The Sage development method and associated tool set support an incremental, iterative, model-driven process to build and maintain high assurance, reactive multi-agent systems. A set of interconnected models provide documentation supporting high assurance certification efforts, maintenance, and reuse. Tools can analyze the models for important classes of errors, and generate complete multi-agent systems.