The enchantment of making use of synthetic intelligence (AI ) to model-based programs engineering (MBSE) is straightforward to grasp. Formal structure definitions, traceable necessities, conduct fashions, evaluation, and verification proof take time to develop and keep. AI might plausibly scale back a few of that effort, however plausibility isn’t proof.
For program managers and engineering leaders, the chance is broader than sooner mannequin authoring. Integrating AI straight into mannequin growth can scale back the trouble required to create, replace, and reconcile engineering artifacts. It will probably shorten the time between an engineering change and suggestions from the modeling toolchain, floor inconsistencies earlier than integration and check, and protect traceable proof for technical choices. The administration worth ought to due to this fact be judged by whether or not groups make better-informed choices sooner and scale back rework and technical threat, whereas engineers retain duty for assessment, evaluation, and assurance.
The more durable query is methods to combine AI with out weakening engineering rigor. 4 questions information our work:
- How can engineering groups natively combine AI into MBSE modeling?
- The place does that integration add measurable worth?
- What does an AI-augmented MBSE workflow seem like?
- What does that workflow seem like in observe?
As detailed on this submit, we investigated these questions by constructing a three-layer integration structure, evaluating it in a managed SysML v2 model-generation benchmark, and inspecting one giant benchmark job involving a four-drone aerial survey swarm.
SysML v2 in Temporary
Programs modeling language model 2, generally known as SysML v2, is the Object Administration Group’s formal language for describing programs by way of necessities, construction, conduct, evaluation, verification, and stakeholder views. It supplies each graphical and textual notation over the identical underlying mannequin. This work focuses on the textual notation as a result of mannequin recordsdata will be reviewed as textual content, saved in model management, in contrast in pull requests, and processed by automated instruments.
Two concepts make the quick code pattern beneath readable. A definition, or def, declares a reusable kind, whereas a utilization locations that kind in a selected mannequin context. A bundle provides a namespace. Typed attributes can use portions and models from the usual libraries.
bundle DroneSwarmExample {
non-public import ScalarValues::*;
enum def FlightMode {
enum idle;
enum takeoff;
enum survey;
enum returnToHome;
}
half def FlightController {
attribute droneId : Integer;
attribute activeMode : FlightMode;
}
half def Drone {
half controller : FlightController;
}
half drone : Drone;
}
Right here, FlightMode, FlightController, and Drone are definitions. The nested controller is a utilization that composes the drone from a flight controller, whereas drone is a top-level utilization of the entire kind. The identifier and working mode are typed values reasonably than unqualified properties.
Textual notation makes SysML v2 accessible to coding assistants, nevertheless it doesn’t make the language casual. Generated mannequin textual content should nonetheless conform to the grammar, resolve its references, and fulfill the language’s semantic guidelines. That requirement is why a language-aware modeling service and a callable validation interface are central to the structure.
The Structure
Native integration means inserting the AI assistant contained in the engineering workspace reasonably than treating it as a separate chat floor. The assistant works in the identical repository because the mannequin, retrieves mission steering, edits mannequin artifacts, invokes the identical validation command utilized by engineers and steady integration, and responds to diagnostics. The engineer stays liable for intent, assessment, and engineering choices.
The workspace combines three separable layers: an AI coding assistant, a proper modeling toolchain, and a curated information base with workflow expertise.
- AI coding assistant. The assistant receives path in pure language and operates on version-controlled artifacts. The structure isn’t tied to a selected assistant shopper or AI mannequin. Our present implementation makes use of Visible Studio Code as the first engineering setting. By editor extensions and built-in terminals, Claude Code, OpenAI Codex, and Proceed every function on the identical repository and connect with the identical modeling instruments and mission information.
  - Language-aware modeling toolchain. The final requirement is a SysML v2 language server, or an equal language-aware service, that may parse SysML v2 mannequin recordsdata, resolve references, apply grammar and semantic guidelines, and return diagnostics. For agentic and automatic use, these capabilities needs to be uncovered by way of a noninteractive interface, ideally a command-line interface. This lets assistants, engineers, and steady integration (CI) jobs invoke the identical verify.
Our implementation makes use of Sensmetry’s Syside for each interactive editor assist and automatic mannequin checking. In Visible Studio Code, Syside communicates by way of the Language Server Protocol (LSP), a normal interface that provides options reminiscent of diagnostics, reference decision, and navigation. The AI assistants don’t name that interface straight; as a substitute, they invoke mannequin checks by way of the syside verify command. A clear run establishes conformance to the checks carried out by Syside. It doesn’t set up that the mannequin is full, displays the proper engineering choices, or has been verified.
