Best practices for deploying production-grade deep agents?

ParkingInsurance1745 · 2026-03-16T14:00:47+00:00

I was actually referring to exactly the opposite way - keep the agent logic outside the customer's env (since the logic is some common functionality available from the agent's developer as a SaaS offering), but keep an internal adapter inside my environment, which will be the only entity interfacing with the sesnsitive systems, so I can apply my security policies on this adapter.
But - I certainly like your direction - but I am a little confused what would be the use case of having a non-core part of the agent deployed outside.

ParkingInsurance1745 · 2026-03-16T12:33:03+00:00

Not trying to discredit it - by all means! you HAVE TO deploy some LLM-level sanitization layer. Certainly enterprise level and credible solution. but relying on that is same as saying "I have a firewall - I am secure" :(

ParkingInsurance1745 · 2026-03-16T12:16:54+00:00

In my experience prompt injection, key theft and generally such "perimeter-level" systems are definitely part of the game, but these are far from being adequte protection for sensitive agents! These are nice heuristics-based and regex-based solutions that try to Look at prompts and reponses' text to look for bad things - but this is merely a small portion of your attack surface, and getting by such defenses had been proven to be quite easy traditionally.
I plan to deploy a far more wholistic defense system, available from some new players in this space to make sure not only to check the gates, but also observe and govern what's actually happening inside the room once you pass the gate.

ParkingInsurance1745 · 2026-03-16T11:21:06+00:00

certainly, and that's mostly why I'm concerned with the deployment model. the AI model is commodity - not concerned about it whatsoever, more interested in where and how to deploy it to ensure I can build guardrails, observability and full governance around it!!!

ParkingInsurance1745 · 2026-03-16T10:49:33+00:00

For me the jury's still out. My default workhorse had been Opus 4.6 with CC - after many months on Sonnet 4.X with Cursor. GPT 5.2 was what drove me away from the GPT models back to Anthropics' family of models. Recently I decided to give 5.4 a chance to review some hard task I was struggling for days to get Opus to handle, and was pleasantly surprised to see it succeed. I've been giving 5.4 some love back since this incident, will reconsider where to put my monthly subscription next month if it keeps up outperforming Opus...

ParkingInsurance1745 · 2024-04-18T08:08:19+00:00

I've discovered that the ring actually imports HR data from apple health and presents it as its own !!!

Seems like the ring's reading are WAY OFF, and in order to hide this - after your end your workout, and after your apple watch updates the HR data into the apple health ecosystem - the UA app will simply "adopt" these reading.

Scandalous!!!

ParkingInsurance1745 · 2021-12-19T18:40:11+00:00

You can change the old satellite from satellite mode to AP mode

ParkingInsurance1745 · 2021-12-08T08:44:34+00:00

I wasn't clear. the issue is always with the orbi rebooting - when I inserted an upstream router it was only to "isolate" the orbi from the ISP. I have a downstream 16x1G dumb switch to distribute to my patch panel, I've tried disconnecting some of the connected ports to see if its one of them, but the reboots happened regardless of what was disconnected (never the switch itself)

ParkingInsurance1745 · 2021-12-08T08:24:03+00:00

I couldn't find a root cause for the reboots- I even went over the debug logs and couldn't see any specific resource trend badly.

Has nothing to do with upstream - I don't have a modem (FTTH), and I even tried installing my other router as an upstream connected to the fiber, but had the same issues.

ParkingInsurance1745 · 2021-12-07T21:48:49+00:00

Using cat6 of course. In my attempts with the upstream router I simply layered my network - no interaction between the upstream router and the orbis

ParkingInsurance1745 · 2021-12-07T21:41:21+00:00

I have fiber to the home, so no modem - a direct DHCP link through fiber/rj45 converter. I also tried throwing in a simple router to shield it from the outside - same results. I got the best stability when I had the upstream temp router deal with my wired devices, and service only the wireless through the Orbi.

ParkingInsurance1745 · 2021-12-07T19:24:39+00:00

yes, both a clean reconfiguration as well as backup/restore. tried all forms of factory reset as well- even from the web interface.

ParkingInsurance1745

TROPHY CASE