Software Engineering · Software Security · AI4SE · LLM Agents

Intelligent Software Engineering
for Real Development Workflows

My current research focuses on trustworthy and efficient autonomous software R&D, including evidence-grounded agent execution, systematic build acceleration, CI/CD configuration intelligence, and security analysis for LLM applications. Earlier work on build dependency reliability provides the technical foundation for these ongoing directions.

Autonomous R&DTrustworthy execution, evidence-grounded completion, recovery, and dynamic human–agent control
Build AccelerationCross-configuration reuse, waiting loss, critical paths, and attainable acceleration limits
Software TrustCI/CD configuration intelligence, LLM application SCA, vulnerability reachability, and secure execution
Current Research Problem

Trustworthy Execution of Autonomous Software R&D

When an autonomous development agent says “done”, what evidence justifies trusting the execution—and how can that execution remain efficient, recoverable, and under appropriate human control?

The goal is not to directly prove end-to-end software correctness. Instead, I focus on whether the execution process is supported by fresh, scoped, and traceable evidence: whether the observed behavior is valid, whether a completion claim is justified by that evidence, how much of the change has actually been verified, and how the system should react when evidence is incomplete or contradictory.
01

Unified Modeling of Task–Behavior–State–Evidence

Represent what the agent is asked to do, what it actually does, how the software state changes, and which observable evidence supports each claim.

02

Efficient Autonomous Execution under Trust Constraints

Reduce feedback latency, redundant validation, rework, and search cost while preserving evidence freshness, scope, and correctness constraints.

03

Failure Diagnosis, Attribution, and Recovery

Identify why an autonomous task failed, distinguish environment/tool/model causes, and select repair, rollback, retry, or re-planning actions with verifiable outcomes.

04

Human-in-the-Loop Dynamic Autonomy

Adapt the level of autonomy to uncertainty and risk, escalating to humans when evidence is insufficient and returning control to agents when the state becomes verifiable.

Research Agenda · Ongoing Work

What I Am Working on Now

My current agenda connects autonomous software engineering with trustworthy execution, system efficiency, configuration intelligence, and software supply-chain security. The emphasis is on research questions that are active now rather than a chronological summary of past work.

01
Core agenda

Trustworthy Execution of Autonomous Software R&D

Study when an autonomous development process can be trusted to have completed a task: how task intent, agent behavior, software state, and execution evidence should be connected; how failures should be attributed and recovered; and when control should move between agents and humans.

Execution EvidenceAgent FailureRecoveryHuman-in-the-Loop
02
NSFC-funded

Systematic Acceleration of Complex Software Builds

Move beyond isolated optimization tricks and explain build time systematically across cross-configuration reuse, waiting loss within a single build, and structural critical paths, with the goal of identifying both actionable optimization opportunities and attainable speedup limits.

Reuse BoundaryWaiting LossCritical PathAcceleration Limit
03
Ongoing

CI/CD Configuration Intelligence and Conformance

Study how CI/CD configurations encode engineering intent, anti-patterns, and best practices; how configuration behavior can be modeled and checked for conformance; and how configuration generation or repair can be validated against executable evidence.

CI/CDConfigurationConformanceGeneration & Repair
04
Ongoing

Security and Composition Analysis for LLM Applications

Identify the components and capability paths that actually participate in LLM-enabled applications, connect declared dependencies with code-visible and configuration-mediated usage, and reason about whether vulnerable components are reachable on security-relevant capability paths.

LLM SCACapability PathVulnerability ReachabilityArchitecture Mining
Research foundation
Build dependency reliability and automated repair. Earlier work on incremental-build dependency errors, execution–declaration consistency, automatic dependency repair, and build-environment generation established the evidence-driven analysis methodology that now supports the broader agenda above. Details are summarized under Completed Projects.
Research Projects

Funded and Completed Projects

The project portfolio separates work that is actively funded and being developed now from research threads whose main technical objectives have already been completed.

Active Funded Project
NSFC Young Scientists Fund

Systematic Acceleration of Complex Software Builds

复杂软件构建的系统加速研究

Build Systems Performance Incremental Build

This project studies build acceleration as a system-level problem rather than a single optimization technique. It establishes a unified observation framework for repeated builds and asks where time is fundamentally lost, which losses can be removed, and what performance ceiling remains after optimization.

L1

Cross-configuration reuse and ordering

Model reuse boundaries, rebuild closures, and ordering sensitivity across configurations to reduce redundant work while preserving correctness.

L2

Waiting loss and parallelism within one build

Quantify scheduling stalls, idle intervals, resource contention, and unrealized parallelism to explain avoidable latency in a single build.

L3

Critical paths, long chains, and acceleration limits

Identify structural long chains in the build DAG and estimate the reachable speedup ceiling after removable waiting and redundant work are eliminated.

Completed Projects
Completed research thread · 2024–2025

Build Dependency Reliability: Detection, Analysis, and Repair

This research thread studied why incremental builds become unreliable when dependencies are missing or inconsistent, and developed a progression from detecting hidden dependency errors to comparing execution behavior against declarations and automatically repairing missing dependencies.

FSE'24 — efficient ordering for multi-configuration incremental builds ISSTA'24 — build dependency error detection in incremental builds TSE'25 — dynamic execution–declaration consistency analysis ASE'25 — automatic fixing of missing dependency errors
Incremental BuildDependency ErrorDynamic AnalysisAuto Repair
Completed project · 2026

LLM-Assisted Build Environment Generation

This work investigated how repository context, build knowledge, large language models, and execution feedback can be combined to generate executable build environments, with Dockerfile generation as the main setting.

ICSE'26 — automatic Dockerfile generation with large language models Outcome — repository-to-environment generation with execution-based validation
DockerfileLLMBuild EnvironmentExecution Validation
Contact

Open to Collaboration

Please feel free to reach out if you are interested in trustworthy autonomous software R&D, build-system performance, CI/CD configuration intelligence, software supply-chain security, or LLM application analysis.

Email: junlyu@nju.edu.cn Nanjing University
Send Email