Production-Grade Python Agent Architecture: Topology Orchestration, State Persistence, and Secure Runtime

Keynote
Shanghai
9:30 a.m. - 10:10 a.m.
  • Yanjun Zhou Solutions Architect, Google Cloud

    Solutions Architect at Google Cloud.

    zhouyanjun

Abstract

A rigorous software-engineering look at production-grade Python agent systems: event-driven multi-agent topology orchestration, distributed state and long-term memory persistence, and secure sandboxed high-concurrency runtimes.

Details

In LLM-driven engineering practice, building a local agent prototype is relatively easy. But once a system enters high-concurrency, long-running production environments, a series of demanding engineering challenges follow: deeply nested control flows can easily cause memory bloat and deadlocks; when the compute nodes hosting agents restart unexpectedly or drift, lossless recovery of long-running tasks becomes difficult; and when executing dynamic tools (tool invocation), defending against prompt injection and building complete security boundaries tests any architect.

This talk faces these challenges head-on, dissecting the architectural evolution and runtime design of production-grade Python agent systems from a rigorous software engineering perspective. It is organized around three core pillars:

Event-driven hierarchical multi-agent topology orchestration: using Python async primitives and higher-order control-flow abstractions to replace verbose, tightly-coupled graph topologies and elegantly decouple multi-agent planning logic.

Distributed state machines and long-term memory persistence: building stateless compute nodes and using external distributed storage and serialization to achieve lossless hot recovery of agent state during failover.

Secure sandbox isolation and high-concurrency agent runtime design: the security boundary of tool invocation at runtime — executing dynamic tool calls in lightweight physically-isolated sandboxes, plus multi-threaded resource scheduling, circuit breaking, and dynamic credential injection to build a true zero-trust execution environment.

By the end of the talk, the audience will take away a complete architectural paradigm for evolving agent systems from local prototypes into highly available, secure, and elastically scalable enterprise applications.