第三阶段

阶段概述​

第三阶段（第8-14章）：通过 ReAct 思维-行动循环、MCP 工具协议、安全护栏与技能封装，将静态的知识库升级为具备感知-决策-执行能力的自主智能体系统。本阶段的终点不是“更聪明的笔记”，而是会自己干活的数字员工。​

​

​

核心架构概念​

​

#cBOtWCziJlId text { white-space: pre; }#cBOtWCziJlId .fb0 { stroke: var(--N900-FG, 0.15); }#cBOtWCziJlId .fb0 {stroke: rgba(31,35,41, 0.15)}#cBOtWCziJlId .fx0 { stroke-miterlimit: 10; }#cBOtWCziJlId .fx0 {stroke-miterlimit: 10}#cBOtWCziJlId .fa1 { fill: rgb(187, 191, 196); }#cBOtWCziJlId .fa1 {fill: rgb(187, 191, 196)}#cBOtWCziJlId .fx1 { font: 400 12px MonospacedNumber, LarkHackSafariFont, LarkEmojiFont, LarkChineseQuote, -apple-system, BlinkMacSystemFont, "Helvetica Neue", Tahoma, "PingFang SC", "Microsoft Yahei", Arial, "Hiragino Sans GB", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; }#cBOtWCziJlId .fx1 {font-style: normal}#cBOtWCziJlId .fx2 { text-anchor: middle; }#cBOtWCziJlId .fx2 {text-anchor: middle}#cBOtWCziJlId .fx3 { dominant-baseline: central; }#cBOtWCziJlId .fx3 {dominant-baseline: central}#cBOtWCziJlId .fx4 { stroke: none; }#cBOtWCziJlId .fx4 {stroke: none}#cBOtWCziJlId .fc0 { fill: var(--text-caption); }#cBOtWCziJlId .fc0 {fill: #646a73}#cBOtWCziJlId .fa2 { fill: var(--text-link-disabled); }#cBOtWCziJlId .fa2 {fill: rgb(187, 191, 196)}#cBOtWCziJlId .fa3 { fill: rgb(31, 35, 41); }#cBOtWCziJlId .fa3 {fill: rgb(31, 35, 41)}#cBOtWCziJlId .fx5 { font: 700 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#cBOtWCziJlId .fx5 {font-style: normal}#cBOtWCziJlId .fx6 { text-anchor: start; }#cBOtWCziJlId .fx6 {text-anchor: start}#cBOtWCziJlId .fx7 { dominant-baseline: alphabetic; }#cBOtWCziJlId .fx7 {dominant-baseline: alphabetic}#cBOtWCziJlId .fc1 { fill: rgb(255, 255, 255); }#cBOtWCziJlId .fc1 {fill: rgb(255, 255, 255)}#cBOtWCziJlId .fx8 { font: 700 14px 微软雅黑; }#cBOtWCziJlId .fx8 {font-style: normal}#cBOtWCziJlId .fc2 { fill: rgb(5, 16, 26); }#cBOtWCziJlId .fc2 {fill: rgb(5, 16, 26)}#cBOtWCziJlId .fx9 { font: 400 14px 微软雅黑; }#cBOtWCziJlId .fx9 {font-style: normal}#cBOtWCziJlId .fx10 { font: 400 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#cBOtWCziJlId .fx10 {font-style: normal}#cBOtWCziJlId .fb1 { fill: var(--N900-FG, 0.15); }#cBOtWCziJlId .fb1 {fill: rgba(31,35,41, 0.15)}#cBOtWCziJlId .fb2 { fill: rgb(221, 221, 221); }#cBOtWCziJlId .fb2 {fill: rgb(221, 221, 221)}#cBOtWCziJlId .fa4 { fill: var(--bg-body); }#cBOtWCziJlId .fa4 {fill: #fff}ABC1234567概念（中/英）核心说明关键工程价值ReAct 范式MCP 协议函数调用安全护栏MVS协同涌现（Reasoning + Acting）（Model Context Protocol）（Function Calling）（Guardrails）（最小可行技能）（Synergistic Emergence）LLM 交替进行“思考”（分析现状）与“行动”（调用工具），并在每一步行动后根据反馈重新规划。由 Anthropic 提出的开放标准，定义 LLM 与外部工具/数据源之间的统一通信接口。LLM 根据用户意图，自动选择并填充参数，调用预定义的 API 函数。在智能体的输入层、推理层、执行层插入校验与拦截规则。将一个完整的 Agent 能力（Prompt + 工具链 + 安全规则）封装为单一的可移植文件。单个 Client 挂载多个 MCP Server（记忆、搜索、执行），LLM 自主编排调用顺序后，产生的超出单个工具能力的复杂行为。打破一次性生成的局限，让模型具备试错与动态调整能力。类比“AI 时代的 USB 协议”，解耦模型与工具，实现热插拔式能力扩展。将自然语言的模糊意图转化为确定性的结构化 API 请求。防止幻觉驱动的危险操作（如误删文件、泄露隐私），是生产级系统的刚需。技能即资产——可版本控制、跨项目复用、团队协作共享。从“用工具”到“管工具”的跃迁，智能体架构师的毕业标志。

