Demonstrates compliance with 28 governance rules in AI-assisted software, indicating effectiveness of GCDD framework.
GCDD Agentic (Governance-Constrained Driven Development) is a framework extending Spec-Driven Development with an enforceable governance layer. GCDD introduces Governance Contracts — machine-readable YAML artifacts encoding organizational rules — and Constrained Generation, where restrictions are encoded in tools rather than prompts. A case study demonstrates 100% compliance by construction across 28 governance rules (OWASP API Top 10, PCI-DSS) on a payments API. The framework includes three enforcement layers, an architecture selection engine, and Governance-Driven IAOps for runtime infrastructure operation.
No takes yet. Share an insight, caveat, or question.
Arturo Gutierrez Rubio Rojas (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: