D369 Chip Spec — Specification Overview
| Field | Value |
|---|---|
| Module | D369_Chip_Spec |
| File | Spec_Overview.md |
| Role | reference · profile |
| Version | 1.0 |
| Status | canon‑stable |
| Lineage | Capture_Source.md → Spec_Overview.md |
| Audience | technical executives · IP architects · fab partners · AIs |
Purpose of This Document#
This file is the single‑sitting specification summary of the D369 Chip Spec module. It condenses the full module — 17 files, 76 numbered identifiers, 182 checklist items, and a three‑page contract package — into one executive‑readable profile.
What this file is: A standalone reference that answers: What does D369 specify, why, and how is it bounded?
What this file is not:
- Not a reading guide → see
README.md - Not a machine manifest → see
Meta.md - Not a Q&A walkthrough → see
FAQ.md - Not a session handshake → see
Session_Context.md
If you read only one file, read this one.
1 — What D369 Is#
D369 defines a structural observability reservation for silicon.
It asks fabrication partners to reserve minimal metadata channels — alongside existing functional data paths — that preserve three properties:
- Where a signal came from
- What lifecycle state it was in when emitted
- When it was emitted
These channels impose no functional behavior. They do not alter architectures, change yield math, slow tape‑out, expose IP, or lock manufacturers into any vendor. They simply prevent future observability from requiring a silicon re‑spin.
The specification's entire philosophy reduces to one sentence:
"Nothing here tells us what to build — only what not to erase."
Cost Profile#
| Metric | Value |
|---|---|
| Die area overhead | ~0.01% |
| Performance impact | Zero |
| New EDA tools needed | Zero |
| Existing DFT overhead | 500–1,500× more costly |
| Redesign‑to‑reserve ratio | 1,000:1 to 100,000:1 |
Reservation is cheaper than redesign by every measure that matters.
2 — The Three Tags#
The irreducible unit of structural observability is three tags. Every requirement, checklist item, and architectural diagram in the module traces back to these:
-
┌─────────────────────────────────────────────────────┐
│ THREE TAGS │
│ │
│ ┌───────────────┐ Source ID │
│ │ Tag 1 │ Origin identifier. │
│ │ │ Statically assignable at │
│ │ │ design time. │
│ └───────────────┘ │
│ │
│ ┌───────────────┐ Lifecycle State │
│ │ Tag 2 │ Externally writable. │
│ │ │ Not inferred internally. │
│ │ │ Not dependent on function. │
│ └───────────────┘ │
│ │
│ ┌───────────────┐ Monotonic Time │
│ │ Tag 3 │ Non‑resettable within clock │
│ │ │ domain. Survives batching │
│ │ │ and buffering. │
│ └───────────────┘ │
└─────────────────────────────────────────────────────┘
If all three tags survive from origin to observation, structural observability is preserved. If any one is erased, it cannot be recovered without redesign.
"Erasure is permanent and reservation is cheap."
3 — The Twelve Requirements#
The specification defines 12 formal requirements (R1.1–R7.1) using SHALL/MAY contract language. These are the binding obligations in Page 1 of the three‑page contract.
Summary Table#
| ID | Requirement (abbreviated) |
|---|---|
| R1.1 | Reserve ≥1 independent metadata channel per major functional block |
| R1.2 | Electrically isolate metadata channels from functional data paths |
| R2.1 | Support tagging with origin identifier |
| R2.2 | Support tagging with lifecycle state identifier |
| R2.3 | Support tagging with monotonic time marker |
| R3.1 | Metadata channels optional at runtime; inactive without impact |
| R3.2 | No functional logic depends on metadata presence or content |
| R4.1 | Metadata channels SHALL NOT modify, gate, or influence functional outputs |
| R5.1 | Time markers monotonic within defined clock domain |
| R5.2 | Time markers not reset or overwritten during normal operation |
| R6.1 | Source identifiers statically assignable at design time |
| R6.2 | Lifecycle state identifiers externally writable, not inferred internally |
| R7.1 | Removal of reserved structures requires explicit contractual amendment |
Key properties of this requirements set:
- No performance guarantees implied
- No behavioral semantics defined
- No interpretation of metadata required or expected
- No aggregation mandated
- Mandatory aggregation explicitly excluded
"This doesn't touch my design — but I see why we'd regret not having it."
