title: AUTOSAR Wdg and ISO26262
body: <p><strong>[Background]</strong><br>
  AUTOSAR Wdg requires the refresh hardware Wdg in ISR context(SWS_Wdg_00166), the purpose is just for "minimum timing jitter" and "minimum latencies" for window Wdg and compatible with old WdgM.<br>
  But my understanding is that window Wdg purpose is to find the system clock jitter (exmple:CPU PLL), which is required by ISO26262 AnnexD（Clock jitter.<br>
  AUTOSAR Wdg strategy delete the concept of "Wdg window" from upperlayer and encapsulate it in hardware timer, because as long as the WdgM alive, Wdg_SetTriggerCondition is invoked within the Wdg timeout period, Wdg driver shall refresh HW Wdg in hardware timer ISR, at WdgM level, the same as preivous Toggle Wdg.</p>
  
  <p><strong><em>[Question]</em></strong><br>
  If using AUTOSAR standard to develop Functional Safety Software, how to process above Wdg requirement?<br>
  If this is obeyed, ISO26262 is not satisfied.<br>
  If this is ignored, AUTOSAR standard is not satisfied.  </p>
  
  <p>Who can give me some suggestion?<br>
  or<br>
  Is there any way to submit this to AUTOSAR?</p>