构建智能体与区块链交互的标准框架,解决安全与信任难题。
Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries
- 提出五类集成模式,覆盖从数据读取到多智能体协作的全链条
- 识别317篇相关研究,建立包含13维度的系统对比矩阵
- 设计可验证的交易意图与策略决策记录,适合安全敏感场景
大型语言模型的发展推动了能够推理、规划并调用外部工具执行多步骤流程的智能体系统,而公共区块链已演变为支持价值转移、访问控制和可验证状态变更的可编程基础架构。两者融合带来高风险系统挑战:需设计标准化、互操作且安全的接口,使智能体能观测链上状态、制定交易意图并授权执行,同时避免用户、协议或组织面临不可接受的安全、治理或经济风险。本文通过系统文献综述,从超过3000条记录中筛选出317篇相关工作,构建涵盖只读分析、模拟与意图生成、委托执行、自主签名及多智能体工作流的五部分分类体系;提出针对智能体驱动交易管道的威胁模型,涵盖提示注入、策略滥用、密钥泄露、对抗性执行动态及多智能体合谋等风险;并通过跨20余个代表性系统的比较能力矩阵,分析包括保管模式、权限管理、策略执行、可观测性与恢复机制在内的13个维度。基于分析发现的空白,提出两个核心接口抽象:用于可移植、无歧义目标定义的交易意图模式,以及支持跨执行环境审计与验证的策略决策记录。最后,建议建立可复现的评估套件与基准测试,以评估智能体中介链上执行的安全性、可靠性和经济韧性。
原文摘要 · Abstract (English)
Advances in large language models have enabled agentic AI systems that can reason, plan, and interact with external tools to execute multi-step workflows, while public blockchains have evolved into a programmable substrate for value transfer, access control, and verifiable state transitions. Their convergence introduces a high-stakes systems challenge: designing standard, interoperable, and secure interfaces that allow agents to observe on-chain state, formulate transaction intents, and authorize execution without exposing users, protocols, or organizations to unacceptable security, governance, or economic risks. This survey systematizes the emerging landscape of agent-blockchain interoperability through a systematic literature review, identifying 317 relevant works from an initial pool of over 3000 records. We contribute a five-part taxonomy of integration patterns spanning read-only analytics, simulation and intent generation, delegated execution, autonomous signing, and multi-agent workflows; a threat model tailored to agent-driven transaction pipelines that captures risks ranging from prompt injection and policy misuse to key compromise, adversarial execution dynamics, and multi-agent collusion; and a comparative capability matrix analyzing more than 20 representative systems across 13 dimensions, including custody models, permissioning, policy enforcement, observability, and recovery. Building on the gaps revealed by this analysis, we outline a research roadmap centered on two interface abstractions: a Transaction Intent Schema for portable and unambiguous goal specification, and a Policy Decision Record for auditable, verifiable policy enforcement across execution environments. We conclude by proposing a reproducible evaluation suite and benchmarks for assessing the safety, reliability, and economic robustness of agent-mediated on-chain execution.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。