An engineering change fixes one line in the arbiter and the netlist is rebuilt overnight. Simulation of the fixed scenario passes, but nobody checks whether the fix altered any other grant pattern. Equivalence checking answers both halves: the revised block differs exactly where the fix intended, and agrees everywhere else. This topic runs that flow on the round-robin arbiter and closes with the honest limit of the method.
Lesson | After it you can... |
|---|---|
Prove an ECO changed only what was intended. | |
Prove token-ring against rotating-mask with the correspondence invariant. | |
Pair every equivalence with a property proof on the reference. |
Suggested order: top to bottom. The ECO flow is the daily-use pattern; the twin-arbiter lesson is its hardest workout; the last lesson states the limit that keeps the method honest. For the synthesis-side ECO flow see Proving an ECO.
The fix had no effect on the compared behaviour: either the condition is unreachable, the comparison does not stimulate it, or the edit did not take. All three need an answer before signoff.