Gustavo,
The way I've coded my system is that, for production firmware, faults call SRC_DoSoftwareResetARMCore0. If the WDOG1 'early warning' interrupt is triggered, the system attempts to do some cleanup, including writing critical data to flash, then reboots using WDOG_TriggerSystemSoftwareReset(). Of course, if things go badly, the watchdog will eventually reboot the system, just not as gracefully as I would like.
Does this sound like a reasonable approach, or should I be using WDOG_TriggerSystemSoftwareReset() for the faults, too?
Thanks,
Jeff