通过模块化策略系统实现企业级智能体的可预测治理,无需微调模型。
Governance by Construction for Generalist Agents
- 在五个关键节点嵌入策略拦截,实现运行时持续治理。
- 支持动态注入规程、拦截有害请求、高风险操作人工审批。
- 适合需要合规与安全性的企业级智能体部署场景。
企业智能体需在多工具和界面间自主运行,但生产环境要求构建式治理。系统必须明确允许的操作、是否需要人工监督及信息暴露范围,且不需为每个领域重新构建智能体。本演示展示CUGA的策略系统,一个与通用大模型智能体协同的模块化策略即代码层,可在不微调模型的前提下,实现复合工作流中可预测、可审计、合规感知的行为。其运行时治理架构在执行的关键阶段强制实施策略干预。策略并非被动约束行为,而是在五个结构化检查点主动介入:规划前(意图守卫)、系统提示内引导推理(剧本)、工具调用边界规范使用(工具指南)、推理循环外作为高风险操作的人工介入门控(工具审批)、输出阶段过滤与结构化响应(输出格式化)。这些环节将治理贯穿于智能体执行流程,而非事后补救。通过医疗场景和多层干预示例,展示了动态剧本注入、恶意或意外有害请求拦截、潜在破坏性操作的人工审批机制。该工具包表明,类型化治理原语可加速、提升企业智能体系统的安全部署,增强政策遵循度与执行一致性。
原文摘要 · Abstract (English)
Enterprise agents are increasingly expected to operate autonomously across tools and interfaces, yet production deployments require governance by construction. Systems must specify which actions are allowed, when human oversight is required, and what information may be exposed, without rebuilding the agent for each domain. This demo presents CUGA's policy system, a modular policy-as-code layer that composes with a generalist LLM agent to deliver predictable, auditable, and compliance-aware behavior in compound workflows without model fine-tuning. We present a runtime governance architecture that enforces policy interventions at every critical stage of execution. Rather than passively constraining behavior, policies intercept the agent at five structural checkpoints: upstream of planning (Intent Guard), within the system prompt to steer reasoning (Playbook), at the tool-call boundary to enforce proper usage (Tool Guide), outside the reasoning loop as a Human-in-the-Loop gate for high-risk actions (Tool Approvals), and at the output stage to filter and structure the final response (Output Formatter). Together, these stages embed governance continuously across the agent's execution pipeline rather than treating it as an afterthought. Using a healthcare scenario and a multi-layered enforcement intervention, the demo shows dynamic playbook injection for structured tool-sequence enforcement, intent guards that block malicious or accidental harmful requests, and human-in-the-loop tool approval checkpoints for potentially destructive actions. The artifact illustrates how typed governance primitives enable faster, safer deployment of enterprise agentic systems while improving policy adherence and execution consistency.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。