Sovereign Edge Aggregator PCB Design
Table
| Item | Required Action | Acceptance Criteria | Status |
|---|---|---|---|
| Verdin iMX95 SKU | Select exact RAM, eMMC, Wi-Fi/BT, TPM, temperature grade, and lifecycle option | SKU documented with ordering code and lifecycle availability | [ ] |
| Evaluation carrier | Order Toradex Verdin development/evaluation carrier compatible with iMX95 | Carrier supports initial power, Ethernet, debug, storage, and BSP validation | [ ] |
| Production modules | Order at least 3-5 Verdin iMX95 modules for prototype rotation | Same SKU as production target unless explicitly marked EVT-only | [ ] |
| Thermal accessories | Order heatsink/TIM or Toradex-recommended thermal hardware | Compatible with Verdin iMX95 thermal path | [ ] |
| Debug/programming accessories | Order approved Toradex debug adapters/cables | Supports initial BSP bring-up without exposing debug on production enclosure | [ ] |
Table
| Document | Source | Required Before | Acceptance Criteria | Status |
|---|---|---|---|---|
| Verdin iMX95 datasheet | Toradex | Schematic | Exact SKU electrical/mechanical limits documented | [ ] |
| Verdin family carrier board design guide | Toradex | Schematic | Power, connector, layout, and interface rules available | [ ] |
| Verdin iMX95 pinout | Toradex | Schematic | All used interfaces mapped to connector pins | [ ] |
| Connector footprint and 3D model | Toradex/vendor | Layout | Footprint and keepouts verified against mechanical model | [ ] |
| Reference carrier schematic/layout | Toradex | Schematic/layout | Power and interface implementation reviewed | [ ] |
| Torizon/Linux BSP docs | Toradex | Firmware bring-up | Boot flow and image build path documented | [ ] |
| Secure boot/provisioning docs | Toradex/NXP | Security design | Fuse, key, update, and recovery flow documented | [ ] |
| Thermal design guide | Toradex | Mechanical design | Thermal limits and heatsink interface defined | [ ] |
| Lifecycle/PCN documentation | Toradex | Procurement release | Lifecycle and notification path documented | [ ] |
Table
| Function | Preferred Production Approach | Selection Gate | Status |
|---|---|---|---|
| USB-C PD sink | Dedicated PD controller for 9 V/12 V profiles | Must support 15 W minimum and safe fallback | [ ] |
| Input protection | ESD, overvoltage, reverse/backfeed protection as required | Sized from final power budget | [ ] |
| Main carrier bucks | High-efficiency bucks for 5 V/3.3 V/1.8 V as required | No LDO for high-current rails without thermal proof | [ ] |
| TPM 2.0 | Primary measured-boot attestation device if not module-integrated | Linux/Torizon support confirmed | [ ] |
| ATECC608B | Auxiliary identity/key device | I2C address, secure provisioning flow defined | [ ] |
| NVMe connector | M.2 Key M 2230/2242 target | Thermal pad to chassis planned | [ ] |
| Ethernet PHY/magnetics | Based on Verdin-exposed Ethernet interfaces | 1000BASE-T RJ45 or 1000BASE-T1 decision made | [ ] |
| Wireless | Use Verdin integrated Wi-Fi/BT option if selected, otherwise certified module | Certification path and antenna layout defined | [ ] |
| Tamper sensors | Hall/enclosure-open switch, optional mesh | Events readable by secure software path | [ ] |
| Test points | Hidden/pogo-only production access | No exposed debug/GPIO on final enclosure | [ ] |
Table
| Gate | Requirement | Pass Criteria | Status |
|---|---|---|---|
| SKU lock | Exact Verdin iMX95 SKU selected | Ordering code and major features recorded | [ ] |
| Power input | Verdin input voltage/current requirements known | Carrier power tree matches Toradex guide | [ ] |
| Ethernet topology | Dual Ethernet architecture chosen | Standard RJ45 1000BASE-T or 1000BASE-T1 explicitly selected | [ ] |
| PTP/TSN | Timing path defined | Selected Ethernet path supports LinuxPTP/IEEE 1588 requirements | [ ] |
| NVMe | PCIe lane availability confirmed | M.2 Key M mapping and reset/clkreq requirements known | [ ] |
| Security | TPM/ATECC roles assigned | TPM primary, ATECC auxiliary, provisioning owner defined | [ ] |
| Debug policy | Production debug access defined | No exposed JTAG/UART/GPIO; authenticated or disabled debug | [ ] |
| Wireless | Integrated vs carrier-side wireless decided | Certification path and antenna keepout defined | [ ] |
| Stackup | Controlled-impedance stackup selected | 6-layer minimum, 8-layer preferred for dense high-speed carrier | [ ] |
| Thermal | Passive chassis concept defined | Thermal path from Verdin to aluminum chassis modeled | [ ] |
Table
| Release Gate | Required Evidence | Status |
|---|---|---|
