RTL / firmware view

Reset, CDC, and wrapper design decide whether analog handoff can be enforced safely.

What engineers observe

• Intermittent bring-up failures

• Mode-transition instability

• Data-validity bursts

Design structure impact

• Reset choreography

• Clock/control handshakes

• Wrapper framing semantics

Toolchain interaction

• Synthesis/CDC assumptions must match analog contract

• Beware hidden mode-only paths

Mitigations

• Explicit wrappers

• Observable state machines

• Cross-team interface reviews

RTL / FW — Boundary Cell Design
// mode switch sequencing changed -> re-check boundary assumptions and regressions

Layer the code touches

AMS OWNERSHIP LAYERS — Boundary Cell Design

layer                owns                                failure mode
------------------   ----------------------------------  --------------------------
spec contract         clocks/resets/interfaces            hidden assumption drift
wrapper logic         synchronizers/framing/flags         silent data corruption
physical integration  floorplan/isolation/power           coupled noise and droop
signoff governance    waivers/checklists/dashboard        release with blind spots
closure               debug order + regression            fix regresses another mode

AMS deep dive

Boundary assumptions must be explicit, versioned, and testable.

Concept diagram

BOUNDARY CONTRACT FLOW

analog intent -> boundary implementation -> digital wrapper -> signed review

Metric graph

BOUNDARY RISK MIX

missing boundary cells    ███████
stale handoff assumptions ██████
silent mode changes       ████

Reports and artifacts

• boundary-cell coverage

• isolation/ESD review

• handoff contract checklist

• integration waiver log

Mini case study

Noise bursts traced to missing isolation clamp on one low-power transition mode.

Debug branches

• Validate boundary-cell insertion

• Diff handoff assumptions

• Reproduce with tagged mode sequence

Senior review question

Ask: what boundary condition proves this topic is actually closed?

Key takeaways

• State boundary, mode, and evidence tag with every claim.

• Always align analog, digital, and physical owners before signoff decisions.

Common pitfalls

• Fixing averages while tails still fail.

• Skipping package/supply evidence in jitter or SerDes issues.

• Shipping with waivers that lack owner and expiration criteria.

Principal AMS review addendum

Boundary cells protect logic domains at analog interfaces by enforcing voltage tolerance, clamp behavior, and legal signal ownership during power sequencing.

Metric: boundary violation count, level-shifter coverage, clamp correctness