AI Engineer World's Fair 2026
Production Evals For Agentic AI Systems
Read the talk
Production Evals for Agentic AI Systems
Evaluating an agent means checking whether its workflow delivers dependable outcomes, from tool execution and failure recovery to the cost of keeping it running.
From a talk by Nishant Gupta
Before you start: Familiarity with LLM tool calls and basic production monitoring will help; no evaluation framework is required.
From benchmark scores to system behavior
A model scores 90% on a benchmark; its replacement scores 92%, and the team celebrates. Nishant Gupta opens with this hypothetical improvement to pose a harder question: what does that gain tell us about an agent operating in production? An agent does more than generate an answer. It plans, calls tools, retrieves information, executes workflows and interacts with production infrastructure. The evaluation question expands from whether the answer was right to whether the system behaved correctly.
The gap appears when improving offline scores coexist with unpredictable production reliability. Tool failures, API outages, changing context, different users and long-running workflows all affect execution. A capability benchmark does not capture that whole operating environment. As autonomy increases, more of the outcome depends on behavior outside the final response.
The workflow becomes the unit of evaluation. Planning quality, tool usage, execution, recovery and decision-making all matter. A correct-looking answer alone cannot establish that those steps worked correctly, so the evaluation architecture needs evidence about the path to the outcome as well as the outcome itself.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Failure layers and the SRE lens
Hallucination is only one category of production failure. Gupta organizes the broader problem into layers:
| Layer | Failure modes |
|---|---|
| Foundation | Memory, retrieval, safety |
| Reasoning and execution | Reasoning mistakes, poor planning, incorrect tool execution |
| Coordination | Multi-agent coordination failures |
Evaluating only the final output leaves these different sources of failure difficult to distinguish. A workflow can fail because information was unavailable, because the plan was poor or because execution did not carry out the plan. Those are different problems to diagnose and repair.
The next shift is operational: think like a site reliability engineer. Evaluate reliability, availability, latency, cost and recovery alongside correctness. The point is not to exclude accuracy, but to stop treating it as a sufficient definition of success. Dependable outcomes are the objective; accuracy is one input.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Benchmarks, scenarios and production evidence
Gupta's evaluation pyramid retains benchmarks at its base. They are useful and scalable, but their operational value is limited. Scenario evaluations occupy the middle because they simulate realistic workflows. Production telemetry sits at the top: in his framing, real users interacting with real systems provide the highest-value evaluation signals. These layers complement one another rather than making offline evaluation obsolete.
Offline evaluation therefore moves from isolated prompts to scenarios. A customer-support agent, code-generation agent or research agent operates inside a simulated environment. The evaluator measures task completion, tool correctness, planning quality and resource usage. This preserves the sequence of work and its dependencies instead of grading only the response at the end. Gupta describes resource usage at scale as exponential, but supplies neither measurements nor a scaling model. The actionable requirement is to measure resource consumption alongside success.
A minimal TypeScript record can make those separate judgments explicit for a customer-support scenario:
typescript
type ScenarioEvaluation = {
workflow: "customer-support";
taskCompleted: boolean;
toolChecks: Array<{
tool: string;
correct: boolean;
}>;
planning: {
acceptable: boolean;
rationale: string;
};
resources: {
toolCalls: number;
elapsedMs: number;
};
};
const exampleEvaluation: ScenarioEvaluation = {
workflow: "customer-support",
taskCompleted: false,
toolChecks: [
{ tool: "lookupOrder", correct: true },
{ tool: "issueRefund", correct: false },
],
planning: {
acceptable: true,
rationale: "Look up the order before attempting the refund.",
},
resources: {
toolCalls: 2,
elapsedMs: 1800,
},
};
In this illustrative record, an acceptable plan and a correct lookup coexist with an unsuccessful task and an incorrect refund operation. Keeping those judgments separate makes the evaluation more informative than a single answer score.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Production signals need human judgment
After deployment, interactions become evaluation evidence. Execution traces show what happened; user outcomes show whether the work helped; escalations, failures and feedback reveal where the system struggled. Gupta characterizes production as an organization's largest and most representative evaluation dataset. The architectural implication is to collect these signals as part of operating the system, rather than treating traffic only as work to process.
Humans contribute more than a fallback when automation fails. They evaluate correctness, trust, usefulness and safety—judgments that automated metrics may miss. Targeted human review then calibrates the evaluation pipeline and exposes its blind spots. Automated evaluation supplies breadth; human review supplies additional judgment where the automated assessment is incomplete.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Detecting drift requires workflow traces
Agent behavior changes as model versions, prompts, tools and users change. Each individual update may appear modest while the combined system gradually becomes less reliable. Declining success rates, increasing escalations and rising tool failures are warning signals. Without continuous evaluation, user complaints may become the first indication that the system has drifted.
