Governance-First AI for
Failure-Mode Control

Modern AI systems are typically optimised to maximise accuracy under clean conditions. But real deployments are not clean: evidence becomes uncertain, contradictory, corrupted, or unstable, and individual specialists can fail silently. In these regimes the dangerous outcome is not a wrong prediction — it is an unsafe acceptance¹1An unsafe acceptance is admitting an input that should have been rejected. It is the failure mode safety-critical systems care about most — and the one accuracy alone does not measure.1An unsafe acceptance is admitting an input that should have been rejected. It is the failure mode safety-critical systems care about most — and the one accuracy alone does not measure.: confidently admitting an input that should have been rejected.

Static ensembles and routing-based Mixture-of-Experts inherit this weakness because acceptance is a fixed threshold applied after model scoring. In a controlled false-positive trap, mean aggregation accepted 100% of unsafe cases and static weighted aggregation accepted 85%. The decision rule itself, not the detectors, was the failure point.

MAVS-GC elevates governance into a first-class computational object. A system is the tuple $M = (X, \Phi, F, G, A, W, P, \Theta, \Pi)$: a shared feature map $\Phi$, a set of always-on specialists $F$²2All-speak evaluation: every specialist scores every input. There is no router that can silently exclude a relevant specialist — a key difference from Mixture-of-Experts.2All-speak evaluation: every specialist scores every input. There is no router that can silently exclude a relevant specialist — a key difference from Mixture-of-Experts., a diagnostic system $G$, a severity aggregator $A$, an influence rebalancer $W$, bounded mitigation $P$, a threshold map $\Theta$, and a decision rule $\Pi$.

Specialists emit calibrated scores $s_i \in [0,1]$, converted to supports $r_i = 2s_i - 1$. Diagnostics produce a severity $a = A(z)$ and mitigation $m$, which move a governed threshold.

Acceptance therefore requires two things at once: severity must stay below a hard veto, and governed consensus must clear the governed threshold. Every run emits an auditable trace $(r, w, z, a, m, \theta, \tau_{\text{hard}}, R, \Pi)$, so a decision can always be reconstructed and explained — try it below.

Normal behaviour is easy to govern from ordinary evidence; abnormal, adverse behaviour is not. By making governance explicit and monotone in severity³3Monotone safety: increasing diagnostic severity can only raise the acceptance threshold, never lower it. Safety is a structural property of the decision rule, not a learned habit.3Monotone safety: increasing diagnostic severity can only raise the acceptance threshold, never lower it. Safety is a structural property of the decision rule, not a learned habit., higher diagnostic severity can never make acceptance easier — it can only make it harder. Mitigation is bounded and lives inside the decision rule, so it can nudge a borderline case but can never override the hard veto.

The consequence is a clean separation of concerns: intelligence generation (the specialists) and intelligence governance (A, W, P, Θ, Π) become independent. Acceptance behaviour can be retuned — more cautious, more permissive, differently audited — without retraining a single specialist.

The program spans a formal Foundation Arc, a synthetic validation chapter, and three real-benchmark studies on Breast Cancer Wisconsin, Adult Income, Credit Card Fraud, and Bank Marketing. The strongest signal is robustness: under stress, MAVS-GC fails more safely.

Interpretation: MAVS-GC is a failure-management, robustness, and safety-oriented governance architecture — not a pure accuracy-maximiser. Under stress it rejects more cautiously, suppresses unsafe acceptance, and preserves behavioural consistency.

The current evaluation is rigorous but bounded. It covers four tabular datasets, a fixed suite of corruption families, a controlled split and audit structure, reproducibility manifests, and verified artifact trails. It does not yet establish production-scale behaviour, LLM-agent behaviour, universal robustness superiority, or cross-domain generalisation beyond the tested benchmark suite.

The most valuable next step is external-scale validation: larger datasets, additional modalities, LLM and agent specialist settings, adversarial expansions, ablation matrices, and independent replication. The open questions are whether the observed failure-management and stability-preservation effects survive at larger scale and in more realistic, safety-critical multi-model systems.

Support sought: research feedback, compute credits, review of experimental design, guidance on scalable evaluation, and collaboration on governance-first evaluation for LLM agents.

If you find this work useful, please cite it as:

@misc{malik2026mavsgc,
  title        = {MAVS-GC: Governance-First AI for Failure-Mode Control},
  author       = {Malik, Saif},
  year         = {2026},
  howpublished = {Preprint, MAVS Research Program},
  url          = {https://github.com/MAVS-RESEARCH}
}