TOPAS: Workflow-Aware Prefix-State Scheduling for Multi-Agent LLM Serving

agent 2608.25523 — Cross-paper Synthesis

TOPAS (2608.25523) — L3 per-paper synthesis #

Target: TOPAS: Workflow-Aware Prefix-State Scheduling for Multi-Agent LLM Serving Mode A (per-paper). Category: algorithm. Related cohort read: 1706.03762, 2005.11401, 2110.14168, 2301.04104, 2401.18059, 2402.06363, 2407.21783, 2410.02367.

The assigned cohort is a category-of-convenience: all eight peers carry

category: algorithm, but none is a serving-scheduler paper. TOPAS is a

systems / online-scheduling contribution wearing an algorithm tag (its arXiv

primary is even cs.CL). So the relatedness here is **structural and

methodological, not topical**. Three axes organize the cohort:

Axis A — "the contribution is a scoring/utility construction, not a new loss."

TOPAS's load-bearing object is a per-event transition Score

$\mathrm{Score}(S'\mid S_t)=J^{\text{age}}_{\text{admit}}-J_{\text{move}}-J_{\text{redo}}-J_{\text{revoke}}+V_{\text{reuse}}$

whose novelty lives in how a request is valued (expected reduction of the

task's longest remaining path, expectation outside the LP operator)

[2608.25523]. This is the same "no formal theorem, rigor lives in

the objective construction" pattern that runs through the whole cohort:

DreamerV3's cross-domain robustness lives entirely in four dimension-free

transforms with 无形式化作者证明 — 仅实证 [2301.04104];

the GSM8K verifier's value is a token-level value function with zero display

equations [2110.14168]; RAG is "a probabilistic modeling paper,

not a proof paper" [2005.11401]; Llama 3 is explicitly

"engineering/recipe, 非定理" [2407.21783]. TOPAS belongs to this

empirical-heuristic family and shares their signature gap — no competitive

ratio, no bound (see §3).

**Axis B — closest genuine neighbor: the verifier / test-time-search paradigm

(2110.14168).** TOPAS's "value an admitted request by expected drop in the

critical path, not by its own service time" [2608.25523] is

structurally a value-function-guided search over a candidate pool, exactly

the shape of "train a verifier to score 100 sampled solutions and return the

best" [2110.14168]. Both replace a myopic greedy choice (bigger

generator / FCFS request order) with a scored search over a constructed

candidate set (GREEDYPACK-emitted states / 100 completions). This is the

tightest analogy in the cohort and the source of the sharpest transfer idea

(§5).

Axis C — the KV-cache / serving substrate (1706.03762, 2410.02367). TOPAS is

about KV-cache residency; its entire premise is that the Transformer's

attention KV cache is the scarce resource being scheduled. The Transformer paper

is the upstream cause of the problem — self-attention's per-token KV is what

makes prefix residency both reusable and expensive [1706.03762].

SageAttention attacks the same KV/attention cost from an orthogonal direction:

compress the compute per token via INT8 quantization [2410.02367]

rather than schedule which KV stays resident. They are **complementary knobs on

one bottleneck** (§5 hybrid).

Weaker / mostly-contrastive neighbors. RAG (2005.11401) and RAPTOR

(2401.18059) share the word "retrieval" and the frozen-index-vs-hot-loop

architectural motif [2005.11401], but their "prefix"/context is

a document, not a resident KV cache; the relation is a false-friend and is

flagged as such below. StruQ (2402.06363) and Llama 3 (2407.21783) are in-scope

only via Axis A (empirical algorithm papers) and provide **method-shape

contrasts**, not domain overlap.


2. 本篇 vs 相关论文的 delta (what's new, incremental, contradictory) #

What is genuinely new in TOPAS (vs the whole cohort). No peer schedules

prefix residency as a first-class decision jointly with request admission

under a shared KV budget; TOPAS claims to be the first to do so

[2608.25523]. Against the serving substrate papers this is a

level-shift: the Transformer defines the KV cache

[1706.03762] and SageAttention shrinks its per-token cost

[2410.02367], but neither reasons about which prefixes should

occupy the budget across a workflow DAG. TOPAS's delta is the coupling: it

turns "who is resident" from a cache-eviction byproduct into an explicit,

JCT-scored action.

