Can AI Agents Deliver Verifiable Network-Wide Outcomes Across Authority Boundaries?
Not on the map. Why?
Abstract (arXiv)
AI agents are increasingly involved in network automation, where they can initiate configuration changes through mediated operational interfaces and assess the resulting state. Nonetheless, operational networks usually span many devices and administrative domains. Realizing an operator's intent requires coordinating agents with distinct authority scopes that define the resources they can access, the operations they can invoke, and the network state they can observe. This division limits the blast radius of an erroneous action but fragments the evidence needed to assess the network-wide outcome. Successful execution of a configuration action proposed by one agent does not establish that remote devices responded as intended or that routing changes reached the required devices. A valid observation may also become stale after a subsequent change. Before the coordinated operation can be declared complete, a trusted assurance layer must collect current observations from the required scopes and determine whether they collectively support the operator's intended network-wide outcome. To address the completion admission problem, we present EvidenceNet, a runtime assurance layer for deciding whether coordinated agent operations have achieved an operator's network intent. Its broker collects the post-change observations required by a completion contract, and its admission gate checks that the evidence comes from the required scopes, remains current, and satisfies the task rules. A verifier agent provides an additional assessment of the observation content. Experiments on live routing networks show that post-change state checks recognize successful outcomes that configuration-action records alone cannot establish. Controlled interventions further show that EvidenceNet rejects completion when otherwise satisfactory observations have the wrong source, have been substituted, or are stale.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 8 of its 16 references that are in the map. First posted on arXiv 9 Sep 2026.
Builds on
8 of 16 references.
References · 8
- 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 223
- 2026Taming Various Privilege Escalation in LLM-Based Agent Systems: A Mandatory Access Control Frameworkcited by 54
- 2023What do LLMs need to Synthesize Correct Router Configurations?cited by 29
- 2023Enhancing Network Management Using Code Generated by Large Language Modelscited by 20
- 2026NetAgentBench: A State-Centric Benchmark for Evaluating Agentic Network Configurationcited by 5
- 2026Contract-based Agentic Intent Framework for Network Slicing in O-RANcited by 3
- 2026Evaluating Agentic Configuration Repair for Computer Networkscited by 2
- 2026From Network Automation to Trustworthy Autonomous Networking in the LLM Era: A Network Control Intelligence Perspectivecited by 1
Built on by
Not cited yet.