Diagnosing that decline requires visibility into recorded planning steps and available outputs, tool calls, memory access, execution timelines and state transitions. Gupta calls for visibility into reasoning paths; operationally, traces can capture the steps the system exposes, not guarantee access to hidden model reasoning.
Traditional logs alone are insufficient for reconstructing these workflows. Agent traces play the role of distributed tracing in a deeply nested microservice architecture: they connect operations into an execution path. The slide pairs a user prompt, planner iteration, vector database lookup and parallel API calls with operational measurements such as latency, retries, step costs and memory usage. That connection between workflow structure and operational evidence makes evaluation diagnosable rather than guesswork.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
The evaluation loop continues after deployment
Evaluation becomes an always-running service rather than a phase that ends at deployment. The loop connects live evidence to the next round of offline validation:
- Telemetry identifies issues in production behavior.
- Humans review edge cases that need closer judgment.
- Feedback improves datasets, incorporating what the system encountered.
- Offline scenarios validate updates against those accumulated cases.
Production reveals problems that predeployment tests missed; improved scenarios help evaluate subsequent changes. Repeating that cycle makes evaluation an operational capability.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Choose metrics by the outcomes they represent
The operational metrics matter because they connect system behavior to business consequences:
| Evaluation measure | Business consequence |
|---|---|
| Task completion | Value delivered |
| Tool success | Operational reliability |
| Escalation rate | Human burden |
| Safety evaluations | Risk exposure |
| Latency | User experience |
| Cost | Scalability |
| Recovery rate | Resilience |
Accuracy is absent from this particular list because the list broadens the definition of success, not because correctness has stopped mattering. An agent must deliver useful work within acceptable operational constraints, and it must recover when execution goes wrong.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Evaluation becomes infrastructure
The architectural destination is a separation between doing the work and evaluating its behavior:
- Execution plane: Performs the agent's work.
- Control plane: Observes the system, collects telemetry, runs simulations, coordinates human review, and measures and governs behavior.
Gupta presents this separation as an emerging direction for production AI systems. Evaluation becomes part of the control plane rather than a separate tool used only offline. Its responsibilities persist while the execution plane serves users.
That architecture brings the earlier layers together. Benchmarks remain necessary, but scenarios evaluate whole workflows and production telemetry reveals how those workflows behave in use. Reliability, rather than raw model accuracy alone, determines whether the resulting system is dependable. The substantive change is permanence: evaluation is no longer a bounded testing or QA phase. It is infrastructure that must keep operating as the agent, its dependencies and its users change.
Suggest correction
This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.
Resources
Further reading
Practical guidance on evaluating agent trajectories and outcomes, combining graders, maintaining regression suites and calibrating evaluation with human review.
Google's SRE chapter explains how to select user-centered reliability indicators, define objectives and interpret latency distributions.
Development-stage conventions for instrumenting agent invocations, workflows, planning and tool execution with OpenTelemetry spans.
Read the complete timestamped transcript
- 0:03
Hey everyone. My name is Nishant Gupta, and I'm a software engineering tech lead at Meta working on building the training and inference infrastructure for the Meta Superintelligence Lab and their infrastructure organization.
- 0:17
Today we are going to be talking about production evals for agentic systems.
- 0:22
When most people hear the word evaluation, they think about benchmarks. A model scores ninety percent on a benchmark, a new version scores ninety-two percent, the team celebrates. But agentic systems have fundamentally changed what the evaluation means.
- 0:35
Today, the systems don't simply generate answers. They plan, they call tools, they retrieve information, they execute workflows, they interact with the production infrastructure. The question is no longer: Did the model generate the right answer?
- 0:49
The question is: Did the system behave correctly? Today, I would like to discuss how evaluation is evolving from model benchmarking into production infrastructure.
- 1:02
This is the problem almost every AI organization is encountering today, offline benchmarks continue improving, yet production reliability often remains unpredictable. Why is that? Because benchmarks measure model capability. Production measures system behavior.
- 1:18
A benchmark doesn't capture tool failure, API outage, context changes, user variability, long-running workflows. And as systems become more autonomous, the gap between the benchmark performance and production performance grows.
- 1:30
The result is what many teams experience today. High benchmark scores, as you can see, but unreliable production behavior.
- 1:41
Traditional LLM evaluation focus on outputs, but we should ask the question: Did the model produce the correct answer? Agentic systems force us to ask a different question: Did the system behave correctly?
- 1:53
Behavior includes planning quality, tool usage, execution, workflow execution, recovery from failures, decision-making. In other words, we are moving from evaluating answers to evaluating workflows, and that requires fundamentally different evaluation architectures.
- 2:10
Many teams still think hallucinations are the primary AI failure modes. In production, they are often just one category. Agentic systems introduce an entire hierarchy of failure modes. At the very foundation, the memory failures, retrieval failures, safety failures.
