惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
V
Visual Studio Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
L
LangChain Blog
Engineering at Meta
Engineering at Meta
F
Fortinet All Blogs
N
Netflix TechBlog - Medium
M
MIT News - Artificial intelligence
IT之家
IT之家
The Register - Security
The Register - Security
月光博客
月光博客
Hugging Face - Blog
Hugging Face - Blog
The GitHub Blog
The GitHub Blog
博客园 - 聂微东
云风的 BLOG
云风的 BLOG
Microsoft Security Blog
Microsoft Security Blog
腾讯CDC
W
WeLiveSecurity
博客园_首页
A
About on SuperTechFans
G
Google Developers Blog
博客园 - 叶小钗
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
量子位
Google DeepMind News
Google DeepMind News
博客园 - 【当耐特】
aimingoo的专栏
aimingoo的专栏
Application and Cybersecurity Blog
Application and Cybersecurity Blog
博客园 - 三生石上(FineUI控件)
N
News | PayPal Newsroom
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
AI
AI
TaoSecurity Blog
TaoSecurity Blog
P
Proofpoint News Feed
Attack and Defense Labs
Attack and Defense Labs
S
Secure Thoughts
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
博客园 - 司徒正美
www.infosecurity-magazine.com
www.infosecurity-magazine.com
J
Java Code Geeks
Hacker News - Newest:
Hacker News - Newest: "LLM"
爱范儿
爱范儿
S
SegmentFault 最新的问题
Martin Fowler
Martin Fowler
Vercel News
Vercel News
Schneier on Security
Schneier on Security
Know Your Adversary
Know Your Adversary
H
Heimdal Security Blog
N
News and Events Feed by Topic

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Why LLM Agents Fail Silently and How to Debug Them
Mudassir Khan · 2026-06-28 · via DEV Community

Why LLM Agents Fail Silently and How to Debug Them

Your agent returned an empty result. No exception. No error log. No status code that points anywhere useful. Just nothing.

You dig through logs. The LLM call went through. The tool was invoked. The response came back. Everything looks fine and yet the task is incomplete, wrong, or missing entirely.

That's a silent failure. And it's one of the nastiest bugs in AI engineering.


What is a silent failure in an LLM agent?

A silent failure is when your agent completes without raising an exception but produces a wrong or incomplete result. The difference between a noisy failure (a Python traceback, a 5xx from the API) and a silent one is that noisy failures are debuggable. Silent ones require you to instrument the entire agent loop just to notice something went wrong.

They're common because LLMs are designed to always return something. The model won't throw a ValueError when it runs out of context or when your tool schema changes out from under it. It'll return an empty array, a truncated JSON blob, or a confident "I've completed the task" with nothing to show for it.

The result is an agent that appears to work until you look closely at the outputs.


The three root causes: token budget, tool schema drift, and unhandled exceptions

Most silent failures trace back to one of three places.

Token budget exhaustion. OpenAI's function calling API returns an empty choices array when max_tokens is hit in the middle of a tool call. No exception is raised. The call returns 200. Your code checks response.choices[0] and explodes with an IndexError, or worse, your code handles the empty array gracefully and just moves on. The agent continues as if the tool ran, with no output to show for it.

response = client.chat.completions.create(
    model="gpt-4o",
    messages=messages,
    tools=tools,
    max_tokens=512  # too small for a complex tool call
)

# This blows up at runtime — or silently skips if you're defensive
if response.choices:
    tool_call = response.choices[0].message.tool_calls[0]

Fix: always log response.choices, finish_reason, and usage.completion_tokens. If finish_reason == "length", treat it as a hard failure, not a graceful noop.

Tool schema drift. Your tool schema changes. A field gets renamed, a required parameter gets removed, a new enum value gets added. The LLM was tuned against the old schema. It now generates arguments that fail the validator, and your framework silently drops the tool output and continues. LangGraph's StateGraph does exactly this when a tool raises an unhandled exception inside an interrupt: the output gets dropped and the next node receives None.

# Tool raises, StateGraph swallows the exception
@tool
def fetch_user_data(user_id: str) -> dict:
    # KeyError here gets swallowed by the interrupt handler
    return db.fetch(user_id)["profile"]["details"]

Fix: always reraise from your tool handlers, or wrap them in an explicit try/except that returns a structured error payload instead of propagating None downstream.

Unhandled exceptions inside the agent loop. Most agent frameworks catch exceptions at the orchestrator level to keep the loop alive. That's good for reliability, but it means your per step errors get swallowed into a catchall handler that logs nothing useful and lets the next turn proceed. One bad tool call in a 10-step chain silently poisons every step that follows.


