Agent and Orchestration Frameworks
What Is an LLM Agent
An agent is an LLM that:
- Receives a goal
- Decides which tools to use
- Executes actions (code, searches, APIs)
- Observes the results
- Continues until the goal is complete
Components: LLM + Tools + Memory + Planning + Action
Autonomy Taxonomy (L1–L5)
A classification framework for agents, analogous to the SAE levels of autonomous driving. It characterizes a system along two axes: scope of delegated decisions (what the agent decides on its own) and duration of operation without supervision (how long it runs without a human checkpoint). Source: survey by Deli Chen / DeepSeek (see below).
| Level | Description | Example systems | Human's role |
|---|---|---|---|
| L1 | Autocomplete | GitHub Copilot, TabNine | Drives every step; agent suggests continuations (+30–55% productivity) |
| L2 | Task execution | ChatGPT + tools, Claude chat | Specifies the task; approves each action |
| L3 | Multi-step with checkpoints | Claude Code, Cursor Agent | Defines the goal; reviews at checkpoints (10–100 actions; autonomous tactical decisions, strategic supervision) |
| L4 | Full autonomy, domain-limited | Devin, AI Scientist, SWE-Agent | Gives the goal; evaluates only the final output (operates for hours/days) — current frontier |
| L5 | Self-directed research | (hypothetical) | Defines the area; the agent chooses its own problems — aspirational |
Central insight: the barriers to L5 are not raw capability, but rather (1) persistent accumulation of knowledge across sessions, (2) reliable self-evaluation without human supervision, and (3) grounded scaling of agent architectures without degradation as complexity grows.
The frontier in 2026 operates at L4 (autonomous multi-step execution in limited domains); L5 has not yet been reached by any system. The boundaries between levels are not rigid — the same framework can operate at L3 for routine tasks and drop to L2 in novel situations that require human judgment.
Four architectural patterns
| Pattern | Form | Examples |
|---|---|---|
| Single-agent loop | plan → act → observe → reflect in a cycle |
ReAct, Reflexion, Self-Refine, Tree of Thoughts, LATS, RAP |
| Multi-agent collaboration | Distinct roles that review/complement each other | CAMEL, AutoGen, MetaGPT, debate, Mixture-of-Agents |
| Hierarchical orchestration | A supervisor decomposes and delegates to executors | MetaGPT (SOPs), ChatDev, AutoGen group-chat |
| Tool-augmented execution | Agent with access to codesearchbrowserDBlab | ChemCrow, HuggingGPT |
The most powerful systems combine several patterns.
Six fundamental open problems
- Cognitive loops — the agent repeats failed strategies without noticing.
- Context window limitations — long sessions (>100k tokens) lose the initial information.
- Novelty assessment — how to gauge whether an AI result is truly original (semantic similarity does not distinguish novel from obscure).
- Reproducibility — inference with temperature ≠ 0 gives different results on each run; high sensitivity to the prompt.
- Safety / dual-use — the capabilities that make the agent valuable also create risk.
- Cost — solving one SWE-bench case costs ~US$ 5–50 in API calls → economic barrier.
Relevance to the Koder Stack
The Stack operates today at L3–L4: Claude Code/Kode is canonically L3 (checkpoints), and the workflow engine (deterministic orchestration with subagents) directly instantiates the patterns of hierarchical orchestration (supervisor → executors) and multi-agent collaboration (adversarial verify, judge panels). The six problems map to real risks of our harnesses: cognitive loops (loop-until-dry with a counter), context window (compaction), reproducibility (schemas + adversarial verification).
Source: Deli Chen (DeepSeek), "From Copilots to Colleagues: A Survey of Autonomous Research Agents" (2026) — 95+ papers, 17 systems, a matrix of 6 dimensions. PDF. Meta curiosity: ~99% of the article was written by the author's own agent framework (Deli AutoResearch SKILL); credited co-authors: DeepSeek-V4-Pro (text) and GPT-Image2 (figures). Do not confuse it with the homonymous paper arXiv:2508.12752 ("Deep Research: A Survey of Autonomous Research Agents"), which is a different work.
Autopilots — always-on agents with governed identity
A category of agent formalized by Microsoft at Build 2026 (06022026) with Microsoft Scout: an always-active agent that operates in the background autonomously, without being reprompted for each task (it schedules cross-timezone meetings, prepares materials, anticipates risks). It is distinguished from the reactive chatbot/copilot by two new axes — persistence (always-on) and identity governance — and not by raw capability.
The architecturally relevant point is not the product, it is the identity model:
| Property | How Scout implements it | Why it matters |
|---|---|---|
| Per-agent own identity | Each agent runs under a governed identity in Entra (not a shared/anonymous service account) | Every action is attributable to a known actor in the directory → real auditability |
| Task-scoped credentials | Credentials limited to the task, redacted from logs/diagnostics, managed as a first-party service | Principle of least privilege applied to the agent; the secret does not leak into observability |
| Policy enforced before the action | DLPsensitivity labels (Purview) evaluated *efore any sendwrite; sensitive actions require human approval* | Autonomy within the compliance envelope, not outside it |
| Allowlisted access | Reaches only previously approved resourcesdestinations; reaches browserdesktop |