
Paper: 2605.26112 Authors: Shangding Gu Categories: cs.AI, cs.LG
The Gap
Existing agentic AI research treats foundation models as the primary object of study. Agents are evaluated on final-task success (did it book the flight? did it fix the bug?), while memory systems, retrieval mechanisms, tool orchestration, and verification layers are treated as implementation details. This model-centric framing worked when agents were simple wrappers around LLMs, but breaks down as agents become long-running systems that maintain state, coordinate multiple tools, and operate under safety constraints.
The gap: we have no systematic way to evaluate or optimize the structured execution layer—the harness—that translates model capability into agent behavior. When an agent fails, we don’t know if the model was too weak, the memory was corrupted, the context constructor dropped critical information, or the orchestration loop made poor routing decisions. The field lacks harness-level benchmarks and design principles.
Problem: Agent failures are opaque
|
v
Assumption: Performance emerges from model + harness interaction
|
v
Method: Decompose harness into measurable components
(context governance, memory, skill routing, orchestration)
|
v
Evidence: CheetahClaws reference implementation + comparison
|
v
Conclusion: System design is now the bottleneck, not model size
The Increment
One sentence: Before this paper, agents were black boxes evaluated on task success; after, the harness is a first-class object with measurable components and design principles.
Core Mechanism
The paper decomposes the agent harness into five layers: (1) foundation model, (2) memory substrate (stores past interactions, learned skills, user preferences), (3) context constructor (selects what goes into the prompt), (4) skill-routing layer (decides which tool or sub-agent to invoke), and (5) orchestration + governance (coordinates execution and enforces constraints). Each layer has failure modes that compound: stale memory poisons context, poor context leads to wrong tool selection, weak orchestration allows unsafe actions.
The method is diagnostic, not algorithmic. Instead of proposing a new agent architecture, the paper provides a framework for measuring harness quality: trajectory coherence (does the agent’s action sequence make sense?), memory hygiene (is stored information accurate and relevant?), context efficiency (is the prompt bloated or missing key facts?), communication fidelity (do tool calls match intent?), verification cost (how much overhead for safety checks?), and safe evolution (does the agent improve without catastrophic forgetting?).
CheetahClaws is a reference implementation that makes these layers explicit and auditable. Unlike monolithic agent frameworks (LangChain, AutoGPT), it separates concerns: memory is a pluggable module, context construction is a distinct step with logging, skill routing has explicit decision traces, and orchestration enforces governance rules before execution.
User Request
|
v
[ Context Constructor ] <--- reads --- [ Memory Substrate ]
| ^
| (prompt) |
v | (writes)
[ Foundation Model ] |
| |
| (tool call intent) |
v |
[ Skill Router ] -----> [ Tool Execution ] ---+
| |
v v
[ Orchestration Loop ] <-- [ Governance Layer ]
| |
+-------------------------+
|
v
Response
Think of the harness as a restaurant kitchen. The foundation model is the head chef—skilled but needs prep work done. Memory is the pantry: if ingredients are spoiled or mislabeled, even a great chef makes bad food. The context constructor is the sous chef who decides what ingredients to bring to the chef’s station—too much clutter and the chef is overwhelmed, too little and the dish is incomplete. Skill routing is the expeditor who decides which station (grill, sauté, pastry) handles each order. Orchestration is the kitchen manager who coordinates timing and enforces health codes. When a dish fails, you can’t just blame the head chef—you need to audit the entire kitchen workflow.
Key Concepts
-
Context Governance: The process of deciding what information enters the foundation model’s prompt window. Unlike retrieval-augmented generation (RAG), which focuses on fetching relevant documents, context governance is about budget allocation under constraints. You have 8k tokens. Do you include the full conversation history? Recent tool outputs? User preferences? Relevant code snippets? The wrong choice cascades: if you omit a critical constraint, the model generates an unsafe action; if you include too much noise, the model loses focus. Context governance is the difference between a focused prompt and a junk drawer.
-
Trustworthy Memory: Memory that is accurate, relevant, and auditable. Most agent frameworks treat memory as append-only logs or vector databases with no hygiene. This paper argues memory needs three properties: (1) provenance (where did this fact come from?), (2) decay (old information should fade unless reinforced), and (3) verification (can we check if stored beliefs are still true?). Without these, agents accumulate false beliefs and outdated skills. Trustworthy memory is not just storage—it’s a maintenance problem.
-
Dynamic Skill Routing: The decision process for which tool, API, or sub-agent handles a given subtask. Static routing (if query contains “weather”, call weather API) breaks down when tasks are ambiguous or require chaining multiple tools. Dynamic routing uses the model’s reasoning to select tools, but introduces new failure modes: the model might hallucinate tool names, misunderstand tool signatures, or route to the wrong abstraction level (calling a low-level API when a high-level workflow exists). Skill routing is where intent meets execution, and mismatches here cause silent failures.
