AI 中文总结
HALO是一种保障智能体执行安全的运行时协议，可保留有效组件、检查动作有效性并替换被阻止动作，在多组实验中均展现出优于整体响应策略的性能。
AI 中文摘要
当前智能体AI系统可能返回包含通知、请求、交接和动作的异构响应，外部使用前条件可能变化，同一响应中的组件无需共同受支持；拒绝整个响应会丢弃有用组件，而独立检查组件可能导致依赖项缺失。我们提出异构局部义务准入机制（HALO），这是一种运行时协议，可保留声明的前提条件也受支持的受支持组件，在调度前重新检查每个确切动作，且仅允许用新候选替换被阻止的动作。HALO符合全部96项准入预期，通过全部20项协议测试；在结构化响应重放中，其保留248/248个受支持组件，其中128/128个不受无关变化影响，而整体响应策略仅保留0/248个；在10次冷启动PX4/Gazebo会话中，HALO阻止所有测试的过时路径，未观察到匹配的过时设定点，并完成所有新的恢复操作。
英文摘要
Recent agentic AI systems may return a heterogeneous response containing notices, requests, handoffs, and actions. Conditions can change before external use, so components from the same response need not remain supported together. Rejecting the whole response discards useful components, whereas checking components independently can leave a dependent without its prerequisite. We present Heterogeneous Admission with Localized Obligations (HALO), a runtime protocol that preserves supported components whose declared prerequisites also remain supported, rechecks each exact action before dispatch, and allows blocked actions to be replaced only by fresh candidates. HALO matched all 96 admission expectations and passed all 20 protocol tests. In structured-response replay, it retained 248/248 supported components, including 128/128 unaffected by unrelated changes, while a whole-response policy retained 0/248. Across ten cold-start PX4/Gazebo sessions, HALO blocked every tested stale route, observed no matching stale setpoint, and completed all fresh recoveries.
Comments16 pages, 2 figures; supplementary material included
