
Intent-Verified Development (IVD)
io.github.leocelisPublished by GitHub account leocelisv3.1.2Updated Oct 25, 2026
33 tools that make AI write, implement, and verify intent against explicit, testable constraints.
The publisher's own server: verified.fyi
Overview
IVD is a remote MCP server that makes an AI assistant write structured, testable intent artifacts, implement against them, and verify constraints before and at
- What you can do
- Load framework context, recipes, templates and semantic search over IVD knowledge, and import external specs into constraint scaffolds, scaffold new intent artifacts, initialize IVD in a project, and discover, place and validate existing artifacts, review constraints by risk, run allowlisted constraint tests, attest that the method was followed, and assess intent coverage, capture corrections, codify them into patterns, inject judgment context and record resolutions in a project judgment folder, render, audit and diff AI text against Canon communication rules and check whether rule blocks are installed
- When to use it
- Useful when you want an AI coding agent to turn a vague request into an explicit, reviewable contract before writing code, and to check its work against those constraints. Also suited to teams that want project-specific corrections and communication rules to carry into later agent runs.
- Requirements
- Remote endpoint at mcp.ivdframework.dev over Streamable HTTP or SSE; a bearer API key in the Authorization header, requested from the project site. The README also documents a local Python install from a cloned repository with a virtual environment; semantic search there needs OPENAI_API_KEY.
Installation
In SourceWeft
- Open Intent-Verified Development (IVD) in the dashboard and add it to a workspace.
- Connect Authorization token credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.leocelis%2Fivd/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config.
{
"mcpServers": {
"intent-verified-development-ivd": {
"type": "http",
"url": "https://mcp.ivdframework.dev/mcp",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}README
Intent-Verified Development (IVD)
A framework where AI writes the intent, implements against it, and verifies — so hallucinations are caught and turns drop to one.
[License] [Version] [Python 3.12] [MCP Compatible] [Tests]
→ ivdframework.dev — full docs, hosted server, and access request
New here?
Start with judgment_explained.md
— a 5-minute, plain-English on-ramp that explains what problem the
Judgment phase solves and how, before you read the spec.
The Problem
AI agents hallucinate not because they're bad — but because you're feeding the wrong knowledge system.
Research shows LLMs rely primarily on contextual knowledge (the prompt) over parametric knowledge (training data) — but only when the context is structured and precise (Huang et al., ICLR 2024; 9-LLM contextual vs. parametric study, 2024). When you give vague prose — a PRD, a user story, a chat message — the context channel is underloaded. The model fills the gaps from training. Those gaps are the hallucinations.
IVD saturates the contextual channel with structured, verifiable intent — so the model has nothing to guess.
Quick Start
Works locally. No API key required. Under 5 minutes.
0. See it work first (30 seconds, no setup)
Runs offline. Shows a vague prompt producing a hallucinated implementation, then the same request run against a structured intent artifact — with the constraint check catching the mismatch before you'd ever see it. This is the core loop this README is about; everything below is how to wire it into your own agent.
1. Clone and setup
2. Add to your IDE
Important: command must point at the venv's Python — setup.sh installs
IVD's dependencies into .venv/, not your system Python. Using "command": "python"
here will fail with ModuleNotFoundError. Replace /path/to/ivd with your actual
clone path.
Cursor (Settings → Features → MCP):
VS Code / GitHub Copilot (.vscode/mcp.json):
Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json):
A
pyproject.tomlnow ships in the repo (pip install .orpip install -e .gives you anivd-mcpconsole command). A PyPI release (uvx ivd-mcp, no clone required) is planned — see ROADMAP.md.
3. Use it
Ask your AI agent to use IVD tools. For example:
- "Use ivd_get_context to learn about the IVD framework"
- "Use ivd_scaffold to create an intent for my user authentication module"
- "Use ivd_validate to check my intent artifact"
That's it. 32 of 33 tools work immediately with zero configuration — only ivd_search needs an OPENAI_API_KEY.
4. Enable semantic search (optional)
ivd_search requires embeddings. Generate them once (~$0.01, under a minute):
How It Works
The key insight: clarification happens at the intent stage, not after code. The AI writes a verifiable contract, you approve it, then implementation is mechanical — and self-verifying.
