One workflow. Three levels. Six domains. Eleven artifacts.

FDLC is the Factory Development Lifecycle—the open operating model, engineering framework, and reference architecture for designing, building, governing, operating, measuring, and continuously improving AI software factories.

Example
Dependency modernization
Levels
03
Architecture domains
06
Artifacts
11

This page walks one concrete factory line—dependency modernization—through the full system so you can see how FDLC turns intent into independently verified software.

This is not a product tour. It is a concrete walkthrough of the Factory Development Lifecycle applied to one bounded, high-value class of work.

One workflowThree abstraction levelsSix architecture domainsEleven artifacts

Dependency modernization.

Upgrade a defined set of approved libraries across a single repository while preserving build integrity, test results, and public API compatibility.

INT-104 / Intent

Upgrade the Acme Payments SDK from v3 to v4 in checkout-api without changing public API behavior.

Repository
checkout-api
Risk class
Moderate · behavioral compatibility
Release owner
Payments platform lead
Factory version
dependency-modernization@1.0
SPEC-104-R1 / Acceptance contract
  1. 01

    All existing contract and integration tests pass against the exact candidate.

  2. 02

    No deprecated v3 imports or compatibility shims remain.

  3. 03

    No public API, schema, or authorization behavior changes.

  4. 04

    The release record includes rollback conditions and an accountable owner.

Baseline / illustrative
Cycle timeDays to weeks

Elapsed time from admitted upgrade to accepted change

Human review minutesHigh

Compatibility, test-failure, and subtle-breakage review per accepted upgrade

Reopen / rollback riskMaterial

Accepted work that must re-enter governed execution or be reversed

Escaped defect potentialReal

Compatibility failures found after the release boundary

Worked reference scenario. Illustrative records and targets—not a production case study or benchmark result.

The goal of the factory line is not “run an agent.” It is to produce verified, accepted upgrades at lower cost, lower risk, and with less scarce human attention—while preserving a complete evidence trail.

The same factory. Three different questions.

The levels connect, but they are not interchangeable. The six-domain architecture is a structural view across them, not a fourth lifecycle.

The factory line itself is engineered. It is not installed by prompting.

Discover, design, assemble, validate, deploy, operate, and improve the line under continuous Governance, Security, Observability, Measurement, and Human Authority. Evidence from real outcomes may propose a new version; it cannot silently rewrite the active line.

  1. 01

    Discover

    Select dependency upgrades as a repeatable factory line and record the current manual baseline.

    Output · Measured opportunity
  2. 02

    Design

    Define eligible repositories, acceptance evidence, delegated authority, and escalation boundaries.

    Output · Factory definition
  3. 03

    Assemble

    Bind the research, migration, test, repository, model, and verification capabilities.

    Output · Runnable factory line
  4. 04

    Validate

    Run policy, recovery, and representative upgrade evals before the factory may operate.

    Output · Validated factory version
  5. 05

    Deploy

    Promote dependency-modernization@1.0 with an environment binding and rollback plan.

    Output · Active factory line
  6. 06

    Operate

    Receive eligible upgrade intent and run the governed execution path below.

    Output · Verified software outcomes
  7. 07

    Improve

    Compare observed outcomes with baseline and propose a versioned factory change.

    Output · Governed improvement
Across every stageGovernanceSecurityObservabilityMeasurementHuman Authority

Designed once. Run many times. Each run produces evidence that can improve the next run—under change control. The active factory version remains fixed until validated evidence justifies a governed improvement.

Software work flows through eight practical stages.

Intent, Plan, Define Agent, Execute through Harness, Apply Skills, Evaluate, Improve, and Deliver Software explain how work moves through the factory. They do not replace the lifecycle used to engineer the factory.

  1. 01 / Guide stageIntent

    Establish the desired software outcome and its operating context.

  2. 02 / Guide stagePlan

    Turn intent into a governed path, decomposition, and proof strategy.

  3. 03 / Guide stageDefine Agent

    Bind the role, model, context, authority, and capabilities required for the work.

  4. 04 / Guide stageExecute through Harness

    Run bounded work in a durable, observable, and recoverable execution system.

  5. 05 / Guide stageApply Skills

    Use versioned domain procedures and governed tools to produce the candidate.

  6. 06 / Guide stageEvaluate

    Collect evidence and independently evaluate the exact candidate.

  7. 07 / Guide stageImprove

    Correct the work or propose a controlled factory change from validated evidence.

  8. 08 / Guide stageDeliver Software

    Advance accepted software through the authorized delivery boundary.

  1. 01

    Intent

    Record the desired SDK upgrade, then freeze its owner, constraints, behavioral boundaries, and evidence contract.

  2. 02

    Plan

    Approve the migration sequence, rollback path, verifier contract, and one bounded Work Order.

  3. 03

    Execute

    Run and retain each leased execution Attempt against the frozen inputs.

  4. 04

    Prove

    Bind current evidence and independent verification to the exact candidate before a named human decides whether it may proceed.

  5. 05

    Release

    Promote only the accepted candidate, then observe the declared production window for regression and rollback signals.

  6. 06

    Learn

    Turn attributable friction or failure into a reviewed factory-improvement proposal.

Eleven records freeze what happened and why.

Intent, Specification, Plan, Work Order, Attempt, Evidence, Verification, Approval, Release, Outcome, and Learning are representative semantic records, not a finalized wire format. Implementations may add records without collapsing these authority and evidence boundaries.

