Design Signoff & Verification
Long-cycle design programs where IP, foundry, and ecosystem partnerships execute against tapeout and market windows.
This interactive experience is the shipped product itself — the same application code customers run in production, mounted read-only in your browser over a real sample journey. Not a video, not a mockup: because the demo and the product are one codebase, it can never drift from the real thing.
Inside this journey
-
Technical Discovery
Align on current signoff flow, target tapeout designs, silicon correlation history, stakeholders, and measurable acceptance criteria.
Discovery Questions
Quick orientation: your most recent tapeout that raised a flag
- To get us started, briefly describe the tapeout that triggered concern and why it matters for your next node
- How many tapeout-ready designs do you expect to include in the initial pilot
- Which signoff disciplines are highest priority for that pilot, select all that apply
- Walk me through your timeline from ECO-complete to tapeout for the identified design, including key milestone dates
- Who on your team will be the day to day contact for test runs, correlation questions, and artifact access
Where numbers stop being academic
- If your current signoff flow diverges from silicon by the margins you are seeing, what is the one result that would make you insist on a tool change immediately
- How often have timing or power results from your legacy flow exceeded your tolerance against foundry or silicon reference in the last two tapeouts
- Provide a concrete example of a block or corner where correlation drifted most and what temporary fixes you applied
- Estimate the probability that a false pass at final signoff would lead to a full respin for this design, expressed as a percent
- Which downstream teams get pulled into remediation when a signoff miss occurs, select all that apply
The real cost when signoff misses happen
- How much would a single mask respin plus schedule slip typically cost this program in dollars and weeks
- How many weeks of schedule and what approximate budget does a mid-size respin consume for your organization
- Name the stakeholders who would need to approve a program-level repayment for a respin and the order their approvals happen
- Rank the financial or schedule metrics your CFO would require to justify a signoff tool change, in order of importance
- Describe the last time your team approved a tool change, what evidence sealed the decision and how long the procurement took
Alternatives you are actively weighing
- If staying with your incumbent or internal scripts were the default option, what evidence would force you to switch vendors or approaches
- Select the alternatives you are currently evaluating or have evaluated recently
- Name any internal champions arguing to keep the current approach and summarize their main argument
- What would have to be demonstrably true about your current flow for you to stay with it instead of changing
- Has anyone on your team proposed solving the correlation and drift issues without an outside vendor, and if so who would own that path and estimated timeline
- If your incumbent can match correlation within your tolerance and runtime on your largest design, what would still make you consider a vendor switch
Ready to run: access, artifacts, and compute
- Assuming a three week delay in PDK or signoff-rule access, would that force you to delay or cancel the evaluation or can you absorb that delay
- List the extraction, parasitic, layout netlist and testbench artifacts you can share for a closed-loop pilot
- Name the compute cluster or cloud account intended for the largest signoff runs and indicate whether your team controls scheduling and quotas
- Estimate the dedicated headcount in FTEs your team can assign to correlation, tool integration, and debugging during the pilot
- Identify the owner or team responsible for data access approvals, export control review, and legal NDAs required to share silicon measurements and PDKs
- Are there export control, foundry confidentiality, or IP constraints that could limit the artifacts you can share for the pilot
- Would inability to share core artifacts prevent a meaningful closed-loop correlation pilot in your environment, or can you run an alternative setup that still validates the engine
The measurable gate: how you define pilot success
- Name the one metric that, if the pilot does not meet it, would make you halt the program immediately
- Provide numeric targets for timing correlation to silicon, power correlation, and maximum acceptable runtime on your largest design
- Select the source you consider ground truth for correlation
- How quickly do you require remediation when the pilot reveals a correlation gap, expressed in business days
- Should the pilot meet correlation targets but show a 20 percent runtime increase, would you accept a phased rollout or require runtime parity before signing
- Identify who will sign pilot acceptance and which budget holder will approve deployment spend if acceptance is met
- Assuming the pilot meets the stated targets, what would be the fastest path to a signed purchase order and which approvals could still block a week one close
From pilot to full-chip signoff: owners and rollout mechanics
- Point to the one operational gap between pilot and full-chip signoff that worries you most and could delay production rollout
- Describe the phased rollout you prefer, whether block-by-block or discipline-by-discipline, and the typical length you expect for each phase
- List the internal teams that must be retrained and estimate total person-days required for that training
- How will defect backlogs, correlation tickets, and bug triage be tracked and escalated between your teams and the seller during rollout
- Assign an owner role for integration endpoints, run script maintenance, and license management after deployment
- Define your stoplight decision rule if the first-block pilot does not meet acceptance, will you continue to next block or halt rollout
-
Solution Evaluation
Run the buyer's tapeout-ready design(s) through the signoff engine to compare timing, power, runtime, and correlation against legacy flow and silicon-based reference data.