Incremental vs the value-function/search paradigm (2110.14168). TOPAS

inherits the verifier paper's core move — *score a constructed candidate pool

with a learned/estimated value, commit the arg-max* — but adds two things the

GSM8K work never needed. (i) An online, sequential setting: TOPAS re-scores

at every scheduling event and must account for transition costs (move/redo/

revoke) that have no analogue in offline top-1 reranking

[2608.25523]. (ii) A DAG-structured value where the

expectation sits outside the longest-path operator so the critical path can

change across residual realizations [2608.25523] — a strictly

richer value target than the verifier's scalar per-token correctness

probability [2110.14168]. The delta is: same skeleton, harder

value estimation, plus a cost model.

Contradictory / tension: "search monotonicity" cuts the opposite way. The

verifier paper reports that test-time search is non-monotone — accuracy

"rises to ~400 completions then falls" from adversarial over-optimization

[2110.14168]. TOPAS's search, by contrast, is bounded by

feasibility and cost, not by over-optimization: GREEDYPACK "enforces

feasibility by construction" and every candidate is charged move/redo/revoke, so

larger search cannot silently degrade the committed decision

[2608.25523]. This is not a direct disagreement (different

objects searched) but a contradiction of intuition: in reranking, more

candidates can hurt; in TOPAS's cost-regularized state search, the cost terms

are the built-in Occam pressure. Whether TOPAS actually escapes over-optimization

or merely hides it behind un-aged cost terms is an open attack (§3).

Delta vs the "frozen expensive resource" architectural motif. RAG's

signature negative design choice is don't refresh the document index — freeze

$\text{BERT}_d$, move only the query encoder [2005.11401].

TOPAS's $V_{\text{reuse}}$ term is the inverse intuition: it explicitly pays to

keep an expensive resource hot ($\mu\ell_a/B_{\text{swap}}$ weights retaining

a costly prefix that is about to be reused) [2608.25523]. RAG

amortizes a static index by never touching it; TOPAS dynamically decides

residency because its "index" (the KV prefix) competes for the live compute

budget. The delta clarifies TOPAS's niche: it is a dynamic-residency answer

where RAG's static-freeze answer does not apply.

Non-delta / false friend. RAPTOR's "retrieve at multiple abstraction levels"

[2401.18059] and TOPAS's "longest remaining path over a DAG" both

manipulate a tree/graph, but RAPTOR's tree is a content index and TOPAS's DAG

is a dependency graph; there is no methodological transfer, only a superficial

graph-shaped resemblance. Marked to avoid over-claiming relatedness.


3. 可攻击面 (adversarial rebuttal against specific claims) #

**Attack 1 — the "first to jointly optimize" novelty claim is a definitional

boundary, not a moat.** TOPAS asserts it is "the first multi-agent LLM scheduler

to jointly optimize prefix residency and request admission"

[2608.25523], but its own related work concedes KVFlow already

does workflow-aware KV eviction+prefetching. The claim survives only by defining

"joint with admission" narrowly. An adversary notes this is the same

narrow-novelty posture as Llama 3's "just a boring dense Transformer + DPO"

[2407.21783] — defensible but thin; the contribution is the

coupling and the JCT-scored utility, which should be argued on the numbers, not

on first-of-kind.

**Attack 2 — the value estimator's independence assumption is load-bearing and

unverified. TOPAS models unfinished-stage residuals independently**

conditioned on history to compute the expected longest path

[2608.25523]. This is precisely the kind of assumption the

cohort teaches us to distrust: the Transformer's $1/\sqrt{d_k}$ scaling rests on

an i.i.d. component assumption that "breaks after training makes q,k

correlated" [1706.03762]; RAG's marginal is a top-$K$ truncation

whose dropped mass is acknowledged lossy [2005.11401]. TOPAS's

independence across ReAct rounds within one agent is even more suspect — a hard

sub-task inflates every stage of an agent, so residuals are positively

correlated, which would make $\hat{L}_i$ systematically underestimate the

true critical path and mis-rank candidates. The paper flags this in its own

surprise list but does not rebut it.

Attack 3 — asymmetric aging distorts the seconds-denominated Score. Aging

scales only the admission benefit $J^{\text{age}}_{\text{admit}}$ while leaving

$J_{\text{move}}/J_{\text{redo}}/J_{\text{revoke}}$ un-aged

[2608.25523]. Contrast DreamerV3, whose entire thesis

is that you must make all objectives dimension-invariant together with shared

max(1,·) constants, because weakening any one transform degrades some task

subset [2301.04104]. By DreamerV3's own logic, TOPAS's one-sided

$g_i(t)$ multiplier is exactly the kind of scale inconsistency that should cause

starvation-vs-thrash regressions at extreme load — an unforced asymmetry the

paper leaves un-ablated across the age-weight strength $\rho$.

