SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Developers Use TLA+ Formal Verification to Enforce AI Agent Governance Rules

0
·1 views

A software team building multi-agent AI systems on platforms like CrewAI, AutoGen, and LangGraph has published a formally verified governance framework called MAREF, available under the Apache-2.0 license. The core challenge they addressed was preventing AI agents from crossing defined safety boundaries when acting autonomously. They modeled the governance logic as a Gray Code finite state machine, where any transition skipping more than one bit is automatically flagged as a bug by the model checker. The TLA+ model checker (TLC) verifies five key invariants — including halt absorption, red-line immutability, and safety gate integrity — on every code push via a CI workflow. The team notes that formal verification is applied only to the small governance core, while the larger orchestration layer relies on conventional unit and integration tests to keep the verified state space manageable.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

TabForge AI brings chat agents and context-aware UI to Java enterprise web apps

TabForge AI is a newly released open-source platform designed to bring modern AI-powered user experiences to Jakarta EE and PrimeFaces-based Java web applications. The platform includes EasyAI, a provider-agnostic layer built on LangChain4j that supports chat, tool-calling agents, and structured data extraction through a fluent Java API. A custom tab management system called DynTabs gives each open tab its own isolated CDI bean, while a deterministic pipeline feature lets developers control multi-step AI workflows without relying on unpredictable agent behavior. The platform also introduces Ambient Activity Memory, which tracks user actions so the assistant can resolve context-dependent queries, and a proactive suggestion system that uses plain Java rules to trigger relevant prompts. TabForge AI ships with a library, live demo, starter project, and a drop-in UI template to help Java teams get started quickly.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Interactive CSS-Only Donut Customizer for DEV Frontend Challenge

A developer primarily known for WordPress and PHP work created 'Donut Panic,' an interactive donut-builder as a submission for DEV Community's Comfort Food Frontend Challenge. The project lets users choose a glaze, add toppings like sprinkles or powdered sugar, and animate the finished donut off the plate — almost entirely without JavaScript. All visual changes, including glaze swaps and topping toggles, are powered by CSS checkbox and radio inputs combined with the modern :has() selector, which allows parent elements to respond to nested input states. The donut's layered design uses radial gradients, custom properties, and an infinite shine animation to simulate depth and glossy glaze effects. JavaScript is used only once — to smooth-scroll the donut into view on mobile after the serve action — keeping it strictly a UX aid rather than a rendering tool.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds RSA-Signed Webhook Relay to Bridge Restricted Server Networks

A developer created an open-source intermediary service called Signed Webhook Receiver to solve cross-server communication issues caused by network restrictions. The lightweight tool, built with Python and FastAPI, receives requests signed with an RSA private key and verifies them using a matching public key before forwarding them to an external service. The project was originally motivated by the need to connect a server in Iran to Telegram, where direct connections were unreliable. Beyond that use case, the service can also act as a controlled gateway for payment integrations that require requests to originate from a specific country's IP address. The project is available on GitHub and is not an open proxy, as it restricts authenticated requests to specific operations and destinations.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Ditches ReBAC Tools Over List-Filtering Limitations, Moves Auth to Postgres

A developer tested relationship-based access control (ReBAC) by integrating OpenFGA into a prototype, running 120 assertions across 16 test scenarios before ultimately removing it. The core issue was not with ReBAC as a model but with how existing tools handle list queries — determining which objects a user can access, not just whether they can access a specific one. Approaches like post-query filtering, fetching full permission lists, or maintaining a local index each introduced problems around pagination accuracy, performance, or data synchronization. Permit.io's partial policy evaluation was identified as the conceptually correct solution, but its Postgres support remains in early access and is limited to attribute-based rather than relationship-based policies. The developer resolved the problem by moving authorization logic directly into Postgres as native functions, enabling permission checks and list filtering to run in the same transaction without a separate sync layer.

0 comments Read more at DEV Community
Developers Use TLA+ Formal Verification to Enforce AI Agent Governance Rules · ShortSingh