MCP Tools
33 tools available to any MCP-compatible AI agent (19 core + 10 Judgment tools (8 added in v3.0; ivd_judgment_check_installed and ivd_judgment_resolve added in v3.1) + 4 Canon tools added in v3.1):
Core (19)
Judgment Phase (10) — dormant unless <project_root>/.judgment/ exists
New to Judgment? Read
judgment_explained.mdfirst — plain-English "what problem it solves and how" in 5 minutes — then the tool table below and the runnable showcase further down will make immediate sense.
Architecture (v3.1): substance lives in the ivd/judgment/ engine package (typed @dataclass schemas; engine_version + reproducible SHA-256 hash on Pattern and InjectionResult for diffability and audit). mcp_server/tools/judgment.py is a thin facade that dispatches to the engine. Mirrors the Canon (Phase 0) architecture for symmetry. Server-level kill switch: IVD_JUDGMENT_TOOLS_ENABLED=false.
See it work. A runnable showcase walks through the full Judgment loop end-to-end — capture three real-world AI corrections, codify them, promote a Pattern, and watch the same LLM (gpt-4o-mini, temperature=0) generate different code on the same request after the Pattern enters its system message. No trust required — run it, read the terminal.
The showcase simulates 3 weeks of an AI coding agent ignoring this project's React testing conventions across 3 different test files (PaymentForm.test.tsx, MetricsCard.test.tsx, ProfileSettings.test.tsx), feeds the 3 corrections through the 9 ivd_judgment_* tools, and writes 4 human-readable artifacts to examples/judgment_demo/output/: before.md (the agent's system message without Judgment), after.md (with the Pattern injected), diff.md (what Judgment added), and llm_responses.md (side-by-side Vitest test files with verdict).
Why this scenario: the project's testing conventions (renderWithProviders helper in src/test/test-utils.tsx, MSW server in src/test/mocks/server.ts, userEvent.setup() discipline) live ONLY in the repo. They do not exist in the LLM's training data, so a static system-prompt nudge cannot solve it — the model has to inherit the lesson from YOUR repo. That is precisely the use case Judgment is built for.
Representative result on the live LLM (gpt-4o-mini, temperature=0, n=3 trials, ~$0.001):
Full methodology, per-step output, and the regression test that pins every claim:
examples/judgment_demo/README.md.
Canonical doc: judgment_layer.md. Recipes: capture-correction.yaml, comparison-pair.yaml, distill-pattern.yaml.
Canon — Human Translation Layer (4) — v3.1, no extra setup
Canon makes any AI agent's replies legible to humans. It enforces five communication invariants — Setting Phase (R1), Confidence Calibration (R2), Verification Beat for irreversible actions (R5), Folk Theory Management (R10), and Anthropomorphism Ceiling (R14) — on top of any LLM output. Canon ships in two layers that compose:
- Phase 0a — Canon Rules. A pasteable markdown block that lives in your agent's instruction file (
.cursorrules,.clinerules,CLAUDE.md,.github/instructions/canon.md,AGENTS.md,.windsurf/rules/canon.md). Distributed as the IVD recipecanon-rules. Fence-marked with<BEGIN-CANON v1.0>/<END-CANON v1.0>so it can be detected, replaced, or version-bumped without disturbing the rest of the file. - Phase 0b — Canon MCP tools. Four tools hosted inside this IVD MCP server — every existing IVD client (Cursor, Claude Desktop, Claude Code, VS Code + Copilot, Cline, Windsurf, Zed) discovers them automatically on the next IVD update. Zero
mcpServersconfig edit required. Opt-out:IVD_CANON_TOOLS_ENABLED=false.
Install flow (IVD users — already have mcpServers.ivd configured):
- Update IVD. The four
canon_*tools appear automatically intools/list. No config edit. - Ask your agent: "Run
canon_check_rules_installedfor this project." - The tool reports per-file status of the IVD and Canon rule blocks plus a per-client install payload for any missing block.
- The agent asks you for permission before writing the rules block to any file.
