[nmrg] review of draft-wmz-nmrg-agent-ndt-arch-04

chong feng <fengchongllly@gmail.com> Sat, 01 August 2026 02:48 UTC

Return-Path: <fengchongllly@gmail.com>
X-Original-To: nmrg@mail2.ietf.org
Delivered-To: nmrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 60413121F2C29 for <nmrg@mail2.ietf.org>; Fri, 31 Jul 2026 19:48:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785552526; bh=T3jjbU+5BoQgQsMwmsaA3nf/JqJp4lVkvvlwysluYq8=; h=From:Date:Subject:To; b=Uv97eKyzAtqHU5cw4G4/bfW3VFhvQcAPUZ+GIIqjeqJFpJNPpw1dDfoysMKAvWWx4 QnRl/mG2BIAFVmzW0yWYx3s2o9d0JJP1+KaC/zSyTfd7mRGro0QoFubN4d3PUxW6ZB uPmeFM/fRW17uUDXezL8tSkYaQGQ3fWIKHt/k+o0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.098
X-Spam-Level:
X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FORGED_GMAIL_RCVD=1, FREEMAIL_FROM=0.001, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ouP7T_5_u7P for <nmrg@mail2.ietf.org>; Fri, 31 Jul 2026 19:48:45 -0700 (PDT)
Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D540E121F2C1D for <nmrg@irtf.org>; Fri, 31 Jul 2026 19:48:45 -0700 (PDT)
Received: by mail-wr1-x42a.google.com with SMTP id ffacd0b85a97d-4798bea72f9so1191530f8f.1 for <nmrg@irtf.org>; Fri, 31 Jul 2026 19:48:45 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1785552525; cv=none; d=google.com; s=arc-20260327; b=Y433Vib1nPDfYeu23Ipg9hFBG0nbGWS6gmZOpeAivg/mJU1FgjSDLc7tNovVYt7ciA 9diwGJ4oSp/KIYkc+frOhbD6Xv9f1s/ZaLQHQwc/vVNMkHqqftvYP3zrenNzNr1gYRc2 txRDJUxRkGFKYPDwWlqe+MF4fmh0E+7cpkq3gNatqKvpvJqMS9gTREZ2nOv17oQ7B1o1 fquJtOUnFrhxT4jSrjZY3/IG3ctv5jpuQeSS9CoSoYxj2zQinOxaAgDNIGfohQlq2dmq w/KTcHvYtfP2bYHjZnjjQYhu+McJLDxKI5o9jJ1EZ/jx03BU6na33V0RBM/pGcPhKzSA CSSQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=A1pkDlw/D8c8tvThJB+eidLsmnrziXLegOC2o6OZ2ig=; fh=BCfrhW3EwlISxwvoG3lDRnksXw32aH61ba+p7muODSc=; b=Qg/BLlAjCpPTRHviC2tRUGzOWKEbUekbn6A6qrEHe79jWKnrkQDvd364Gvkq7rBKx3 XAJmjAVM6wjaiVBfsyH9KKuL0QywNpe/CY1s7rJgQVqhdLW/YJg42OM4sMpwFVSIKrCl tgw+b/8gWQhjJf7lSiZCD72hwX/DJ1Tzqh1Hbo0RqmoAehbbjBRYWJTaSmFHYbAmypYT sIkprCwuePxsWgIgWFiqxwnLXDVO6P3O4oDzpI99saQEl5L1KyZWd/QFSudH/JhNJgtH Wsf5SkO0Zj9EAAg3VE5lTtpbq/yijgOpTNabYkET3+vkxWlLWa7ROvKoUSVvqYkiBh/0 rPTQ==; darn=irtf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785552525; x=1786157325; darn=irtf.org; h=content-type:to:subject:message-id:date:from:mime-version:from:to :cc:subject:date:message-id:reply-to:content-type; bh=A1pkDlw/D8c8tvThJB+eidLsmnrziXLegOC2o6OZ2ig=; b=QYwMmndAP+SnhLMk80IvDY2XcXwin2DAoIKGdU7hpWcqGNf/t5XcA/vkQDvMovMBo8 Kl3XEV2C3isrsTC0OluYZP2HOVJkdS7mEHv45ypWzJ/uo5DV7t9UKnVaJc7FGRsgUkwE yR36r/8uRKlmpqaVRYyWpVRYPsfdIMFvIcGBYIwEAknnlNzuS7eH6TvHNRphh5ItRGXd w4HSfe4gRWInbRWn/lA7iL3nDYXmIvLlM8nUhSf3DmjsPasfMdEv552WBT5CI15qbjif 