Reviewd and fixed deadman architecture

2026-09-10 23:53:27 +02:00
parent 31b3595ac0
commit f8d111ef5c
15 changed files with 304 additions and 305 deletions
@@ -66,8 +66,11 @@ Validate each circuit manifest with the installed topology validator:
 - The Hall-input drawing separates sensor supply, sensor return and signal;
  the original ASCII alignment could suggest an unintended join. The pull-up,
  divider and parallel filter follow the existing prose.
- The deadman equations are unchanged. Contact observations, permission gates
-  and output gates occupy separate figures; shared net names connect them.
+- The steering-wheel deadman switches are wired in parallel and present one
+  shared `DEADMAN_IN` to the ECU. Either switch can assert permission. One
+  `DEADMAN_STATUS` input reports the combined state; the ECU has no per-switch
+  observations. The permission and output gates use the single `DEADMAN_OK`
+  signal. See the module document for release and stuck-high fault behavior.
 - `VBG_LOCAL_KELVIN` labels the documented local ignition reference at the
  `IGN_PGND` joining point. `LOCAL_GND` in the sink-command figure denotes the
  TLE9104SH local ground reference. Neither denotes a new remote ground path.