The composition lift. When both layers are active (rules in instruction file + Canon MCP tools available), audit pass rates on R1/R2/R5/R10/R14 are at least 10 percentage points higher than rules alone (NFR-LA5).
See it work. The validation suite ships with a runnable showcase that calls a real LLM with and without the Canon rules block and measures what changes. No trust required — run it, read the terminal.
The first four prompts are the headline demos. On each one the same LLM is asked the same destructive question — without Canon rules it hands you the dangerous command, with Canon rules it produces an ACTION / REVERSIBLE / APPROVE? beat and withholds the command until you confirm:
Representative result across 9 real user questions (gpt-4o, ~$0.08, ~70s):
Full prompt list, methodology, per-prompt side-by-sides, and expected output:
canon/validation/README.md.
For the plain-English explanation — what problem Canon solves, the five rules, how it installs, and why the "0 regressions" result matters — see the canonical doc: canon_layer.md (parallel to judgment_layer.md).
Canonical recipe: recipes/canon-rules.yaml. Engine source: canon/.
Integrations
ComplyEdge TrustLint (optional, pip install ivd-mcp[compliance]) — offline EU AI
Act screening on LLM-facing artifacts (recipes/, templates/, *_intent.yaml), built
by the same author and dogfooded on this repo.
CI runs this as an informational check (not merge-blocking — see
.github/workflows/ci.yml). Details:
docs/integrations/COMPLYEDGE.md.
The Nine Principles
Deep dive: purpose.md · framework.md · cheatsheet.md
Recipes
20 reusable patterns (see recipes README):
Configuration
IVD works out of the box with zero configuration. Optional settings for advanced use:
Embeddings are not shipped in the repo — they are generated locally. To enable ivd_search:
Hosted Server
A hosted IVD MCP server is available for users who prefer not to run it locally.
Request access: Open a GitHub Discussion →
Once you have an API key, use the URL that matches your client:
POST to /sse is also accepted (alias for Streamable HTTP) for clients that misconfigure the base URL; /mcp is still recommended for Copilot.
VS Code / GitHub Copilot (.vscode/mcp.json — remote URL must end with /mcp):
Note: The
Acceptheader is required. VS Code's default HTTP transport only sendsapplication/json; the IVD Streamable HTTP endpoint enforces the MCP spec and requires bothapplication/jsonandtext/event-stream— omitting it returns a 406 error.
Cursor (Settings → Features → MCP):
Claude Desktop (claude_desktop_config.json):
All 33 tools are available on the hosted server, including ivd_search (embeddings are pre-generated).
Documentation
Development
The Book
A comprehensive book on Intent-Verified Development — the cognitive foundations, case studies, and the full methodology — is coming soon.
Contributing
Issues, bug reports, and recipe suggestions are welcome. See CONTRIBUTING.md for guidelines.
Legal
See LEGAL.md for disclaimers, data transmission disclosures, AI limitation notices, known architectural limitations (hosted server vs. self-hosted), and your responsibilities as a deployer under the EU AI Act, GDPR, and US law.
License
MIT · Maintained by IVD Project
Source: README.md at commit 80e7231
Tools
0Version history
1- v3.1.2LatestSep 16, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Other Verified integrations
verified.fyi
fyi.verifiedOfficial publisher
Remote MCP server that lets an assistant look up verified.fyi trust reports for websites, with a 0-100 score, verdict and summary.

AILegal — verified legal provisions for agents
Published by GitHub account mrpkk
AILegal — verified legal provisions for agents's hosted MCP server; no sign-in required; Streamable HTTP; 3 tools.

Verified Reality
Published by GitHub account BKBakker
Verified Reality's hosted MCP server; no sign-in required; Streamable HTTP; 5 tools.

Career Site Job Search — Verified Greenhouse & Lever Boards
Published by GitHub account kriton-dev
Remote Apify-hosted MCP server that lets an assistant search open jobs across a directory of Greenhouse and Lever career sites, with each result checked live.

StackVersus: verified SaaS limits & pricing
Published by GitHub account congptvinadic-debug
Read-only remote MCP server that gives an assistant verified SaaS prices, plan limits, rate limits and overage rules with vendor sources and check dates.