Evidence for safety-critical hardware, from the tools you design with.
Airborne hardware under DO-254 and automotive electronics under ISO 26262 ask for more than working RTL: evidence that it was checked, measured and traced to its requirements. Lumina already gives you lint, clock and reset domain analysis, formal proofs and coverage on one design model. Support for both standards is planned; Lumina is not qualified under either today.
- DO-254
- airborne hardware · planned
- ISO 26262
- road vehicles · planned
- Formal · CDC
- available today
- Reproducible
- byte-identical reports
What is there, and what is coming
Proofs, not only tests
Lumina Formal proves assertions for every input sequence, and every counterexample is confirmed by simulation.
Clock and reset domains
Crossings and reset domains analysed structurally, and constraint files checked against the RTL.
Reproducible results
The same input gives a byte-identical report whatever the machine or thread count, and waivers carry their reasons.
Structural coverage
Statement, branch and toggle coverage merged across every run of the regression.
A safety rule pack
Every rule about what the hardware is and does turned on; structural, clock, reset, CDC, RDC, state machine and synthesis findings raised to errors, each fixed or waived with a written reason.
Expression coverage
Each term of every decision shown to change the outcome on its own, the MC/DC-style measure safety reviews ask for.
Requirements traceability
Every test linked to the requirement it checks and every run kept, so a release is decided by evidence.
Tool qualification support
Qualification data for using Lumina in DO-254 projects, and the evidence ISO 26262-8 asks for to gain confidence in a software tool.
Where Lumina fits a safety flow
- Coding standards, enforcedAvailable
Lint rule packs and custom rules
- Safety-focused rule setPlanned
builtin:safety rule pack
- Clock and reset domain analysisAvailable
Lumina CDC
- Property verificationAvailable
Lumina Formal
- Statement, branch and toggle coverageAvailable
Coverage
- Condition and expression coveragePlanned
Coverage
- Requirements-based traceabilityPlanned
Traceable test results
- DO-254 tool qualificationPlanned
Qualification data
- ISO 26262-8 tool confidencePlanned
Tool classification and qualification evidence
Frequently asked
Is Lumina qualified for DO-254 or ISO 26262?
Not yet. Support for both is planned. If you work on an airborne or automotive program, we would like to hear what evidence your flow needs.
What is DO-254?
RTCA DO-254 (EUROCAE ED-80) is the design assurance guidance for airborne electronic hardware, FPGAs and ASICs included, used in certification with authorities such as the FAA and EASA.
What is ISO 26262?
The functional safety standard for electrical and electronic systems in road vehicles. Part 8 covers confidence in the software tools used, and Part 11 gives guidance for semiconductors.
Can Lumina be used on a safety project today?
Its lint, CDC, formal and coverage results can support your own verification process today. The tool qualification evidence the standards ask for is planned.
Run your own design on Lumina first.
We are working with a small group of design teams before release. You run your real designs; we fix what you find, and your cases become part of the tests every build must pass.