Standardized and interpretable RTL coverage reporting

Establish how many finite-state-machine, expression, statement, block, branch, or toggle coverage points contribute to reported coverage percentages for large RTL designs such as Rocket Core, thereby enabling meaningful interpretation and comparison of hardware-fuzzer results.

Background

The paper explains that RTL fuzzers report heterogeneous coverage measures and often omit the composition of their aggregate percentages. This lack of contextual information prevents researchers from determining whether reported improvements represent genuine exploration of new design state space or merely differences in measurement.

Rocket Core is given as a concrete example, with approximately 600,000 coverage points. The authors explicitly identify the unresolved breakdown of these points across coverage categories as an obstacle to standardization, reproducibility, and cross-tool comparison.