![\"\u5c01\u9762\u4fe1\u606f\u56fe\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260905161707-6a9c4083d07b9.webp\")
<\/p>\n<\/p>\n
\u6240\u5c5e\u4e3b\u7ebf：AI \u540e\u7aef\u67b6\u6784\u8bbe\u8ba1\u4e0e\u5927\u6a21\u578b\u670d\u52a1\u96c6\u6210\u5b9e\u8df5\u7ec6\u5206\u4e3b\u9898：AI \u540e\u7aef\u67b6\u6784\u8bbe\u8ba1\u4e0e\u5927\u6a21\u578b\u670d\u52a1\u96c6\u6210\u5b9e\u8df5：\u53ef\u590d\u5236\u7684\u9879\u76ee\u590d\u76d8\u6a21\u677f\u4e0e\u51b3\u7b56\u8bb0\u5f55<\/p>\n
\u5728\u5206\u5e03\u5f0f AI Agent \u7cfb\u7edf\u7684\u9ad8\u5e76\u53d1\u6a21\u62df\u538b\u6d4b\u4e0e\u6545\u969c\u6f14\u7ec3\u573a\u666f\u4e2d，\u5f53\u5e95\u5c42\u5927\u6a21\u578b\u670d\u52a1\u63a5\u53e3\u53d1\u751f\u7f51\u7edc\u6296\u52a8\u6216\u54cd\u5e94\u5ef6\u8fdf\u65f6，\u4e0a\u6e38\u4efb\u52a1\u91cd\u8bd5\u673a\u5236\u82e5\u7f3a\u4e4f\u8fb9\u754c\u63a7\u5236，\u5bb9\u6613\u5f15\u53d1\u8fde\u9501\u6545\u969c\u3002\u4f8b\u5982，Agent \u5728\u591a\u8f6e\u5de5\u5177\u8c03\u7528（Tool Calling）\u4ea4\u4e92\u4e4b\u95f4\u56e0\u53c2\u6570\u89e3\u6790\u5f02\u5e38\u9677\u5165\u6b7b\u5faa\u73af，\u4f1a\u5bfc\u81f4 Token \u6d88\u8017\u91cf\u51fa\u73b0\u6307\u6570\u7ea7\u6fc0\u589e，\u540c\u65f6\u5f02\u6b65\u56de\u8c03\u7ebf\u7a0b\u6c60\u88ab\u77ac\u95f4\u5360\u6ee1，\u62d6\u57ae\u6574\u4e2a\u540e\u7aef\u670d\u52a1\u3002<\/p>\n
\u6392\u67e5\u65e5\u5fd7\u5e38\u663e\u793a\u5927\u91cf\u7ebf\u7a0b\u5904\u4e8e\u7b49\u5f85\u6216\u963b\u585e\u72b6\u6001\u3002\u5982\u679c\u4ec5\u4ec5\u4f9d\u9760\u4e34\u65f6\u91cd\u542f\u5bb9\u5668\u6216\u4eba\u5de5\u5e72\u9884，\u5728\u4e0b\u4e00\u6b21\u5916\u90e8 API \u6ce2\u52a8\u65f6\u6545\u969c\u4f9d\u7136\u4f1a\u539f\u6837\u91cd\u6f14\u3002\u5c06\u4e00\u6b21\u6f14\u7ec3\u6392\u67e5\u4e2d\u53d1\u73b0\u7684\u9690\u60a3\u8f6c\u5316\u4e3a\u7cfb\u7edf\u9632\u7ebf，\u5173\u952e\u5728\u4e8e\u628a\u7ecf\u9a8c\u6c89\u6dc0\u4e3a\u67b6\u6784\u5c42\u9762\u7684\u89c4\u5219\u9632\u62a4\u4e0e\u660e\u786e\u7684\u67b6\u6784\u51b3\u7b56\u8bb0\u5f55（Architecture Decision Records, ADR）\u3002<\/p>\n
AI \u540e\u7aef\u96c6\u6210\u4e0d\u5e94\u53ea\u505a HTTP \u8c03\u7528，\u8fd8\u9700\u8981\u9632\u62a4\u62e6\u622a\u3001\u72b6\u6001\u6821\u9a8c\u3001\u7194\u65ad\u964d\u7ea7\u548c\u5ba1\u8ba1\u8bb0\u5f55\u3002\u5c06\u8fd9\u4e9b\u73af\u8282\u653e\u5728\u6a21\u578b\u8c03\u7528\u524d\u540e，\u624d\u80fd\u63a7\u5236\u5f02\u5e38\u8bf7\u6c42\u7684\u5f71\u54cd\u8303\u56f4\u3002<\/p>\n
\u901a\u8fc7\u62e6\u622a\u5668\u5c42\u9694\u79bb\u975e\u6cd5\u9012\u5f52，\u7ed3\u5408\u964d\u7ea7\u673a\u5236\u4fdd\u969c\u57fa\u7840\u670d\u52a1\u53ef\u7528\u6027，\u540e\u7eed\u5ba1\u8ba1\u80fd\u591f\u4e3a\u67b6\u6784\u6f14\u8fdb\u63d0\u4f9b\u4f9d\u636e\u3002<\/p>\n
