AI代理能否在跨管理域边界实现可验证的全网结果？
Can AI Agents Deliver Verifiable Network-Wide Outcomes Across Authority Boundaries?
- Nokia Bell Labs（诺基亚贝尔实验室）
- Télécom Paris, Institut Polytechnique de Paris（巴黎理工学院巴黎电信学院）
- Augusta University（奥古斯塔大学）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
针对跨管理域网络自动化中协调操作完成难以验证的问题，提出EvidenceNet运行时保障层，通过收集契约化观察证据并校验来源、时效和规则，实现可验证的全网结果判定。
AI中文摘要：
AI代理正越来越多地参与网络自动化，它们可以通过中介操作接口发起配置更改并评估由此产生的状态。然而，运营网络通常跨越众多设备和行政域。实现运营商的意图需要协调具有不同权限范围的代理，这些权限范围定义了它们可以访问的资源、可以调用的操作以及可以观察的网络状态。这种划分限制了一次错误操作的影响范围，但同时也碎片化了评估全网结果所需的证据。一个代理提出的配置操作成功执行，并不能证明远程设备按预期响应，或路由更改到达了所需设备。一个有效的观察结果也可能在后续更改后变得过时。在协调操作可以被宣布完成之前，一个可信的保障层必须从所需范围收集当前观察结果，并确定它们是否共同支持运营商预期的全网结果。为了解决完成准入问题，我们提出了EvidenceNet，一个运行时保障层，用于决定协调代理操作是否实现了运营商的网络意图。其代理收集完成契约所需的操作后观察结果，其准入门检查证据是否来自所需范围、保持最新并满足任务规则。一个验证代理对观察内容提供额外评估。在实时路由网络上的实验表明，操作后状态检查能够识别仅凭配置操作记录无法确定的成功结果。受控干预进一步表明，当原本满意的观察结果来源错误、被替换或过时时，EvidenceNet会拒绝完成。
英文摘要：
AI agents are increasingly involved in network automation, where they can initiate configuration changes through mediated operational interfaces and assess the resulting state. Nonetheless, operational networks usually span many devices and administrative domains. Realizing an operator's intent requires coordinating agents with distinct authority scopes that define the resources they can access, the operations they can invoke, and the network state they can observe. This division limits the blast radius of an erroneous action but fragments the evidence needed to assess the network-wide outcome. Successful execution of a configuration action proposed by one agent does not establish that remote devices responded as intended or that routing changes reached the required devices. A valid observation may also become stale after a subsequent change. Before the coordinated operation can be declared complete, a trusted assurance layer must collect current observations from the required scopes and determine whether they collectively support the operator's intended network-wide outcome. To address the completion admission problem, we present EvidenceNet, a runtime assurance layer for deciding whether coordinated agent operations have achieved an operator's network intent. Its broker collects the post-change observations required by a completion contract, and its admission gate checks that the evidence comes from the required scopes, remains current, and satisfies the task rules. A verifier agent provides an additional assessment of the observation content. Experiments on live routing networks show that post-change state checks recognize successful outcomes that configuration-action records alone cannot establish. Controlled interventions further show that EvidenceNet rejects completion when otherwise satisfactory observations have the wrong source, have been substituted, or are stale.
