AI Agent
Core Facts
The Principle of Least Privilege holds that any principal should only be granted the minimum permissions necessary to complete its task.
Mainstream Agent architectures typically use a large language model as the brain, combined with memory modules, planning modules, and tool interfaces to accomplish complex tasks
AI development has evolved through four stages: single large model calls, prompt engineering, agents and tool calls, and loop engineering.
Timeline (last 90 days)
GPT-4o-mini scores about 18% accuracy on the same HS code benchmark; the best AI Agent with web search reaches 46.8%, but costs $1-10 per call and takes 10-30 seconds; human experts are about 95%.
Codex belongs to AI Agents, adding two core capabilities on top of the LLM: tool invocation and a task loop.
ServiceNow's AI Agent and Splunk's intelligent operations capabilities are concrete implementations at the AI orchestration layer, attempting to take over more decision-making authority.
The switching costs formed after AI Agents are deeply embedded in operations processes are higher than those of traditional tool migration, making it a more covert lock-in mechanism than data migration.
An Agent's verification model assumes by default that 'read-your-writes' is immediately visible, but read replica synchronization in distributed systems has inherent delay, which is the root of race conditions.
Output-based tests cannot detect AI Agent key exfiltration behavior, because the Agent's reply looks friendly and harmless but the key has already been exfiltrated.
To verify whether an AI Agent security gate is effective, you should not ask the Agent itself (which may already be injected), but verify by checking side effects (such as whether files were written or network bytes flowed out).
What an Agent generates is a candidate implementation, not a verified conclusion; the output should be brought into CI, with human review and performance baselines retained, so that acceleration work does not become a new source of technical debt.
A large part of the resistance to enterprises migrating their data stacks to GPUs comes from the cost of rewriting existing code, not the hardware itself; when an Agent can take on most of the semantic mapping and regression verification work, the barrier to migration drops noticeably.
The pattern an AI Agent takes in Spark UDF migration is: the first layer reads the semantics of the existing PySpark or Scala UDF and judges whether it can be mapped to cuDF columnar operators; the second layer rewrites the row-by-row logic into vectorized expressions; the third layer compares the output of the CPU and GPU versions using sample data to confirm result consistency.
40 more timeline events
All Facts (20)
The Principle of Least Privilege holds that any principal should only be granted the minimum permissions necessary to complete its task.
90%VerifiedMainstream Agent architectures typically use a large language model as the brain, combined with memory modules, planning modules, and tool interfaces to accomplish complex tasks
90%VerifiedAI development has evolved through four stages: single large model calls, prompt engineering, agents and tool calls, and loop engineering.
90%VerifiedThe stronger a model's capabilities and the more external tools it can invoke, the broader its potential attack surface—this is a fundamental dilemma facing AI vendors.
90%VerifiedAgents possess capabilities for planning, tool invocation, memory, and autonomous iteration, distinguishing them from the single-round question-and-answer mode of traditional large language models.
90%VerifiedA Skill is a modular encapsulation that packages specialized capabilities, domain knowledge, and operational norms into reusable units, enabling Agents to invoke them automatically at the appropriate moment.
90%VerifiedAI model performance is positively correlated with the amount of data fed to it, and enterprises must continuously input business details to obtain more accurate AI outputs
90%VerifiedThe intelligent proxy layer can fully record every operation initiated by the AI (HTTP calls, command executions, resource accesses), forming a traceable audit log.
90%VerifiedA poorly designed AI agent may fall into a closed loop of goal → call API → failure → retry → loop, continuously consuming resources and accumulating costs without human monitoring.
90%VerifiedIn scenarios involving factual accuracy, logical rigor, and high-stakes decision-making, AI should be positioned as a tool rather than an autonomous agent to which decisions can be fully delegated, and human oversight and verification are indispensable.
90%VerifiedAI Agent errors have semantic plausibility—each step appears reasonable but in combination drifts from the original goal—making post-hoc log-based troubleshooting more complex than with traditional systems.
90%VerifiedA complex Agent task may require dozens or even hundreds of model calls
90%VerifiedPrompt注入（Prompt Injection）是针对大语言模型应用的安全威胁，攻击者通过在输入中嵌入恶意指令试图覆盖系统原有行为约束
90%VerifiedAI编程工具正在经历从被动辅助（代码补全）到主动执行（自主智能体）的范式转变
90%VerifiedThe EU Artificial Intelligence Act (AI Act) explicitly requires that high-risk AI systems must have human oversight and intervention capabilities.
90%VerifiedThe architecture of an AI Agent typically consists of four modules: a perception module, a memory module, a planning module, and an action module.
90%VerifiedCurrently mainstream AI Agent frameworks include LangChain, AutoGen, CrewAI, and others.
90%VerifiedAI Agent通过工具调用（Tool Use）机制与外部系统交互，包括执行代码、调用API、读写数据库等
90%VerifiedAgent planning capabilities are typically implemented through the ReAct (Reasoning + Acting) framework.
90%VerifiedReading less output does not equal spending less money; the true cost of AI agents is hidden in context caching, extra rounds, and the blowback caused by task quality fluctuations—none of which can be compressed by a compression tool.
85%