Skip to main content

For CTOs & AI Engineers

Plan A Fails. Plan B Fails. Now What?

Production AI needs three layers of fallback because in the real world, your primary model goes down during the demo.


Production systems don't fail in binary. They degrade.

The API doesn't return an error. It returns a 503 for 4 seconds and then recovers. The vector database isn't down. It's slow enough that the 2-second timeout fires. The webhook didn't fail. It just hasn't arrived yet.

Most architectures treat these as failures. The result: the feature breaks, the user sees an error, the system waits for a human to investigate. Meanwhile, a perfectly acceptable reduced version of the feature was available the whole time. Nobody built it because nobody asked the question: "What's the useful version of this feature when the primary path isn't available?"

Back to The LibraryFor CTOs & AI Engineers

Plan A Fails. Plan B Fails. Now What?

Production AI needs three layers of fallback.

The Architecture Series · 9 minute read · By Ed | Founder & CEO, DealiOS


Production systems don't fail in binary. They degrade.

The API doesn't return an error. It returns a 503 for 4 seconds and then recovers. The vector database isn't down. It's slow enough that the 2-second timeout fires. The webhook didn't fail. It just hasn't arrived yet.

Most architectures treat these as failures. The result: the feature breaks, the user sees an error, the system waits for a human to investigate. Meanwhile, a perfectly acceptable reduced version of the feature was available the whole time. Nobody built it because nobody asked the question: "What's the useful version of this feature when the primary path isn't available?"

Continue reading.

Enter your email to unlock the full paper. And the rest of the Architecture Library.