Engineering
Research
What "production-grade" actually means for an AI agent
A demo proves an agent can work once. Production means it works on the thousandth strange input, at 3am, when nobody’s watching. Here’s the gap between the two.
TAGS
AGENTS
EVALS
GUARDRAILS

Inês Carvalho
ML ENGINEER
28 Apr 2026
7 minutes
ON THIS PAGE
01 Evals, not vibes
02 Guardrails are part of the product
03 Escalation is a feature, not a failure
04 Monitoring, because models drift
Anyone can build an agent that works in a demo. The demo is a controlled environment: clean inputs, a friendly path, a human ready to retry if it stumbles. Production is none of those things.
The distance between “it worked in the demo” and “it works in production” is where most AI projects quietly die. Here’s what closes it.
Evals, not vibes
Before an agent ships, we build an evaluation set — a battery of real and adversarial inputs with known-good outcomes. Every change runs against it. If a prompt tweak improves one case and breaks three others, the eval catches it before your users do.
Without evals, you’re tuning by feel, and feel doesn’t scale past the first few examples. With them, you can change the system confidently because you can measure whether you made it better or worse.
Guardrails are part of the product
A capable agent is also a capable way to do the wrong thing quickly. Production systems need bounds: what the agent is allowed to touch, what requires confirmation, what it must escalate, and what it must never do. We treat these as first-class features, not afterthoughts.
The best agents are confident inside a small, well-defined box and quick to hand off the moment they’re outside it.
Escalation is a feature, not a failure
The point of automation isn’t to remove humans. It’s to spend human attention only where it’s worth spending. A production agent should clear the routine queue and route the genuine edge cases to a person — with context attached, so the handoff doesn’t start from zero.
Monitoring, because models drift
Inputs change, dependencies change, the world changes. A system that passed its evals in March can degrade by June if nobody’s watching. We instrument everything — pass rates, latency, escalation frequency, cost per task — and alert when the numbers move. If it isn’t measured, you’ll find out it broke from an angry customer, which is the most expensive possible way to learn.
Production-grade isn’t a label you earn at launch. It’s the set of habits that keep the thing working long after launch.
archivio { 1 }
OTHER POSTS
Read related content
Read our posts on strategy, engineering, process, opinion and field notes.
RELATED INSIGHTS
All
Strategy
Engineering
Process
Opinion
Field notes

Context windows aren’t memory
Stuffing everything into the prompt feels like memory, but it isn’t. Real systems decide what to retrieve, when, and what to forget — here’s how we think about it.
Inês Carvalho
6 minutes
Read post

Most "AI problems" aren’t AI problems
Before you build an agent, it’s worth asking whether the bottleneck is the model — or the broken process around it. Usually it’s the process.
Sofia Almada
5 minutes
Read post

The handoff is the product
A system you can’t run without us isn’t an asset — it’s a dependency. We’d rather build something you own outright.
Marco Vieira
4 minutes
Read post

Why we ship in weeks, not quarters
Long timelines hide risk. Short ones surface it. Here’s how a six-week engagement stays honest from kickoff to launch.
Marco Vieira
5 minutes
Read post

Agents vs. wrappers: a field guide
“We added AI” can mean a thin wrapper around a chat box, or a system that does real work end to end. The difference matters more than the label.
Inês Carvalho
6 minutes
Read post
