Agent-Native Telemetry: Verifiable State-Delta Evidence for Autonomous Operations
2026-08-17 • Distributed, Parallel, and Cluster Computing
Distributed, Parallel, and Cluster ComputingArtificial Intelligence
AI summaryⓘ
The authors explain that current system logs are made for humans and often include a lot of extra text that makes it hard for AI agents to understand and use efficiently. They developed a new system called Agent Telemetry Protocol (ATP) that organizes operational data into concise, verifiable pieces instead of long text, making it easier and safer for AI to process. Their design also ensures data authenticity and completeness, reduces storage and processing costs significantly, and protects against tampering and prompt injection attacks. This new approach is tested and shown to be much more efficient and secure compared to traditional logging methods.
agent-native telemetryAgent Telemetry Protocol (ATP)State-Delta Evidence Ledgercontent-addressed schemashash-chainingcryptographic provenancemicroservices benchmarksadversarial storage mutationsprompt injectionlarge language models (LLMs)
Authors
Jun He, Deying Yu
Abstract
Operational telemetry is predominantly engineered for human reading: systems repeatedly serialize verbose prose, static keys, and redundant context across billions of log lines. As autonomous AI agents become primary operational consumers, feeding them traditional logs wastes scarce context capacity parsing lexical syntax rather than reasoning over system state changes -- all while lacking cryptographic guarantees of provenance or collection completeness. This paper introduces agent-native telemetry, an operational evidence architecture for autonomous machine operators founded on verifiable state deltas rather than human prose. We present the Agent Telemetry Protocol (ATP) and the State-Delta Evidence Ledger, an implementation that structures operational facts into four core evidence primitives (Transitions, Observations, Relations, and State Checkpoints) governed by content-addressed schemas, while isolating uncurated text as digest-verified opaque references. Producers sign and hash-chain batches for atomic collector append. Verified records feed two parallel agent access paths: a stateless protocol decoder emitting compact positional rows, and a stateful semantic gateway serving bounded graph capsules. We prove an information-preservation lower bound and formalize a ledger-relative verified negative theorem for provable event non-occurrence. On distributed microservice benchmarks (AIOpsLab and OpenTelemetry Astronomy Shop), ATP reduces raw wire payload and modeled cloud query scan costs by 96.4% relative to OpenTelemetry JSON, reduces LLM context tokens by 88.8% and query operations by 66.2%, detects all 500 tested adversarial storage mutations, and yields zero successful prompt injections across 50 adversarial trials per ATP configuration.