 - Data and workflow layer. The SEI assembled a information base as a version-controlled assortment of Markdown recordsdata containing SysML v2 language steering, validation-rule explanations, modeling patterns, and examples. A repository-local Mannequin Context Protocol (MCP) server catalogs these recordsdata underneath secure matter names and exposes centered search and retrieval instruments to AI assistants. On this implementation, the information service isn’t a big language mannequin (LLM) or a information graph, it’s an interface to SEI-curated reference materials. Separate version-controlled talent recordsdata outline how assistants use the retrieved steering, modify mannequin artifacts, invoke validation and evaluation instruments, and reply to their outcomes.
MCP is an efficient match for this work as a result of it separates the curated information supply from any explicit AI assistant or mannequin. Suitable shoppers can name the identical server and retrieval-tool contract with out requiring the SEI to construct and keep a separate integration for every assistant. This design aligns with an rising cross-vendor sample: Microsoft, AWS, Google, and Atlassian all present MCP-based mechanisms by way of which AI shoppers can search or retrieve managed information.
Proven in Determine 1, the implementation is deliberately versatile reasonably than tied to a set product stack. It requires three core capabilities: an assistant that may work on repository artifacts, language-aware modeling instruments with callable validation and evaluation interfaces, and mission information that may be retrieved through the job. The identical sample can lengthen to different modeling languages and toolchains; we’re at the moment making use of it to the Structure Evaluation and Design Language (AADL) and its supporting evaluation instruments.
Determine 1: AI-augmented MBSE workspace in Visible Studio Code. The three columns map to the assistant, modeling-toolchain, and information layers described on this submit. SEI Nexus OPAL is an SEI-managed service for hosted fashions. Earlier experiments additionally built-in Claude Code and Anthropic fashions by way of the identical interfaces proven for OpenAI Codex.
What the Validation Loop Demonstrated
To tell apart the results of language-tool suggestions from these of the information base and workflow expertise, we evaluated the prototype workspace throughout three experimental arms utilizing the identical SysML v2 modeling duties. All three arms used Anthropic’s Claude Opus 4.6.
- Baseline makes use of a single era go with no instruments.
- Command-line interface (CLI) solely permits era adopted by a syside verify suggestions loop, with out the SEI information base or expertise.
- Full tooling provides the MCP information service, modeling expertise, and the identical Syside validation loop.
The experiment coated eight duties at two scales: 40 small-task outputs per arm and 24 large-task outputs per arm. The baseline serves as a single-pass reference level. The 2 iterative situations check what modifications happen when the assistant is ready to reply to language-tool diagnostics, with or with out project-specific steering.
| Arm | Errors / 100 Strains | Strains | Iterations | Wall time | Sample measure, imply (SD), max 100 | Tokens (est.) |
|---|---|---|---|---|---|---|
| Baseline | 3.7 | 309 | n/a | 87s | 78.3 (7.7) | 21K |
| CLI-only | 0 | 277 | 2.1 | 178s | 71.7 (6.3) | 33K |
| Full tooling | 0 | 302 | 1.7 | 181s | 94.1 (5.0) | 71K |
Desk 1: Small-task outcomes (n=40 per arm)
| Arm | Errors / 100 Strains | Strains | Iterations | Wall time | Sample measure, imply (SD), max 100 | Tokens (est.) |
|---|---|---|---|---|---|---|
| Baseline | 25.6 | 3303 | n/a | 599s | 78.3 (7.7) | 59K |
| CLI-only | 0 | 2426 | 3.4 | 914s | 71.7 (6.3) | 106K |
| Full tooling | 0 | 2458 | 2.6 | 772s | 94.1 (5.0) | 143K |
Desk 2: Giant-task outcomes (n=24 per arm)
The project-defined sample measure, applied as a Node.js script, combines 29 measures right into a 0-100 composite:
- 12 structural measures overlaying mannequin breadth, assemble richness, and connectivity
- 13 measures overlaying traceability, canonical modeling patterns, and mannequin group
- 4 task-specific acceptance measures
Each iterative situations ended with zero reported Syside errors and warnings at each scales. In these runs, language-tool suggestions allowed the assistant to determine and take away parser and semantic diagnostics. Validation alone didn’t materially enhance the project-defined sample measure. In contrast with CLI-only, full tooling was modestly larger on small duties and considerably larger on giant duties, the place the imply rose from 71.7 to 94.1. Curated information and workflow expertise provided steering for mannequin construction, traceability, and job protection that the validator didn’t require.