| Toradex documentation package archived | Datasheet, carrier guide, pinout, mechanical, thermal, BSP, secure boot docs | [ ] |
| Verdin connector selected | MPN, footprint, 3D model, mating height, keepouts | [ ] |
| Stackup approved | Fabricator stackup with impedance targets and coupons | [ ] |
| Power budget complete | Rail-by-rail budget including Verdin, NVMe, Ethernet, wireless, TPM/ATECC | [ ] |
| Thermal plan complete | TIM, chassis, sensor locations, worst-case workload assumptions | [ ] |
| Security plan complete | Key provisioning, secure boot, measured boot, debug lock, recovery flow | [ ] |
| Test plan complete | Bring-up sequence, test fixtures, pogo access, acceptance criteria | [ ] |
| DFM review complete | Fabricator and assembler feedback resolved | [ ] |
Table
| Equipment | Purpose | Required |
|---|---|---|
| Current-limited bench supply | Safe first power-on | Yes |
| USB-C PD analyzer/source | Verify PD contract and current draw | Yes |
| Digital multimeter | Rail and continuity checks | Yes |
| Oscilloscope, 500 MHz+ preferred | Rails, reset, clocks, Ethernet timing checks | Yes |
| Thermal camera or thermocouples | Passive thermal validation | Yes |
| Ethernet PTP-capable test peer | IEEE 1588/LinuxPTP validation | Yes |
| NVMe test SSD | Storage bring-up and thermal/write validation | Yes |
| Toradex debug tools | Early boot/debug before production lock | EVT only |
| ESD-safe bench setup | Protect module and carrier | Yes |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| Visual inspection | Microscope, compare against assembly drawing | No bridges, tombstones, missing parts, reversed polarized components | [ ] |
| Connector inspection | Inspect Verdin connector, M.2, USB-C, Ethernet | No bent pins, solder void risk, contamination, or coplanarity issue | [ ] |
| Rail-to-GND resistance | DMM ohms mode before module insertion if possible | No hard shorts; resistance consistent across builds | [ ] |
| Module seating | Mechanical inspection | Verdin module fully seated, retention hardware installed | [ ] |
| Enclosure clearance | Dry fit | No interference with module, NVMe, antennas, thermal interface | [ ] |
Table
| Step | Action | Expected Result | Status |
|---|---|---|---|
| 1 | Power carrier without Verdin if design permits | Carrier auxiliary rails valid; no overcurrent | [ ] |
| 2 | Power with Verdin installed using current-limited source | Current below precomputed inrush/idle limit | [ ] |
| 3 | Verify USB-C PD contract | Correct 5 V/9 V/12 V profile negotiated | [ ] |
| 4 | Measure carrier rails | Rails within tolerance from final schematic | [ ] |
| 5 | Measure Verdin input rail | Matches Toradex requirement under idle and boot | [ ] |
| 6 | Check reset/power-good behavior | Reset and enable timing follows Toradex guide | [ ] |
| 7 | Capture boot current profile | No unexpected brownout, oscillation, or thermal spike | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| Boot ROM/BSP boot | Boot Toradex-supported image first | Kernel reaches login or expected provisioning target | [ ] |
| Device tree validation | Confirm enabled carrier interfaces | Only required production interfaces enabled | [ ] |
| Nonessential interface disable | Disable unused display/GPIO/debug paths | No external GPIO/debug exposure in production image | [ ] |
| Torizon/Linux base | Build and boot baseline image | Repeatable boot with recorded image hash | [ ] |
| Recovery path | Test approved recovery/update mechanism | Device recoverable without exposing insecure debug | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| TPM detect | Linux TPM tools | TPM present and usable for measured boot/attestation | [ ] |
| ATECC608B detect | I2C scan and CryptoAuthentication tool | Device present at expected address; provisioning state known | [ ] |
| Secure boot dry run | Follow Toradex/NXP flow in non-destructive mode first | Keys, images, and recovery process verified before fusing | [ ] |
| Debug lock policy | Confirm production settings | JTAG/UART disabled or authenticated for production | [ ] |
| Tamper input | Trigger enclosure/hall sensor | Event recorded and sealed into local log | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| NVMe detect | lspci/nvme list | SSD enumerates reliably across cold boots | [ ] |
| NVMe thermal | Sustained write test with temperature logging | No thermal shutdown; throttling behavior acceptable | [ ] |
| Ledger filesystem | Create encrypted/append-only storage target | Mounts reliably and survives power-cycle tests | [ ] |
