IV&V Static Code & Implementation Analysis
Description
This project develops software to generate pre-computed, draft analysis results for static code and code implementation artifacts on NASA programs within the scope of Independent Verification & Validation (IV&V). The tool provides a web-based interface and plug-ins for Code IDEs such as Visual Studio that enables users to filter pre-computed static code findings, review generative AI–assisted assessments, and auto-draft IV&V issues. Pending enhancements include secure coding evaluations, assessments of code traceability to other artifacts (requirements, design, test, etc.) for identifying functional gaps. Initial development and testing utilize synthetic data hosted on AWS (Cloud – Other). Beginning in FY26, the project will transition to beta and production phases, operating on local on-premises HPC infrastructure with access to real ITAR-level NASA mission data.
Detailed example
The AI system will provide interaction via a plugin in Microsoft Visual Studio where the analyst can ask questions about code and initially assess static code findings. More advanced versions of this tool will pull additional context in from other NASA project artifacts such as requirements and design. Analysts will be able to genrate draft, pre-written technical issues.
AI / analytics pattern
Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
Automation level / stage
a) Pre-deployment – The use case is in a development or acquisition status.
Expected benefit
Implementation of the local on-premises HPC environment and subsequent execution of AI-enhanced IV&V analysis activities will begin in FY26. These activities will be complemented by expert human engineering judgement and further analysis. By integrating AI-generated content into NASA IV&V's current processes, analysis results and assessments can be produced significantly faster than with traditional methods. This accelerated capability is expected to positively impact the mission projects supported by NASA IV&V by enabling earlier identification of issues, more thorough characterization of residual risk and impact of any open identified issues, and delivery of improved, risk-informed decision-making support to programs.
Controls / human review
ATO: Not reported; PIA: Not published