arXiv:2606.25115cs.LGcs.NI2026-06被引 5

用净价值评分让设备端智能体自动删减无用记忆,省资源防攻击。

Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory

论文配图:Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory
图 1 · 摘自论文原文
  • 按每字节净价值(价值减危害)决定记忆去留、共享与信任
  • 内存减少2.7倍,上行流量降低2.4倍,中毒成功率归零
  • 适合资源受限的边缘智能体,尤其关注安全与能效的场景

设备端语言模型智能体通过检索记忆积累经验,而非更新权重。此类记忆受限于内存和能耗,且易通过窄带链路暴露,因可写性成为攻击面。现有系统仅解决部分问题:记忆无限增长,本地方法仅保留成功记录,而污染多被视为攻击而非记忆治理问题。本文提出\sys{},以每字节净价值(价值减危害)统一管理智能体经验生命周期。该机制实现三项决策:(1) extbf{KEEP} 在内存与能耗预算下剔除低价值字节;(2) extbf{SHARE} 仅当价值超过传输成本时才发送信息;(3) extbf{TRUST} 依据来源验证外部条目。在任务漂移基准与真实异构Jetson测试平台(含两机器人臂节点与一个中心节点)上,\sys{}使内存减少2.7倍,上行流量降低2.4倍,中毒注入成功率从0.75降至0,且在受污染或陈旧记忆场景中准确率提升。以净价值为标准的遗忘反而提升了智能体性能。

原文摘要 · Abstract (English)

On-device language-model agents improve by accumulating experience in retrieved memory rather than by updating weights. This memory is hard-bounded and exposed: it consumes RAM and energy, reaches peers through a thin uplink, and becomes an attack surface because it is writable by what the agent reads. Existing systems each cover one part of this problem: agentic memories grow without a budget, on-device methods keep entries by success alone, and poisoning is studied mainly as an attack rather than as a memory-governance problem. We propose \sys{}, a single net-value-per-byte score that governs an agent's experience-memory lifecycle. The main idea is to let the budget act as the curator: each entry is scored as value minus harm, per byte, so one ruler decides what to keep, share, and trust. \sys{} makes three decisions: (1) \textbf{KEEP} evicts low-value bytes under the RAM and energy budget; (2) \textbf{SHARE} sends an insight only when its value exceeds its uplink cost; and (3) \textbf{TRUST} gates a peer entry by provenance. On language-model-agent task-drift benchmarks and a real heterogeneous Jetson testbed with two robot-arm nodes and a hub, \sys{} reduces memory by $2.7\times$ and uplink by $2.4\times$, drives injection success from 0.75 to zero, and raises accuracy on cases corrupted by poison or stale memory. Curating by net value reduces footprint, energy, uplink, and injection success together without reducing accuracy. In this setting, forgetting by net value improves the agent rather than weakening it.

边缘计算智能体记忆管理安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。