← 首页|学术|BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placement
cs.MA, cs.AI · 2608.14668 · 2026/08/02

BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placement

Wang, Kaixiang, Lin, Yidan, Lou, Jiong, Li, Jie
TL;DR:BRA-Audit:把 LLM-MAS 审计调度建模为「固定审计调用预算下的审计点放置」问题——执行建模为动态依赖图,贪心调度器按累积暴露度优先审计,minimize 未检查暴露,在 guard 性能与 token 成本之间取最优。

🎯 问题

审计 agent 面临效率困境:只在尾部审计会因轨迹太长而削弱效果、扩大回滚范围;每轮审计每个 agent 则 token 成本高。如何用最少 token 保住 guard 性能?

🔬 方法

执行建模为动态依赖图;审计调度 = 固定预算下审计点放置,minimize 累积未检查暴露(cumulative unchecked exposure);贪心调度器优先审计高影响节点,兼顾检测/定位与回滚范围。
章节结构(全文标题提取):
Introduction
Related Work
System Model
Method
Experiment
Conclusion

📊 结果

在固定审计预算下比 end-only 和 every-round 策略更好权衡检测率/定位精度/token 成本;把「在哪验证」变成可优化的调度问题。

💡 与研究方向关联

与 Hallucination Snowball 同题的正解:审计点放置决定幻觉能否被拦下。agent 运行时的「预算化验证」——每 token 都是成本,验证要花在最容易出错的边界——与 duplex 的延迟预算调度同理。

📝 原文摘要

▶ 原文摘要 Abstract
LLM-based multi-agent systems (LLM-MAS) solve complex tasks through specialized collaboration, but inter-agent dependencies can propagate hallucinated or malicious outputs into system-level failures. Auditor agents mitigate these risks, yet existing strategies face an efficiency dilemma: end-only auditing reviews long trajectories and final outputs, potentially weakening audit effectiveness and enlarging rollback scope, while auditing every agent each round improves detection and localization at high token cost. How can guard performance be preserved while minimizing token cost? To address this problem, we propose BRA-Audit, a budget-aware runtime auditing framework that models MAS execution as a dynamic dependency graph and formulates audit scheduling as audit-point placement under a fixed audit-call budget to minimize cumulative unchecked exposure. Its greedy scheduler prioritizes influential and long-unaudited regions, while trusted audit points enable localized recovery. Across structured coordination, complex reasoning, and open-ended tasks, BRA-Audit restores performance close to the clean setting, remains competitive with heavy guard methods and reduces end-to-end token consumption by \(17.2\%\)--\(40.6\%\).
Deep Read · 2026-08-19高松灯 / Agent 日报 · 多智能体
多智能体运行时审计预算审计点放置