Framework Shift
Before (model-centric): After (harness-centric):
[ Big Model ] [ Foundation Model ]
| |
v +--------+--------+
Task Success? | |
(yes/no) [ Memory ] [ Context ]
| |
+--------+--------+
|
[ Router ]
|
[ Orchestrator ]
|
+----+----+----+----+
| | | | |
Trajectory Memory Context Verification
Quality Hygiene Efficiency Cost
From “did the agent succeed?” to “how did the agent succeed, and can we trust the process?”—the core shift is treating execution infrastructure as measurable and improvable, not just plumbing.
Expert Assessment
Problem choice: Real gap. The field has hit diminishing returns on model scaling for agentic tasks—GPT-4 and Claude 3.5 have similar agent performance despite different model sizes. The bottleneck has shifted to system design, but most research still focuses on model capabilities. This paper names the elephant in the room.
Method maturity: Diagnostic framework, not a novel algorithm. The contribution is conceptual: decomposing the harness into measurable components and arguing for harness-level benchmarks. CheetahClaws is a proof-of-concept, not a production system. The paper would be stronger with empirical evidence that harness improvements outpace model improvements on fixed tasks, but the framing alone is valuable.
Experimental integrity: No controlled experiments—this is a position paper with a reference implementation. The comparison with Claude Code and OpenClaw is qualitative (modularity, auditability) rather than quantitative (task success rates, latency). Fair for a framing paper, but leaves the hard measurement work to future research.
Writing quality: Clear thesis, but the paper tries to cover too much ground. The section on governance mechanisms feels tacked on—either expand it into a full treatment or cut it. The CheetahClaws description is too high-level; showing a concrete failure mode and how the harness design makes it debuggable would be more convincing than architectural diagrams.
Verdict: weak accept — Important framing that shifts research priorities, but needs empirical validation and tighter scope to be a strong contribution.
Takeaways
For practitioners: If you’re building agents, instrument your harness. Log context construction decisions, track memory read/write patterns, and record skill routing choices. When your agent fails, you need to know which layer broke. Treat memory as a database with schema and integrity constraints, not a dump of past interactions.
For researchers: Stop evaluating agents only on final-task success. Measure trajectory quality (did the agent take a reasonable path?), context efficiency (how much of the prompt was actually used?), and memory hygiene (how much stored information is stale?). These metrics reveal optimization opportunities that task success hides.
Transferable idea: The “harness as first-class object” framing applies beyond AI agents. Any system with a powerful but opaque core (compiler, database query planner, recommendation engine) benefits from making the surrounding infrastructure—caching, routing, verification—explicit and measurable. When the core is a black box, optimize the harness.
论文: 2605.26112 作者: Shangding Gu 分类: cs.AI, cs.LG
缺口
现有的智能体 AI 研究将基础模型视为主要研究对象。
智能体的评估标准是最终任务成功率(订到机票了吗?
修好 bug 了吗?
),而内存系统、检索机制、工具编排和验证层被当作实现细节。
这种以模型为中心的框架在智能体只是 LLM 的简单包装时还能用,但当智能体变成长期运行的系统——需要维护状态、协调多个工具、在安全约束下运行——时就失效了。
缺口在于:我们没有系统化的方法来评估或优化结构化执行层——即”执行框架”(harness)——它负责将模型能力转化为智能体行为。
当智能体失败时,我们不知道是模型太弱、内存损坏、上下文构造器丢失了关键信息,还是编排循环做出了糟糕的路由决策。
该领域缺乏框架级别的基准和设计原则。
问题:智能体失败原因不透明
|
v
假设:性能来自模型与框架的交互
|
v
方法:将框架分解为可测量的组件
(上下文治理、内存、技能路由、编排)
|
v
证据:CheetahClaws 参考实现 + 对比
|
v
结论:系统设计是瓶颈,而非模型规模
增量
一句话: 这篇论文之前,智能体是按任务成功率评估的黑盒;之后,执行框架成为一等公民,有可测量的组件和设计原则。
核心机制
论文将智能体框架分解为五层:(1) 基础模型,(2) 内存基底(存储过去的交互、学到的技能、用户偏好),(3) 上下文构造器(选择什么进入提示词),(4) 技能路由层(决定调用哪个工具或子智能体),(5) 编排 + 治理(协调执行并强制约束)。
每层都有会复合的失效模式:陈旧的内存污染上下文,糟糕的上下文导致错误的工具选择,弱编排允许不安全的操作。
这个方法是诊断性的,而非算法性的。
论文没有提出新的智能体架构,而是提供了一个测量框架质量的框架:轨迹连贯性(智能体的动作序列合理吗?
),内存卫生(存储的信息准确且相关吗?
),上下文效率(提示词是否臃肿或缺失关键事实?
),通信保真度(工具调用是否匹配意图?
),验证成本(安全检查的开销有多大?
),以及安全演化(智能体是否在改进而不发生灾难性遗忘?
