AI AGENT技术与实践蓝皮书 WorkBuddy Harness技术与实践指南

A I A G E N T 技 术 与 实 践 蓝 皮 书 WorkBuddy Harness 技术与实践指南 把 UI 上的按钮，翻译回磁盘上的文件与发给模型的请求——Harness 设计拆解 大鹏主编智见 AI 出品 第 4 章 记忆系统：三层存储与五类内容··············14 前言··············································5 4.1 先看规则原文：一段随每次请求注入的说明书·································································144.2 存储位置与文件形态·································154.3 治理规则：限额、蒸馏与覆盖·····················164.4 实战：三个高频问题的记忆侧答案···············164.5 补充机制：会话检索与双轨对照··················174.6 边界······················································17 第 1 章 从按钮到文件：一次对话的解剖···············6 1.1 第一环：你的话加上它的记忆，一起出发········61.2 第二环：模型只做一件事·····························71.3 第三环：工具执行，风险拦截·······················71.4 第四环：留下痕迹······································71.5 第五环：交付与沉淀···································81.6 拼起来：一张全景图···································81.7 这本书怎么读············································9 第 5 章 系统提示词的拼装：模板、片段与插槽········18 5.1 先看结果：一次请求的提示词长什么样·········185.2 动手：找到你机器上的模板························195.3 四种交互模式：换模式就是换片段组合········205.4 插槽：记忆和身份怎么进提示词··················215.5 变量全表与模式矩阵·································215.6 验证：提示词不落盘，但注入有痕迹···········225.7 架构判断与使用启示·································235.8 边界与未决·············································23 第 2 章 Harness 心智模型：官方五层与本书文件地图···9 2.1 为什么需要「挽具」这个词··························92.2 官方五层模型··········································102.3 把五层当索引用········································112.4 五层×本书章节对照总表····························112.5 一个容易混淆的区分：Harness 与模型·········11 第 3 章 ~/.workbuddy 全景：SQLite 管调度，文件管 第 6 章 身份系统：SOUL、IDENTITY、USER 与专家人设的边界···········································24 3.1 动手：三分钟逛完数据目录························123.2 六个家族················································123.3 关键判断：为什么 Harness 走文件，调度走数据库···························································133.4 两个实用推论··········································143.5 隐私视角：这个目录里躺着什么··················143.6 地图交接················································14 6.1 三块界碑的分工·······································246.2 注入去向：身份进了哪次请求·····················246.3 事故与边界：身份撞上专家························256.4 语气风格：可插拔的表达层························256.5 实战：安全地定制人格······························266.6 边界······················································26 第 7 章 专家解剖：一个带 UI 的 SubAgent 插件······27 第 11 章 连接器与 MCP：工具边界、OAuth 与审批····41 7.1 解剖台：一位专家的完整文件清单···············277.2 人设提示词：专家的大脑···························287.3 运行时：接管是如何发生的························297.4 专家团：编排层的另一形态························307.5 另一位样本：带规则的专家························307.6 实战：装专家前检查三件事························307.7 边界······················································31 11.1 两套接入体系·········································4111.2 数据流向：连上之前想清楚······················4111.3 审批：拦在哪一步···································4211.4 实战：接入第一个 MCP···························4211.5 边界·····················································42 第 12 章 安全与隐私：注入面、明文凭证与沙箱·······43 12.1 风险一：提示词注入——内容变成指令·······4312.2 风险二：本地明文凭证····························4312.3 风险三：文件系统——权限模式与沙箱·······4312.4 风险四：数据出域的完整地图···················4412.5 十分钟安全自查·····································4512.6 边界·····················································45 第 8 章 插件系统：五个市场、三层作用域与供应链····31 8.1 三件套：登记、注册表、开关·····················318.2 五个市场：一次生态考古···························318.3 插件能注入什么：四类内容························328.4 运行数据与生命周期·································338.5 登记条目长什么样····································338.6 供应链视角：三问一习惯···························348.7 边界······················································34 第 13 章 生态坐标：同源、兼容与产品矩阵···········46 13.1 出身：从代码助手到通用助手···················4613.2 文件级的亲缘证据··································4613.3 产品矩阵中的位置··································4713.4 对使用者的三个推论·······························4813.5 边界·····················································48 第 9 章 技能与规则：双层 SKILL.md 与 WORKBUDDY.md································35 9.1 技能是什么：一段按需加载的方法论············359.2 双层目录：用户级与项目级························359.3 规则文件：项目的宪法······························369.4 十五分钟：写你的第一个技能·····················379.5 边界······················································37 第 14 章 实战：排查与第一次安全定制···············48 14.1 五步排查法············································4814.2 第一次安全定制：完整流程······················5014.3 排查案例走一遍·····································5014.4 高阶组合：三个实用模式·························5114.5 维护节奏···············································5114.6 本章边界···············································51 第 10 章 会话与证据：JSONL、traces 与审计日志····38 10.1 会话流水：事件的 ParentID 链·················3810.2 文件历史：改动前的快照·························3910.3 执行轨迹与审计：另外两本账···················3910.4 实战：两个高频排查·······························4010.5 事件之外：providerData 里的运行时元数据·································································4010.6 隐私交叉提示········································4010.7 边界·····················································40 第 15 章 复用路线：视频课、认证课与图书的切法·····52 15.1 一节课的骨架：90 分钟讲透 Harness··