System Certification - Any design change may require safety recertification or regression testing - Major changes may require other certification for EMI or reliability - Any system re-synthesis introduces potential risk - Some unstated design requirement may be violated (especially timing) - Testing combinations of options/equipment configurations Design Challenges: - Partitioning & synthesis take into account minimized certification costs