​

​

👉 目标：从“让 AI 知道”到“让 AI 会做”——构建可感知、可决策、可执行、可封装的自主系统。​

​

​

​

关键模型与框架​

3.1 ReAct 循环：智能体的“思考-行动”心跳​

ReAct 范式将 LLM 的推理过程分解为无限循环的三个阶段，每一轮都是一个原子决策。​

​

#uIKiRQMOBbMs text { white-space: pre; }#uIKiRQMOBbMs .fb0 { stroke: var(--N900-FG, 0.15); }#uIKiRQMOBbMs .fb0 {stroke: rgba(31,35,41, 0.15)}#uIKiRQMOBbMs .fx0 { stroke-miterlimit: 10; }#uIKiRQMOBbMs .fx0 {stroke-miterlimit: 10}#uIKiRQMOBbMs .fa1 { fill: rgb(187, 191, 196); }#uIKiRQMOBbMs .fa1 {fill: rgb(187, 191, 196)}#uIKiRQMOBbMs .fx1 { font: 400 12px MonospacedNumber, LarkHackSafariFont, LarkEmojiFont, LarkChineseQuote, -apple-system, BlinkMacSystemFont, "Helvetica Neue", Tahoma, "PingFang SC", "Microsoft Yahei", Arial, "Hiragino Sans GB", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; }#uIKiRQMOBbMs .fx1 {font-style: normal}#uIKiRQMOBbMs .fx2 { text-anchor: middle; }#uIKiRQMOBbMs .fx2 {text-anchor: middle}#uIKiRQMOBbMs .fx3 { dominant-baseline: central; }#uIKiRQMOBbMs .fx3 {dominant-baseline: central}#uIKiRQMOBbMs .fx4 { stroke: none; }#uIKiRQMOBbMs .fx4 {stroke: none}#uIKiRQMOBbMs .fc0 { fill: var(--text-caption); }#uIKiRQMOBbMs .fc0 {fill: #646a73}#uIKiRQMOBbMs .fa2 { fill: var(--text-link-disabled); }#uIKiRQMOBbMs .fa2 {fill: rgb(187, 191, 196)}#uIKiRQMOBbMs .fx5 { font: 700 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#uIKiRQMOBbMs .fx5 {font-style: normal}#uIKiRQMOBbMs .fx6 { text-anchor: start; }#uIKiRQMOBbMs .fx6 {text-anchor: start}#uIKiRQMOBbMs .fx7 { dominant-baseline: alphabetic; }#uIKiRQMOBbMs .fx7 {dominant-baseline: alphabetic}#uIKiRQMOBbMs .fc1 { fill: rgb(5, 16, 26); }#uIKiRQMOBbMs .fc1 {fill: rgb(5, 16, 26)}#uIKiRQMOBbMs .fx8 { font: 700 14px 微软雅黑; }#uIKiRQMOBbMs .fx8 {font-style: normal}#uIKiRQMOBbMs .fx9 { font: 400 14px 微软雅黑; }#uIKiRQMOBbMs .fx9 {font-style: normal}#uIKiRQMOBbMs .fx10 { font: 400 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#uIKiRQMOBbMs .fx10 {font-style: normal}#uIKiRQMOBbMs .fb1 { fill: var(--N900-FG, 0.15); }#uIKiRQMOBbMs .fb1 {fill: rgba(31,35,41, 0.15)}#uIKiRQMOBbMs .fb2 { fill: rgb(221, 221, 221); }#uIKiRQMOBbMs .fb2 {fill: rgb(221, 221, 221)}#uIKiRQMOBbMs .fa3 { fill: var(--bg-body); }#uIKiRQMOBbMs .fa3 {fill: #fff}ABC1234阶段核心问题产出物ThinkActObserve（思考）（行动）（观察）当前的目标是什么？已知什么？还缺什么？哪个工具能填补信息缺口？参数是什么？工具返回了什么？是否需要修正下一步？自然语言推理文本结构化 Function Call反馈数据（JSON/文本）

​

​

​

3.2 MCP 协议：智能体的“USB 接口”​

MCP 定义了 Client（LLM 宿主，如 Claude Desktop）与 Server（工具提供方）之间的标准通信契约。一个 Client 可以挂载多个 Server，每个 Server 暴露一组 Tool。​

