rod ejection — coolable geometry, within 10 CFR 100.
- No escalation: II must not alone cause III or IV, III must not alone cause IV, IV must not cause consequential loss of mitigating systems.
- Mapping: SRP 15.0 Rev. 3 AOO = II + III, PA = IV / IAEA NO, AOO, DBA, DEC.
- Fuel in I and II: every SAFDL item met (no rod failure); from Condition III a small number of failures is allowed and carried into the dose analysis.