3zdW9n5gavPyv2+cxZ8NyNKQcSydVqEyjUA3uCV4tMS72URyVmEX0UhcQE7Ip1Toa0l+ gvCw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785552525; x=1786157325; h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=A1pkDlw/D8c8tvThJB+eidLsmnrziXLegOC2o6OZ2ig=; b=U/WslyL1K04Du72lQSmr9U4WcgCeYAnMga7/du5C4n4xLmvNEoDhqXcbx8Amyjha/v Wy6ofYjOigC+cSNbdKpvEBPMZoN364ytT2N2Zney/u4VBbt2YY/dfmyt6nxQs7g1DOcp aSSk8n/IN7A8+/H1LotQAqmL0ZmtL/0oN0Twh/VDMypWP0iAZyIkCEmYLmmI6okldr9v 0rRQjdtgAykn+4sx9wyTNUsNUyblqTp/CDe3heAqQqjyZxt8z+sMgrgX4aNP3WVew1yq LsiNTNQrvZAgmCg0R7Ic/oGP7/4wxLm5T1bVmF4pELOEfyJ2vm875DtK/iOk7HbNOnMq WkVw==
X-Forwarded-Encrypted: i=1; AHgh+RokDF1FUdUfWjpH9Vuxjk6FjnbhEDap0FaElEn7sIO4z4QAiD0Et4/2jD7OUEiFOvdNoyYn@irtf.org
X-Gm-Message-State: AOJu0Yzy3Gdm6t7EgdSVpR110GoO9vyg5sqezpkv4FizCzAa+51x11Jf okcjpYpR1cmLYPOyg6r9pxbVizydwpzp8xh7e7mzdGL6OK1+F/G2wYPGRXKOLBG/LTOmUwVibBA 8gxPYq+VgPpOj6nneMm/0vAc7hzVJKv4=
X-Gm-Gg: AR+sD13YjN4WrP79W1256JHpMQRgtI37jsxk9+9/UpyKfflZ9u7apWRm3QpSuL4NW/V hszypz4dERbStnjMdGAA1Kd9PZdp2s9RrvlNKzSz3VcnORTP04itj12BXf7ym4Jtcps8+GNldCx DB1h4CNNw/xWsFy2ZN6zBYvze057CDk6+wxxkyBHZbh01GpCV3XBCagYL16addQMcVdxl736I02 w/Suljnusa8Wj6HYsOho9VD5gXZBWTTKWk10VVZff4xQinjbmpKi3k3AnO7D5tFQ5GhrDDHsuXr cUj6eVd5DjxFn8IN33m5a+GBpOzwdXPiZKjzUyQbc29DljsoT9YCzz4yiFrDBoNU5XDcx5X77QH 86i+e3VvD+Z32gKlS7Ws1F55Z7u86cQIBSakud5bmVUSoEHjZJ7S86hqAx1QH
X-Received: by 2002:adf:eb8f:0:b0:47f:97f6:d39a with SMTP id ffacd0b85a97d-47fd72c7121mr2286530f8f.17.1785552524407; Fri, 31 Jul 2026 19:48:44 -0700 (PDT)
MIME-Version: 1.0
From: chong feng <fengchongllly@gmail.com>
Date: Sat, 01 Aug 2026 10:48:33 +0800
X-Gm-Features: AUfX_myGKXpQGVyAAV4JIO1oS6qSwPzqT51dXuARzJu3Qrz27jFTukXU1OSyIFI
Message-ID: <CAMaYprvLX48GYbpwwE3kSDx-eeDNHzH6CyWv+EaHSuwwMyT0Rg@mail.gmail.com>
To: Qin Wu <bill.wu@huawei.com>, nmrg@irtf.org
Content-Type: multipart/alternative; boundary="000000000000f1f6a50657f357e3"
Message-ID-Hash: A2SNMX5B5ZXT47SWIUTUMSY7EV4PHQQD
X-Message-ID-Hash: A2SNMX5B5ZXT47SWIUTUMSY7EV4PHQQD
X-MailFrom: fengchongllly@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-nmrg.irtf.org-0; header-match-nmrg.irtf.org-1; header-match-nmrg.irtf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [nmrg] review of draft-wmz-nmrg-agent-ndt-arch-04
List-Id: Network Management Research Group discussion list <nmrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/nmrg/scT3Tiv37nv09kdVR7wPeRi7Mr4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/nmrg>
List-Help: <mailto:nmrg-request@irtf.org?subject=help>
List-Owner: <mailto:nmrg-owner@irtf.org>
List-Post: <mailto:nmrg@irtf.org>
List-Subscribe: <mailto:nmrg-join@irtf.org>
List-Unsubscribe: <mailto:nmrg-leave@irtf.org>

Hi authors and all,

I have reviewed this draft; some comments, I think, may be discussed.