The outcome separates two helpful results: language tooling checks conformance, whereas curated information and workflows affect the broader modeling patterns captured by this project-defined measure. A rating of 100 would imply that each benchmark measure awarded full credit score, however it will not show engineering correctness, completeness, or health to be used. The experiment used one mannequin household, one language, one validator, and a managed job corpus; impartial copy stays mandatory.
Grounding the AI: Data Base and Workflow Abilities
An LLM can produce SysML that appears believable whereas omitting mannequin relationships, mission conventions, or proof wanted by reviewers. Language tooling catches malformed syntax and a few semantic violations, nevertheless it can’t resolve whether or not the mannequin displays the supposed system or whether or not a program’s most popular patterns have been utilized persistently.
The information layer addresses that hole by making related steering retrievable within the native workspace. The present repository contains SysML v2 and KerML rule descriptions, OMG coaching classes and examples, project-authored sample guides, shared libraries, and a reusable mission template. The MCP server exposes this materials by way of secure subjects so the assistant can retrieve a particular reference as a substitute of counting on common mannequin reminiscence. As a result of each the service and its sources are model managed, modifications will be reviewed and tied to the outcomes they affect.
For instance, if Syside studies {that a} fulfill relationship violates kind conformance, the assistant can retrieve the traceability steering, decide whether or not fulfill or allocate is acceptable at that location, replace the mannequin, and rerun syside verify. In SysML v2, fulfill declares {that a} design ingredient fulfills a requirement, whereas allocate maps one mannequin ingredient to a different, reminiscent of assigning a conduct to the element liable for performing it. Syside stays the authority for its diagnostics; the information base helps the LLM interpret these diagnostics and provides mission patterns which might be exterior the parser’s duty.
That distinction issues as a result of many modeling choices are legitimate syntax however weak engineering. A parser can’t select an acceptable decomposition degree, resolve whether or not a relationship ought to specific satisfaction or allocation, distinguish a supply truth from an inference, or decide which stakeholder view will assist a assessment. Curated steering provides the assistant specific standards for these selections, whereas supply citations and repository historical past go away the ensuing choices open to inspection.
Curated information alone, nevertheless, doesn’t outline a repeatable approach to apply it. The information base supplies the what: guidelines, examples, patterns, and resolution standards. Workflow expertise present the how: which context to retrieve for a job, what sequence to observe, when to invoke deterministic instruments, what proof to retain, and when to cease. Collectively they flip steering right into a repeatable retrieve-edit-check workflow.
The SEI developed the workflow expertise utilizing a normal, file-based talent framework and authoring steering accessible from the AI coding instruments used on this work. We created every one to encode an engineering workflow we needed to experiment with. Desk 3 summarizes the ten expertise and their roles, spanning information priming, mannequin growth, diagnostic restore, assessment, evaluation, reverse engineering, view era, code era, and doc era. The talents are version-controlled orchestration directions, not replacements for deterministic instruments: Syside performs parsing and validation, check runners execute checks, and renderers produce outputs.
| Ability | Function within the workflow |
|---|---|
| knowledge-primer-sysml | Hundreds the related language, tooling, and modeling context earlier than work begins. |
| model-sysml | Builds fashions in dependency order and runs validation after modifications. |
| fix-sysml | Interprets diagnostics, retrieves matching steering, applies fixes, and revalidates. |
| review-sysml | Combines validator statistics with a structured, evidence-based mannequin assessment. |
| analyze-sysml | Guides constraints, evaluation instances, commerce research, and traceability-gap checks. |
| explain-sysml | Retrieves references and examples to elucidate language and mannequin constructs. |
| reverse-engineer-sysml | Maps present supply code right into a mannequin with source-location metadata. |
| views-sysml | Creates stakeholder-specific diagrams, tables, and matrices. |
| codegen-sysml | Maps validated mannequin constructs right into a prototype implementation. |
| docgen-sysml | Builds model-derived documentation whereas leaving narrative claims for assessment. |
Desk 3: Present SEI-developed SysML v2 workflow expertise
The desk is a division of duty reasonably than a declare that each job makes use of each talent. A model-development job could start with the primer and modeling workflow, name the fixing workflow solely when diagnostics seem, and use the views workflow when stakeholder shows are required. Every transition is seen within the work file.
