Low Power Verification · All levels
Level-Shifter Direction, Threshold, and Enable Checks
Isolation & Level Shifting: Level-shifter verification must establish that every voltage-domain crossing uses the right cell type and orientation for the source-to-destination voltage relationship. High-to-low paths may tolerate direct receive cells in specific libraries, but low-to-high paths typically require explicit up-shifters to satisfy VIH thresholds and avoid metastable interpretation in destination flops. Direction checks alone are insufficient: many implementations use enabled level shifters, so verification must prove enable pins are driven from valid always-on control sources, assert early enough during ramp transitions, and never glitch during domain state changes. Engineers should also validate exceptions such as analog wrappers, open-drain signals, and scan/test bypasses, where policy deviations are intentional but still require documented justification and dedicated assertions.
What this topic teaches
Level-Shifter Direction, Threshold, and Enable Checks converts LPV concepts into staff-level verification decisions. Level-shifter verification must establish that every voltage-domain crossing uses the right cell type and orientation for the source-to-destination voltage relationship. High-to-low paths may tolerate direct receive cells in specific libraries, but low-to-high paths typically require explicit up-shifters to satisfy VIH thresholds and avoid metastable interpretation in destination flops. Direction checks alone are insufficient: many implementations use enabled level shifters, so verification must prove enable pins are driven from valid always-on control sources, assert early enough during ramp transitions, and never glitch during domain state changes. Engineers should also validate exceptions such as analog wrappers, open-drain signals, and scan/test bypasses, where policy deviations are intentional but still require documented justification and dedicated assertions.
Senior-engineer framing question
When Illegal voltage-direction crossing count and level-shifter control-sequence violations across static signoff and dynamic low-power regressions. regresses, can you isolate first failing low-power boundary, prove it with artifacts, assign owners, and close with rollback-safe validation?
LOW-POWER VERIFICATION FLOW - Level-Shifter Direction, Threshold, and Enable Checks
power intent and mode definitions
|
v
domain controls and transition sequencing
|
v
simulation behavior (isolation, retention, corruption)
|
v
assertions and coverage evidence
|
v
triage, bounded fix, and signoff closureEvidence to collect
Primary metric: Illegal voltage-direction crossing count and level-shifter control-sequence violations across static signoff and dynamic low-power regressions..
Primary artifact: Cross-domain voltage-compatibility report with shifter direction rules, enable-timing waveforms, and approved exception ledger..
Owners to include: library and circuit integration owner, low-power architecture owner, implementation/PD owner, power intent verification owner, DFT and test integration owner.
One reproducible failing scenario and one stable comparator run.
One fixed metadata run with branch and configuration tags locked.
Ownership layers
OWNERSHIP LAYERS - Level-Shifter Direction, Threshold, and Enable Checks
+----------------------+--------------------------------+--------------------------------+
| Team | Primary responsibility | Closure artifact |
+----------------------+--------------------------------+--------------------------------+
| library and circuit integration owner | scenario intent and closure | review rationale memo |
| low-power architecture owner | transition and boundary contract | timeline + assertion packet |
| implementation/PD owner | regression signoff readiness | validation matrix + risk note |
+----------------------+--------------------------------+--------------------------------+Decision matrix
EVIDENCE MATRIX - Level-Shifter Direction, Threshold, and Enable Checks
+-----------------------------+--------------------------------+--------------------------------+---------------------------+
| Evidence | Tells you | Does not prove | Next action |
+-----------------------------+--------------------------------+--------------------------------+---------------------------+
| transition timeline traces | first failing LP phase | complete root-cause ownership | correlate with intent map |
| UPF-aware assertion logs | contract violations by phase | silicon product impact | map to scenario severity |
| corruption/X classification | actionable vs noisy failures | legal transition completeness | replay key mode corners |
| save/restore snapshots | state integrity movement | isolation correctness | pair with crossing checks |
| before-after regressions | mitigation movement quality | long-tail stability | run full matrix |
+-----------------------------+--------------------------------+--------------------------------+---------------------------+Key takeaways
Start with transition-boundary classification before broad methodology changes.
Tie each LPV claim to one proving artifact and one owner action.
Close with validation matrix and rollback trigger for signoff safety.
Common pitfalls
Waiving failures before first-failure boundary classification.
Changing intent, RTL, and checkers in one step and losing causality.
Declaring closure on local runs without broader replay coverage.
Low-power verification deep dive
Boundary correctness depends on timing: isolate and shift at the right crossings and right phases.
Concept diagram
BOUNDARY SAFETY VIEW
domain crossing -> level-shift requirement -> isolation control -> OFF/ON transition behaviorMetric graph
BOUNDARY BUG CLASSES
missing isolation █████
late isolation ████
LS misdirection ███Metrics and artifacts to collect
cross-domain boundary inventory
clamp-value correctness report
LS direction and threshold checks
missing or redundant boundary action list
Mini case study
A boundary bug escaped unit tests until domain-off traffic stress revealed late isolation enable timing.
Debug branches
Map each crossing to expected LS and isolation behavior.
Verify enable timing against collapse and restore edges.
Check clamp safety for protocol-facing signals.
Senior review question
Ask: what exact low-power transition boundary failed first, and which artifact proves the closure claim reproducibly?
Key takeaways
Tie each LPV claim to a concrete transition boundary and one proving artifact.
Prefer minimal reversible fixes with explicit owner and rollback criteria.
Common pitfalls
Treating power-aware failures as random before boundary classification.
Waiving X-prop failures before proving impact and root cause.
Declaring closure without deterministic replay across key modes.