惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Security Archives - TechRepublic
Security Archives - TechRepublic
T
The Exploit Database - CXSecurity.com
P
Proofpoint News Feed
Scott Helme
Scott Helme
NISL@THU
NISL@THU
Cisco Talos Blog
Cisco Talos Blog
C
Cybersecurity and Infrastructure Security Agency CISA
AWS News Blog
AWS News Blog
V
Vulnerabilities – Threatpost
J
Java Code Geeks
U
Unit 42
The GitHub Blog
The GitHub Blog
H
Help Net Security
T
Tenable Blog
aimingoo的专栏
aimingoo的专栏
Jina AI
Jina AI
Spread Privacy
Spread Privacy
Apple Machine Learning Research
Apple Machine Learning Research
人人都是产品经理
人人都是产品经理
L
Lohrmann on Cybersecurity
T
Threatpost
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Engineering at Meta
Engineering at Meta
A
About on SuperTechFans
I
InfoQ
Microsoft Azure Blog
Microsoft Azure Blog
B
Blog
L
LINUX DO - 最新话题
K
Kaspersky official blog
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
T
Threat Research - Cisco Blogs
C
Check Point Blog
T
The Blog of Author Tim Ferriss
有赞技术团队
有赞技术团队
宝玉的分享
宝玉的分享
Help Net Security
Help Net Security
Google DeepMind News
Google DeepMind News
A
Arctic Wolf
Y
Y Combinator Blog
N
News | PayPal Newsroom
M
MIT News - Artificial intelligence
Latest news
Latest news
H
Hacker News: Front Page
Blog — PlanetScale
Blog — PlanetScale
腾讯CDC
I
Intezer
爱范儿
爱范儿
F
Fortinet All Blogs
P
Palo Alto Networks Blog
C
CERT Recently Published Vulnerability Notes

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
The Hidden Layer Nobody Talks About in AI Systems (And Why It’s Breaking Production)
Ravi Teja Re · 2026-05-02 · via DEV Community

Everyone is talking about better prompts, better models, and better agents.

But production AI systems are not failing only because the model is weak.

They are failing because of a layer most teams never explicitly design.

A layer that quietly sits between the model output and the real system action.

And when this layer breaks, nothing looks obviously wrong.

No crash.

No stack trace.

No failed deployment.

Just bad decisions moving through the system.

The Layer You Didn’t Design

In traditional software systems, we usually understand the major layers:

  • API layer
  • business logic
  • database
  • monitoring

But in AI systems, there is another layer that often exists without a name.

I call it the decision layer.

This is the layer where model output becomes system behavior.

It is where:

  • a classification becomes an escalation
  • a summary becomes a customer response
  • a recommendation becomes an automated action
  • a confidence score becomes a business decision

The problem is simple:

Most teams treat this layer like it does not exist.

They put some of it in prompts.

Some of it in glue code.

Some of it in thresholds.

Some of it in undocumented assumptions.

Then they wonder why the system behaves unpredictably in production.

What This Looks Like in Production

Imagine an AI agent used in an incident response workflow.

The model sees logs, alerts, and recent deployment notes.

It responds:

"This looks like a transient network issue. Retry should fix it."

That sounds reasonable.

But what happens next?

Somewhere in the system, that response may cause:

  • an automated retry
  • an alert suppression
  • a ticket update
  • a lower severity classification
  • a delayed human escalation

The model did not just generate text.

It influenced action.

That is the dangerous part.

Because the actual decision may be scattered across prompts, parsing logic, workflow code, and assumptions made by the engineering team.

Why This Breaks Production Systems

1. Model outputs are probabilistic, but systems expect contracts

Software systems are built around contracts.

An API returns a known schema.

A function has expected inputs and outputs.

A database query has predictable behavior.

AI models do not naturally behave like that.

They produce probabilistic outputs.

Even when the answer looks correct, the format, confidence, or implied action may shift slightly.

That small shift can create a large downstream effect.

A model saying "likely safe to retry" is not the same as "retry automatically".

But many systems accidentally treat them the same.

2. Decisions become hidden inside text

In traditional software, you can usually trace the decision.

A condition failed.

A function returned false.

A rule was triggered.

In AI systems, the decision often hides inside natural language.

The system does not just need to know what the model said.

It needs to know what the model meant.

That creates a dangerous debugging problem.

Instead of asking:

Which function failed?

Teams start asking:

Why did the model think this?

That is a much harder question during an incident.

3. Prompts become business logic

Teams often put critical decision rules inside prompts.

For example:

"If the issue seems low risk, suggest remediation. If confidence is low, escalate to a human."

Now your prompt is not just instruction.

It is business logic.

And unlike normal business logic, it is harder to test, version, review, and monitor.

A small prompt change can silently change system behavior.

That is how AI systems break without looking broken.

4. Observability misses the most important part

Most production dashboards track:

  • latency
  • token usage
  • API errors
  • request volume
  • model response time

But they do not tell you whether the AI system made a good decision.

For AI systems, we also need to track:

  • wrong actions taken
  • unnecessary escalations
  • missed escalations
  • human overrides
  • rollback frequency
  • user corrections
  • cost of incorrect decisions

Without these signals, your system can look healthy while making poor decisions.

The Real Problem Is Not Just the Model

When an AI system fails, the first instinct is:

"We need a better model."

Sometimes that is true.

But often, the model is only part of the problem.

The bigger issue is that the system has no clear control over how model output becomes action.

That gap is where production failures happen.

A strong AI system is not just a model connected to tools.

It is a controlled decision system.

What Mature AI Systems Do Differently

The best production AI systems do not allow raw model output to directly control important actions.

They introduce structure, validation, and policy around the model.

1. Separate generation from decision-making

Do not let free-form text directly trigger system behavior.

Instead, ask the model for structured output.

Example structure:

  • issue_type: network
  • confidence: 0.62
  • recommended_action: retry
  • requires_human_review: true

Now your system can decide:

  • if confidence is below 0.8, escalate
  • if action is high risk, require approval
  • if repeated failure happens, stop automation
  • if user impact is high, notify human

The model can recommend.

The system should decide.

2. Create explicit decision policies

Decision policies should live outside the prompt.

They should be clear and testable.

For example:

  • auto-retry only when confidence is above 0.85
  • never suppress alerts for customer-impacting incidents
  • require human approval for database changes
  • escalate if the same issue repeats within 30 minutes
  • block automation if logs contain unknown patterns

3. Add decision observability

Do not only monitor the model.

Monitor the decisions.

Track:

  • what the model recommended
  • what action was taken
  • confidence score
  • human overrides
  • outcome success or failure

You are not only watching infrastructure.

You are watching judgment.

4. Build a control plane for AI actions

As AI systems become more autonomous, they need a control plane.

This includes:

  • policy enforcement
  • risk scoring
  • approval workflows
  • rollback behavior
  • audit trails
  • feedback loops

Without this, AI agents become unpredictable.

With this, they become controlled.

The Big Shift

We are moving from model-centric systems to decision-centric systems.

The real question is:

What happens when the model is uncertain or wrong?

That is where production engineering begins.

Because the cost of wrong decisions is real:

  • customer impact
  • wasted time
  • noisy incidents
  • missed escalations
  • operational risk

Final Thought

Your AI system is not just prompts, models, and agents.

It is a decision-making system.

And if you do not design the decision layer, your system will still make decisions.

Just not in a way you can control.

That is why many AI systems look impressive in demos but fail in production.

The missing layer was never the model.

It was the decision layer.

Question for the community

How are you handling this in your systems?

Are you letting model outputs drive actions directly, or do you have policies and control layers in place?