- success_criteria
- decision_readiness
- gaps
- stakeholders
- current_state
- desired_state
- current_state
- desired_state
- gaps
- stakeholders
- decision_readiness
- success_criteria
- stakeholders
- gaps
- decision_readiness
- current_state
- decision_readiness
- decision_readiness
- decision_readiness
- decision_readiness
-
Solution Scope
Define disciplines, blocks, test vectors, runtime targets, compute requirements, certification needs, and phased rollout plan for the engagement.
Scope Configuration
- Extract unified signoff netlist
- Execute multi-corner multi-mode static timing signoff
- Run power integrity and IR-drop analysis
- Perform electromigration and reliability analysis
- Perform physical verification and DRC/LVS checks
- Integrate foundry rule decks and certification packaging
- Port constraints and SDC scripts to the new engine
- Setup compute scaling and parallel runtime
- Generate violation debug traces and fix guidance
- Implement on-chip variation and aging models in flow
- Validate cross-discipline netlist consistency
- Train engineers on reports and violation-debug workflows
Scope Questions
Extract unified signoff netlist
- Which physical database format contains your tapeout-ready layout (for example, GDSII or OASIS) and where is the master copy stored?
- How many LEF (Library Exchange Format) macro views and corresponding Liberty (.lib) timing corners must be included in the extracted netlist?
- Provide the list of file artifacts we must ingest to produce a single extracted netlist (for example: DEF, routed SPEF/CPF, extracted RC, .lib, SDC).
- Identify any custom parasitic or RC back-annotation formats you use (for example, vendor-specific SDF variants or custom SPEF tags).
- Specify ownership: who on your team is the primary owner for layout-to-netlist extraction and who is the escalation contact for netlist mismatches?
- List any extraction rules or exclusions that differ from the foundry PDK (for example, custom antenna-rule exceptions or specific net exclusions).
- Are golden netlist references from previous tapeouts available for byte-for-byte comparison?
Execute multi-corner multi-mode static timing signoff
- Which signoff corners and modes must be exercised for comparison (for example: tt, ss, ff, mm, on-chip-variation (OCV) modes, and power-aware modes)?
- How many primary timing paths or endpoint nets should be prioritized for correlation debugging during the POC?
- Provide the SDC (Synopsys Design Constraints) script(s) you expect to port for mode and clock definitions and indicate any nonstandard constraints (for example, custom false paths or multi-cycle path exceptions).
- Which silicon measurement data from prior tapeouts will you supply for timing correlation (for example, frequency vs measured clock skew, path delay measurements, silicon-in-the-loop reports)?
- What correlation threshold versus your silicon measurement data defines acceptable timing accuracy (for example, within 1%)?
- Identify the block(s) you want included in the MCMM run for the initial phase (for example: I/O ring, top-level digital block X, analog macro Y).
- Specify the maximum allowed runtime for a full MCMM timing run on your largest block for the POC phase (state hours and compute boundary).
Run power integrity and IR-drop analysis
- Which power network deliverables will you provide: full routed PDN, interim PDN, or only power grid cursors?
- List the target voltage rails, max transient currents, and decap models that must be represented during IR-drop analysis.
- Identify the power integrity corners to run (for example: worst-case dynamic switching, retention modes, local-vs-global switching).
- Provide the format and sampling of your current density or activity maps for use in IR-drop sims (for example: switching factor per cell, annotated SDF-based activity).
- Estimate the acceptable voltage drop threshold for nets that would trigger a violation (for example, >5% of nominal rail).
- Specify whether electromigration (EM) cross-checks should be run inside the IR-run or as a downstream flow for the pilot block.
Perform electromigration and reliability analysis
- Which reliability models do you require (for example: MTTF targets, current density limits per metal layer, and temperature profiles)?
- Identify the metal layers and via stacks that are most critical for EM checking in this engagement.
