arXiv:2608.26225cs.AIcs.DC2026-08

提出代理委托可靠性新机制,解决非幂等任务中的身份与证据认定难题。

Agent Mesh: Reliability Primitives for Non-Idempotent Agent Delegation - Identity Adequacy and Evidence Adequacy

  • 以委托为单位设计七种可靠性原语,取代传统消息级控制
  • 发现54次成功调用仍无法触发错误熔断,21个事件使正确组件无法完成
  • 适合构建高可靠自主代理系统的研究者与工程师参考

自主代理在协调器管理下执行有限软件任务,协调器采用服务网格的重试、超时和错误率熔断机制。我们对一个生产级代理式软件交付平台进行了故障研究,涵盖147个编号故障事件,共81次运行,每次均有成本度量,多数可复现故障的变异证明。发现这三个机制依赖的三个假设在实践中均被违反:连续54次成功的工具调用也无法触发错误率熔断;进度信号恒定导致第三次修复轮次误触发,使一次六组件运行退化为三组件;同一委托在六次调用中累积21个事件,使一个正确的幂等组件无法完成;错误路由唤醒五个组件处理两个组件的故障,导致三个无关组件回退正常代码;十二起事件中,执行层阻塞了正确工作,最严重一次消耗107次代理调用却无任何写入成功。我们识别出根本原因及其双重表现:身份充分性——五个子系统因身份无法区分而产生自信错误答案,其中两个独立推导出纠正规则;证据充分性——可靠性决策必须基于可移动、可归因且条件一致的确定性证据。由此提出七个以委托为执行单元的可靠性原语,并明确该研究驱动但未完成的受控评估方案。

原文摘要 · Abstract (English)

Autonomous agents increasingly perform bounded software tasks under an orchestrator that retries, resumes, and budgets them. The machinery such orchestrators reach for is the service mesh's: retry, timeout, and error-rate circuit breaking. We report a failure study of a production agentic software-delivery platform over 147 numbered incidents spanning 81 runs, each with a measured cost and, in most cases, a mutation proof reproducing the failure. All three assumptions those primitives rest on are violated in practice, and we quantify the consequences: a loop of fifty-four consecutive successful tool calls no error-rate breaker could see; a progress signal constant by construction, guaranteeing a false trip on the third repair round and driving one run from six of six components to three; twenty-one events accumulated across six invocations of one delegation, making a correct, idempotent component unwinnable; a misrouted failure that woke five components for a two-component fault, leaving three bystanders regressing working code; and twelve incidents in which the enforcement layer blocked correct work, the most expensive costing 107 agent turns and zero accepted writes. We find one cross-cutting cause and its dual. Identity adequacy: in five separate subsystems an identity that failed to discriminate produced a confident wrong answer, and two of them derived the corrective rule independently. Evidence adequacy: a reliability decision may be taken only on evidence capable of moving, attributable to what it measures, and deterministic under identical conditions. From the findings we derive seven reliability primitives whose enforcement unit is the delegation rather than the message, and specify the controlled evaluation the study motivates but does not constitute.

自主代理可靠性委托机制

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。