论文

Agile-V Assurance Spine:规范智能体工程产物从输出到授权的过渡

From Agent Output to Authorized Transition

精选理由

arXiv 上这篇论文讲怎么让智能体改的代码和硬件设计在合并、部署前拿到可核验的授权,对做工程流程和合规的人挺有参考价值。

arXiv 论文提出 Agile-V Assurance Spine,一个覆盖软件、固件和 PCB 工程的跨领域过渡契约。核心问题是工程生命周期是否有依据采信智能体输出,而非智能体能否产出结果。证据必须在权威源配置下建立所需属性、绑定确切产物和冻结的策略基线、随声明的依赖保持最新,并满足风险相称的独立性与授权要求。门禁决策以回执形式记录,批准和例外限定确切范围和时限,在合并、部署、烧录、发布或制造等生效边界重新核验授权。论文还给出与开源实现的映射和对抗性评估议程,但明确不主张监管合规或已验证的生产优势。

原文 · arXiv cs.AI

From Agent Output to Authorized Transition

Agentic engineering systems can edit repositories, run tools and tests, build firmware, synthesize schematics, and prepare deployable or manufacturable artifacts. The assurance problem is therefore shifting from whether an agent can produce an output to whether an engineering lifecycle is justified in acting on claims about that output. Current products and standards provide sandboxes, approvals, hooks, traces, policy enforcement, attestations, bills of materials, and assurance representations, but these capabilities remain fragmented. This paper presents the Agile-V Assurance Spine, a cross-domain transition contract for software, firmware, and PCB engineering. Evidence is admitted only when it establishes required properties through an authoritative source profile, is bound to the exact artifact and frozen policy baseline, remains current with respect to declared dependencies, and satisfies risk-appropriate independence and authority. Gate decisions are recorded as receipts; approvals and exceptions are exact-scope and time-bounded; and authorization is rechecked at the effect boundary before merge, deployment, flashing, release, or fabrication. A bounded review of contemporary research, commercial platforms, open-source infrastructure, and standards positions the model relative to evidence-gated lifecycle control, continuous assurance, runtime admission, provenance, and AI/ML inventories. The paper contributes a precise vocabulary, compositional architecture, domain profiles, mapping to open-source implementations, and an adversarial evaluation agenda. It does not claim regulatory conformity or demonstrated production superiority.