\u5728 AI \u540e\u7aef\u4f53\u7cfb\u4e2d，\u8c03\u7528\u94fe\u5f80\u5f80\u8de8\u8d8a HTTP \u957f\u8f6e\u8be2\u3001SSE \u6d41\u5f0f\u54cd\u5e94\u4ee5\u53ca\u5f02\u6b65\u6d88\u606f\u961f\u5217，\u4f20\u7edf\u7684\u5355\u670d\u52a1\u7ebf\u7a0b\u8ffd\u8e2a\u65e0\u6cd5\u8d2f\u7a7f\u5b8c\u6574\u4e0a\u4e0b\u6587\u3002\u5728\u6545\u969c\u6f14\u7ec3\u6392\u67e5\u4e2d，\u7b2c\u4e00\u4f18\u5148\u4e8b\u9879\u662f\u900f\u4f20 Trace ID，\u51c6\u786e\u5b9a\u4f4d\u5361\u987f\u4e0e\u6b7b\u5faa\u73af\u8282\u70b9\u3002<\/p>\n
\u5728\u6a21\u62df\u6f14\u7ec3\u573a\u666f\u4e2d，\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b Shell \u547d\u4ee4\u5bf9 Pod \u7ebf\u7a0b\u4e0e\u65e5\u5fd7\u6807\u8bc6\u8fdb\u884c\u5b9e\u65f6\u8bca\u65ad\u4e0e\u5206\u6790：<\/p>\n
# \u67e5\u770b\u76ee\u6807 Pod \u4e2d agent-service \u8fdb\u7a0b\u7684\u7ebf\u7a0b\u5361\u987f\u60c5\u51b5\u4e0e\u5806\u6808\u4fe1\u606f
\nkubectl exec -it agent-service-7f89d456b-x92zk -n ai-prod — jstack 1 | grep -A 20 "http-nio"<\/p>\n
# \u7edf\u8ba1\u5206\u6790\u8fc7\u53bb 10 \u5206\u949f\u5185\u5305\u542b\u8d85\u65f6\u4e0e\u5faa\u73af\u8c03\u7528\u7684 Trace \u6807\u8bc6
\nkubectl logs agent-service-7f89d456b-x92zk -n ai-prod –since=10m | grep "TOOL_CALL_LOOP" | awk '{print $4, $8, $12}' | sort | uniq -c<\/p>\n
# \u901a\u8fc7 curl \u6a21\u62df\u53d1\u9001\u5e26\u6709 TraceHeader \u4e0e\u5e42\u7b49 Key \u7684\u91cd\u8bd5\u8bf7\u6c42
\ncurl -i -X POST "https:\/\/ai-api.internal.net\/v1\/agent\/execute" \\\\
\n -H "Content-Type: application\/json" \\\\
\n -H "X-Trace-Id: trace-test-0831-001" \\\\
\n -H "X-Idempotency-Key: key-0831-loop-test" \\\\
\n -d '{"prompt": "\u5206\u6790\u9500\u552e\u62a5\u8868\u5e76\u751f\u6210\u56fe\u8868", "max_steps": 5}'<\/p>\n
\u65e5\u5fd7\u6392\u67e5\u7ed3\u8bba\u8868\u660e：\u5f53\u5927\u6a21\u578b\u8fd4\u56de\u7684\u5de5\u5177\u8c03\u7528\u53c2\u6570\u683c\u5f0f\u51fa\u73b0\u504f\u5dee\u65f6，\u82e5\u5e94\u7528\u5c42\u4ee3\u7801\u672a\u8fdb\u884c\u62e6\u622a，\u800c\u662f\u5c06\u9519\u8bef\u63d0\u793a\u76f4\u63a5\u62fc\u63a5\u56de Prompt \u4e0a\u4e0b\u6587\u5e76\u91cd\u590d\u63a8\u7ed9\u6a21\u578b，\u6a21\u578b\u5c06\u5728\u76f8\u540c\u7684\u903b\u8f91\u7f3a\u9677\u4e0a\u53cd\u590d\u8bd5\u9519，\u76f4\u5230\u7a81\u7834\u7f51\u5173\u8d85\u65f6\u9608\u503c\u3002<\/p>\n
\u4f9d\u9760 Prompt \u63d0\u793a\u8bcd\u4f18\u5316\u65e0\u6cd5\u63d0\u4f9b\u786e\u5b9a\u6027\u7684\u5de5\u7a0b\u4fdd\u969c\u3002\u786e\u5b9a\u6027\u7684 AI \u540e\u7aef\u67b6\u6784\u5e94\u5efa\u7acb\u4e09\u9053\u9632\u62a4：<\/p>\n
