OSS + ELC EU 2026

U-Boot and Linux boot flows lack safety monitoring for mixed-criticality systems. We address this gap for low-criticality use cases and development stages where customers work toward safety certification on TI K3 SoCs, offering a flexible alternative to rigid safety-critical frameworks. This approach can be extended to any of the heterogeneous SoCs with safety hardware support.

We cover safety drivers in both U-Boot and Linux that increase the safety level of a system: Error Signaling Module (ESM) for error routing, Power-OK (POK) voltage monitors (upstreaming WIP), Voltage-Thermal Monitor (VTM), Timeout Gasket (TOG, upstreaming WIP), DDR Inline ECC for memory protection, and watchdog. In U-Boot, we leverage its sequential non-threaded flow to initialize ESM, POK, VTM, TOG, and DDR ECC via uclasses, establishing hardware safety guarantees before kernel handoff. In the kernel, we cover configuration and error handling of watchdog, and ECC for self-resets and synchronous aborts. DDR thermal self-refresh rate management and runtime monitoring of POK, VTM, and TOG via hwmon (WIP) will also be covered. Testing approaches via U-Boot cmdline tests and LTP-DDT will also be discussed.