Safety Architecture & Hardware Design

Product, safety and quality milestones

Chip milestones

• Safety goals agreed (SGA)
• Safety concept approved (SCA)
• TR1: Automotive technology readiness (ATR) (technical readiness review TR1)
• Hardware design freeze (HDF)
• Safety analyses complete (SAC)

Disciplines

• Product and customer program management^A
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Long-term supply plan drafted on the process and package assessed at technology readiness; customer program reviews continue while the chip is designed.
  • Safety Architecture & Hardware Design: maturity 0.5, Draft. Long-term supply plan drafted on the process and package assessed at technology readiness; customer program reviews continue while the chip is designed.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.5, Draft. Long-term supply plan drafted on the process and package assessed at technology readiness; customer program reviews continue while the chip is designed.
• Functional safety management^AO
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Confirmation reviews held on the safety concepts, the technology readiness and the safety analyses, with findings tracked to closure.
  • Safety Architecture & Hardware Design: maturity 0.5, Draft. Confirmation reviews held on the safety concepts, the technology readiness and the safety analyses, with findings tracked to closure.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.5, Draft. Confirmation reviews held on the safety concepts, the technology readiness and the safety analyses, with findings tracked to closure.
• Safety engineering and analysis^O
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Functional and technical safety concepts and the hardware safety requirements approved; the FMEDA, fault tree and dependent failure analyses are drafted on the architecture.^A
  • Safety Architecture & Hardware Design: maturity 0.5, Draft. Functional and technical safety concepts and the hardware safety requirements approved; the FMEDA, fault tree and dependent failure analyses are drafted on the architecture.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.8, Feature complete. FMEDA, fault tree and dependent failure analyses complete on the frozen design, with the hardware architectural metrics at target on the claimed diagnostic coverage.^D
• Chip and safety architecture^A
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Architecture and safety mechanism specifications final against the hardware safety requirements, and the technology readiness assessed.
  • Safety Architecture & Hardware Design: maturity 0.8, Feature complete. Hardware-software interface specification baselined at the hardware design freeze; the architecture supports the analyses of the frozen design.^A
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.8, Feature complete. Hardware-software interface specification baselined at the hardware design freeze; the architecture supports the analyses of the frozen design.
• Hardware design^A
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Base RTL and reused blocks in place, and the hardware design description drafted against the approved safety concept.
  • Safety Architecture & Hardware Design: maturity 0.8, Feature complete. RTL with every safety mechanism implemented and code reviewed, frozen at the hardware design freeze; fixes from verification and the safety analyses continue.^A; RTL freeze (milestone for one item)
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.8, Feature complete. RTL with every safety mechanism implemented and code reviewed, frozen at the hardware design freeze; fixes from verification and the safety analyses continue.
• Safety verification^D
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Safety verification plan drafted from the hardware safety requirements, with the testbench, checkers and fault injection environment built alongside the RTL.
  • Safety Architecture & Hardware Design: maturity 0.8, Feature complete. Requirements-based tests running on the frozen RTL with coverage closing, and fault injection campaigns under way against the FMEDA.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.8, Feature complete. Requirements-based tests running on the frozen RTL with coverage closing, and fault injection campaigns under way against the FMEDA.^D
• Cybersecurity^A
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Threat analysis and risk assessment complete and the cybersecurity requirements final; security verification is planned against them.^A
  • Safety Architecture & Hardware Design: maturity 0.5, Draft. Threat analysis and risk assessment complete and the cybersecurity requirements final; security verification is planned against them.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.8, Feature complete. Security verification running on the frozen design.
• DFT and in-system test^A
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. In-system test concept outlined from the technical safety concept: start-up and periodic self-tests, and the production test approach.
  • Safety Architecture & Hardware Design: maturity 0.5, Draft. Test and in-system test architecture final at the hardware design freeze, with test structures planned for each block.^A
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.5, Draft. Test and in-system test architecture final at the hardware design freeze, with test structures planned for each block.
• Physical design and reliability sign-off^A
  • Functional & Technical Safety Concept: maturity 0.0, Planned. Process, die size and package feasibility checked with the architects for technology readiness, and the implementation effort estimated; no floorplan yet.
  • Safety Architecture & Hardware Design: maturity 0.3, Early draft. Floorplan outlined for the package and for the physical separation of redundant logic that the safety analysis needs.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.5, Draft. Trial implementation of the frozen RTL, with the power grid and electromigration planned against the mission profile.
• Safety software and drivers^A
  • Functional & Technical Safety Concept: maturity 0.0, Planned. Software safety requirements derived in outline from the technical safety concept.
  • Safety Architecture & Hardware Design: maturity 0.3, Early draft. Software safety requirements final against the hardware-software interface specification.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.3, Early draft. Software safety requirements final against the hardware-software interface specification.
• Silicon validation and characterisation^A
  • Safety Architecture & Hardware Design: maturity 0.0, Planned. Validation lead named, and the lab, temperature equipment, boards and effort estimated from the temperature grade and the safety mechanism list; no validation approach yet.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.3, Early draft. Validation approach outlined from the safety verification plan: the temperature and supply corners and the safety mechanism tests on silicon.
• Qualification and reliability^A
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. Qualification plan outlined on the process, package and reused IP qualification status assessed at technology readiness.
  • Safety Architecture & Hardware Design: maturity 0.3, Early draft. Qualification plan outlined on the process, package and reused IP qualification status assessed at technology readiness.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.3, Early draft. Qualification plan outlined on the process, package and reused IP qualification status assessed at technology readiness.
• Production test and product engineering^A
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.0, Planned. Test lead named, and the tester, temperature insertions, test time and screening cost estimated against the cost target; no test strategy yet.
• Automotive quality and PPAP^A
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. Process and package technology assessed for the automotive grade at technology readiness.
  • Safety Architecture & Hardware Design: maturity 0.3, Early draft. Process and package technology assessed for the automotive grade at technology readiness.
  • Safety Analyses: FMEDA, FTA & DFA: maturity 0.5, Draft. Design FMEA final on the safety analyses, with the process FMEA started.^A