The chip worked in simulation and failed on the tester.
A chip that passes every simulation can still ship defects the tester never checks. Design-for-test is what makes manufacturing faults reachable from the pins — and doing it without exploding test time or area is a discipline that has to be designed in, not bolted on after the netlist freezes.
DomainSilicon, design-for-test
PlatformsFaststream Silicon
ScopeScan architecture to signed test
Binding constraintEvery fault must be reachable from a pin, cheaply
DisclosureRepresentative programme; customer not named
CONTEXT
Where this started.
Functional simulation proves a design does what it should. It says almost nothing about whether a manufactured die is free of defects — a bridged net, an open via, a stuck node. Catching those is the job of manufacturing test, and manufacturing test can only catch a fault it can reach and observe.
Design-for-test makes the internal state reachable: scan chains stitch flip-flops into shift registers, compression squeezes the test data so the pattern set fits the tester, and ATPG generates the patterns that toggle and observe each fault. Skip it and coverage is a guess; do it badly and test time and pin count blow the cost budget.
So DFT is planned as part of the design, not after it: scan architecture chosen against the test budget, compression ratio traded against coverage, and a pattern set signed off on real fault models rather than an optimistic percentage.
CHALLENGES
4 problems, named.
Stated before any of them had an answer.
01
Simulation doesn't find manufacturing defects
A design can be functionally perfect and still yield dies with bridges and opens; only structural test catches those, and only if the faults are reachable.
02
Coverage you can't reach is fiction
A fault ATPG cannot toggle and observe is uncovered, however good the number looks; unreachable logic has to be found and fixed in the DFT, not papered over.
03
Test time is money
Every pattern costs tester seconds across every die; compression and pattern efficiency decide whether the test is affordable at volume.
04
DFT changes the design
Scan insertion touches timing and area; done late it fights physical design, so it has to be planned in from the start.
ARCHITECTURE
How it was built.
Coverage is only real if ATPG can reach the fault. DFT designs that reachability in — and keeps the pattern set inside a test budget that survives volume.
CONTRIBUTION
What Faststream did.
The scope of the work, rather than a capability list.
Scan architecture — chain structure, clocking and test modes chosen against the tester and the test budget.
Test compression — squeezing the pattern data so coverage fits the tester's pin and memory limits.
Test-point insertion — making genuinely unreachable logic observable and controllable rather than accepting the coverage gap.
ATPG and fault models — generating stuck-at and at-speed patterns against the fault models that matter for the process.
Coverage closure — finding and fixing the reachability gaps that a headline percentage hides.
Pattern signoff — a signed pattern set on real fault models, within a test time the volume can afford.
WHAT WAS HARD
The parts that consumed the schedule.
Rarely the subsystem that sounds difficult.
01
Closing the last coverage
The first ninety percent of faults are easy; the remaining reachability gaps — deep state, redundant logic — are where the DFT effort actually goes.
02
Compression versus coverage
Higher compression cuts test time but can cost coverage; finding the ratio that keeps both acceptable is the trade at the centre of the work.
03
At-speed test
Catching timing-related defects means testing at speed, which stresses the scan clocking and the pattern generation far more than stuck-at.
04
Not breaking physical design
Scan and test logic add area and timing paths; planned late they collide with place-and-route, so the DFT has to lead, not follow.
OUTCOME
What resulted.
Coverage that's real
Fault coverage signed on models ATPG can actually reach, not an optimistic number with hidden gaps.
Test that's affordable
A compressed pattern set whose tester time survives production volume.
At-speed defects caught
Timing-related faults covered, not just static stuck-at.
A DFT flow that repeats
A test architecture the customer can carry to the next device rather than reinvent.
Confidentiality
Customer projects are presented at property, capability, outcome and integration level. Customer names, internal architecture, confidential deliverables and commercial terms are not disclosed. Where a detail would identify a customer it is omitted rather than approximated. More is available under a non-disclosure agreement, within the limits the customer has agreed.
Why can a chip pass simulation and still fail on the tester?
Because simulation and manufacturing test answer different questions. Simulation proves the design is functionally correct; the tester checks whether a specific manufactured die is free of physical defects like bridges, opens and stuck nodes. Those defects have nothing to do with the design's correctness, and the tester can only catch one if design-for-test has made that fault reachable and observable from the pins.
02
What does 'fault coverage' really mean?
It is the fraction of modelled manufacturing faults that the test patterns can both activate and observe. The trap is that a high headline number can hide faults ATPG simply cannot reach because the logic is uncontrollable or unobservable — those are uncovered no matter what the percentage says. Real coverage closure means finding those reachability gaps and fixing them with test points, not reporting around them.
03
Why does DFT have to be designed in early?
Because scan chains, compression logic and test points change timing, area and clocking. If DFT is added after the netlist and floorplan are settled, it collides with physical design and forces rework. Planned from the start, the test architecture and the physical design converge together, and the test budget is met without a late, expensive scramble.