Turbine island, condensate, feedwater and cooling water systems outside the nuclear steam supply system

    Commissioning software for nuclear balance-of-plant where the turbine island and its support systems still need the same rigour as safety-classified systems, just against a different QA level.

    Balance-of-plant systems — turbine generator, condensate, feedwater, circulating water, cooling towers — sit outside the nuclear steam supply system but still interface with it directly, and a turbine trip or feedwater transient can challenge the reactor even though the equipment itself is not safety-classified. Deskely holds every balance-of-plant system, interface point and test in one register, keyed to the same discipline used for safety-classified scope but scaled to the correct QA level.

    Assets
    Turbine generator, feedwater, condensate, cooling water
    Test
    Functional test, interface verification, overspeed trip test
    QA level
    Non-safety with nuclear interface controls
    Gate
    Grid synchronisation and full-power operation
    TURBINE ISLAND — FEEDWATER TRAIN 2BOP RECORD SET · REV DTURBINE GENERATOR TG-01FWFEEDWATER INTERFACEFW-ISO-07Interface disputedTAG REGISTERFW-ISO-07Feedwater isolation valve…Records signedTG-01Turbine generator, unit 1In testCOND-PUMP-2Condensate pump, train 2PreservationCW-PUMP-4Circulating water pump 4Punch open96 sheetsunder one system hierarchy

    The problem

    Balance-of-plant scope is enormous and mostly non-safety, but the interface points with the nuclear side cannot be treated casually.

    The turbine island, feedwater trains, condensate polishing, circulating water and cooling towers represent a large share of total plant commissioning scope, executed by conventional power plant contractors who may be less familiar with nuclear interface control requirements than the nuclear island team.

    When balance-of-plant test records live entirely separately from the nuclear island's register, an interface point — a feedwater isolation valve, a turbine trip signal into the reactor protection system — can be commissioned as if it were a standard fossil-plant component, missing the interface verification the nuclear licensing basis actually requires.

    Deskely tags balance-of-plant systems in the same register as the nuclear island, flagging interface points to safety-classified systems explicitly, so those specific tests get nuclear-appropriate rigour without imposing SC1-level QA on the entire turbine island unnecessarily.

    QA LEVEL BLURRED AT THE INTERFACETurbine trip signal → reactor protectionNon-safety turbine island, treated like any fossil plant, misses the nuclear interfaceTURBINE ISLAND (commercial grade)Overspeed trip — OEM commissionedStandard QA, tested to specNUCLEAR ISLAND INTERFACETrip signal into RPS — untestedMissed nuclear-grade verificationWHY IT MATTERSA feedwater isolation signal into the reactor protection system is commissionedas if it were a fossil-plant valve — no interface verification test performed1 of 30+BOP interface points flagged for review0interface tests run so farDeskely flags nuclear interface points explicitly, without over-classifying the whole turbine island.

    Setting up the register

    Balance-of-plant systems and their interface points are tagged assets with an explicit QA level and interface flag.

    Turbine island, feedwater and cooling water P&IDs are parsed into the register alongside the nuclear island's tags, with each component carrying its own appropriate QA level rather than inheriting a blanket classification from wherever it happens to sit on the site.

    Interface points to safety-classified systems — trip signals, isolation valves, shared instrument air — are explicitly flagged, so their test templates carry the additional verification the interface actually requires beyond standard commercial-grade testing.

    Vendor equipment packages for the turbine generator, condensate polishing and cooling towers are registered with their own OEM commissioning sequence, kept distinct from the interface verification tests that connect them back to the nuclear side.

    1 · SOURCE DOCUMENTSTurbine island P&IDs180 sheetsFeedwater and condensate…96 sheetsInterface point register42 flagged pointsOEM commissioning sequen…6 packagesPARSE + MATCHtag · description · drawing ref2 · ONE TAG REGISTERFW-ISO-07Feedwater isolation valve…INTERFACETG-01Turbine generator, unit 1TURBINECOND-PUMP-2Condensate pump, train 2CONDENSATECW-PUMP-4Circulating water pump 4COOLING WATERTWO DOCUMENTS DISAGREETurbine island P&…Feedwater isolation valve, …Feedwater and con…Abbreviated descriptionEngineer picks the sourcedecision loggedWeeks of transcription become a draft an engineer reviews.

    Execution

    System functional testing and interface verification run at the right rigour for each part of the plant.

    Turbine generator commissioning proceeds through OEM start-up sequences, overspeed trip testing and electrical protection testing, captured with standard commercial-grade rigour except where the system interfaces with the reactor protection or engineered safety features actuation system.

    Feedwater and condensate systems are functionally tested for flow, pressure and level control, with any signal or valve identified as a nuclear interface point subject to an additional verification test proving the interface behaves correctly under both normal and upset conditions.

    Punch items are categorised by whether they touch a flagged interface point, so a routine turbine island punch item does not receive the same escalation as a discrepancy on a feedwater isolation signal feeding the reactor protection system.

    OEM COMMISSIONING → INTERFACE VERIFICATION → POWERTurbine islandTurbine generator OEM start-up sequenceSigned — commercial grade QAOverspeed and electrical protection testSignedNuclear interface point verificationIn progress — feedwater isolation signalGrid synchronisationAwaiting interface sign-offFull-power operationGated on interface evidence, not turbine test alone2of 5 gates cleared1interface point still under verificationStandard OEM pace for most of BOP; extra rigour only where the nuclear interface is flagged.

    Grid synchronisation and full-power operation

    The turbine island is released to full power with its nuclear interfaces separately and specifically verified.

