MaleusMaleus
EngineeringOctober 27, 2026· 9 min read

The Maleus ADLC: our development lifecycle with agents, from the idea to production

How Maleus scopes, specifies, codes, tests, reviews and runs applications with agents, for teams who never read code.

Adrien Maret
Adrien MaretCTO
On this page

Writing code with agents has become easy, but producing an application that is reliable, tested, secure and maintained in production is another matter, and it takes a lifecycle: an Agentic Development Lifecycle (ADLC). Here is the Maleus one, the Maleus Development Lifecycle, from the first expression of the need all the way to running the app.

Vibe engineering is the opposite of vibe coding. Vibe coding promises that anyone can build an application with a few prompts, but leaves the user with everything that makes software reliable: scoping, specifying, testing, reviewing, maintaining.

Without technical skills, there is no way to tell whether what was generated holds up. Vibe engineering flips the logic: the business user expresses the need and approves the result, and the engineering rigor is carried by the agents.

This lifecycle is what lets Maleus work in full autonomy on tasks that run for hundreds of hours: it delivers a complete, working application on the first try, with no bugs, nothing forgotten and no hallucinations, then evolves it without breaking what already exists.

Vibe codingCode generated with a few prompts
Vibe engineering · MaleusAgents follow a real engineering lifecycle
01 Express the need
User a prompt
User guided scoping workshop
02 Scope
Nobody no scoping
Agents User specification and prototype, approved by the user
03 Split and price
Nobody cost unknown upfront
Agents User priced versions, chosen by the user
04 Specify
Nobody no specification
Agents functional, front and back specs
05 Plan
Nobody
Agents implementation plan and planned tests
06 Code
AI with no framework
Agents front, back, data
07 Test
User by hand, if they think of it
Agents end-to-end, services, API
08 Review and secure
Nobody no review
Agents flow, standards and security, business completeness
09 Approve
User without knowing what was generated
User spoken acceptance testing in the app
10 Maintain
User re-prompt and hope
Agents Users feedback, bugs with logs, up-to-date dependencies
Result: the user alone carries reliability, without the technical skills to judge it.
Result: the user talks business and approves, without ever reading code.
Vibe coding or vibe engineering: who carries the rigor?

The Maleus lifecycle is designed for non-technical people (project managers, business experts, executives), who are never asked to read code.

The eleven phases of the Maleus ADLC

The Maleus ADLC unfolds in three stages:

  • Before coding (phases 1 and 2), the user scopes the need with the agents, then picks the versions to launch, knowing what they cost
  • For each version (phases 3 to 9), the agents specify, plan, code, test and review, with no human intervention at all
  • After the versions (phases 10 and 11), the user runs acceptance testing, then the application goes to production, where every piece of feedback goes back into the same lifecycle
1 Scoping
UserAgents
Workshop with the userPersonas, user flows, business rulesSpecification and visual prototype
Approval: specification
specification approved
2 Splitting into versions
AgentsUser
Roadmap split into versionsEach version estimated in tokens and timeDecision: which versions to launch
Approval: budget
versions launched
For each versionAutomatic cycle
Agents
3
SpecificationsMaleus specification format
4
Implementation planfront, back and every test to write
5
Front endscreens, end-to-end tests and service tests
6
Back endbusiness rules, data, tests
7
Reconciliationthe front wired to the back
8
Tests and fixesthe specs decide: the code or the test
9
Reviewsexecution flow, standards and security, business completeness
Commit, then next version
all versions implemented
10 Acceptance testing
Human approval
Application inside MaleusSpoken comments while browsingScreenshots and in-context comments
acceptance passed
11 Deployment and operations
AgentsUsers
Staging then production, on Maleus or on the customer's sideUser feedbackBug reports with logsConversational assistant (WebMCP)Dependency security updates
comments → fix versionbugs and feedback → workshop, new versions
The eleven phases of the ADLC, with humans in yellow and Maleus agents in green.

1. Scoping: digging into the need

Everything starts with a scoping workshop, where the user expresses the need. The goal is to dig deep into it: who the users are (the personas), which paths they follow through the application (the user flows), which business rules apply. The outcome is a functional and technical specification, along with a visual prototype.

The user needs no technical skills: they talk about their business, their rules, their pain points. The workshop is what turns that need into a functional and technical specification.