4 — The Three‑Page Contract#
The complete contract package is exactly three pages. No Page 4 exists or will be added.
-
┌──────────────────────────────────────────────────────────┐
│ THREE‑PAGE CONTRACT │
│ │
│ ┌────────────────────────────────────────────────────┐ │
│ │ Page 1 — Contractual Requirements │ │
│ │ (Contractual_Requirements.md) │ │
│ │ Role: obligation │ │
│ │ Content: 12 requirements (R1.1–R7.1) │ │
│ │ Voice: SHALL / MAY │ │
│ └────────────────────────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌────────────────────────────────────────────────────┐ │
│ │ Page 2 — Engineering Rationale │ │
│ │ (Engineering_Rationale.md) │ │
│ │ Role: justification │ │
│ │ Content: 10 rationale statements (ER‑1–ER‑10) │ │
│ │ + Design Freedom clause (DF‑1–DF‑3) │ │
│ │ + Historical precedents │ │
│ └────────────────────────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌────────────────────────────────────────────────────┐ │
│ │ Page 3 — Non‑Claims and Boundaries │ │
│ │ (Non_Claims.md) │ │
│ │ Role: boundary │ │
│ │ Content: 10 non‑claims (NC‑1–NC‑10) │ │
│ │ + 4 boundaries (B‑1–B‑4) │ │
│ │ + Silence Clause (S‑1–S‑3) │ │
│ └────────────────────────────────────────────────────┘ │
└──────────────────────────────────────────────────────────┘
Why Three Pages#
A specification's credibility is inversely proportional to its claim surface. Three pages is enough to define what must be preserved, why it matters, and what is explicitly not claimed. Anything more would trigger the immune response that kills adoption.
"They know exactly what they're not building — and they said so in writing."
5 — Architecture Targets#
D369 applies to two silicon architecture families. The specification is identical in both — only the topology of metadata routing differs.
5.1 — SoC (System‑on‑Chip)#
The SoC target addresses monolithic designs containing:
- CPU / DSP cores
- AI / ML accelerators
- GPU / DSP subsystems
- Memory controllers
- I/O subsystems
- Security enclaves
- Power management units
-
═══════════════════════════════════════════
SoC — Functional Architecture
═══════════════════════════════════════════
┌──────────┐ ┌──────────┐ ┌──────────┐
│ CPU/DSP │ │ AI/ML │ │ GPU/DSP │
│ Cores │ │ Accel │ │ Subsys │
└────┬─────┘ └────┬─────┘ └────┬─────┘
│ │ │
═════╪═════════════╪═════════════╪═════
│ NoC / Interconnect │
═════╪══════════════╪════════════╪═════
│ │ │
┌────▼─────┐ ┌─────▼────┐ ┌────▼─────┐
│ Memory │ │ I/O │ │ Security │
│ Ctrl │ │ Subsys │ │ Enclave │
└──────────┘ └──────────┘ └──────────┘
─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─
Structural Observability Layer (metadata)
─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─
Source ID │ Lifecycle State │ Monotonic Time
Key structural boundaries identified:
- NoC (Network‑on‑Chip) — the primary structural boundary; five erasure modes documented (N‑1 through N‑5)
- Cache hierarchy — persistence boundary where metadata may be silently dropped
- Power domains — metadata must survive power‑gating without corruption
5.2 — Chiplet (Multi‑Die)#
The chiplet target addresses disaggregated designs with four canonical topologies:
| Topology | Description |
|---|---|
| Dual‑die homogeneous | Two identical dies, shared metadata bus |
| Heterogeneous (Compute+IO+HBM) | Mixed function dies with HBM stacks |
| Active interposer | Interposer carries metadata routing logic |
| Multi‑package | Multiple packages on substrate, bridged |
Critical chiplet concerns:
- Die‑to‑die (D2D) interfaces — metadata must survive UCIe and CXL protocol crossings
- The HBM Problem — HBM stacks use standardized interfaces with no metadata provisions; requires interposer‑level or controller‑level solutions
- Interposer types — passive vs. active interposers have different metadata routing capabilities
A six‑layer structural observability stack governs chiplet deployments:
- Intra‑die (within functional blocks)
- Die‑edge (at D2D boundaries)
- Interposer (routing between dies)
- Package (substrate‑level)
- Board (PCB‑level)
- System (cross‑board)
6 — Memory Alignment#
The specification extends structural observability through the full memory hierarchy.
