UCHOA ARCHITECTURE NOTES
AN-001 · VERSION 1.0
Pilot → Production: Where AI Systems Actually Change
The transition from AI pilot to production is a systems transition.
An artificial intelligence prototype can look surprisingly simple.
There is an input. A model. A response.
While the system is being demonstrated, that simplicity may be enough. The goal is to discover whether a capability exists, test a hypothesis, or understand what a model can do within a limited set of situations.
Production is different.
When artificial intelligence begins participating in a real operation, the question is no longer only:
Can the model do this?
It becomes:
Can the system do this reliably enough when there are users, data, permissions, dependencies, costs, exceptions and consequences?
That transition is where many of the most important problems begin to appear.
The model is only part of the system
In a prototype, the architecture may look like this:
INPUT → MODEL → OUTPUT
In production, the model remains important, but it operates inside a larger system. Depending on the case, that system may introduce identity and authority, context and data, retrieval, tools and orchestration, state, security, observability, evaluation, cost and latency, fallback and recovery, and human oversight proportionate to consequence and risk.
The model remains important. But it is no longer the system.
1. The response acquires consequences
An inadequate response in a demonstration may simply mean a failed test. In production, the same response may initiate an action, change a record, guide a person, access protected information or interfere with a real process. As consequences increase, the architecture around the AI capability becomes more important.
2. Identity and permission stop being details
An agent that can retrieve information or perform a task needs to know not only what it can do, but on whose behalf, in what context and within which boundaries. The question is no longer only intelligence. It becomes authority.
3. Data stops being abstract context
What information can the system retrieve? What is the source? Is it current? Can it be used in this context? How are conflicting sources handled? What happens when the required information does not exist? The quality of an AI system in production also depends on the architecture connecting the model to the world it needs to understand.
4. Latency becomes part of the experience
A demonstration can tolerate waiting. An operation cannot always do so. When AI enters a real process, latency stops being an isolated technical characteristic. It can affect productivity, experience, service capacity and even the viability of the workflow.
5. Cost becomes system behavior
The cost of an individual call may look small. At scale, the number of calls, context volume, retries, models involved, tools invoked and wasted processing when something fails all matter. Architecture is also operational economics.
6. Failure requires design
What happens when the model does not respond? When an external tool is unavailable? When retrieval fails? When an output does not pass evaluation? When cost crosses a limit? When the system lacks sufficient basis to continue? Production needs paths for failure, not only paths for success.
7. Observability and evaluation become operational concerns
Knowing that a request completed is not enough to understand whether the system behaved appropriately. Production systems may need visibility into actions, tool use, sources, results, cost, latency and quality signals, together with evaluation mechanisms appropriate to the use case.
8. Oversight should be proportionate to consequence
Human oversight does not mean manual approval of every action. Appropriate design depends on context, autonomy and possible consequences. As a system gains more ability to act on real systems and processes, boundaries, escalation, interruption and accountability become more important.
Pilot → Production is a systems transition
Moving an AI pilot to production is not simply a matter of putting the same prototype in front of more users. It introduces a new class of questions.
Who can do what? With which data? Within which boundaries? At what cost? How do we observe behavior? How do we evaluate outcomes? How do we interrupt an action? How do we recover the system? When does a person need to take over?
That is why a technically impressive demonstration may still be far from an operational capability. The difficulty does not necessarily mean the model is inadequate. It may mean that the architecture around it does not yet exist.
What this note does not claim
This model does not attempt to explain every cause of failure in artificial intelligence projects. Strategy, product, people, processes, data quality and availability, economics, regulation and use-case fit can also determine outcomes.
This Architecture Note examines a narrower question: what changes architecturally when an AI capability leaves the experimental environment and begins participating in a real operational system.
SOURCES & FURTHER READING
VERSION HISTORY
v1.0 — Initial publication / Publicação inicial