Host-Device Coherency Contracts: Software and Programmer View

Firmware / controller / software view

OS memory policies must align with HDM decode, hotplug, and poison containment boundaries.

Software and firmware behavior directly shape PCIe/CXL outcomes. Address mapping, traffic shaping, scheduler policy, training flow, and QoS decisions determine whether silicon sees stable command flow or repeated conflicts, bubbles, and margin churn.

What teams feel first

• unstable p99 latency across workload phases

• unexpected row-miss bursts or turnaround bubbles

• training instability after DVFS or thermal transitions

API and runtime impact

• memory-controller register policy

• firmware training and retrain flow

• NoC QoS and initiator throttling contracts

Compiler and tool interaction

• allocator and page-coloring effects on bank locality

• traffic-shaping effects on read/write burst clustering

Mitigations

• enforce counter-tagged CI gates for memory SLAs

• stabilize boot telemetry and timing profile capture

• gate risky policy changes by workload class and corner proof

FIRMWARE + SCHEDULER VIEW - Host-Device Coherency Contracts
// connect policy toggles to command trace movement

Controller and firmware lens

CREDIT FLOW VIEW - Host-Device Coherency Contracts

VC0 posted credits:     [####------] 4/10 available
VC0 non-posted credits: [######----] 6/10 available
VC0 completion credits: [###-------] 3/10 available

Stall signature:
- posted credit exhaustion -> write TLP backpressure
- completion credit exhaustion -> read latency cliff

PCIe/CXL deep dive

Memory expansion and coherency require HDM windows, ownership discipline, and NUMA-aware software policies.

Concept diagram

COHERENCY + HDM

CPU caches <-> CXL.cache <-> device memory (CXL.mem/HDM)

Metric graph

EXPANSION BOTTLENECK SHARE

remote latency      ██████
ownership retry     ████
interleave skew     ███

Reports and artifacts

• HDM decode table

• ownership transition trace

• NUMA distance profile

• RAS region policy

Mini case study

Fabric-attached memory increased capacity but p99 regressed until page placement respected NUMA distance.

Debug branches

• Map HDM windows and interleave groups

• Run ownership litmus under contention

• Correlate RAS events with region offline policy

Senior review question

Ask: which latency, bandwidth, and reliability evidence proves this PCIe/CXL topic is closed under real traffic?

Key takeaways

• Always tie controller and PHY counter shifts to application latency and throughput outcomes.

• Lock firmware timing profile, thermal condition, and DIMM state before comparing PCIe/CXL captures.

Common pitfalls

• Chasing peak bandwidth while ignoring p99 latency and fairness tails.

• Changing timing guardbands without separating SI noise from scheduling issues.

• Declaring closure without reliability gates, fault injection, and regression replay.

Principal PCIe/CXL review addendum

Host-Device Coherency Contracts should be read as an end-to-end memory behavior, not as a single block definition. A production PCIe/CXL subsystem reflects interactions between array physics, command legality, scheduler policy, PHY margin, and reliability controls before software experiences final latency or bandwidth.

Host CPUs and CXL devices share a coherency domain defined by snoop filters, directories, and invalidation paths. Contracts specify which agent owns lines, how evictions propagate, and when stores become globally visible. PCIe/CXL inefficiency is multiplicative: one extra ACTIVATE, one unnecessary turnaround, one weak lane margin, or one refresh collision repeated across billions of accesses can dominate product tail latency and power.

Use Coherency miss rate, snoop stall cycles, and fence-to-visible latency as the opening signal, not the conclusion. A metric move only becomes actionable when paired with workload context, command traces, training telemetry, and evidence artifacts such as Coherency contract doc, snoop latency histogram, and fence benchmark.

Host-device coherency and HDM windows define how expanded memory behaves like first-class system memory. Senior review quality comes from proving a complete chain: request pattern -> memory-state transition -> bottleneck mechanism -> smallest owner fix -> regression-safe validation.

Review discipline should enforce a single causal chain: traffic pattern -> command-level behavior -> array/PHY effect -> measured product impact. That chain prevents tuning folklore from replacing evidence.