为多智能体大模型系统设计身份感知通信协议,提升协作效率与可控性。
LDP: An Identity-Aware Protocol for Multi-Agent LLM Systems
- 引入五种机制:身份卡、渐进式消息、会话治理、溯源追踪、信任域。
- 身份路由使简单任务延迟降低12倍,语义帧减少37%的令牌开销。
- 适合研究多智能体系统协同、安全控制及高效通信架构的开发者。
随着多智能体AI系统日益复杂,现有通信协议如A2A和MCP未能将模型级属性作为原生能力暴露,忽视了有效委派的关键要素:模型身份、推理特征、质量校准和成本特性。本文提出面向大模型的委托协议(LDP),包含五项机制:(1) 带质量提示与推理特征的丰富代理身份卡;(2) 支持协商与回退的渐进式载荷模式;(3) 具有持久上下文的受控会话;(4) 结构化溯源追踪与置信度验证状态;(5) 协议层实现安全边界的信任域。我们在JamJet代理运行时中实现LDP,并基于本地Ollama模型和LLM-as-judge评估其性能。身份感知路由在简单任务上实现约12倍延迟降低;语义帧载荷减少37%(p=0.031)令牌量且无质量损失;受控会话在10轮中消除39%的令牌开销;噪声溯源导致合成质量低于无溯源基线,表明置信度元数据在缺乏验证时有害。模拟分析显示,在攻击检测(96% vs. 6%)和故障恢复(100% vs. 35%完成率)方面具有显著优势。本工作贡献了协议设计、参考实现及初步证据,证明人工智能原生协议原语可实现更高效、可治理的委托。
原文摘要 · Abstract (English)
As multi-agent AI systems grow in complexity, the protocols connecting them constrain their capabilities. Current protocols such as A2A and MCP do not expose model-level properties as first-class primitives, ignoring properties fundamental to effective delegation: model identity, reasoning profile, quality calibration, and cost characteristics. We present the LLM Delegate Protocol (LDP), an AI-native communication protocol introducing five mechanisms: (1) rich delegate identity cards with quality hints and reasoning profiles; (2) progressive payload modes with negotiation and fallback; (3) governed sessions with persistent context; (4) structured provenance tracking confidence and verification status; (5) trust domains enforcing security boundaries at the protocol level. We implement LDP as a plugin for the JamJet agent runtime and evaluate against A2A and random baselines using local Ollama models and LLM-as-judge evaluation. Identity-aware routing achieves ~12x lower latency on easy tasks through delegate specialization, though it does not improve aggregate quality in our small delegate pool; semantic frame payloads reduce token count by 37% (p=0.031) with no observed quality loss; governed sessions eliminate 39% token overhead at 10 rounds; and noisy provenance degrades synthesis quality below the no-provenance baseline, arguing that confidence metadata is harmful without verification. Simulated analyses show architectural advantages in attack detection (96% vs. 6%) and failure recovery (100% vs. 35% completion). This paper contributes a protocol design, reference implementation, and initial evidence that AI-native protocol primitives enable more efficient and governable delegation.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。