**1. Clarification of Network Applications and Interaction Models**

Section 5.2.1 treats "Network Applications" as a single category, but it's
actually lumping together two cases with very different interaction
patterns:

- Traditional deterministic systems (OSS/BSS, orchestration), and
- Autonomous AI agents acting as consumers of the Hybrid Agent System.

For traditional apps, RESTful APIs are a natural fit — but the draft
doesn't address how a deterministic API request gets translated into a
semantic intent the agent system can consume. For autonomous agents,
A2A-style interaction makes sense. The architecture needs to treat these as
distinct interaction models, not one generic "application interface."

**2. Need for an Explicit Semantic Layer**

Section 5.3.2 lists RESTful API, NLPI, A2A, and A2A-T as possible "intent
interfaces." These are transport mechanisms — they say nothing about what
the intent actually *means*. The architecture would be stronger with an
explicit semantic layer that describes intent objectives, scope,
constraints, context, and expected outcomes, independent of the underlying
transport (REST, A2A, MCP, etc.).

This is a familiar separation in IETF work — YANG models sit above
NETCONF/RESTCONF, not inside them. The same principle applies here. The
semantic model of an intent (or an agent delegation, or a capability
invocation) should not be coupled to the protocol carrying it.

The same point extends to agent delegation and function invocation inside
the Hybrid Agent System.

**3. In a single NDT, most tasks do not need a long-lived, business-bound
agent**

The draft defines Task AI Agents as long-lived entities bound to specific
business scenarios — Section 7's registration, discovery, and team
formation all assume pre-provisioned, persistent agents. I would argue this
single default is the root of the complexity, and that the draft conflates
three kinds of things that should be kept apart:

- **Tool / Function Module**: stateless, discoverable at call time, invoked
through MCP or similar. "Query BGP neighbor state," "push a config diff,"
"run a simulation." No lifecycle to manage.

- **Ephemeral Task Agent**: created by the Network AI Agent on demand for a
specific subtask, lives only as long as that subtask runs, destroyed when
done. Has a scoped goal, a set of tools, and internal state for the
duration. Needs no registry, no discovery, no health monitoring — the
spawning agent already knows what it created.

- **Persistent Agent**: a long-lived entity with independent goals, ongoing
state, and lifecycle management. Only makes sense for agents that need to
continuously sense their environment and adapt — not for one-off
operational functions.

The problem is not the number of agents — it is the combination of
"long-lived" and "business-bound." A persistent agent bound to a specific
business scenario accumulates state coupled to that business logic, and the
pool of such agents grows without bound, each dragging in registration,
discovery, monitoring, consistency, and lifecycle management. That
complexity is not inherent to agents; it is the product of that combination.

What genuinely needs to be long-lived — execution environment, context,
session state — is cross-cutting infrastructure and should not be bound to
any specific business. Business logic, by contrast, should be created on
demand, used, and reclaimed, or degraded to plain tool calls where possible.

Concretely: a scoped agent that checks BGP neighbor state during a
troubleshooting flow should be spawned, executed, and destroyed when the
task ends — not registered in a fabric and monitored for its whole lifetime.

So for a single NDT, the default should be tool calls or ephemeral agents.
Persistent agents should be reserved for rare cases with a clear, stated
justification — and even then, kept decoupled from specific business flows.
This shift would eliminate much of the Agent Fabric machinery for
single-domain operation and make the architecture considerably simpler —
without losing the value of agents for tasks that genuinely need multi-step
reasoning and tool orchestration.

**4. Agent Fabric: keep it for cross-domain, drop it for single-domain**

Following from the above: Agent Fabric (Section 5.3.5) becomes relevant
primarily in cross-domain scenarios (Section 5.3.4), where agents from
different administrative domains need to discover and negotiate with each
other. Within a single autonomous domain, if task agents are ephemeral and
capabilities are exposed as tools, there's no registration problem to solve.

A simpler internal model:

```
Network AI Agent
       |
      MCP
       |
Function Modules / Tools
       |
  (ephemeral task agents spawned as needed)
```

Agent Fabric stays for inter-domain agent collaboration, where discovery
and trust establishment are real problems. But it shouldn't be the default
path for every operational function inside a domain.

**Overall**

The architecture has a solid foundation — combining Hybrid Agent Systems
with Network Digital Twin is a good direction. But the draft currently
mixes three concerns that would benefit from cleaner separation:
communication protocols (REST, A2A, MCP), semantic models (intent,
delegation, capability description), and the entity lifecycle — where the
default should be ephemeral, with long-lived, business-bound agents
reserved only for cases with explicit justification. Untangling these would
make the whole thing more interoperable and less prescriptive about agent
decomposition.

Best

Frank