SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Persona-Execution Separation: A Two-Domain Architecture for Governed AI Agents

0
·2 views

Organizations deploying AI agents face a structural tension between allowing agents to adapt over time and maintaining immutable, auditable records required by compliance teams. Persona-Execution Separation (PES) is a proposed architectural pattern that addresses this by splitting an agent into two distinct trust domains: a low-trust persona side handling tone and instructions, and a high-trust execution side managing stateful actions, data access, and audit logs. A governed contract bridge connects the two domains, enforcing approval matrices, data loss prevention grading, and stable identity continuity across the boundary. The pattern ensures that changes to an agent's persona do not invalidate past execution logs or trigger re-certification of audit trails. PES is driven by the principle that LLM internal states cannot reliably distinguish cosmetic changes from substantive ones, making an external validation gate necessary.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Verdict Tool Forces Verified Bug Reproduction Before Any Patch Is Accepted

Verdict is an open-source agent harness designed to enforce evidence-based bug investigation before any fix is written or merged. The tool uses three sequential subagents — Hunter, Surgeon, and Insurance — to identify trigger conditions, localize the responsible code change, and generate a regression test. No patch is considered valid unless it passes a test case that was built from verified, reproducible failure evidence. All observations are logged in an evidence ledger and cannot be discarded, even if they weaken a proposed explanation. Verdict runs as a GitHub Action or standalone CLI, with maintainers controlling which commands and environments the agents are permitted to use.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Writer Catches Himself Twice: How Visible Lists and Identical Prompts Skewed AI Randomness Tests

A developer published a self-experiment attempting to measure randomness in digit selection, only to issue a correction within 36 hours after spotting critical methodological flaws. The original test had the author writing 100 digits while viewing the previous ones, meaning apparent fairness likely reflected list-tracking rather than genuine randomness. A follow-up control — asking for single digits without any visible list — produced extreme bias, with responses converging almost entirely on the number 7. A further error was caught when all test prompts turned out to be byte-identical, potentially reducing 100 trials to one repeated result; adding unique request IDs still returned 7 in 50 out of 50 trials. The author concluded that observed patterns were artifacts of context and input structure, not meaningful signatures of how choices are made.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Cold Email AI Fails Without Vector Databases for Fact Retrieval

AI-powered cold email tools often produce confident but inaccurate personalizations because large language models generate plausible-sounding text rather than verified facts. A more reliable approach splits the task into two stages: a retrieval layer that assembles confirmed, timestamped signals about a prospect, and a generation layer where the LLM writes copy based only on those verified facts. Signals such as recent job changes, funding events, tech stack shifts, and public posts are embedded as vectors and retrieved based on both relevance and recency. Stale data is a major failure point, so retrieval systems should apply a recency weight alongside similarity scores to avoid referencing outdated information. Additional pitfalls include entity resolution errors, such as conflating two people with the same name or attributing an acquirer's news to a smaller company, which are data-matching problems rather than model limitations.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Integrate Proxies with Selenium, Puppeteer, and Playwright for Web Automation

Browser automation tools like Selenium, Puppeteer, and Playwright are widely used for web scraping, testing, and SEO monitoring, but running them without proxy rotation often leads to IP bans and rate limiting. Pairing these frameworks with rotating proxy services distributes requests across multiple IP addresses, reducing detection risk and enabling access to geo-restricted content. Selenium, the oldest of the three with over 15 years of adoption, supports proxy configuration through browser options in languages like Python, Java, and JavaScript. Puppeteer, a Node.js-only tool, is optimized for headless Chrome and suits high-volume scraping workflows with similar proxy integration support. Proxy use does introduce tradeoffs, including added latency and costs ranging from roughly $5 to $50 per gigabyte depending on the proxy type chosen.

0 comments Read more at DEV Community