Can you confirm that the ADCMP354 comparator cannot sink current if the power to the device fails? I assume since these are open drain the answer is yes but I want to confirm with you. Do you have a LTSpice simulation model I can use? This is for a safety critical app. What is the typical output state if this device fails.