Labored Instance: Modeling a 4-Drone Survey Swarm
To point out the workflow on a bigger job, we examined one benchmark project for a four-drone aerial survey swarm and floor management station. The immediate description beneath known as for coordinated survey-grid project, multispectral imaging, real-time kinetic (RTK) positioning-assisted navigation, mesh communication, separation assurance, battery and weather-triggered return-to-home, lost-link restoration, and waypoint-triggered cargo supply. The requested deliverable spanned eight coordinated SysML v2 recordsdata.
Immediate for 4 Drone Survey Swarm
Mannequin a 4-drone aerial survey swarm with floor management station in SysML v2. Every drone carries a multi-spectral digital camera, GPS/INS with RTK correction (±2cm accuracy), an anemometer, a mesh radio for inter-drone communication, a cargo drop mechanism with affirmation sensor, and a battery with state-of-charge monitoring. The bottom management station (GCS) assigns survey grid segments to every drone, shows real-time fleet telemetry, and manages mission lifecycle. A deconfliction engine (operating on GCS with cooperative inputs from every drone) maintains ≥50m horizontal and ≥20m vertical separation, dynamically replanning paths when projected conflicts are detected inside a 30-second lookahead window. Return-to-home triggers: battery beneath 20% reserve, operator command, or sustained wind >40km/h for >5 seconds (measured by onboard anemometer). Misplaced-link protocol: if a drone loses GCS contact for >30 seconds, it autonomously climbs to a deconfliction altitude and returns to its last-known dwelling waypoint. The mesh community permits drones to relay telemetry for others which might be out of direct GCS vary. Cargo drop is triggered at a GPS waypoint with launch affirmation from a mechanical sensor.
Produce 8 `.sysml` recordsdata following the template construction: sorts.sysml (enums, metadata), necessities.sysml (30+ necessities), construction.sysml (all elements/ports/connections), conduct.sysml (state machines + motion flows), evaluation.sysml (battery endurance + protection + separation price range), verification.sysml (check instances), integration.sysml (4-drone fleet instantiation), views.sysml (viewpoints). Purpose for 3000–4000 strains complete throughout all recordsdata.
Within the full-tooling situation, the assistant developed sorts, necessities, construction, conduct, evaluation, verification, integration, and views in dependency order. The ensuing artifact incorporates 3,186 strains, or 2,135 non-blank, non-comment strains. It contains 35 requirement definitions, 22 half definitions, 16 motion definitions, 5 state definitions containing 34 states, seven evaluation definitions, 16 verification definitions, 38 satisfaction relationships, six viewpoints, and 16 view definitions. After two validation iterations, syside verify –warnings-as-errors accomplished with zero reported errors or warnings. The artifact acquired 97.2 of 100 on the project-defined sample measure.
The mannequin is less complicated to examine when one concern is adopted throughout its system engineering concern. The excerpts beneath use deconfliction and minimal separation as that thread.
Necessities. The necessities mannequin provides the separation obligation a proper identifier, readable textual content, precedence, and security metadata:
requirement def MinimumSeparation {
doc /* The deconfliction subsystem shall keep a minimal horizontal
separation of 30 meters between any two drones within the swarm
throughout all phases of flight. */
@Precedence { degree = PriorityLevel::important; }
@SafetyCriticality {
degree = SafetyLevel::safetyCritical;
standardRef = "MIL-STD-882E";
hazard = "Mid-air collision between swarm members";
}
}
Construction. The construction mannequin contains 4 typed drone usages with a floor management station (GCS) and makes command, telemetry, mesh, and coordination paths specific:
half def DroneSwarmSystem {
half drones : Drone [4];
half gcs : GCS;
connection droneToGcsCommand
join gcs.commandOut to drones.commandIn;
connection droneToGcsTelemetry
join drones.telemetryOut to gcs.telemetryIn;
connection meshNetwork
join drones.meshPort to gcs.meshPort;
connection interDroneCoordination
join drones.coordinationPort to drones.coordinationPort;
}
Habits. The conduct mannequin decomposes battle decision into technique choice, maneuver computation, clearance checking, and execution:
motion def ResolveConflict {
in conflictingDroneId : Integer;
in technique : DeconflictionStrategy;
out resolutionManeuver : String;
motion selectStrategy;
motion computeManeuver;
motion validateClearance;
motion executeManeuver;
first selectStrategy then computeManeuver;
first computeManeuver then validateClearance;
first validateClearance then executeManeuver;
}
Evaluation. The evaluation mannequin defines a swarm-level separation case and provides inputs for pairwise distance and time-to-conflict calculations:
evaluation def SeparationAnalysis {
topic swarm : DroneSwarmSystem;
goal separationObjective {
doc /* Confirm minimal 30m separation is maintained in
