CDC / RDC · All levels
Reset Sequencing: Theory Deep Dive
Theory Deep Dive for Reset Sequencing.
Foundational theory
Reset Sequencing anchors Reset Domain Crossing. Reset ordering enforces dependency contracts so control domains and memories become valid before downstream consumers execute. Senior signoff discussions tie every warning to mechanism class, operational mode, and risk containment evidence.
Core concepts explained
Reset ordering enforces dependency contracts so control domains and memories become valid before downstream consumers execute.
Primary metric: domain bring-up order violations, dependency deadlocks, reset latency
Primary artifact: bring-up sequence spec, dependency matrix, firmware reset script
Owners: SoC integration owner, firmware owner, RTL lead
Distinguish structural cleanliness from functional correctness.
Tie every waiver to silicon-risk framing and expiry.
Why this matters at signoff
At tapeout, unresolved CDC/RDC issues become latent reliability bugs. Reset release is an asynchronous interface problem with sequencing consequences.
Mental model
always-on reset release
-> clocks stable
-> fabric/control release
-> data-path release
-> peripheral release
Violation causes boot races and phantom deadlocks.Worked intuition
Classify crossing intent and direction.
Name clock/reset relationship assumptions.
Inspect primary metric: domain bring-up order violations, dependency deadlocks, reset latency.
Collect structural plus dynamic evidence.
Differentiate real hazard from tool noise.
Pick smallest safe fix and define regression matrix.
Document signoff rationale or waiver ownership.
Common misconceptions
CDC clean report means protocol is proven.
All resets are equivalent if assertion works.
Gray code alone guarantees FIFO correctness.
Waivers are harmless schedule shortcuts.
Visual reinforcement
Reset dependency graph
always-on reset release
-> clocks stable
-> fabric/control release
-> data-path release
-> peripheral release
Violation causes boot races and phantom deadlocks.Layer responsibilities
CDC/RDC OWNERSHIP LAYERS — Reset Sequencing
layer owns common failure
------------------ ----------------------------- -----------------------------
design intent crossing architecture wrong topology selected
protocol semantics req/ack, fifo, ordering liveness/deadlock bugs
reset behavior assert/deassert sequencing boot instability
analysis setup tool rules + waivers false confidence
signoff governance risk acceptance + dashboard stale critical waiversCDC/RDC deep dive
Reset release ordering is a first-order reliability contract.
Concept diagram
RESET RELEASE FLOW
assert global -> clocks stable -> sync release per domain -> first transactionMetric graph
BOOT STABILITY
passes per 1k boots: 920 -> 980 -> 999Reports and artifacts
reset dependency matrix
RDC warning classes
boot stress logs
waiver aging
Mini case study
Domain B released before producer A was valid, causing rare startup deadlock.
Debug branches
Correlate reset and clock timelines
verify async assert/sync release
exercise skewed release tests
Senior review question
Ask: what evidence proves this risk is closed for silicon, not just tool-clean?
Key takeaways
State crossing class, assumptions, and owner with every issue.
Run structural and dynamic regressions after each fix.
Common pitfalls
Treating all warnings as equivalent risk.
Waiving issues without containment evidence.
Skipping reset and reconvergence stress after CDC fixes.
Theory reinforcement
Reset release is an asynchronous interface problem with sequencing consequences.