The scoping workshop: the user describes the need, while the agent digs into the business rules and builds the prototype alongside.

The user approves the specification and the prototype: this is the first human approval of the lifecycle, the one that sets what will be built.

2. Splitting into versions: a budget decision

Once the specification is approved, Maleus splits every feature to build into several versions, gathered in a roadmap.

Each version is a batch of features that can be tested, documented and used.

Every version is priced before it is launched, so the split becomes a genuine budget decision, in the user's hands.

The cost of the project is known before anything is launched: each version is estimated in tokens and in time, and the user decides how far to go knowing the price.

The user approves the roadmap and decides to launch all or some of the versions: this is the second human approval of the lifecycle, the one that sets the budget.

The roadmap in four versions, with a cost and duration estimate that lets the user decide how far to go before launching.

This phase matters a great deal: splitting a project well gives the implementation its meaning, but above all it keeps the agents' context under control, since they work version by version on a narrow scope, which prevents hallucinations and bugs during implementation.

3. Detailed specifications: spec-driven development

For each version, Maleus enters its development cycle. The first step is to generate the detailed functional and technical specifications, in a specification format of Maleus's own:

  • Functional specifications: business domains, features and use cases
  • Back-end specifications: API routes, business rules, entities, crons, integrations with external systems
  • Front-end specifications: pages, business rules, and the user flows contained in each page
Family 1Functionalwhat the business wants
Projectproject.md
Personas*.persona.md · one per role
Business domain*.domain.md
Glossary*.glossary.md
Feature*.feature.md
Use case*.use-case.mdacceptance tests
happens on a page
Family 2Front endwhat the user sees
Page*.page.md · routes, user flows
Business rules*.rule.mdacceptance tests
calls the APIs
Family 3Back endwhat the system does
Module*.module.md
Entities*.entity.md
Entry points
API*.api.md
Event*.event.md
Cron*.cron.md
read and write the entities, apply the business rules
Business rules*.rule.mdacceptance tests
External connections
External integration*.integration.md
External API*.external-api.md
Describes behavior, never the implementationA spec change is a behavior changeThe contract every agent follows
The Maleus specification format: three linked families, from the use case down to the API.

These detailed specifications then frame all of the agents' work. This is spec-driven development: the agents implement what is specified, and the acceptance tests define what "done" means.

The specification repository: a business rule, written in plain language, with its acceptance tests.

4. The implementation plan: deciding before coding

Before writing a single line of code, Maleus drafts a complete implementation plan, for the front end as well as the back end.

The plan describes everything that has to be built and, above all, every test that will have to be written. Tests are not added as an afterthought: they are planned from the start, based on the specifications and their acceptance tests.

A version in progress: the agent announces its plan, then moves forward step by step with no human intervention.

5. The front end first, with its tests

From the specifications and the prototype approved during scoping, Maleus first builds the visible part of the application: every screen, every interaction. One agent writes the code, then a second agent writes every test planned in the plan.

These tests replay the users' journeys in a real browser, the way a person would: clicking a button, opening a window, filling in a form, sorting a table. Other, lighter tests check the logic behind each screen, so nearly all of the code is covered.

They are written before the back end even exists: the tests describe what the application must do before it knows how to do it.

6. The back end: business logic and its tests

An agent then writes the whole server side: the business rules, the data and how the application stores it.

Next, Maleus writes the back-end tests, which check every server function all the way to what actually gets stored, then every business rule, one by one.

In total, four families of tests cover the application, from the user's click down to the stored data, and all of them are planned from the implementation plan on.

End-to-end teststhe whole system, as in real life
End-to-end testsFront end
A real browser clicks through the app like a userUser journeys from the specs: buttons, modals, forms, tables
user journeys
API testsBack end
Every server function called for realCheck the response and what was stored
every route
Service teststhe business logic, light and fast
Front service testsFront end
End-to-end flows with the business logic, without a browser, so lighter
coverage ≈ 100%
Back service testsBack end
Every business rule unit-tested inside the services
coverage ≈ 100%
Run orderRun by an agent
1Front-end tests, fixes guided by the specs
2Back-end tests, fixes guided by the specs
3All green, on to the reviews
The test square: four families, all planned from the implementation plan on.