| Power-fail behavior | Controlled power interruption during writes | Filesystem and ledger recover cleanly | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| Ethernet link | Link both ports to known-good peers | Stable link at intended rate | [ ] |
| Throughput | iperf3 or equivalent | Meets target without excessive CPU or thermal load | [ ] |
| PTP hardware timestamping | ethtool and linuxptp checks | Hardware timestamp path available and stable | [ ] |
| PTP sync | ptp4l/phc2sys against reference | Offset/jitter meets product target after target is defined | [ ] |
| Daisy-chain/mesh test | Uplink/downlink traffic scenario | No packet loss under expected load | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| Module detect | lspci/lsusb/mmc depending interface | Wireless module enumerates | [ ] |
| Wi-Fi scan | Regulatory-domain-correct scan | Expected networks visible | [ ] |
| Bluetooth test | Controller detect and advertise/scan | BT operational if SKU requires it | [ ] |
| RF coexistence | Ethernet/NVMe/wireless simultaneous load | No reset, thermal runaway, or unacceptable packet loss | [ ] |
| Certification file check | Confirm module/regulatory data | Required labels and antenna constraints documented | [ ] |
Table
| Test | Method | Pass Criteria | Status |
|---|---|---|---|
| Idle thermal soak | 30-60 minute idle in enclosure | Stable temperatures below component limits | [ ] |
| CPU/NPU load | Sustained workload | No thermal shutdown; throttling within policy | [ ] |
| NVMe write load | Sustained writes | SSD remains within rating or controlled throttling occurs | [ ] |
| Ethernet load | Dual-port throughput plus PTP | PHY/magnetics area remains within safe limit | [ ] |
| Combined worst case | CPU/NPU + NVMe + Ethernet + wireless if populated | System remains under thermal and power policy limits | [ ] |
Table
| Item | Requirement | Status |
|---|---|---|
| Secure boot fused only after recovery validated | No irreversible fuse step before recovery proof | [ ] |
| Debug access policy approved | Production units have no exposed unauthenticated debug | [ ] |
| Power budget validated | Measured current matches model with margin | [ ] |
| Thermal model validated | Measured thermal data matches enclosure model | [ ] |
| PTP/TSN validated | Timing performance logged and repeatable | [ ] |
| NVMe endurance policy validated | Write amplification and thermal behavior acceptable | [ ] |
| Manufacturing test fixture defined | Pogo pads, scripts, pass/fail thresholds complete | [ ] |
| Serialization/provisioning defined | Device identity, certificates, keys, and labels tracked | [ ] |
| Regulatory path defined | Wireless/EMC/security documentation plan exists | [ ] |
| Field update/recovery validated | Signed OTA and local recovery tested | [ ] |
Table
| Decision | Options | Owner | Status |
|---|---|---|---|
| Exact Verdin iMX95 SKU | RAM/eMMC/Wi-Fi/TPM/temp grade variants | Hardware | [ ] |
| Ethernet physical layer | Dual RJ45 1000BASE-T vs 1000BASE-T1 | Hardware/System | [ ] |
| TPM location | Verdin-integrated if available vs carrier-side | Security/Hardware | [ ] |
| ATECC608B provisioning | Factory provisioned vs in-house provisioned | Security/Ops | [ ] |
| NVMe size/form factor | 2230 vs 2242, 256 GB to 2 TB | System/Ops | [ ] |
| Wireless requirement | Verdin Wi-Fi SKU vs no wireless vs carrier module | Product/Regulatory | [ ] |
| Input power | 15 W USB-C PD only vs higher budget | Hardware/Product | [ ] |
| Enclosure | 85 mm x 56 mm class vs larger passive chassis | Mechanical | [ ] |
Table
| Section | Result | Notes |
|---|---|---|
| Procurement package | [ ] Pass / [ ] Fail | |
| Pre-schematic gates | [ ] Pass / [ ] Fail | |
| Power-up | [ ] Pass / [ ] Fail | |
| BSP boot | [ ] Pass / [ ] Fail | |
| Security | [ ] Pass / [ ] Fail | |
| Storage | [ ] Pass / [ ] Fail | |
| Ethernet/PTP | [ ] Pass / [ ] Fail | |
| Wireless, if populated | [ ] Pass / [ ] Fail | |
| Thermal | [ ] Pass / [ ] Fail | |
| Production lock | [ ] Pass / [ ] Fail |
Purpose
Baseline Decision
1. Procurement Package Checklist
1.1 Toradex Module and Development Hardware
1.2 Required Vendor Documentation
1.3 Carrier-Side Parts to Select
2. Pre-Schematic Design Gates
3. Procurement Release Gates
4. First-Article Bring-Up Equipment
5. First-Article Bring-Up Plan
5.1 Unpowered Inspection
5.2 Power-Up Sequence
5.3 Boot and BSP Validation
5.4 Security Bring-Up
5.5 Storage Bring-Up
5.6 Ethernet and Timing Bring-Up
5.7 Wireless Bring-Up, If Populated
5.8 Thermal Validation
6. Production Lock Checklist
7. Open Decisions
8. Pass/Fail Summary