Hi
We are using the TMS570LS0914 in a project for 26262 certification. Whereas I trust that all relevant safety mechanisms are available to support this, the certification guys are telling me that I need to provide them with specific arguments as to WHY specific safety mechanisms are selected. These arguments should apply to the calculation of the actual FIT as well as to the safety considerations regarding what failures we are intending to cover via our SM selection. Looking into the Hercules configuration sheet there are quite a number of choices to be done. We will for instance be using the ADC as well as the SPI functions. For these, 17 respectively 23 SM's are available. How should argue which ones of these are to be selected? Some seems obvious, whereas the selection of other seems to require somewhat more in-depth knowledge of the functionality than I currently have. Please provide some guidance.
thanks,
Br, Ole