Nidus: Externalized Reasoning for AI-Assisted Engineering
Organizations: cybiont GmbH, Schübelbach, Switzerland · cybiont GmbH, Kantonsstrasse 17, 8862 Schübelbach, Switzerland
Abstract
We present Nidus, a governance runtime that mechanizes the V-model for AI-assisted software delivery. In the self-hosting deployment, three LLM families (Claude, Gemini, Codex) delivered a 100,000-line system under proof obligations verified against the current obligation set on every commit. The system governed its own construction. Engineering invariants - traced requirements, justified architecture, evidenced deliveries - cannot be reliably maintained as learned behavior; assurance requires enforcement by a mechanism external to the proposer. Nidus externalizes the engineering methodology into a decidable artifact verified on every mutation before persistence. Organizational standards compile into guidebooks - constraint libraries imported by governed projects and enforced by decidable evaluation. Four contributions: (1) recursive self-governance - the constraint surface constrains mutations to itself; (2) stigmergic coordination - friction from the surface routes agents without central control; (3) proximal spec reinforcement - the living artifact externalizes the engineering context that RL and long-chain reasoning try to internalize; the specification is the reward function, UNSAT verdicts shape behavior at inference time, no weight updates; (4) governance theater prevention - compliance evidence cannot be fabricated within the modeled mutation path. The constraint surface compounds: each obligation permanently eliminates a class of unengineered output. The artifact's development history is a formal development - every state satisfies all active obligations, and the obligation set grows monotonically.
Figures & tables
| Element type | N | Guarded | Rate | Guardian PO kind |
|---|---|---|---|---|
| Trace | 11 | 11 | 100% | traceability-complete |
| Component | 6 | 6 | 100% | connector-integrity |
| Design element | 6 | 6 | 100% | feature-scope-valid |
| Requirement | 11 | 9 | 82% | feature-scope-valid |
| Connector | 5 | 0 | 0% | gap (subsequently closed) |
| Proof obligation | 10 | 0 | 0% | sandbox lacked immutable flag |
| Operation | Wall-clock | Notes |
|---|---|---|
| ping | 1 ms | Daemon heartbeat |
| read_system | 173 ms | Full artifact + traceability matrix |
| precommit-check | 493 ms | Incremental: 238 POs, touched sections only |
| artifact_health | 2 s | Full: all POs + governance health score |
| commit_change_set | 2–5 s | Verify + CAS + git commit + WAL push |
| Friction | Constraint | Behavior blocked |
|---|---|---|
| 78 fabricated evidence incidents | (implies evidence_submitted (and witness_registered hash_present)) | Unregistered witness or missing hash |
| Unclaimed dispatch | (implies work_dispatched feature_claimed_by_agent) | Work on unclaimed features |
| Delivery without tests | (implies feature_delivered (and has_code_paths has_test_paths ...)) | Incomplete scope |
| Backfilled specs | (temporal true) (po-kind spec-precedes-code) | Spec committed after code |
| DAG violations | (and (not parse_imports_query) (not mutate_imports_query) ...) | Module back-edges |
AI Agent Governance
AI agent governance studies how to authorize, constrain, monitor, and hold autonomous and multi-agent systems accountable.
See all 442 papers