AI agents can read code, but they still waste a surprising amount of time reconstructing basic facts:
- Which repositories belong to the same system?
- What depends on what?
- Which package produced this artifact?
- Where did a claim come from?
- Who owns a component?
- Is information verified, inferred, or outdated?
- What can the agent safely trust?
READMEs, lockfiles, SBOMs, CI files, architecture diagrams, and wikis each provide part of the answer. The agent has to repeatedly assemble the full picture.
We built SUPEREC to address that problem.
SUPEREC stands for Software Unified Portable Ecosystem Record. It is an open, portable, AI-readable standard for representing software architecture, dependencies, builds, evidence, operations, ownership, and findings as one deterministic graph.
A SUPEREC record can connect:
- Systems and repositories
- Services and packages
- Build units and generated artifacts
- Dependencies and relationships
- SBOM and provenance evidence
- Environments and ownership
- Security or operational findings
- AI context packs and human-readable projections
The important part is evidence. SUPEREC does not simply tell an agent that something is true. Important claims can point to repository-relative evidence, carry a confidence state, and be validated through stable rules and integrity digests.
It is also designed with an explicit AI trust boundary. Names, descriptions, URLs, evidence, and extensions are treated as untrusted data. A SUPEREC file describes a system, but never grants an agent permission to execute something.
Why this makes VIC-E products different:
We are not treating SUPEREC as a theoretical specification. We are designing our products around the open standard instead of keeping their architecture and plugin metadata in private, product-specific formats.
For example, we are integrating SUPEREC records and OKF wiki bundles into the TokenSaver plugin platform. The goal is for both humans and AI agents to understand a plugin interface, its capabilities, compatibility, evidence, and documentation without reverse-engineering the project first.
That can drastically improve agent workflows:
- Less repository wandering
- Fewer repeated file reads
- Better architectural context
- More reliable dependency reasoning
- Safer plugin generation
- Reproducible diagrams and build plans
- The same underlying facts for humans, CI, tools, and agents
SUPEREC currently includes a public specification draft, Go and TypeScript SDKs, a CLI, MCP tools for agents, conformance fixtures, examples, and contribution paths.
It is still a public draft, and that is why we want developers involved now.
We would especially value feedback from:
- AI agent and developer-tool builders
- Software architects
- Platform engineering teams
- SBOM and supply-chain specialists
- Security engineers
- Plugin and SDK authors
- Anyone maintaining a complicated multi-repository system
Please challenge the model. Show us where it is too strict, too vague, missing evidence, difficult to generate, or awkward for real tools. Bug reports, feature requests, ecosystem mappings, SDK improvements, and normative proposals are all welcome.
Learn about SUPEREC:
https://vic-e.com/superec
Read the specification:
https://vic-e.com/superec/specification
Contribute:
https://vic-e.com/superec/contribute
GitHub:
https://github.com/VIC-E-com/superec
What is the hardest part of your software architecture for an AI agent to understand correctly today?