- 2:26
As you go up, you have to think about reasoning mistakes, poor planning, incorrect tool execution. At the highest layer, you have to think about multi-agent coordination failures. And this is why evaluating only model output misses the most production risks we observe.
- 2:43
One of the most useful mindset shifts is to stop thinking like researchers and start thinking like a SRE or a production engineer. SREs don't measure success using accuracy, they measure reliability, availability, latency, cost recovery, and agentic systems require the same approach.
- 2:59
The goal is not maximizing the benchmark scores, the goal is to maximize dependable outcomes. Reliability becomes the North Star metric. Accuracy becomes the only input.
- 3:14
In this pyramid is how I think-- personally think about modern AI evaluation systems. At the bottom, you can see there are benchmarks. They're useful, they're scalable, they're reputable, but their operational value is limited.
- 3:25
In the middle, there are scenario-based evaluations. These simulate realistic workflows. And at the very top, you see production telemetry. This is where the highest value evaluation signals come from.
- 3:36
The surprising insight is that the most evaluation data often comes from real users interacting with real systems.
- 3:45
Now let's talk about offline evals. So offline evaluation still matters, but the methodology changes. Instead of evaluating prompts, we evaluate scenarios. For example, a customer support workflow, a code generation workflow, a research workflow.
- 3:57
The agent operates inside that simulated environment. We measure the task completion rate, tool correctness, planning quality, resource usage, which is-- which becomes exponentially high at high scale. The key takeaway, agent evaluation should be scenario-driven, not prompt-driven.
- 4:14
Once a system reaches production, every interaction becomes a signal. This is one of the biggest shifts in evaluation thinking. Production traffic is no longer just traffic, it becomes evaluation data.
- 4:25
We collect execution traces, user outcomes, escalations, failures, feedback signals. Production is the largest and the most representative evaluation data any organization will ever have.
- 4:39
Now many organizations view humans as fallback systems. I think that's a wrong framing. Humans are the evaluators. They provide signals that automated systems cannot. They assess correctness, trust, usefulness, safety.
- 4:52
These signals become really critical for calibrating evaluation pipelines and identifying blind spots in automated metrics. The most successful systems combine automated evaluation with targeted human review.
- 5:06
Now agent systems drift constantly. Model changes. You have a new version every couple of weeks or months. The prompts can change, tools can change, user behavior can change. The challenge is that no longer a single change appear catastrophic.
- 5:20
Reliability slowly degrades, success rate declines, escalation increases, tool failure rises. Without continuous evaluation, teams often don't discover drift until users complain. Continuous bec-- monitoring becomes essential.
- 5:36
Observability and evaluation are inseparable. Inseparable. To evaluate an agent, we need visibility into the reasoning paths, the tool calls, the memory access, execution timelines, the state transitions, as you can see here in this chart.
- 5:49
Traditional logs are not sufficient. We need detailed traces, just like with any
- 5:56
deep nested microservice architecture for any s- application or service we're talking about. Agent traces become the equivalent of distributed tracing for autonomous workflows. Without observability, evaluation becomes the guesswork.
- 6:10
Let's talk about the continuous evaluation loop because evaluation is an always running service, not a testing phase.
- 6:17
Historically, evaluation always happened before deployment, but now evaluation continues after deployment. Telemetry identifies issues, as you can see in A. Human reviews the edge cases. Feedback improves the datasets.
- 6:29
Offline scenarios validate updates. The loop never stops. Evaluation is no longer just a phase, it's an operational capability.
- 6:38
Now, this is probably the most important slide in this presentation. Every metric shown here maps directly to a business outcome. Task completion measures value delivered. Tool success measures operational reliability.
- 6:50
Escalation rate measures human burden. Safety evaluations measure risk exposure. Latency affects user experience. Cost determines scalability. Recovery rate reflects resilience. And notice-- but notice that accuracy is missing. It's not because accuracy doesn't matter, but because business success depends on much more than just accuracy.
- 7:12
Now, this is the architecture where the industry is heading more or less. Evaluation becomes part of a control plane, not a separate tool, not an offline process. The control plane continuously, which observes the systems, collects telemetry, runs simulations, coordinates human review, and the execution plane performs the work.
- 7:30
The control plane measures and governs the behavior, and this separation is becoming a foundational pattern for production AI systems.
- 7:39
Now let's summarize the key lessons. First, benchmark remains necessary, but they are insufficient. Second, agent systems must be evaluated as workflows, not individual outputs. Third, production telemetry is the most important evaluation signal.
- 7:55
Fourth, reliability ultimately matters more than raw model accuracy. And finally, evaluation is becoming the infrastructure. Not testing, not QA, infrastructure. This is the shift every organization building agentic AI will eventually need to make.