- Provide the expected operating temperature range and duty cycles that the analysis should assume.
- List any mission-profile scenarios to consider (for example: continuous high-duty server workload, intermittent mobile usage).
- Specify the reporting granularity you need for EM violations (per net, per segment, per via).
- Who on your reliability or physical-design team will validate proposed mitigations and accept the EM closure plan?
Perform physical verification and DRC/LVS checks
- Which foundry PDK version and rule deck set must be used for DRC (design rule checking) and LVS (layout versus schematic)?
- Provide the expected DRC/LVS pass criteria you will accept for pilot approval (for example: zero critical DRCs, permitted density exceptions limited to X).
- Identify any waived checks or custom DRC rules applied by your foundry or internal signoff board.
- List the netlists and canonical reference schematics we should compare during LVS (for example: top-level netlist, block-level subcircuits).
- Specify whether physical verification should include fill-rule verification, density checks, and OPC (optical proximity correction) compatibility checks.
- How should DRC/LVS reporting be packaged for review (for example: per-block HTML report, aggregated PDF, or per-violation CSV)?
Integrate foundry rule decks and certification packaging
- Which exact foundry certification package and PDK baseline must be produced for your signoff acceptance (include PDK version identifiers)?
- Name the artifacts you require in the final certification bundle (for example: signed signoff reports, LVS/DRC deck versions, golden netlist, MCMM timing summary).
- Which party provides the foundry rule decks (for example: you supply the validated rule deck or foundry-supplied deck must be pulled during integration)?
- What evidence will you accept as proof of certification readiness (for example: passing foundry checklist, signed verification report, or wafer-level test correlation)?
- List any packaging or document formats the foundry requires for submission (for example: specific PDF templates, tarball layout with manifest, or web portal upload).
- Specify any timeline constraints for certification packaging delivery (for example: must be submitted 2 weeks before the tapeout cutoff).
Port constraints and SDC scripts to the new engine
- Provide the canonical SDC files that define clocks, false paths, multicycle paths, and IO constraints for the pilot block.
- Identify any custom constraint constructs you use that may not be native to the new engine (for example: vendor-specific clock gating exceptions).
- For each clock domain, list target frequencies and jitter budgets that the ported constraints must preserve.
- Estimate the effort to translate your current constraint automation scripts (for example: TCL wrappers) into the new engine's scripting environment.
- Who on your timing team will own validation of the translated SDC and sign off on equivalence?
- Attach or indicate any constraint verification reports you expect after translation (for example: constraint equivalence diff, clock-tree sanity checks).
Setup compute scaling and parallel runtime
- Specify the compute environment you will provide for pilot runs (for example: on-prem cluster specs, cloud instance types, or hybrid).
- Estimate the largest design size in terms of cells, nets, or hierarchical instances that will be processed in the pilot.
- What runtime target for your largest block defines acceptable performance (for example, full MCMM timing run within X hours)?
- Indicate the parallelization model you prefer for runs (for example: per-corner parallelization, hierarchical block parallelization, or per-mode batching).
- Provide any licensing caps or concurrency limits that will constrain parallel runs.
- Identify monitoring and alerting expectations for long-running jobs (for example: job heartbeat, auto-retry thresholds, and owner notifications).
Generate violation debug traces and fix guidance
- Which format do you prefer for violation debug artifacts (for example: per-path STA trace, per-net waveform snapshots, or aggregated root-cause CSV)?
- List the top debugging deliverables you need for each violation (for example: full STA timing path, extracted parasitic snippet, cell-level netlist slice).
- Who on your engineering team will be the triage owner for debug traces and who is authorized to approve fixes?
- Specify whether you require automated fix suggestions (for example: buffer insertion points, net rebuffering) and in what format.
- Provide acceptance criteria for a debug closure ticket (for example: re-run shows no timing violations and path delay within X% of golden).
- Indicate how granular the trace retention should be for audit (for example: keep full traces for 90 days, or summarized data only).
Implement on-chip variation and aging models in flow
- Which on-chip variation (OCV) and aging/BTI model versions must be used (include model identifiers or PDK references)?
- Identify the aging horizons to evaluate (for example: fresh silicon, 3-year BTI, 5-year BTI profiles).
- Provide the expected effect thresholds that define a violation under aging (for example: timing margin erosion >5% or setup fail at 3-year BTI).
