Skip to guide

Safe boundaries across time and voltage

Clock, Reset, CDC and Power

Operate a dual-clock, power-gated sensor subsystem from cold reset through configuration, streaming, quiesce, sleep, wake, and recovery while every crossing preserves meaning.

Classify each boundary by clock relationship, payload semantics, reset behavior, and power state; then select a structure and signoff evidence that remain safe in silicon.

Updated July 20266 connected chaptersInteractive labs + worked examples

Boundary control room · active

One island. Three clocks. Four meanings.

The same pair of domains needs different circuitry for a persistent mode, a short event, a coherent configuration word, and a continuous sample stream.

Power stateACTIVEPLL lockLOCKEDIsolationOPENOutstanding03 samples
PD_AON · 0.80 V

Always-on control

Clock
clk_aon · 50 MHz
Reset
por_n → rst_aon_n
Power
Always on
PD_SENSOR · 1.00 V

Sensor peripheral

Clock
clk_sensor · 125 MHz
Reset
rst_sensor_n
Power
Standby capable
Boundary fabricSynchronizers · handshake · async FIFOIsolation + level shifting at PD_COMPUTE boundary
PD_COMPUTE · 0.72 V

Compute island

Clock
clk_compute · PLL 500 MHz
Reset
rst_compute_n
Power
Switchable + retention
Always-on power managerQuiesce → isolate → gate → switchOwns wake dependencies and domain-ready
Sensor peripheralCompute island
UseAsynchronous FIFO
ContractDual-port storage keeps data local; only Gray pointers cross.
DeliveryElastic

Continue the system

Connect the adjacent layer.