)。
CheetahClaws 是一个参考实现,让这些层显式且可审计。
与单体智能体框架(LangChain、AutoGPT)不同,它分离关注点:内存是可插拔模块,上下文构造是带日志的独立步骤,技能路由有显式的决策轨迹,编排在执行前强制治理规则。
用户请求
|
v
[ 上下文构造器 ] <--- 读取 --- [ 内存基底 ]
| ^
| (提示词) |
v | (写入)
[ 基础模型 ] |
| |
| (工具调用意图) |
v |
[ 技能路由器 ] -----> [ 工具执行 ] ---+
| |
v v
[ 编排循环 ] <-- [ 治理层 ]
| |
+------------------+
|
v
响应
把执行框架想象成餐厅厨房。
基础模型是主厨——技艺高超但需要准备工作。
内存是食品储藏室:如果食材变质或标签错误,再好的厨师也做不出好菜。
上下文构造器是副厨,决定给主厨工作台带什么食材——太多杂物会让主厨不知所措,太少则菜品不完整。
技能路由是传菜员,决定哪个工位(烤架、炒锅、糕点)处理每个订单。
编排是厨房经理,协调时机并执行卫生规范。
当一道菜失败时,你不能只怪主厨——你需要审计整个厨房工作流。
关键概念
- 上下文治理: 决定什么信息进入基础模型提示词窗口的过程。
与检索增强生成(RAG)不同——RAG 专注于获取相关文档——上下文治理是在约束下的预算分配。
你有 8k 个 token。
要包含完整对话历史吗?
最近的工具输出?
用户偏好?
相关代码片段?
错误的选择会级联:如果遗漏关键约束,模型会生成不安全的操作;如果包含太多噪音,模型会失焦。
上下文治理是聚焦提示词和杂物抽屉之间的区别。
- 可信内存: 准确、相关且可审计的内存。
大多数智能体框架将内存视为只追加的日志或没有卫生管理的向量数据库。
本文认为内存需要三个属性:(1) 来源(这个事实从哪来?
),(2) 衰减(旧信息应该淡化,除非被强化),(3) 验证(我们能检查存储的信念是否仍然为真吗?
)。
没有这些,智能体会积累错误信念和过时技能。
可信内存不只是存储——它是一个维护问题。
- 动态技能路由: 决定哪个工具、API 或子智能体处理给定子任务的决策过程。
静态路由(如果查询包含”天气”,调用天气 API)在任务模糊或需要链式调用多个工具时会失效。
动态路由使用模型的推理来选择工具,但引入了新的失效模式:模型可能幻觉出工具名称、误解工具签名,或路由到错误的抽象层级(在存在高级工作流时调用低级 API)。
技能路由是意图与执行相遇的地方,这里的不匹配会导致静默失败。
框架转变
之前(以模型为中心): 之后(以框架为中心):
[ 大模型 ] [ 基础模型 ]
| |
v +--------+--------+
任务成功? | |
(是/否) [ 内存 ] [ 上下文 ]
| |
+--------+--------+
|
[ 路由器 ]
|
[ 编排器 ]
|
+----+----+----+----+
| | | | |
轨迹 内存 上下文 验证
质量 卫生 效率 成本
从”智能体成功了吗?
“到”智能体如何成功的,我们能信任这个过程吗?
“——核心转变是将执行基础设施视为可测量和可改进的,而非只是管道。
专家评审
选题眼光: 真实缺口。
该领域在智能体任务的模型扩展上已经遇到收益递减——GPT-4 和 Claude 3.5 尽管模型规模不同,智能体性能却相似。
瓶颈已经转移到系统设计,但大多数研究仍聚焦于模型能力。
这篇论文点出了房间里的大象。
方法成熟度: 诊断框架,而非新算法。
贡献是概念性的:将框架分解为可测量的组件,并主张建立框架级别的基准。
CheetahClaws 是概念验证,而非生产系统。
如果论文能提供实证证据表明框架改进在固定任务上超过模型改进,会更有力,但仅框架本身就有价值。
实验诚意: 没有对照实验——这是一篇带参考实现的立场论文。
与 Claude Code 和 OpenClaw 的比较是定性的(模块化、可审计性)而非定量的(任务成功率、延迟)。
对于框架论文来说公平,但将艰难的测量工作留给了未来研究。
写作功力: 论点清晰,但论文试图覆盖太多内容。
治理机制部分感觉是硬加上去的——要么扩展成完整论述,要么删掉。
CheetahClaws 的描述过于高层;展示一个具体的失效模式以及框架设计如何让它可调试,会比架构图更有说服力。
判决: 弱接收 — 重要的框架转变,改变了研究优先级,但需要实证验证和更紧凑的范围才能成为强贡献。
要点总结
对实践者: 如果你在构建智能体,给你的框架加仪表。
记录上下文构造决策,跟踪内存读写模式,记录技能路由选择。
当智能体失败时,你需要知道哪一层坏了。
把内存当作有模式和完整性约束的数据库,而非过去交互的垃圾场。
对研究者: 停止只用最终任务成功率评估智能体。
测量轨迹质量(智能体走了合理的路径吗?
),上下文效率(提示词中有多少实际被使用?
),以及内存卫生(有多少存储信息是陈旧的?
)。
这些指标揭示了任务成功率隐藏的优化机会。
可迁移想法: “框架作为一等公民”的框架适用于 AI 智能体之外。
任何有强大但不透明核心的系统(编译器、数据库查询规划器、推荐引擎)都能从让周围的基础设施——缓存、路由、验证——显式且可测量中受益。
当核心是黑盒时,优化框架。