Hi,
The problem is that we can reset the Micro as these ADC fault doesnt effect the control but it limits the product functionality.
You can or can't? Because there is only way how to reset ADC module and PBRIDGE(where the registers are located) and that is system reset. This is also outcome from my discussion with design.
Furthermore, if you disturbing micro with EMI (900V switching) I assume that this is critical also for micro as whole concept.
How you can guarantee the safety functions with such heavy disturbance which stops ADC module.
Other modules can be affected as well, modules like FCCU, STCU, or similar which are not in use all the time micro is running.
You just see only ADC issue as it is all the time running.
In case you switch on high voltage in moment micro is processing some IVOR, or FCCU routine, it can have critical impact on system.
These are just a few assumption from my side.
regards,
Peter