\u5728 Spring Boot \u6846\u67b6\u4e2d，\u53ef\u5b9e\u73b0\u5982\u4e0b Agent \u72b6\u6001\u673a\u9632\u62a4\u62e6\u622a\u5668\u7ec4\u4ef6：<\/p>\n
package com.example.ai.agent.guard;<\/p>\n
import org.slf4j.Logger;
\nimport org.slf4j.LoggerFactory;
\nimport org.springframework.stereotype.Component;<\/p>\n
import java.nio.charset.StandardCharsets;
\nimport java.security.MessageDigest;
\nimport java.security.NoSuchAlgorithmException;
\nimport java.util.HexFormat;
\nimport java.util.Map;
\nimport java.util.concurrent.ConcurrentHashMap;
\nimport java.util.concurrent.atomic.AtomicInteger;<\/p>\n
\/**
\n * AI Agent \u72b6\u6001\u6d41\u8f6c\u9632\u7ebf\u4e0e\u4e0a\u4e0b\u6587\u6cbb\u7406\u62e6\u622a\u5668
\n *\/
\n@Component
\npublic class AgentExecutionGuard {
\n private static final Logger log = LoggerFactory.getLogger(AgentExecutionGuard.class);<\/p>\n
private static final int MAX_TOOL_CALL_DEPTH = 5;
\n private static final long SESSION_TIMEOUT_MS = 30_000L;<\/p>\n
private final Map<String, AtomicInteger> executionDepthMap = new ConcurrentHashMap<>();
\n private final Map<String, Long> sessionStartTimeMap = new ConcurrentHashMap<>();
\n private final Map<String, String> lastPayloadHashMap = new ConcurrentHashMap<>();<\/p>\n
\/**
\n * \u6267\u884c\u524d\u7f6e\u62e6\u622a\u6821\u9a8c
\n * @param sessionId \u4f1a\u8bddID
\n * @param currentPayload \u5f53\u524d\u8c03\u7528\u7684 Payload \u6587\u672c
\n * @return \u662f\u5426\u5141\u8bb8\u7ee7\u7eed\u8c03\u7528\u5927\u6a21\u578b
\n *\/
\n public boolean preCheckAndRecord(String sessionId, String currentPayload) {
\n long now = System.currentTimeMillis();
\n sessionStartTimeMap.putIfAbsent(sessionId, now);<\/p>\n
\/\/ \u6821\u9a8c\u8d85\u65f6
\n if (now – sessionStartTimeMap.get(sessionId) > SESSION_TIMEOUT_MS) {
\n log.warn("Agent \u4f1a\u8bdd\u6267\u884c\u8d85\u65f6\u8fdd\u89c4. SessionId: {}, \u5df2\u8017\u65f6: {}ms",
\n sessionId, now – sessionStartTimeMap.get(sessionId));
\n return false;
\n }<\/p>\n
\/\/ \u6821\u9a8c\u6df1\u5ea6
\n AtomicInteger depth = executionDepthMap.computeIfAbsent(sessionId, k -> new AtomicInteger(0));
\n if (depth.incrementAndGet() > MAX_TOOL_CALL_DEPTH) {
\n log.error("Agent \u5de5\u5177\u8c03\u7528\u6df1\u5ea6\u7a81\u7834\u9650\u5236. SessionId: {}, \u6df1\u5ea6: {}",
\n sessionId, depth.get());
\n return false;
\n }<\/p>\n
\/\/ \u6821\u9a8c\u91cd\u590d Payload \u6b7b\u5faa\u73af
\n String payloadHash = calculateHash(currentPayload);
