Inventory what a production AI system actually runs, and the model turns out to be one component among a dozen.

Model routing, so the right model handles each task and fallbacks exist when one is degraded. Retrieval with permissions and freshness enforced at query time. Tools with scoped credentials and logged calls. Memory with retention rules. Queues absorbing load spikes. Tracing on every step. Injection defence at every boundary where outside content enters. Evaluation gates in front of every change. Budgets with enforced ceilings. And named humans holding the keys that matter.

None of these pieces is exotic. Fifty-eight days of this series covered them one at a time, and each is ordinary engineering.

What "production-grade" actually means

All of them, connected, monitored, owned, and boring on purpose. A stronger model does not get you there.

The distance between an impressive demo and a production system is entirely this coordination layer, and it is invisible in the demo, which is why the gap surprises teams so consistently. The demo exercises the happy path through three components. Production exercises every path through twelve.

Find your weakest layer

Trace one real request end to end and ask, at each layer: who owns this, what monitors it, and what happens if it fails?

The layer with no answer is your weakest, and it is rarely the model. In my experience it is usually retrieval freshness, tool permissions, or (most often) evaluation, because it is the only layer whose absence produces no symptom at all until something else breaks.

Nobody builds the whole room at once

The full architecture is intimidating, and it can read as a reason not to start.

Every station in a mature system was added because a failure taught the team why it existed. That is the normal path. The teams that suffer least are simply the ones who let staging teach the lesson instead of production, and who add the station when the near-miss happens rather than after the incident.

Start with the smallest architecture that can be operated safely. Add layers when the workflow earns them.

Closing thought

Reliability comes from architecture, operations, and ownership, more than from one great prompt or one great model.

The prompt was never the product. The system is.

Architecture pattern · · 1 min read

Pattern: the outbox for agent actions

Agents that write to systems of record need the same transactional outbox that event-driven services use. This entry covers the shape and the trade-offs.