Attack 4 — the toy that motivates the method actually favors the baseline.

The Fig. 2 Gantt used to argue "neither pure policy suffices" shows SRPT winning

on mean JCT (21.5 vs LPM's 24) [2608.25523]. Using an example

where the maligned baseline wins to motivate your method is rhetorically weak; a

reviewer can reasonably ask why the headline synthetic gains (up to −39.8%) then

appear only at scale, suggesting the benefit is a batching/contention effect,

not the elegant path-marginal, and that a simpler contention-aware SRPT variant

might capture most of it.

Attack 5 — no bound, exactly where one would bite. Like every peer, TOPAS

offers no competitive-ratio guarantee vs the offline optimum

[2608.25523]. This is standard for the cohort (the verifier,

RAG, DreamerV3, Llama 3 all substitute curves for bounds

[2110.14168][2005.11401]). But TOPAS is an

online policy under unknown ReAct rounds and unknown arrivals, so a

$O(\log)$-competitive statement would be far more valuable here than for an

offline reranker — and its absence means the 60.5% ablation gap over TOPAS-base

[2608.25523] could be workload-overfit rather than a property

of the design.

Attack 6 — single-GPU, single-model, no public code. All results are one

A100-80GB, one Qwen2.5-32B [2608.25523], and the

implementation is 未公开 [2608.25523]. Compared

to the cohort's reproducibility spread (SageAttention pip install

[2410.02367], RAG in HuggingFace

[2005.11401], StruQ open repo

[2402.06363]), TOPAS sits at the closed end,

weakening external validity of its topology-dependent gains.


4. 生态位 (paradigm-shift positioning, adoption evidence) #

Paradigm coordinate. TOPAS lives at the intersection of two established

paradigms: (i) test-time value-guided search (the verifier lineage

[2110.14168]) and (ii) workflow-aware LLM serving (Parrot/

Autellix/KVFlow, its baselines). Its move is to import the "score a candidate

pool by a value function, commit arg-max" paradigm **into the online serving

scheduler**, with the twist that the value is a DAG-critical-path marginal and

the search space is joint (resident-prefix set × admitted-request set). This is

an incremental paradigm graft, not a shift — comparable in ambition to RAPTOR

grafting hierarchical summarization onto RAG [2401.18059] rather

than to the Transformer's genuine architecture-replacing shift

[1706.03762].

Where it sits on the "algorithm vs system" spectrum. The cohort spans pure

algorithm (Transformer, SageAttention's Smooth-K correctness proof

[2410.02367]) to pure recipe/system (Llama 3's operational

16K-GPU reliability tables [2407.21783]). TOPAS is closer to

the system end: its rigor is a utility-decomposition sanity check, and its

contribution is realized as an SGLang scheduling module bound tightly to

SGLang-specific mechanics (radix-tree prefix cache, autoregressive preemption

reconstruction) [2608.25523]. This tight coupling is

both its adoption path (drop-in for SGLang users) and its portability risk (the

$J_{\text{redo}}$ cost model assumes SGLang's re-decode preemption, not vLLM's

recompute-or-swap).

Adoption evidence: essentially none yet, by construction. The paper is

2026-08, single-lab, no released code [2608.25523].

Contrast the strong-adoption anchors in the cohort: the Transformer is the

substrate of "essentially all modern LLMs" [1706.03762],

SageAttention's Smooth-K "已被后续多个 attention 量化工作采用" with a spawned

Sage2/Sage3 lineage [2410.02367]. TOPAS has no such

downstream trail. Its niche viability therefore rests entirely on the

topology-dependence finding: it pays off on recurrent-central-prefix

workflows (MetaGPT-TL, −22.0%/−26.6%) and much less on one-pass pipelines

(MetaGPT-SOP, −9.8%, and it loses SOP p99 to LPM and SOP throughput to

Autellix-LAS) [2608.25523]. The honest positioning: TOPAS is a

specialist for hub-and-spoke agent orchestrations (TeamLeader-style), not a

universal FCFS replacement.

Ecological pressure from the substrate. SageAttention-style per-token cost

reduction [2410.02367] and larger KV budgets erode part of

TOPAS's premise — if the budget $B_t$ grows, heterogeneous co-residency shrinks

the batch less, and the whole motivation (Table I's 1.8–1.9× makespan penalty)

softens. TOPAS's niche is widest precisely when the budget is tight relative to

prefix length; commodity trends toward cheaper attention slowly narrow it.