    Grid synchronisation and initial power ascension testing draw on the balance-of-plant functional test records, with interface verification results called out specifically so the power ascension test programme's nuclear reviewers can confirm those points without wading through the entire turbine island dataset.

    The handover pack for plant operations includes the full balance-of-plant as-built record and OEM documentation, with interface points clearly flagged so future maintenance on those specific components triggers the correct nuclear-interface review.

    Every signature carries a name, role and timestamp, and every interface verification record links explicitly to the nuclear island system it protects, giving the licensee a clear audit trail across the QA-level boundary.

    AUDIT QUERYFW-ISO-07Feedwater isolation valve, flagged nuclear interfaceComplete evidence chain for FW-ISO-07IV-FW07Isolation signal interface testI&C engineerpendingTL-FW07Trip logic verificationNuclear reviewer09 MayOEM-FW07OEM valve commissioningBOP contractor02 MayCERTIFICATEPA-FW2Feedwater train 2 power ascension readinesspendingNuclear interface reviewerPrerequisites demonstratedReadiness is blocked until the isolation signal interface test is signed by the nuclear reviewer.

    Where a conventional-plant contractor meets a nuclear QA programme

    Balance-of-plant contractors are usually conventional power plant specialists, and the biggest single risk on this scope is a QA culture mismatch at the interface boundary, not a mechanical defect.

    A turbine generator OEM or a conventional civil contractor may never have worked to ISO 19443 or an equivalent nuclear supply chain QA standard before, and the gap between their normal commercial-grade documentation habits and what a nuclear interface test record actually requires is where nuclear projects lose the most time reworking paperwork rather than reworking hardware.

    Independent nuclear assurance reviewing balance-of-plant scope focuses almost entirely on the flagged interface points rather than the turbine island as a whole, because that is where a QA shortfall actually threatens the licensing basis; a review that instead tries to impose full nuclear QA rigour across the entire non-safety scope wastes the assurance function's time and slows a contractor who was never going to touch a safety-classified system anyway.

    Deskely gives the balance-of-plant contractor a normal commercial-grade workflow for the bulk of their scope, while automatically routing any component flagged as a nuclear interface point into a record format independent nuclear assurance can review without a special request, so the QA culture gap is managed at the interface rather than argued about for the whole contract.

    NUCLEAR INTERFACE FLAG REGISTERTurbine island boundaryFLAGGED INTERFACE POINTSFeedwater isolation valve → RPSTurbine trip signal → reactor protectionShared instrument air, safety trainQA LEVEL SPLITStandard commercial-grade rigour applies to the rest of the turbine islandOnly flagged interface points carry the extra nuclear verification step30+BOP systems, most at standard QA1 of 3flagged interface still under verificationFlags decide the QA level per point, not a blanket classification of the turbine island.

    The interface verification evidence set

    Six record types keep the turbine island honest about the handful of points where it actually touches the nuclear licensing basis.

    Balance-of-plant scope is mostly non-safety and mostly conventional, so the evidence that matters is not the bulk of the turbine island test programme but the specific interface points flagged against safety-classified systems. These records are what protects that boundary.

    RECORDS PRODUCED6 typesInterface point verification test…Executed in addition to standard…OEM commissioning sequence recordFollowed during vendor-led equipment…Overspeed and electrical…Performed ahead of first synchronisation…QA-level assignment recordSet when the component is first…Interface-flagged punch item…Raised during functional testing,…Power ascension interface data…Compiled ahead of the initial power…DOSSIERIndexed persubsystem and tagExport readyEach record lands in the same structure, so the dossier assembles itself.

    Interface point verification test record

    That a flagged interface — a trip signal, isolation valve or shared utility connecting balance-of-plant to a safety-classified system — behaves correctly under normal and upset conditions.

    Executed in addition to standard commercial-grade functional testing.

    OEM commissioning sequence record

    That turbine generator, condensate or cooling water equipment completed its vendor-defined start-up sequence to commercial-grade acceptance criteria.

    Followed during vendor-led equipment start-up.

    Overspeed and electrical protection trip test record

    That the turbine generator's mechanical overspeed and electrical protection trip functions operate at their set points before grid synchronisation.

    Performed ahead of first synchronisation to grid.

    QA-level assignment record

    That a balance-of-plant component's QA level has been individually assigned rather than inherited by default from its location on-site.

    Set when the component is first registered.

    Interface-flagged punch item record

    That a punch item touching a flagged interface point is escalated separately from routine turbine island punch, given its potential effect on a safety-classified system.

    Raised during functional testing, tracked to closure before synchronisation.

    Power ascension interface data submission

    That interface verification results are available as a distinct, reviewable dataset to the power ascension test programme's nuclear reviewers.

    Compiled ahead of the initial power ascension test programme.

    How it runs

    From turbine island erection to full-power operation.

    Balance-of-plant programmes reward flagging nuclear interface points explicitly, because most of the scope should move at commercial-grade pace and only the interfaces need the extra layer of rigour.

    1. 01

      Model BOP systems with QA level

      Turbine island, feedwater and cooling water systems tagged with the QA level appropriate to each component.

    2. 02

      Flag nuclear interface points

      Trip signals, isolation valves and shared systems touching the nuclear island explicitly flagged for additional verification.

    3. 03

      Template OEM and interface tests separately

      Standard OEM commissioning sequences kept distinct from interface verification tests, avoiding blanket over-classification.

    4. 04

      Gate power ascension on interface evidence

      Full-power operation readiness reported with interface verification results called out for nuclear reviewers.

    FAQ

    Questions about Balance of plant scopes.

    Ready to digitize
    commissioning and
    handover?

    We use cookies to improve your experience.
    You can opt out of certain cookies.
    Find out more in our privacy policy.