An open-source methodology for building AI agent systems reliable enough to certify and insure.

AI consulting and a methodology for reliable agents.

Abstract blurred crowd moving through warm golden light

Reliable Software = Spec Quality × Harness Enforcement × Continuous Evaluation

Methodology and book by Jhonn Moreno

Seamless forward momentum.

AI consulting from Vancouver, British Columbia

Attacca is operated by UNIFY ORCHESTRATION AI INC., a Vancouver-based British Columbia corporation. Start with an AI readiness assessment, plan your AI investments with Navigator, or organise your business information with Business Brain. Our open-source methodology explains how we approach specifications, evaluation and human oversight.

About the company and our delivery approach

The bottleneck

The model isn’t the problem. The spec is.

AI agents generate code in minutes. But ambiguous specs produce ambiguous software. Agents don’t ask clarifying questions — they assume.

If each of 10 independent steps succeeds 90% of the time, the whole workflow succeeds about 35% of the time. Across 10 runs, that means about 6.5 failed runs on average.

The bottleneck isn’t the model. It’s the organizational context — the intent, the edge cases, the knowledge that took decades to build — that never makes it into the specification.

Attacca is a methodology that encodes that context into machine-actionable specifications, enforces the process through deterministic rails, and evaluates the output through structured adversarial testing.

The March of Nines

Illustrative calculation assuming independent steps: workflow success = per-step success raised to the tenth power.
Per-Step Success10-Step WorkflowFailures / Day (10 runs)
90%35% end-to-end~6.5
99%90% end-to-end~1
99.9%99% end-to-end~0.1

The framework

Eight phases. Every gate enforced.

  1. 01
    IDEA

    Capture the intent. Classify the risk.

  2. 02
    DISCOVER

    Map the existing codebase.

    brownfield only
  3. 03
    SPEC

    Write a specification precise enough for autonomous agents.

  4. 04
    BUILD

    Execute on deterministic rails. Shift-left validation.

  5. 05
    TEST

    Behavioral scenarios + factorial stress testing.

  6. 06
    CERTIFY

    Human sign-off at tier-appropriate depth.

  7. 07
    DEPLOY

    Production setup with verified checklists.

  8. 08
    MAINTAIN

    Continuous flywheel. Drift detection.

Every phase produces artifacts. Every gate has entry requirements. No phase can be skipped.

Trust architecture

Not everything needs the same rigor. Safety-critical systems need all of it.

  • Tier 1

    Deterministic

    Annoyance if wrong. 7 scenarios. Full auto.

  • Tier 2

    Constrained

    Wasted resources. Stress test variations. Logging.

  • Tier 3

    Open

    Financial/reputational damage. Intent contract. Human oversight.

  • Tier 4

    High-Stakes

    Legal/safety/irreversible. Domain expert. Full coverage.

Specs In, Software Out — book cover

A book · Out now

Specs In, Software Out.

The practitioner’s book on spec-driven AI development — why the bottleneck moved from code to specification, and how to build agent systems reliable enough to certify and insure.

15 chapters · 4 appendices · ~85,000 words · free to read

A conductor's baton sweeping through the dark, trailing warm light

Start with a 10-minute readiness audit.

Follow the build.

Framework updates, case studies, and lessons from building AI agents that need to be right — not just fast.

Or visit the Substack directly