6.1 — Memory Tiers#
| Tier | Level | Volatility | Observability Challenge |
|---|---|---|---|
| Tier 0 | Register | Volatile | Fastest; metadata must not add latency |
| Tier 1 | L1 Cache | Volatile | Eviction may erase metadata silently |
| Tier 2 | L2/L3 Cache | Volatile | Coherency protocols may strip tags |
| Tier 3 | Main Memory (DRAM) | Volatile | Controller is the gateway |
| Tier 4 | Persistent Memory | Non‑vol | Metadata must survive power loss |
| Tier 4a | CXL‑attached | Mixed | Protocol crossing; new erasure surface |
| Tier 5 | Storage (SSD/HDD) | Non‑vol | Filesystem layer may strip metadata |
| Tier 6 | Archive / Cold | Non‑vol | Long‑term preservation challenge |
6.2 — The Volatility Line#
The boundary between Tier 3 (DRAM) and Tier 4 (persistent memory) is the volatility line — the point where metadata either persists or vanishes. The memory controller sits directly on this line and functions as the structural gateway.
6.3 — Memory Alignment Principles (MA‑1 through MA‑5)#
| ID | Principle |
|---|---|
| MA‑1 | Metadata alignment is independent of data coherency |
| MA‑2 | Every tier boundary is a potential erasure surface |
| MA‑3 | Alignment is verified at transitions, not within tiers |
| MA‑4 | The memory controller is the gateway, not the endpoint |
| MA‑5 | Alignment failures are silent — they produce no errors |
6.4 — Structural Events (ME‑1 through ME‑7)#
Seven events in the memory subsystem where metadata may be structurally affected:
| ID | Event | Risk |
|---|---|---|
| ME‑1 | Cache eviction | Silent metadata drop |
| ME‑2 | Coherency protocol action | Tag stripping during invalidation |
| ME‑3 | Controller queue merge | Source aggregation |
| ME‑4 | DRAM refresh | Metadata timing disruption |
| ME‑5 | Power state transition | Metadata loss in low‑power modes |
| ME‑6 | CXL protocol crossing | Protocol translation erasure |
| ME‑7 | Tier migration | Metadata format incompatibility |
7 — Board‑Level Alignment#
When metadata exits the chip package and enters the PCB, a different set of preservation rules applies.
Four Preservation Rules#
| Rule | Directive |
|---|---|
| 1 | Label merges — when signals converge, annotate origin |
| 2 | Annotate re‑clocks — mark every clock domain crossing |
| 3 | Verify translations — confirm metadata survives level shifts and protocol conversions |
| 4 | Carry provenance — maintain source identity across board boundaries |
Four Board Failure Modes#
Board‑level failures are distinct from chip‑level failures: they involve physical topology, signal integrity, and multi‑chip coordination rather than RTL logic.
The board‑level design review checklist contains 27 items across topology, routing, power, signal integrity, and documentation sections.
"The board's job is to preserve, not interpret."
8 — The Checklist Cascade#
The module defines a four‑level checklist hierarchy. Each level hands off to the next, and all trace back to the 12 requirements.
-
┌──────────────────────────────────────────────┐
│ Internal Design Review ──── 62 items │
│ (chip‑level, pre‑tape‑out) │
└──────────────────┬───────────────────────────┘
│ hands off to
┌──────────────────▼───────────────────────────┐
│ Memory Controller Checklist ──── 55 items │
│ (controller pipeline, 9 stages) │
└──────────────────┬───────────────────────────┘
│ hands off to
┌──────────────────▼───────────────────────────┐
│ DIMM Module Checklist ──── 38 items │
│ (module‑level, DDR interface) │
└──────────────────┬───────────────────────────┘
│ hands off to
┌──────────────────▼───────────────────────────┐
│ Board‑Level Checklist ──── 27 items │
│ (PCB topology, cross‑chip) │
└──────────────────────────────────────────────┘
Total: 182 items
Failure Mode Coverage#
| Domain | Failure Modes | IDs |
|---|---|---|
| NoC erasures | 5 | N‑1 – N‑5 |
| Memory controller | 8 | MC‑1 – MC‑8 |
| DIMM module | 5 | FM‑1 – FM‑5 |
| Board‑level | 4 | (documented) |
Every checklist item maps back to at least one requirement (R1.1–R7.1) and at least one failure mode. Every failure mode maps forward to the checklist items that address it.
9 — Engineering Rationale#
Page 2 of the contract provides 10 rationale statements (ER‑1 through ER‑10) and a Design Freedom clause (DF‑1 through DF‑3).
Rationale Statements (abbreviated)#
| ID | Statement |
|---|---|
| ER‑1 | Complex systems benefit from post‑hoc structural visibility |
| ER‑2 | Observability is most reliable when designed in, not retrofitted |
| ER‑3 | Separation of functional and descriptive signals reduces coupling |
| ER‑4 | Lifecycle context prevents misuse of valid data outside scope |
| ER‑5 | Source separation enables independent verification |
| ER‑6 | Temporal lineage supports reconstruction of system evolution |
| ER‑7 | Optional structures minimize risk to yield and performance |
| ER‑8 | Passive affordances preserve compatibility with existing toolchains |
| ER‑9 | Structural reservation is lower cost than future redesign |
| ER‑10 | No assumptions are made regarding future use cases |
Design Freedom (DF‑1 through DF‑3)#
| ID | Freedom |
|---|---|
| DF‑1 | Implementation details are at the discretion of the manufacturer |
| DF‑2 | Existing debug, test, or telemetry mechanisms MAY be reused |
| DF‑3 | No specific encoding, protocol, or format is mandated |
Historical Precedents#
The rationale draws on four documented cases where structural erasure caused catastrophic failure:
- Therac‑25 — state inference without source separation
- Ariane 5 — data reuse without lifecycle context
- Intel FDIV — optimization that erased verifiability
- Boeing 737 MAX — behavioral dependence without structural visibility
These are not analogies. They are documented instances where the absence of what D369 reserves contributed directly to failure.
10 — Non‑Claims and Boundaries#
Page 3 is the specification's most unusual feature: it defines what D369 explicitly does not claim.
Ten Non‑Claims (NC‑1 through NC‑10)#
| ID | Non‑Claim |
|---|---|
| NC‑1 | Does NOT define computation |
| NC‑2 | Does NOT define intelligence |
| NC‑3 | Does NOT define optimization |
| NC‑4 | Does NOT define safety behavior |
| NC‑5 | Does NOT define control logic |
| NC‑6 | Does NOT define analytics |
| NC‑7 | Does NOT define interpretation |
| NC‑8 | Does NOT define performance improvement |
| NC‑9 | Does NOT define regulatory compliance |
| NC‑10 | Does NOT define future product direction |
Four Boundaries (B‑1 through B‑4)#
| ID | Boundary |
|---|---|
| B‑1 | All functional behavior remains unchanged |
| B‑2 | All architectural decisions remain with the manufacturer |
| B‑3 | All IP ownership remains unaffected |
| B‑4 | All activation or use of reserved structures is external |
Silence Clause (S‑1 through S‑3)#
| ID | Clause |
|---|---|
| S‑1 | Where behavior would normally be specified, this document is intentionally silent |
| S‑2 | Silence SHALL NOT be interpreted as omission |
| S‑3 | Silence SHALL be interpreted as non‑assertion |
"A specification's credibility is inversely proportional to its claim surface."