  1. 01
    INT-104

    Intent

    Outcome, owner, repository, constraints, and risk.

    What outcome matters?
  2. 02
    SPEC-104-R1

    Specification

    Behavioral boundaries and criterion-level proof requirements.

    What must be true?
  3. 03
    PLAN-104-R2

    Plan

    Approved migration sequence, dependencies, verification, and rollback strategy.

    How will the factory achieve it?
  4. 04
    WO-104-01

    Work Order

    The bounded repository change authorized for execution.

    What bounded unit is authorized?
  5. 05
    ATT-104-03

    Attempt

    Identity, lease, environment, model, capabilities, and exact execution trace.

    What exactly ran?
  6. 06
    EVD-104-09

    Evidence

    Test receipts, typecheck, lint, dependency scan, and candidate diff.

    What was observed?
  7. 07
    VER-104-02

    Verification

    Independent judgment against the frozen Specification and exact candidate.

    Does the evidence satisfy the specification?
  8. 08
    APR-104-01

    Approval

    Named human decision, rationale, subject, and time.

    May this consequence proceed?
  9. 09
    REL-104-01

    Release

    Promoted artifact, policy currentness, owner, and rollback conditions.

    What was promoted?
  10. 10
    OUT-104-01

    Outcome

    Observed production behavior during the declared measurement window.

    Did the intended result hold in reality?
  11. 11
    LS-104-01

    Learning

    Attributable improvement proposal without self-authorizing promotion.

    What should change in the factory?

All six domains participate across the levels.

Intent, Harness, Capability, Model, Trust, and Learning describe what the factory contains. No single agent owns the outcome, and the domains are not a fourth lifecycle.

01 / Intent

Define what should happen and how success will be judged.

Mission, Mission Spec, acceptance criteria, owner, repository, and risk class.

Mission Control
Mission + Mission Spec
02 / Harness

Make execution durable, bounded, observable, and recoverable.

Durable Work Order state, isolated Attempts, leases, checkpoints, and recovery.

Mission Control
WorkOrder + Task + Attempt
03 / Capability

Package reusable ways for agents to act in a domain.

Repository research, SDK migration skill, test runners, and source-control tools.

Mission Control
Frozen capability manifest
04 / Model

Match reasoning capability to the work without provider lock-in.

A policy-admitted reasoning profile selected for the bounded migration class.

Mission Control
Recorded routing decision
05 / Trust

Decide what may run, what can advance, and what requires judgment.

Authority policy, exact-subject evidence, independent verification, and human acceptance.

Mission Control
Evidence + Quality Gate
06 / Learning

Improve the factory from validated outcomes under change control.

Observed outcome, reviewer friction, failure taxonomy, and controlled promotion proposal.

Mission Control
Outcome + LearningSignal

Trust constrains every area. Learning captures validated outcomes and failures, but it never writes directly to production.

The control plane materializes the records, gates, and attention boundaries.

These reference-implementation views show where governed work, evidence, and decisions become inspectable through human acceptance and permit-gated pull-request publication. They do not prove generalized release, production learning, or fleet-scale operation.

  • Mission + SpecificationDefine the governed outcome and proof contract.
  • Versioned PlanMust be approved before Work Orders are released.
  • Leased AttemptsExecute against frozen configuration with durable lineage.
  • Evidence EnvelopesBind attributable proof to exact candidates.
  • Independent verificationProduces explicit Quality Gate decisions.
  • Human acceptancePreserves accountable judgment at the consequential boundary.
Command CenterReference view
Mission Control Command Center showing governed work requiring attention
Plan and approval boundaries stay visible.Governed work surfaces an owner, next decision, and proof source instead of disappearing into an activity feed.
Work OrderReference view
Mission Control Work Orders view showing governed execution and verification state
Execution is bounded before an Attempt begins.The Work Order carries scope, acceptance, risk, authority, and verification state; leased Attempts cannot silently become releases.
Audit and evidenceReference view
Mission Control approvals and audit view showing durable change records
Evidence and consequential decisions become records.Verification, human acceptance, deployment, rollback, and policy decisions remain independently inspectable.

In the qualified Mission Control path: Attempt completion → independent verification → Quality Gate eligibility → Human Acceptance → permit-gated pull-request publication. Merge, generalized release, and production outcome remain outside the qualified V1 boundary.

Measure verified completion—not generated activity.

The first run does not get to claim improvement. Baseline the manual path, observe accepted outcomes, and protect quality with explicit guardrails.

Primary measure

Verified completion rate

accepted dependency upgrades ÷ eligible dependency-upgrade missions
Baseline
Measure the current manual path before the first factory run.
What success looks like
Improve verified completion without increasing escaped defects, rollback rate, or human review minutes.
01Verified completion rate

Share of admitted Work Orders that satisfy their verification contract.

02Cost per verified outcome

Total cohort cost, including failed upgrades and retries, divided by independently verified upgrades; report missing cost coverage.

03Human review minutes

Judgment time required per accepted change.

04Cycle time

Elapsed time from approved intent to accepted outcome.

05First-pass verification rate

Candidates that satisfy required checks without corrective rework.

06Reopen / rollback rate

Accepted or released work that must re-enter governed execution or be reversed.

Quality guardrailsReopen rateRollback rateEscaped defectsCost per verified outcome

Improvement is measured against the original baseline, not against model confidence scores.

Move from mental model to one bounded factory line.