arXiv:2604.16399cs.SEcs.AI2026-04

用8阶段对抗验证框架,解决AI编程中生成代码却无法自检的问题。

IACDM: Interactive Adversarial Convergence Development Methodology -- A Structured Framework for AI-Assisted Software Development

  • 引入外部验证代理,在生成与攻击间交替,通过状态机强制流程控制
  • 19个批判视角均发现其他视角未识别的缺陷,证明无冗余且互补
  • 适合工业研发团队提升代码可信度,尤其在高安全要求场景

2025年AI辅助开发的应用暴露了工具无关的失败模式:经验丰富的开发者使用前沿模型反而更慢,且在一个生产展示中10.3%的应用因访问配置错误导致数据泄露。这些失败的共同根源是验证缺口:语言模型在无外部工具时无法判断生成内容是否正确。关键不在于工具,而在于流程。本文提出IACDM(交互式对抗收敛开发方法论),一个包含8个阶段的框架,其中生成器外的验证代理在离散节点运作,AI交替执行构建与受专业化批判视角攻击。区别于传统评审与红队测试的是,推进权由模型外的状态机控制,代理只能请求推进,不能授予。一项预注册实验在十二个项目上验证了该方法,评估19个批判视角是否冗余,结果每个视角均发现至少一个其他视角未识别的缺陷,经四次独立判断确认。意外发现:分类体系可承受检验,但应用标准却无法成立;此外,该方法会产生系统无法再复核的承诺。方法在单一工业研发机构内开发,证据仅证明适用性,非有效性:所有项目均采用该方法,评价者即设计者。是否优于直接提示仍待验证,本文旨在使其可被证伪。

原文摘要 · Abstract (English)

Adoption of AI-assisted development in 2025 exposed a tool-agnostic failure pattern: experienced developers using frontier models were measurably slower while believing they were faster, and 10.3% of applications in one production showcase leaked data through misconfigured access. These failures share a structural cause, the verification gap: absent external tool use, no language model can determine whether what it generated is correct. The tool is irrelevant; the process is determinative. We present IACDM (Interactive Adversarial Convergence Development Methodology), an 8-phase framework in which verification agents external to the generator operate at discrete gates, and the AI alternates between building artifacts and attacking them through specialized critique lenses. What distinguishes it from the review and red-teaming traditions it borrows from is that the gate is enforced by a state machine outside the model: the agent may request advancement, not grant it. One component has now been tested. A pre-registered experiment over twelve projects under a single frozen instrument asked whether the nineteen lenses are non-redundant, against a prior expectation from replications of Perspective-Based Reading, which found reading perspectives not to differ. Every lens found at least one defect no other lens found, under four independent judgements of what counts as the same defect. Two further results were unplanned: the taxonomy withstands testing while the criterion deciding when to apply it does not, and the method creates commitments nothing ever re-confronts with the built system. The method was otherwise developed at one industrial R&D institute. That evidence establishes applicability, not effectiveness: no project ran without the method, and the proponents are the evaluators. Whether IACDM outperforms direct prompting remains open, and this paper is written to make it refutable.

AI开发代码验证对抗测试流程框架

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。