Adding per step tracing to catch failures early

The most reliable way to surface silent failures is distributed tracing. OpenTelemetry spans per agent step give you a queryable record of every tool call, its inputs, its outputs, and where it fell over.

from opentelemetry import trace

tracer = trace.get_tracer("agent.loop")

def run_agent_step(step_name: str, messages: list, tools: list):
    with tracer.start_as_current_span(step_name) as span:
        span.set_attribute("step.input_message_count", len(messages))
        span.set_attribute("step.tool_count", len(tools))

        response = client.chat.completions.create(
            model="gpt-4o",
            messages=messages,
            tools=tools,
        )

        finish_reason = response.choices[0].finish_reason if response.choices else "empty"
        span.set_attribute("step.finish_reason", finish_reason)
        span.set_attribute("step.completion_tokens", response.usage.completion_tokens)

        if finish_reason == "length" or not response.choices:
            span.set_status(trace.StatusCode.ERROR, "token budget hit or empty response")
            raise RuntimeError(f"Step {step_name} hit token budget before completing")

        return response

Now when something goes wrong, your trace shows exactly which step failed and why. You're not reconstructing the failure from scattered log lines. You have a full span tree.

Plug this into any OpenTelemetry compatible backend (Honeycomb, Jaeger, the OTel Collector) and you get realtime visibility into your agent loop for free.


Structured output validation as a silent failure firewall

If tracing tells you when something went wrong, Pydantic tells you what the model produced that broke your assumption.

Put a Pydantic validation step after every tool call. The model's output schema gets validated before it touches anything downstream. If it fails, you catch a ValidationError with a clear message instead of a silent None that propagates through 5 more steps.

from pydantic import BaseModel, ValidationError

class UserProfile(BaseModel):
    user_id: str
    email: str
    role: str  # "admin" | "viewer" | "editor"

def validate_tool_output(raw: dict) -> UserProfile:
    try:
        return UserProfile(**raw)
    except ValidationError as e:
        # Loud failure here is intentional — better than a silent one later
        raise RuntimeError(f"Tool output failed schema validation: {e}") from e

This is especially powerful for tools that call external APIs. The external schema changes independently of your agent's expectations. Pydantic catches that mismatch at the boundary, before stale data flows into your LLM's next prompt and contaminates the rest of the run.


Building a dead man's switch into long running agent loops

Long running agents (the ones that run for minutes or hours across many tool calls) need a liveness check that fires if the loop goes quiet for too long. If the agent doesn't check in within N seconds, something assumed it was alive when it wasn't.

import threading
import time

class AgentWatchdog:
    def __init__(self, timeout_seconds: int = 60):
        self.timeout = timeout_seconds
        self.last_heartbeat = time.time()
        self._stop = threading.Event()

    def heartbeat(self):
        """Call this after every successful agent step."""
        self.last_heartbeat = time.time()

    def start(self):
        def _watch():
            while not self._stop.is_set():
                if time.time() - self.last_heartbeat > self.timeout:
                    raise RuntimeError("Agent watchdog timeout — loop went silent")
                time.sleep(5)
        threading.Thread(target=_watch, daemon=True).start()

    def stop(self):
        self._stop.set()

# Usage
watchdog = AgentWatchdog(timeout_seconds=90)
watchdog.start()

for step in agent_steps:
    result = run_agent_step(step)
    watchdog.heartbeat()  # prove we're alive after each step

watchdog.stop()

This doesn't replace tracing. It's a last resort: if your instrumentation missed the failure, the watchdog still catches a loop that went silent and gives you something you can alert on.

Agent loop diagram with three labeled silent failure points: token budget exhaustion, tool schema mismatch, and swallowed exception inside the tool handler


FAQ

Why do AI agents stop responding without an error?

Usually one of three things: the model hit its token budget in the middle of a tool call and returned an empty choices array, a tool raised an exception that the orchestrator swallowed, or the tool output failed schema validation and got silently dropped. Add finish_reason logging and per step OTel spans and you'll find it fast.

How do you debug an LLM agent that returns empty results?

Start with finish_reason. If it's "length", you hit the token budget. If it's "stop" but the output is empty, check your tool handler for swallowed exceptions. If the tool ran but the downstream state is still None, you have a schema validation gap. Pydantic after every tool call surfaces this immediately.

What causes silent failures in multistep AI agents?

The same bugs that cause noisy failures in any software, except the agent framework is often designed to keep running even when a step fails. That design choice trades reliability for debuggability. You get it back by adding tracing at the framework layer so failures are recorded even when the loop doesn't crash.


If you want a deeper look at agent observability in production, I cover it in more detail on my site.

For the full taxonomy of production failure modes before you build your evaluation harness, this is where I'd start.

If you want this wired up on your own system end to end, that is exactly the kind of work I take on.


Drop a comment if you've hit a different class of silent failure. Curious what variations people are running into in production.