RTL / firmware view

Reset, CDC, and wrapper design decide whether analog handoff can be enforced safely.

What engineers observe

• Intermittent bring-up failures

• Mode-transition instability

• Data-validity bursts

Design structure impact

• Reset choreography

• Clock/control handshakes

• Wrapper framing semantics

Toolchain interaction

• Synthesis/CDC assumptions must match analog contract

• Beware hidden mode-only paths

Mitigations

• Explicit wrappers

• Observable state machines

• Cross-team interface reviews

RTL / FW — ESD & Isolation
// mode switch sequencing changed -> re-check boundary assumptions and regressions

Layer the code touches

AMS OWNERSHIP LAYERS — ESD & Isolation

layer                owns                                failure mode
------------------   ----------------------------------  --------------------------
spec contract         clocks/resets/interfaces            hidden assumption drift
wrapper logic         synchronizers/framing/flags         silent data corruption
physical integration  floorplan/isolation/power           coupled noise and droop
signoff governance    waivers/checklists/dashboard        release with blind spots
closure               debug order + regression            fix regresses another mode

AMS deep dive

Boundary assumptions must be explicit, versioned, and testable.

Concept diagram

BOUNDARY CONTRACT FLOW

analog intent -> boundary implementation -> digital wrapper -> signed review

Metric graph

BOUNDARY RISK MIX

missing boundary cells    ███████
stale handoff assumptions ██████
silent mode changes       ████

Reports and artifacts

• boundary-cell coverage

• isolation/ESD review

• handoff contract checklist

• integration waiver log

Mini case study

Noise bursts traced to missing isolation clamp on one low-power transition mode.

Debug branches

• Validate boundary-cell insertion

• Diff handoff assumptions

• Reproduce with tagged mode sequence

Senior review question

Ask: what boundary condition proves this topic is actually closed?

Key takeaways

• State boundary, mode, and evidence tag with every claim.

• Always align analog, digital, and physical owners before signoff decisions.

Common pitfalls

• Fixing averages while tails still fail.

• Skipping package/supply evidence in jitter or SerDes issues.

• Shipping with waivers that lack owner and expiration criteria.

Principal AMS review addendum

ESD and isolation structures create safe discharge and domain separation paths so transients do not propagate into sensitive digital flops or analog macros.

Metric: ESD path completeness, latch-up risk flags, isolation waiver backlog