11 — Adoption Roadmap#
Adoption follows six phases with a deliberate ordering: fabs before students.
| Phase | Name | Focus |
|---|---|---|
| 1 | Spec Freeze | Lock the three‑page contract |
| 2 | Fab Engage | Present to fabrication partners |
| 3 | Silicon Reservation | First silicon with reserved metadata channels |
| 4 | Ecosystem Seed | Tools, libraries, reference implementations |
| 5 | Adoption Wave | Industry uptake, cross‑vendor alignment |
| 6 | Cross‑Domain | Extension beyond compute silicon |
Why Fabs Before Students#
"Fabs before students."
If students arrive first, the specification looks academic. If fabs arrive first, the specification looks inevitable. Once silicon exists that quietly supports source identity, lifecycle state, and temporal lineage, students don't need to be convinced — they just use what's there.
This is the adoption pattern of CUDA, POSIX, and TCP/IP.
12 — The Complete Identifier Map#
The module uses 76 numbered identifiers across 14 categories. All identifiers are immutable once published.
| Category | IDs | Count |
|---|---|---|
| Contractual requirements | R1.1 – R7.1 | 12 |
| Engineering rationale | ER‑1 – ER‑10 | 10 |
| Non‑claims | NC‑1 – NC‑10 | 10 |
| Memory controller failures | MC‑1 – MC‑8 | 8 |
| Memory structural events | ME‑1 – ME‑7 | 7 |
| Memory alignment principles | MA‑1 – MA‑5 | 5 |
| DIMM failure modes | FM‑1 – FM‑5 | 5 |
| NoC erasures | N‑1 – N‑5 | 5 |
| Boundaries | B‑1 – B‑4 | 4 |
| Board preservation rules | Rules 1 – 4 | 4 |
| Design freedom | DF‑1 – DF‑3 | 3 |
| Silence clause | S‑1 – S‑3 | 3 |
| Total | 76 |
13 — Module File Map#
The complete D369 module contains 17 files plus this overview:
| File | Role |
|---|---|
Capture_Source.md |
Root canon — all files trace here |
README.md |
Module orientation and reading guide |
Spec_Overview.md |
Executive specification summary (this file) |
Contractual_Requirements.md |
Page 1 — 12 requirements (obligation) |
Engineering_Rationale.md |
Page 2 — 10 rationale statements (justification) |
Non_Claims.md |
Page 3 — 10 non‑claims (boundary) |
Diagram_SoC.md |
SoC architecture decomposition |
Diagram_Chiplet.md |
Chiplet topology analysis |
Memory_Alignment_Spec.md |
8‑tier memory alignment specification |
Memory_Controller_Checklist.md |
Controller‑level checklist (55 items) |
DIMM_Module_Checklist.md |
DIMM‑level checklist (38 items) |
Board_Level_Alignment.md |
Board preservation rules and checklist |
Internal_Design_Review_Checklist.md |
Master design review (62 items) |
Adoption_Roadmap.md |
6‑phase adoption pathway |
FAQ.md |
40+ questions across 12 sections |
Glossary_Extensions.md |
70+ terms across 8 sections |
Meta.md |
Machine‑readable manifest |
Session_Context.md |
Structural handshake for agents/humans |
14 — What Engineers Should Conclude#
After reading this specification, the target response is:
"This doesn't touch my design — but I see why we'd regret not having it."
After reviewing the non‑claims:
"They know exactly what they're not building — and they said so in writing."
After examining the checklists:
"We didn't add behavior — we just didn't erase structure."
The specification asks for space, not change. It reserves structure, not function. It defines curbs, not walls.
And it fits in three pages.
Canon Alignment#
- Traces to
Capture_Source.md - Opens with Session Context table
- Uses engineer‑facing, student‑ready voice
- Contains zero hype, zero marketing language
- All numbered identifiers match module‑wide registry
- ASCII diagrams use solid lines (═══) for functional, dashed (─ ─ ─) for metadata
- Does not duplicate FAQ (Q&A format) or README (navigation)
- Closes with Canon Alignment checklist
- Role confirmed:
reference · profile - SARG assignment: profile (executive shape), reference (lookup tables)