Skip to content

Architecting the Agentic AI Systems Stack What Should Infrastructure Manage When the Unit of Work Is a Trajectory-

Jul 2026 · ACM SIGOPS Operating Systems Review · Vol 60, pp. 60 - 75 · 0 citations · 88 references
Computer Science

TL;DR

A stack organization and open research agenda around context hierarchy, protected effects, and metrics for useful work per verified action rather than only tokens per second is developed.

Abstract

Agentic AI is becoming a systems workload. A delegated goal is not a single prompt-response request; it unfolds as an agentic trajectory through model calls, tool calls, context operations, waits, approvals, recovery actions, and external effects. The trajectory is the smallest unit over which budget, authority, recovery, evidence, and physical cost can be stated without hiding essential state in application convention. Existing managed units still matter. Instructions, processes, requests, and model calls each made a different layer of the stack schedulable, protectable, accountable, recoverable, and optimizable. Agentic trajectories strain these units because state, authority, cost, and side effects span many calls. The stack therefore needs a system-visible unit for such trajectories. This paper calls that unit a managed trajectory and focuses on the contract that gives lower layers a common handle on identity, goals, budgets, placement, memory, authority, effects, evidence, and recovery. From a computer architect's perspective, agentic work is an interface and resource-management problem. The paper develops a stack organization and open research agenda around context hierarchy, protected effects, and metrics for useful work per verified action rather than only tokens per second.

View source

Similar papers

Preprint Aug 2026

Multi-Agent AI Safety as an Institutional Design Problem

This is the first paper from POLIS, an ongoing research programme studying algorithmic institutions for multi-agent systems, and asks which parts of an AI institution produce safety and how they do it.

X. Abdullah · 1 citation
Preprint Aug 2026

Securing Agentic AI: From Per-Action Checks to Trajectory Assurance

Charting these challenges provides a roadmap toward trustworthy autonomous agent deployment: security must become a verifiable property of the architectures, protocols, and runtimes that govern agent behavior, rather than an optional layer of guidance.

Alireza Lotfi, Subangkar Karmaker Shanto, Imtiaz Karim et al. · 2 citations
#artificial intelligence Preprint Sep 2026

Recoverability as a System Primitive for Long-Horizon AI Agents

AI agents can be interrupted while editing files, calling tools, or carrying out multi-step tasks. Restarting repeats completed work, but continuing from unverified or outdated progress can carry earlier errors forward. A saved state is not necessarily a suitable place to resume. We introduce recoverability as a system...

Zhi-Hui Zhang, Wei Liu · 0 citations
Review Aug 2026

Stateful Governance for Concurrent Agentic Systems

MasuGate is presented, a runtime architecture that keeps policies as reviewable programs while coordinating the state and effects needed to preserve their decisions, and suggests a path for integrating stateful governance boundaries into agent frameworks and provider-backed domains where agents act on shared resources.

Yuxiang Peng, Xiaodi Wu · 1 citation
Preprint Sep 2026

Beyond Agent Harnesses: Cross-Substrate Authority for Multi-Agent Systems

Agentic systems persist model-visible memory while mutating workspaces, while a runtime, registry, or approval service may hold authority state outside both. Identical final files can then require opposite safe actions. We call this the cross-substrate authority gap: decision- relevant authorization information resides...

Yang Li, Sergey Volkov, Hai Liu et al. · 0 citations
Preprint Aug 2026

AstronOS: A Unified Execution Model and Runtime for Long-Horizon Agentic Systems

A unified execution model that maintains a work item's persistent identity and versioned authoritative state across calls is introduced that is associated with higher end-to-end pass rates across fresh sessions in this benchmark, at a measurable time cost.

Zhen-Hang Nie, Gui Zheng, Xudong Sun et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.