Low Power / UPF · All levels
UPF Formal Checks: Reports & Metrics
Reports & Metrics for UPF Formal Checks.
Reports and metrics
Reports & Metrics for UPF Formal Checks focuses on formal LP property pass rate, unreachable isolation condition count, and retention proof completeness. The goal is to link observed behavior to power-intent mechanism, ownership, and release risk.
Reports must translate formal LP property pass rate, unreachable isolation condition count, and retention proof completeness into release decisions. Totals are insufficient; you need transition context, ownership status, and closure trend.
Transition waveform lens
MODE TRANSITION WAVEFORM — UPF Formal Checks
time --->
save_req ___/---------\____________________
iso_en ________/----------------\________
switch_en _____________/--------\___________
domain_vdd -----------\____OFF____/----------
restore_req ____________________/---\_________
Ordering errors are the most common LP escapes.Metric trend
BEFORE / AFTER FIX — UPF Formal Checks
metric quality
^
| o target region
| o post-fix + regression
| o
| o failing baseline
+----------------------------------------> iteration
sequence audit policy fix full re-runTrack formal LP property pass rate, unreachable isolation condition count, and retention proof completeness per transition, domain, and subsystem.
Report policy binding status with each metric movement.
Track open waivers with age and owner to avoid silent risk drift.
Store metric snapshots next to reproducible revision tags.
Low-power deep dive
Transition-centric verification closes LP risk better than active-mode-centric regressions.
Concept diagram
VERIFY LOOP
transition matrix -> simulation + formal -> coverage -> closureMetric graph
COVERAGE CLOSURE
state transitions covered ███████████
isolation activation █████████
retention restore paths ████████Reports and artifacts
state coverage
formal LP properties
isolation coverage
LP bug triage dashboard
Mini case study
Coverage looked high, but one untested OFF->RUN transition hid a restore race.
Debug branches
Rank by transition criticality
Correlate PMU logs with failures
Escalate unproven properties
Senior review question
Ask: what transition evidence proves this topic is closed, and which owner signs it?
Key takeaways
State transition context must accompany every low-power metric claim.
Intent changes require simulation, formal, and implementation re-validation.
Common pitfalls
Comparing results from mismatched UPF revisions.
Assuming static checks replace transition validation.
Shipping with aged waivers and unclear ownership.
Execution drill pack 1
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 1
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 2
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 2
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 3
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 3
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 4
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 4
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 5
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 5
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 6
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 6
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 7
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 7
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 8
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 8
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 9
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 9
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 10
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 10
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 11
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 11
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 12
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 12
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>Execution drill pack 13
Use this pack to rehearse low-power closure on low-power/low-power-verification/upf-formal-checks/reports: transition framing, policy ownership, implementation evidence, and release confidence.
Transition checklist
State transition explicitly named with legal source/target states.
Crossing and domain ownership are mapped and agreed.
Policy controls are traced to always-on source logic.
Waveform bookmarks align controls with state timestamps.
Review prompts
Which policy object is first to deviate from intent?
Which owner can apply the smallest reversible fix?
What regression matrix proves no collateral damage?
Which waiver conditions would still block release?
Evidence capsule
LP EVIDENCE CAPSULE 13
PATH: low-power/low-power-verification/upf-formal-checks/reports
STATE WINDOW: <from -> to>
POLICY OBJECT: <isolation / retention / shifter / switch>
OWNER: <name>
PRIMARY ARTIFACT: <report/waveform/formal result>
RELEASE DECISION: <close / bounded waiver / escalate>