converging trajectory eventualities. */
}
calc pairwiseDistance : SeparationDistance {
in drone1X = 0.0;
in drone1Y = 0.0;
in drone1Z = 50.0;
in drone2X = 25.0;
in drone2Y = 15.0;
in drone2Z = 50.0;
return distanceM;
}
calc timeToViolation : TimeToConflict {
in relativePositionM = 35.0;
in relativeVelocityMs = 5.0;
in minimumSeparationM = 30.0;
return timeToConflictSec;
}
return worstCaseSeparationM : Actual;
}
Verification. The verification mannequin hyperlinks the separation requirement utilization to an ordered check process:
verification def SeparationMaintenanceTest {
topic testSwarm : DroneSwarmSystem;
goal {
confirm separationReq;
}
motion configureSwarm {
out swarmReady : Boolean;
}
motion executeConvergingPaths {
out pathsExecuted : Boolean;
}
motion measureSeparation {
out minSeparationM : Actual;
}
motion evaluateResult {
out testPassed : Boolean;
}
first configureSwarm then executeConvergingPaths;
first executeConvergingPaths then measureSeparation;
first measureSeparation then evaluateResult;
}
Collectively, the excerpts present how AI can produce a navigable first-pass mannequin during which a requirement, system topology, conduct, evaluation case, and verification process will be reviewed collectively. The mannequin additionally demonstrates why the validation loop is critical however not adequate. The immediate requested 50-meter horizontal and 20-meter vertical separation, whereas the mannequin specifies 30 and 10 meters. The immediate additionally requested lost-link return to dwelling (RTH) after greater than 30 seconds, whereas the mannequin specifies detection in three seconds adopted by a 60-second loiter. The generated construction additionally omits the requested multispectral digital camera, RTK receiver, anemometer, weather-abort logic, and survey-grid project, and it locations deconfliction computer systems onboard the drones reasonably than finding the engine on the floor station.
Overview of the generated mannequin recognized points past supply constancy. Though evaluation and verification components are current, they continue to be planning buildings reasonably than accomplished proof. Calculation definitions declare inputs and returns however include no executable formulation. The evaluation return isn’t sure to a calculation outcome, and no requirement or evaluation constraints are evaluated. Bodily portions use Actual with models embedded in names, as a substitute of utilizing SysML v2’s quantity-and-unit libraries. The verification case defines an goal and sequenced steps however no formal verdict expression or check outcome.
A clear validation run due to this fact exhibits solely that the mannequin passes the instrument’s syntax and semantic checks. Supply reconciliation, executable evaluation, verification outcomes, and engineering assessment are nonetheless required to find out whether or not the mannequin is appropriate and match to be used. These safeguards will stay mandatory whilst LLM capabilities advance. Continued refinement of the information base and workflow steering, knowledgeable by findings reminiscent of these, ought to measurably enhance the standard and completeness of fashions produced by way of AI-augmented growth actions.
Closing Insights on AI-Augmented MBSE
The 4 opening questions result in the next 4 conclusions:
- First, engineering groups can natively combine AI into MBSE by inserting the assistant contained in the version-controlled modeling workspace, the place it could possibly retrieve mission steering, edit artifacts, invoke the modeling toolchain, and reply to the identical diagnostics utilized by engineers and steady integration (CI) instruments.
- Second, the managed benchmark exhibits a measurable however bounded worth. In these runs, iterative language server suggestions eliminated reported parser and semantic diagnostics, whereas the complete toolchain produced stronger scores on the modeling patterns encoded within the mission’s rubric. Validation and steering improved totally different features of the outcome.
- Third, an AI-augmented MBSE workflow is greater than an assistant and a immediate. It combines a callable language-aware service, curated information, repeatable workflow expertise, deterministic instruments, and human assessment.
- Fourth, the four-drone swarm job exhibits that mixture in observe: an in depth system description turns into a coordinated mannequin of necessities, construction, conduct, evaluation and verification plans, integration, traceability, and stakeholder views. It additionally exhibits how cross-model assessment can expose supply mismatches and incomplete proof that language validation alone can’t detect. The strategy doesn’t switch engineering accountability to the LLM. A clear mannequin nonetheless requires professional assessment, evaluation, and verification.
We invite groups to share your individual expertise with AI-augmented MBSE and discover collaboration alternatives on the SEI to guage the influence of AI by yourself MBSE workflows. For extra data or to collaborate with the SEI, please ship an e-mail to [email protected].