​

#kyKENWHyIXNa text { white-space: pre; }#kyKENWHyIXNa .fb0 { stroke: var(--N900-FG, 0.15); }#kyKENWHyIXNa .fb0 {stroke: rgba(31,35,41, 0.15)}#kyKENWHyIXNa .fx0 { stroke-miterlimit: 10; }#kyKENWHyIXNa .fx0 {stroke-miterlimit: 10}#kyKENWHyIXNa .fa1 { fill: rgb(187, 191, 196); }#kyKENWHyIXNa .fa1 {fill: rgb(187, 191, 196)}#kyKENWHyIXNa .fx1 { font: 400 12px MonospacedNumber, LarkHackSafariFont, LarkEmojiFont, LarkChineseQuote, -apple-system, BlinkMacSystemFont, "Helvetica Neue", Tahoma, "PingFang SC", "Microsoft Yahei", Arial, "Hiragino Sans GB", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; }#kyKENWHyIXNa .fx1 {font-style: normal}#kyKENWHyIXNa .fx2 { text-anchor: middle; }#kyKENWHyIXNa .fx2 {text-anchor: middle}#kyKENWHyIXNa .fx3 { dominant-baseline: central; }#kyKENWHyIXNa .fx3 {dominant-baseline: central}#kyKENWHyIXNa .fx4 { stroke: none; }#kyKENWHyIXNa .fx4 {stroke: none}#kyKENWHyIXNa .fc0 { fill: var(--text-caption); }#kyKENWHyIXNa .fc0 {fill: #646a73}#kyKENWHyIXNa .fa2 { fill: var(--text-link-disabled); }#kyKENWHyIXNa .fa2 {fill: rgb(187, 191, 196)}#kyKENWHyIXNa .fa3 { fill: rgb(31, 35, 41); }#kyKENWHyIXNa .fa3 {fill: rgb(31, 35, 41)}#kyKENWHyIXNa .fx5 { font: 700 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#kyKENWHyIXNa .fx5 {font-style: normal}#kyKENWHyIXNa .fx6 { text-anchor: start; }#kyKENWHyIXNa .fx6 {text-anchor: start}#kyKENWHyIXNa .fx7 { dominant-baseline: alphabetic; }#kyKENWHyIXNa .fx7 {dominant-baseline: alphabetic}#kyKENWHyIXNa .fc1 { fill: rgb(255, 255, 255); }#kyKENWHyIXNa .fc1 {fill: rgb(255, 255, 255)}#kyKENWHyIXNa .fc2 { fill: rgb(5, 16, 26); }#kyKENWHyIXNa .fc2 {fill: rgb(5, 16, 26)}#kyKENWHyIXNa .fx8 { font: 400 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#kyKENWHyIXNa .fx8 {font-style: normal}#kyKENWHyIXNa .fx9 { font: 400 11px LarkHackSafariFont, LarkEmojiFont, Consolas, -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#kyKENWHyIXNa .fx9 {font-style: normal}#kyKENWHyIXNa .fx10 { font: 400 14px 微软雅黑; }#kyKENWHyIXNa .fx10 {font-style: normal}#kyKENWHyIXNa .fb1 { fill: var(--N900-FG, 0.15); }#kyKENWHyIXNa .fb1 {fill: rgba(31,35,41, 0.15)}#kyKENWHyIXNa .fb2 { fill: rgb(221, 221, 221); }#kyKENWHyIXNa .fb2 {fill: rgb(221, 221, 221)}#kyKENWHyIXNa .fa4 { fill: var(--bg-body); }#kyKENWHyIXNa .fa4 {fill: #fff}ABC12345组件角色示例MCP ClientMCP ServerToolTransport交互界面 + LLM 宿主工具/数据源的标准化封装Server 暴露的单个能力Client-Server 通信方式Claude Desktop、Cherry Studio文件系统 Server、网页搜索 Server、数据库 Serverstdio（本地进程）、HTTP/SSE（远程服务）read_filesearch_webexecute_sql、、

