Skip to content
#software testing Open access

ESS-MAI POC-010: Authority Non-Duplication and Lawful Execution Continuity

Oct 2026 · Zenodo (CERN European Organization for Nuclear Research)
Access Control and Trust

Abstract

ESS-MAI POC-010: Authority Non-Duplication and Lawful Execution Continuity is a bounded, source-derived Rust experiment by Bledar Gjata (Independent Researcher, Albania). It answers the concurrent-authorization and crash-recovery test proposal by MANU-de in ESS-MAI Discussion #13. This software archive corresponds exactly to GitHub commit 4422a1ea911ab264ca3d5ff430f9cf084d61c3c8, release v0.1.0. Established work, contribution and candidate innovation Established foundations: capability systems, generation-local one-use authorization, canonical encoding, SHA-256, operating-system file locks, transactional persistence, idempotency and crash recovery are existing methods. This work does not claim their invention. Bledar Gjata’s documented contribution: the ESS-MAI governance-first method connects law, authority, scope, evidence, traceability and failure semantics while keeping their responsibilities distinct. POC010 operationalizes a narrow successor experiment already proposed in POC005’s failure-to-advancement contract. Four original gate blocks are preserved byte-for-byte; the request-binding wrapper, shared persistent action ledger and test harness are explicitly new integration code. MANU-de is credited for the external test proposal, not represented as having independently validated the result. AI assistance with implementation, testing and writing is disclosed. Candidate innovation, not an established novelty finding: the project-specific composition may make authority-bound execution continuity inspectable and falsifiable across independently issued permits and process restarts without treating a receipt as a new authority. This is a research hypothesis about ESS-MAI’s method and integration. Passing finite tests does not prove uniqueness, universal security, a new mathematical primitive or superiority over prior transactional systems. Measured results The final local debug and release Cargo runs each passed 23 distinct tests, with zero failures, zero ignored tests and zero warnings. cargo build --release --locked --offline passed. GitHub CI also passed on Windows and Ubuntu for the same commit. Five successive real process cycles used one persistent context and yielded cumulative physical record counts 1, 1, 2, 3, 3. They cover simultaneous already-verified authorizations, exact retry, a real worker kill before commit, a real kill after the durable local effect/receipt but before caller acknowledgement, and a later historical retry with changed-payload refusal. Limits and reproducibility The observable effect is a local append. Claim, payload and completion receipt share one durable frame; the post-commit interruption loses caller acknowledgement, not the receipt. This does not solve arbitrary nontransactional external effects, demonstrate power-loss durability or authenticated rollback protection, or execute native Shadow knowledge admission. A valid older WAL prefix remains an explicit accepted limitation. No synthetic (1,1) knowledge verdict is introduced. The package includes source, Cargo.lock, tests, actual child logs, final WAL, selected-source provenance, a SHA-256 manifest and an independent Python checker. Author-side tests and hosted CI are not independent peer review. Archive SHA-256: 06046c62a321e6d373714f0b29fd7b3db508d915e53e7379de1a5997403a79ae. The canonical ESS-MAI source and private AIGovern-Cyber runtime were not modified or disclosed. Code, evidence, project and author links POC010 code and release Windows and Ubuntu CI evidence Public reviewer exchange and response ESS-MAI parent project Gjata Legacy public Hugging Face archive POC003–006 predecessor archive ESS-MAI constitutional self-governance methodological context OpenAIRE predecessor record Bledar Gjata on LinkedIn ORCID 0009-0003-7854-266X Predecessor identifiers refer to their own artifacts and are not POC010 identifiers. Original method, established technologies, experimental contribution and unproven hypotheses are separated in THEORY_AND_PROVENANCE.md and CLAIM_BOUNDARY.md inside the archive. Verified POC010 mirror: Hugging Face software-and-evidence archive. The downloaded ZIP is byte-identical to the GitHub release; the unchanged capsule retains its original manifest. Primary prior art and explicit hypothesis The attached CONTRIBUTION_MATRIX.md separates existing mechanisms, Bledar Gjata’s project contribution and the proposed H-P010-1 constitutional-continuity extension. Its full native integration remains unmaterialized by this focused POC; the tested local mechanism is not relabeled as that broader result. Direct prior art includes Saltzer and Schroeder (1975), protection principles; Birrell and Nelson (1984), RPC identity and duplicate suppression; Herlihy and Wing (1990), linearizability; Lee et al. (2015), RIFL durable completion records; and Xu et al. (2026), CapLease durable authorization state. These references precede or contextualize generic mechanisms; no exhaustive novelty or priority conclusion is claimed. Preserved software: Software Heritage snapshot swh:1:snp:29ed509db215f6506fe447fcc25a072146bc6983 contains the exact published commit and v0.1.0 tag. Archival preservation is not a correctness endorsement.

View source

Similar papers

#computer vision Review Sep 2017

Agile Software Development Methods: Review and Analysis

This publication proposes a definition and a classification of agile software development approaches and analyses ten software development methods that can be characterized as being "agile" against the defined criterion.

P. Abrahamsson, O. Salo, Jussi Ronkainen et al. · 727 citations · ⚡54
#computer vision Jun 2008

The impact of agile practices on communication in software development

The study shows that agile practices improve both informal and formal communication, but indicates that, in larger development situations involving multiple external stakeholders, a mismatch of adequate communication mechanisms can sometimes even hinder the communication.

M. Pikkarainen, Jukka Haikara, O. Salo et al. · 401 citations · ⚡48
#machine learning Review Open access Oct 2014

Software development in startup companies: A systematic mapping study

The results indicate that software engineering work practices are chosen opportunistically, adapted and configured to provide value under the constrains imposed by the startup context.

Nicolò Paternoster, Carmine Giardino, M. Unterkalmsteiner et al. · 394 citations · ⚡54
#computer vision Review Mar 2008

Agile methods in European embedded software development organisations: a survey on the actual use and usefulness of Extreme Programming and Scrum

The results show that the embedded industry has been able to apply agile methods in its development processes and that the appreciation of the agile methods and their individual practices appears to increase once adopted and applied in practice.

O. Salo, P. Abrahamsson · 238 citations · ⚡9
#computer vision Open access Jul 2017

What happens when software developers are (un)happy

Consequences of happiness and unhappiness that are beneficial and detrimental for developers' mental well-being, the software development process, and the produced artifacts are found.

D. Graziotin, Fabian Fagerholm, Xiaofeng Wang et al. · 236 citations · ⚡13
#computer vision Open access Oct 2004

Mobile-D: an agile approach for mobile application development

The Mobile-D approach is briefly outlined here and the experiences gained from four case studies are discussed, which helped develop an agile development approach for mobile application development.

P. Abrahamsson, Antti Hanhineva, H. Hulkko et al. · 225 citations · ⚡18

Related blog posts

Microsoft Research Blog Oct 30, 2026

From synthetic enterprise data evaluations to real Microsoft Copilot AI confidence

Evaluating Microsoft Copilot at enterprise scale requires test data that captures the full complexity of real organizations, yet real enterprise data contains sensitive information that cannot be used for evaluation under any circumstances. The post From synthetic enterprise data evaluations to real Microsoft Copilot AI confidence appeared first on Microsoft Research.

Microsoft Research Blog Oct 29, 2026

Microsoft Research Focus – Edition #97

Host Sowbhagya Suresh shares some of the latest news and cutting-edge research from across Microsoft—from understanding the challenges facing coding agents to uncovering how people use AI at work and improving extended-range weather forecasting. The post Microsoft Research Focus – Edition #97 appeared first on Microsoft Research.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.