7. Reconciliation: wiring the front to the back

The front end and the back end were built separately, so now they have to be connected. Maleus automatically generates, from the back end, the code that lets the front end talk to it, then checks that every action in the interface matches a function that really exists on the server, so no button can ever call a function that does not exist.

8. Running the tests and fixing

An agent then runs every test: first the front end's end-to-end tests, then all of the back-end tests. When a test fails, the agent does not simply make it pass: it goes back to the specifications, which are the source of truth, to decide whether the code or the test needs fixing. Once everything is green, the version's development phase is complete.

9. Three reviews before the version is approved

A review phase then begins, in three passes:

  1. Execution flow review: bugs, race conditions, edge cases
  2. Maleus code standards review: patterns followed, no architecture mistakes, security and the OWASP Top 10
  3. Business completeness review: every feature planned in the specifications has actually been implemented

Maleus fixes the issues found, commits, and moves on to the next version once this one is implemented, all automatically.

10. Acceptance testing: commenting out loud while browsing

Once every version is implemented, the user runs acceptance testing. The application runs in a development environment, right inside Maleus.

They can leave comments and screenshots on the application, but above all they can simply talk: they browse the application while speaking, and their comments are attached to wherever they are. Maleus knows at which point in the navigation each comment was made, which makes acceptance testing much smoother.

Acceptance testing out loud: each remark becomes a comment pinned to the spot where it was said.

No need to know how to write a ticket or describe a bug in technical terms: the user shows and explains, the way they would to a colleague.

All of these comments are sent to Maleus, which creates a version to fix them, through the same lifecycle described above.

11. Deployment and operations

Once acceptance testing is satisfactory, the latest version is deployed to two environments: staging, then production. These environments can be hosted directly in Maleus, or on the customer's side, in an external environment they manage. This is the run phase, and it is equipped too:

  • User feedback with the same mechanism as acceptance testing: element selection, comments, screenshots, or spoken comments while browsing the application
  • Bug reports that automatically include the back-end logs
  • A conversational assistant that answers users' questions and uses the WebMCP protocol to operate the application on their behalf. Ask it how to create a project and it offers to show you: it navigates to the creation page, clicks the button, asks you to fill in the form and submits it
  • Automatic security updates of dependencies, handled by Maleus

Every bug report and piece of user feedback lands in the Maleus project. There, it can be handled with the usual lifecycle: workshop, versions, and the full development cycle.

Where humans stay in control

Human interventions are designed for non-technical people (talking about the need, approving a roadmap, testing an application by commenting on it), while the whole technical side is automatic.

  • At scoping, the user expresses and digs into the need, then approves the specification and the prototype
  • At the split, they approve the roadmap and decide which versions to launch, knowing their estimated cost in tokens and time
  • At acceptance testing, they test the application and every comment becomes a fix
  • In operations, users report bugs and feedback, which go back into the lifecycle

Between the split and acceptance testing, the specifications, the plan, the tests, the reconciliation and the three reviews are what frame the agents' work.

Scoping
Human · non-technical
Expresses the need in the workshop
ApprovalApproves the specification and the prototype
Maleus agents
Run the workshop
Write the specification
Build the prototype
Splitting
Human · non-technical
ApprovalApproves the roadmap and picks the versions to launch
Maleus agents
Split into versions
Estimate tokens and time
Development cycle, for each version
Human · non-technical
Nothing to do: it's all automatic
Maleus agents
SpecsPlanFrontBackReconciliationTestsReviews
next version
Acceptance testing
Human · non-technical
ApprovalTests the application by commenting out loud
Maleus agents
Fix it in a new version
Operations
Human · non-technical
Users send feedback and bugs
Maleus agents
Handle bugs and feedback
Keep security dependencies up to date
3 human approvals: the specification, the budget, acceptance testingNot a single line of code to readEvery piece of feedback goes back into the same lifecycle
Three human approvals, the specification, the budget and acceptance testing, while the agents do everything else.

In summary

The Maleus Agentic Development Lifecycle is in-depth scoping, a split into priced versions, then for each version an automatic cycle of specifications, planning, development, testing and reviews. Acceptance testing and operations close the loop, since every piece of feedback can become a new version: this is our way of doing vibe engineering.

It is also what lets Maleus chain hundreds of hours of autonomous work without drifting, then iterate without breaking anything, since every new version goes back through the same specifications, the same tests and the same reviews.

See how Maleus can accelerate your team.