arXiv:2607.03516cs.SEcs.AI2026-07被引 1

企业AI需统一治理层,保障智能系统可信运行。

AGL-1: The Enterprise AI Governance Layer as a Control Plane for Trusted Enterprise Intelligence

  • 构建跨系统的统一治理控制平面,覆盖模型到应用全链路。
  • 识别授权缺失、知识过期等7类典型失控风险。
  • 适合需要规模化落地AI的企业与安全合规团队。

企业人工智能正从孤立实验转向对协作者、检索增强生成系统、自主代理和AI驱动业务流程的运营依赖。随着这一转变加速,企业核心挑战已不再是模型访问或推理规模,而是受控智能运营:在分布式AI资产中实现授权管控、上下文溯源、持久记忆管理、过时或冲突知识检测、代理执行约束及审计证据生成。本文提出AGL-1——企业AI治理层,作为横跨基础模型、检索系统、编排框架、企业记忆、策略引擎、可观测性系统、工具、API与业务应用的厂商中立参考架构。基于GKS-5提出的受控知识系统原则,AGL-1将治理范围从检索控制扩展至全智能执行路径。它识别出未经授权检索、知识过期、记忆无序、溯源薄弱、策略漂移、可观测性碎片化、代理失控等重复性故障模式,并定义七大治理域:身份感知检索、策略执行、溯源管理、记忆治理、知识完整性监控、代理执行控制与信任可观测性。核心主张是:企业可持续的AI价值将越来越依赖于大规模智能治理能力。在复杂企业中,信任并非模型本身属性,而是围绕模型的系统属性:身份、知识、策略、记忆、工具、人工监督与证据协同构成的受控控制平面。

原文摘要 · Abstract (English)

Enterprise artificial intelligence is moving from isolated experimentation toward operational dependency across copilots, retrieval-augmented generation systems, autonomous agents, and AI-enabled business workflows. As this transition accelerates, the primary enterprise challenge is no longer only model access or inference scale. It is governed intelligence operations: the ability to enforce authorization, preserve contextual lineage, control persistent memory, detect stale or conflicting knowledge, constrain agentic execution, and produce audit-ready evidence across distributed AI estates. This paper introduces AGL-1, the Enterprise AI Governance Layer, as a vendor-neutral reference model for the control plane that should operate across foundation models, retrieval systems, orchestration frameworks, enterprise memory, policy engines, observability systems, tools, APIs, and business applications. Building on governed knowledge-system principles introduced in GKS-5, AGL-1 generalizes the governance problem from retrieval-specific controls to full AI execution-path governance. It identifies recurring failure modes such as unauthorized retrieval, stale grounding, unmanaged memory, weak provenance, policy drift, fragmented observability, and uncontrolled autonomous execution. It then defines seven governance domains: identity-aware retrieval, policy enforcement, provenance management, memory governance, knowledge integrity monitoring, agentic execution control, and trust observability. The central claim is that durable enterprise value from AI will increasingly depend on the ability to govern intelligence at scale. In complex enterprises, trust is not a property of the model alone. It is a property of the system around the model: identity, knowledge, policy, memory, tools, human oversight, and evidence working together as a managed control plane.

AI治理企业级AI可信AI控制平面

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。