The Agent Architect #40: Web Bot Auth (Signed Agents)

本周模式

Web Bot Auth (Signed Agents)

是什么:

智能体用 Ed25519 对每个 HTTP 请求做加密签名，并在 /.well-known/http-message-signatures-directory 发布公钥；源站验证签名后决定放行、拒绝、限流或对流量计费。

何时使用:

当源站需要区分合法智能体与爬虫，并依据经过验证的智能体身份而非可伪造的 IP 段或 User-Agent 头来授予不同访问层级时。

注意:

密钥轮换和有效期窗口管理会成为运维负担；签名校验若配置不当、实现不够严谨，就会给重放攻击或签名伪造留下可乘之机。

本周智能体AI动态

• Announcing vllm-metal: Concurrent Serving on Apple SiliconvLLM

  vllm-metal brings vLLM's serving stack to Apple Silicon with lower time-to-first-token under concurrent load.

• Gemini 3.8 text-to-speech says helloGoogle DeepMind

  Gemini 3.8 text-to-speech model released.

• Better prompt caching for GPT-6OpenAI

  GPT-6 improves prompt caching with higher hit rates, diagnostics, explicit breakpoints, and controls to reduce latency and costs.

• DeepEdu-v1: Efficient and Scalable Agentic LLMs for Vietnamese EducationarXiv cs.AI

  DeepEdu-v1 provides efficient Vietnamese language tutoring using local LLMs aligned with national curriculum.

• Introducing LangSmith Fine-TuningLangChain

  LangChain released LangSmith Fine-Tuning and SmithTune CLI for model post-training without manual data pipelines.