How do they plan to get through ISO 26262 verification? You do not need to do HARA to know ECU is ASIL D. ASIL D Item requires developer to do Modified Condition and Decision Coverage. Running through all the test cases will be a huge task. The golden rule for Automobile Software is simplicity. Always keep it simple unless it is absolutely necessary. They need to read through ISO 26262 chapter 6.