- Specify whether variability-aware signoff should include statistical timing analysis (SSTA) or deterministic corner pessimism adjustments.
-
Mutual Commit
Finalize commercial and legal terms, data-access agreements, pilot acceptance criteria, and responsibilities for certification and validation activities.
Agreement Modules
- Non-Disclosure Agreement (NDA)
- Master Services Agreement (MSA)
- Statement of Work (SOW)
- Subscription Agreement / Order Form
- Service Level Agreement (SLA)
- Data Access and Processing Agreement (DPA)
- Pilot Acceptance Criteria
- Certification and Validation Responsibility Agreement
- Change Order Agreement
-
Deployment
Lock readiness facts and configuration values before executing the phased rollout.
-
Pre-Deployment Readiness
Capture concrete readiness facts — PDK access, testbench artifacts, compute capacity, owner names, and target timelines required before execution.
Pre-Deployment Questions
Environment and access
- Is the production PDK for the target process node available to the deployment team, or what date will it be available? (this determines when we can schedule validation runs)
- Which tapeout-ready testbench artifacts are already available to the deployment team? Select all that apply (we will use these artifacts during pilot validation)
Data and configuration
- Has the pilot scope (first discipline and specific block) been confirmed for the phased rollout, or is a decision pending? (confirmation lets us prepare run recipes and corner sets)
- Is there an existing golden reference dataset for comparison (legacy flow results and/or silicon correlation data)? Indicate availability and any access restrictions.
- Who owns the source-of-truth for design configuration and signoff rules (name and role)? (this is the approver for corner definitions, run scripts, and signoff gates)
Compute, licenses, and integrations
- Is sufficient compute capacity reserved for the pilot runs (cluster nodes, cores, or cloud quota), or when will it be available? (so we can size expected runtimes)
- Which license access methods will be used for the signoff suite during deployment? (select all that apply)
- Are there integration endpoints or third-party systems the deployment must connect to (license server hostnames, internal artifact repositories, cluster schedulers)? Indicate readiness status (we will collect exact endpoints in DeploymentConfig).
People, ownership, and timing
- Please list named owners for these workstreams (PDK/artifact access, compute/licenses, correlation & validation, legal/commercial) with role titles — one owner per role. (we will use these names to assign tasks and approvals)
- Target pilot start timeframe and expected pilot duration (so we can create a milestone plan)
- Are there any blackout windows or compliance freeze periods (tapeout freezes, audits, major holidays) in the next 3 months that will prevent runs? If yes, we will capture exact dates in DeploymentConfig.
- Are required data-access or IP agreements in place (NDAs, data transfer agreements, foundry-mandated controls), or will they be completed before pilot start?
-
Configuration Details
Lock exact configuration values the deployment team will use — corner definitions, extraction settings, run scripts, licenses, and integration endpoints.
Configuration Details
Environments & endpoints — where the deployment will connect (production values)
- Enter the production environment name the deployment scripts should target (single token; Default: prod). This exact value will be written into environment variables and CI job names.
- Enter the primary signoff engine endpoint URL the deployment will call (format: https://<host>[:port]/path). Example: https://signoff.example.com/api — do not paste credentials.
- Enter the parasitic/extraction service endpoint URL the deployment will call (format: https://<host>[:port]/path). If same as the signoff engine, enter the same URL.
- Enter the compute cluster name or scheduler queue the run scripts should submit jobs to (enter exact queue name as configured in your scheduler).
Licensing & access — non-secret identifiers and owners
- Select the license model you will use for the deployment (Default: Floating license (license server)). The deployment will configure licensing flows based on this choice.
- If using a floating license, enter the license server hostname (FQDN or IP). Leave blank if not applicable. Do NOT provide license keys or tokens here.
- Enter the name and role of the person who will own license credential handoff (format: Full Name — Role). The secret itself will be exchanged via your chosen secrets manager at kickoff.
- Which method will you use to exchange secrets (choose the category; we will not collect secrets here)?
Run & extraction configuration — exact values the run scripts will consume
- Enter the primary corner set name the deployment will lock to (exact string used in run scripts and reports; e.g., TT_nominal_Vdd).
- Select the extraction variant the deployment should use (Default: Layout-aware extraction (default)). Deployment will set extractor flags to match this choice.
