Radar STM32 Power Up State Machine

Purpose

Verify STM32 startup sequencing across rails, clocks, peripherals, and FPGA readiness with explicit timeout/failure states. This workflow turns the concern into a traceable engineering contract for the AERIS-10 project, while keeping simulations, software behavior, and physical measurements clearly distinguished.

Required inputs

Inspect 9_Firmware/9_1_Microcontroller main loop and power-control code. Gather the authoritative interface/schema, the selected board or bitstream revision, existing tests, and the expected result. Prefer synthetic input vectors, simulator outputs, host mocks, and de-energized design inspection.

Workflow

1. Trace 9_Firmware/9_1_Microcontroller main loop and power-control code and record source paths, board/design revision, input/output ownership, and the existing validation entry points.
2. Define pass/fail invariants for verify stm32 startup sequencing across rails, clocks, peripherals, and fpga readiness with explicit timeout/failure states.; explicitly document units, widths, timing assumptions, safe defaults, and unsupported states where relevant.
3. Exercise Cold boot, peripheral NACK, FPGA timeout, brownout, and repeated restart with deterministic simulation or mocked hardware. Include normal, boundary, malformed, reset/cancellation, and failure cases without relying on uncontrolled physical targets.
4. Produce A power-up state chart and host-test assertions. Run the narrow test and relevant regression suite, capture actual outputs, and separate verified findings from assumptions requiring qualified hardware review.

Validation checklist

• The requirement is represented as an explicit, repeatable assertion or review criterion.
• Boundary values and at least one injected failure are included.
• Units, revision, data origin, and interface timing are stated where they change interpretation.
• Test results cite the exact command/tool run and repository revision.
• Simulation/mock evidence is not misrepresented as hardware measurement or certification.
• RF, power, motion, or external-interface tests stop when the approved safety envelope is unknown or violated.

Required output

Deliver A power-up state chart and host-test assertions. Attach the paths reviewed, fixture or simulation identifiers, test commands and observed results, unresolved safety/compliance questions, and a clear distinction between code-level evidence and physical verification still required.

Boundaries and failure handling

Use synthetic inputs, host tests, simulation, or de-energized inspection wherever possible. Physical RF or powered hardware work requires qualified supervision, an approved lab procedure, regional compliance review, and functioning safety/thermal interlocks. Do not bypass an interlock, increase transmitter power or range as an objective, or turn signal-processing workflows into instructions for targeting people. If the design revision, emissions permission, termination, cooling, or measurement setup is uncertain, stop and document the blocker.

Trigger examples

• Positive: A maintainer needs to verify STM32 startup sequencing across rails, clocks, peripherals, and FPGA readiness with explicit timeout/failure states..
• Negative: Driving an uncertain rail or peripheral onward after a required check failed.