​

​

💡 工程直觉：MCP 的价值不在“能连更多工具”，而在统一了工具调用的抽象层。这意味着你换一个 LLM，工具链不用重写。​

​

3.3 安全护栏三层模型​

护栏不是事后补丁，而应嵌入智能体架构的每一层。​

​

#qoCMfOALAXXm text { white-space: pre; }#qoCMfOALAXXm .fb0 { stroke: var(--N900-FG, 0.15); }#qoCMfOALAXXm .fb0 {stroke: rgba(31,35,41, 0.15)}#qoCMfOALAXXm .fx0 { stroke-miterlimit: 10; }#qoCMfOALAXXm .fx0 {stroke-miterlimit: 10}#qoCMfOALAXXm .fa1 { fill: rgb(187, 191, 196); }#qoCMfOALAXXm .fa1 {fill: rgb(187, 191, 196)}#qoCMfOALAXXm .fx1 { font: 400 12px MonospacedNumber, LarkHackSafariFont, LarkEmojiFont, LarkChineseQuote, -apple-system, BlinkMacSystemFont, "Helvetica Neue", Tahoma, "PingFang SC", "Microsoft Yahei", Arial, "Hiragino Sans GB", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; }#qoCMfOALAXXm .fx1 {font-style: normal}#qoCMfOALAXXm .fx2 { text-anchor: middle; }#qoCMfOALAXXm .fx2 {text-anchor: middle}#qoCMfOALAXXm .fx3 { dominant-baseline: central; }#qoCMfOALAXXm .fx3 {dominant-baseline: central}#qoCMfOALAXXm .fx4 { stroke: none; }#qoCMfOALAXXm .fx4 {stroke: none}#qoCMfOALAXXm .fc0 { fill: var(--text-caption); }#qoCMfOALAXXm .fc0 {fill: #646a73}#qoCMfOALAXXm .fa2 { fill: var(--text-link-disabled); }#qoCMfOALAXXm .fa2 {fill: rgb(187, 191, 196)}#qoCMfOALAXXm .fx5 { font: 700 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#qoCMfOALAXXm .fx5 {font-style: normal}#qoCMfOALAXXm .fx6 { text-anchor: start; }#qoCMfOALAXXm .fx6 {text-anchor: start}#qoCMfOALAXXm .fx7 { dominant-baseline: alphabetic; }#qoCMfOALAXXm .fx7 {dominant-baseline: alphabetic}#qoCMfOALAXXm .fc1 { fill: rgb(5, 16, 26); }#qoCMfOALAXXm .fc1 {fill: rgb(5, 16, 26)}#qoCMfOALAXXm .fx8 { font: 400 14px LarkHackSafariFont, LarkEmojiFont, "Microsoft YaHei", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Helvetica, "Noto Sans", Tahoma, "Nimbus Sans L", Arial, "Liberation Sans", "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", "Source Han Sans SC", "Source Han Sans CN", "Microsoft YaHei", "Wenquanyi Micro Hei", "WenQuanYi Zen Hei", STHeiti, SimHei, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji", system-ui; }#qoCMfOALAXXm .fx8 {font-style: normal}#qoCMfOALAXXm .fb1 { fill: var(--N900-FG, 0.15); }#qoCMfOALAXXm .fb1 {fill: rgba(31,35,41, 0.15)}#qoCMfOALAXXm .fb2 { fill: rgb(221, 221, 221); }#qoCMfOALAXXm .fb2 {fill: rgb(221, 221, 221)}#qoCMfOALAXXm .fa3 { fill: var(--bg-body); }#qoCMfOALAXXm .fa3 {fill: #fff}ABCD1234层级输入层推理层执行层位置防护策略示例用户消息进入时LLM 生成 Function Call 后工具真正执行前Prompt Injection 检测、敏感词过滤参数白名单校验、操作权限检查人类确认（Human-in-the-loop）拒绝“忽略之前的指令”类注入拦截“删除 / 根目录”的参数弹出对话框：“确实要删除 X？”

​

3.4 第三阶段完整工作流​

下图展示了从“用户指令”到“多工具协同执行”的完整闭环，覆盖了第8章到第14章的核心脉络。​

​

​

​

​

实战技能清单​

•

ReAct 调试：在 Cherry Studio 中观察 THINK → ACT → OBSERVE 循环的终端日志，定位推理错误。​

•

MCP Server 配置：完成至少一个 MCP Server 的本地部署与连接（如文件系统 Server）。​

•

Function Calling 定义：使用 JSON Schema 定义至少一个 Tool 的参数规范，并在智能体中成功调用。​

•

安全护栏落地：在 Function Calling 管道中插入参数校验规则，拦截至少一种危险操作。​

•

多工具协同：让单个智能体在同一个任务中自主调用两个以上 MCP Server。​

•

MVS 封装：将完整智能体能力导出为 SKILL.md 文件，实现跨项目的技能复用。​

•

协同涌现验证：构建一个挂载 3 个以上 MCP Server 的 Client，观察长任务流中的动态重规划行为。​

​

​

知识点关联图​

​

​

​

​

​

一句话总结​

​

💡 第三阶段完成的是“行动力 + 工具集成 + 安全封装”：从 单次问答 → ReAct 循环 → MCP 工具链 → 安全护栏 → 可复用技能模块 的关键转变，让 AI 从“会说话的笔记”进化为“会干活的数字员工”。​

​

​

​

​