- Enter the repository path or absolute filesystem path to the run script the deployment will invoke (format: /repo/path/to/run_signoff.sh or ci/scripts/run_signoff.sh). Default: /ci/run_signoff.sh
- Enter the runtime target for the largest-design signoff runs (numeric hours; Default: 24). The deployment will use this as the job walltime when submitting to the scheduler.
Integrations & data mappings — where correlation and tickets live
- Select the ticketing integration type the deployment should configure for automated issue creation and status updates.
- Enter the exact path or identifier where silicon-based correlation reference data is stored (format examples: s3://bucket/path, \fileshare\path\to\data, or /nfs/corr/reference.csv). This value will be used verbatim by the correlation job.
-
Deployment
Execute the phased rollout: pilot one discipline/block, validate correlation and performance, remediate gaps, and scale to full-chip signoff with clear owners and milestones.
-
-
Success
Confirm correlation and runtime targets are met, capture lessons learned, and maintain a shared backlog for issues and enhancements.
Success Reviews
- Go-live Health Check (weeks 1-4)
- First Measurement Review (weeks 4-10)
- Acceptance Gate Meeting (around day 90)
- Quarterly Operational Review
- Annual Success Review and Lessons Learned
Issues & Enhancements
- Update the shared backlog with priority, severity, and target resolution dates
- Record and archive the formal acceptance decision and associated evidence
- Archive or migrate legacy tool data to the agreed storage location and verify integrity
- Publish the remediation plan for any failed criteria with verification tasks and target re-test dates
- Metrics trend review
- Confirm the solution remains within or is trending toward the Solution Scope targets for timing correlation and runtime.
- Maintain a prioritized shared backlog with clear resolution windows for high-severity tickets.
- Ensure closed remediation items are verified and did not cause regressions.
- Reconfirm success criteria and owners
- Escalate persistent correlation gaps with a defined investigation plan and target completion date
- Schedule compute scaling actions if runtime regressions persist and document expected impact
- Year-to-date metrics summary
- Confirm annual realization of correlation and runtime targets and surface any systemic issues that require program-level change.
- Document a concise lessons-learned register and assign next steps for process improvements.
- Establish a recurring backlog grooming cadence and a prioritized list of enhancements for the coming year.
- Publish the annual lessons-learned document and circulate to the program stakeholders
- Update runbooks and configuration baselines to reflect agreed process improvements
- Schedule quarterly backlog grooming sessions and close stale low-priority items
- Deployment validated against the checklist recorded in Solution Scope and any gaps documented.
- Early adoption signals captured and any onboarding gaps scheduled for remediation.
- Immediate blockers are triaged and a short-term remediation plan with target dates is agreed.
- Publish deployment validation checklist and gap list for asynchronous confirmation
- Provide missing PDK access credentials and testbench artifact locations
- Schedule follow-up technical session to remediate any integration failures
- Present measured outcomes versus targets
- Determine whether timing correlation delta and STA runtime are trending toward the Solution Scope targets or require remediation.
- Agree a concrete list of corrective actions with resolution dates and verification steps before the acceptance gate.
- Confirm the date and prerequisites for the acceptance gate meeting.
- Run an expanded correlation job including the identified additional corners and report results
- Adjust extraction and corner definitions as agreed and document configuration changes
- Provision additional compute capacity if runtime regression is confirmed and record expected runway improvement
- Restate acceptance criteria and numeric targets
- Produce a documented acceptance decision for each numeric criterion recorded in Solution Scope, with a named buyer signatory where required.
- Confirm the incumbent tool wind-down approach is documented and scheduled, or confirm retention as read-only with archived data.
- If any criteria failed, agree remediation plan and verify dates for re-evaluation.
- Shared backlog review
- Lessons learned and process improvements
- Present final outcome data per criterion
- Root-cause diagnosis for any shortfalls
- Deployment and configuration validation
- Validation of closed remediation items
- Document pass/fail per criterion and capture signatory
- Shared backlog health and roadmap
- Agree corrective actions and timeline
- User onboarding and early usage signals
- Agree operational cadence and next-year checkpoints
- Blockers and open issues triage
- Confirm readiness timeline to Acceptance Gate
- Prioritize next quarter actions
- Incumbent tool wind-down validation
- Agree immediate remediation actions
- Agree remediation items and resolution timeline for any failed criteria