\n String previousHash = lastPayloadHashMap.put(sessionId, payloadHash);
\n if (payloadHash.equals(previousHash)) {
\n log.warn("\u68c0\u6d4b\u5230\u5b8c\u5168\u76f8\u540c\u7684 Payload \u5faa\u73af\u8c03\u7528. SessionId: {}, Hash: {}",
\n sessionId, payloadHash);
\n return false;
\n }<\/p>\n
return true;
\n }<\/p>\n
\/**
\n * \u4f1a\u8bdd\u7ed3\u675f\u6e05\u7406\u4e0a\u4e0b\u6587
\n *\/
\n public void releaseSession(String sessionId) {
\n executionDepthMap.remove(sessionId);
\n sessionStartTimeMap.remove(sessionId);
\n lastPayloadHashMap.remove(sessionId);
\n log.info("Agent \u4f1a\u8bdd\u9632\u7ebf\u8d44\u6e90\u5df2\u6210\u529f\u6e05\u7406. SessionId: {}", sessionId);
\n }<\/p>\n
private String calculateHash(String input) {
\n try {
\n MessageDigest digest = MessageDigest.getInstance("SHA-256");
\n byte[] hash = digest.digest(input.getBytes(StandardCharsets.UTF_8));
\n return HexFormat.of().formatHex(hash);
\n } catch (NoSuchAlgorithmException e) {
\n return String.valueOf(input.hashCode());
\n }
\n }
\n}<\/p>\n
\u4e3a\u4e86\u907f\u514d\u540e\u7eed\u4e1a\u52a1\u5f00\u53d1\u91cd\u8e48\u8986\u8f99，\u5e94\u5c06\u6545\u969c\u6f14\u7ec3\u6392\u67e5\u5f97\u51fa\u7684\u9632\u62a4\u89c4\u5219\u6c89\u6dc0\u4e3a\u6807\u51c6\u7684 ADR \u6587\u6863\u4e0e\u6807\u51c6\u5316\u590d\u76d8\u6a21\u7248\u3002<\/p>\n
| \u72b6\u6001<\/td>\n | \u5df2\u901a\u8fc7（Accepted）<\/td>\n<\/tr>\n | |||||||||||||||
| \u4e0a\u4e0b\u6587<\/td>\n | \u9ad8\u5e76\u53d1\u538b\u6d4b\u4e0b，\u5927\u6a21\u578b\u5de5\u5177\u8c03\u7528\u5bb9\u6613\u9677\u5165\u65e0\u6548\u91cd\u8bd5\u6b7b\u5faa\u73af，\u62d6\u57ae\u540e\u7aef\u670d\u52a1\u3002<\/td>\n<\/tr>\n | |||||||||||||||
| \u51b3\u7b56\u4e8b\u9879<\/td>\n | \u5728 Spring Boot \u5fae\u670d\u52a1\u5c42\u5f15\u5165 AgentExecutionGuard \u62e6\u622a\u5668，\u5f3a\u5236\u5b9e\u884c 5 \u5c42\u8c03\u7528\u6df1\u5ea6\u622a\u65ad\u4e0e SHA-256 \u5e42\u7b49 Hash \u5224\u5b9a\u3002<\/td>\n<\/tr>\n | |||||||||||||||
| \u5f71\u54cd\u4e0e\u540e\u7f6e\u89c4\u5219<\/td>\n | \u6240\u6709\u65b0\u589e AI Agent \u5de5\u5177\u8c03\u7528\u94fe\u8def\u5e94\u5b9e\u73b0\u964d\u7ea7\u7b56\u7565；\u6a21\u578b\u5f02\u5e38\u4fe1\u606f\u4e0d\u5f97\u76f4\u63a5\u5168\u6587\u56de\u586b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n4.2 \u56e2\u961f\u590d\u76d8\u6a21\u7248\u4e0e\u6539\u8fdb\u9879\u8ddf\u8e2a<\/h4>\n\u5728\u6280\u672f\u590d\u76d8\u4f1a\u8bae\u4e2d，\u5efa\u8bae\u91c7\u7528\u201c\u73b0\u8c61-\u539f\u56e0-\u89c4\u5219\u201d\u4e09\u6bb5\u5f0f\u8bc4\u4f30\u8868：<\/p>\n
|