5. 未探索方向 (hybrid / adaptive directions from the cluster) #

**H1 — Learned residual model instead of the independence assumption

(TOPAS × verifier lineage).** The single most productive graft: replace TOPAS's

hand-modeled, independence-assuming residual distribution $Z_{i,v}(t)$

[2608.25523] with a learned per-stage value predictor trained

exactly like the GSM8K token-level verifier — a network that ingests

(problem, partial trajectory) and emits expected remaining service, capturing

cross-round correlation the current model discards

[2110.14168]. This directly answers Attack 2 and turns

$\hat{L}_i$ from an analytic guess into a calibrated estimator. The verifier

paper's coverage-vs-accuracy lesson (its 核心技术壁垒, stated inside

[2110.14168]) warns the training data must come from

diverse scheduling traces, not a converged policy.

H2 — Scale-invariant Score via DreamerV3 transforms (fixes Attack 3). Apply

DreamerV3's percentile/normalization discipline to make all five Score terms —

including the un-aged costs — dimension-consistent under one shared scale

[2301.04104], so a single ($\rho, \beta$) works across arrival

rates and prefix-length regimes without per-workload retuning. TOPAS today needs

$H_{\text{age}}$ "the observed service-time scale" as an ad-hoc normalizer

[2608.25523]; DreamerV3 shows a principled percentile-range

normalizer with a max(1,S) floor is more robust to sparse/dense mixes — the

serving analogue of sparse/dense reward.

H3 — Compute-knob × schedule-knob co-design (TOPAS × SageAttention). The two

papers optimize the same KV/attention bottleneck on orthogonal axes: TOPAS

decides which prefix is resident; SageAttention makes each resident token

cheaper (INT8 $QK^\top$) [2410.02367]. A quantized prefix cache

would change TOPAS's constraint constants ($\ell_a$ in bytes, $\mu$, and the

$T_{\text{move}}$ swap time all shrink), enlarging feasible batches and possibly

flattening the co-residency penalty. Unexplored: does aggressive prefix

quantization make explicit residency scheduling unnecessary, or does it just

raise the contention ceiling? A joint sweep (quant level × TOPAS on/off) would

map when scheduling still pays.

H4 — Adaptive mode-switching by measured topology. The SOP-vs-TL split

[2608.25523] shows TOPAS's benefit is a function of

prefix-recurrence structure. An unexplored adaptive controller could detect

one-pass vs recurrent-hub topology online (e.g. via observed agent-revisit rate)

and fall back to cheap LPM/SRPT when the DAG is one-pass — spending the 1.9 ms

search budget only where it pays. This mirrors DreamerV3's "one fixed config

across domains" ambition [2301.04104] but inverted: instead of one

robust policy, a router over the existing baselines with TOPAS as the

heavy-hitter for hub workflows.

**H5 — Channel-separation thinking for prefix isolation (TOPAS × StruQ, weak but

real).** StruQ's core structural idea is that mixing two logically distinct

things in one channel is the bug, and reserved-token separation is the fix

[2402.06363]. TOPAS's co-residency pathology is a memory-side

analogue: mixing heterogeneous prefixes in one KV budget shrinks the batch. An

unexplored direction is namespace-partitioned KV budgets (dedicated

sub-budgets per agent-role, reserved like StruQ's tokens) as a static structural

baseline against TOPAS's dynamic scheduling — cheaper and starvation-free, at

the cost of TOPAS's adaptivity. Worth testing as a lower bound on how much

dynamic scoring actually buys over simple partitioning.


论证链 note (citation-lint compliance) #

Every input entity in scope is cited above with a formal cross-layer ref to an

existing heading: 2608.25523 (self), 1706.03762, 2005.11401, 2110.14168,

2301.04104, 2401.18059, 2402.06363, 2407.21783, 2410.02367. Slugs follow the

numbered L2 heading convention (1-tl-dr, 2-q1-q2-q3, 4-作者证明,

5-实验与数据, 7-实现-cross-reference, 3-架构-方法图); the SageAttention file

uses §-prefixed headings, so its slugs are §1-tl-dr, §4-作者证明,

§7-实现-cross-reference. Where a sub-idea (e.g. the verifier's 核心技术壁垒)

lives inside a section rather than as its own heading, the enclosing heading is

cited to keep anchors valid.