System Certification
- Any design change may require safety recertification or
       regression testing
  - Major changes may require other certification for EMI or
- Any system re-synthesis introduces potential risk
  - Some unstated design requirement may be violated (especially
  - Testing combinations of options/equipment configurations
Design Challenges:
  - Partitioning & synthesis take into account minimized
       certification costs