I configured the FCCU to make a long functional reset on Watchdog timeout. During my test, I didn't refresh the watchdog in order to trigg the fault. Once the reset executed, I see that the FCCU status is in FAULT state and the MCU is not in SAFE mode. Why the MCU doesn't enter in SAFE mode when FCCU has fault latched ? Only hardware failure trigg the SAFE mode ?