Free YouTube Transcribe

Video transcript

Production-Ready AI Agents, Guardrails & Human-in-the-Loop | Build Reliable AI Systems | Edureka

edureka! · 8,709 words · 40 min read

Want to search this transcript, jump the video from any line, or download it as TXT, SRT, or VTT?

Open in the transcript tool

Full transcript

0:00Good morning, everyone. Good evening,

0:01good afternoon, everyone.

0:03Today, we are going to talk about the

0:04production-ready agent AI solution,

0:07which include several components of

0:09guardrails and human in the loop. And

0:11we'll discuss the working example on how

0:14to create such sort of enterprise

0:15system, what are the different uh

0:17commercial that you're required to

0:19create such sort of system, and how can

0:21you test the efficacy of the system?

0:23So, before we start, let me introduce

0:25myself. I'm Jitendra. I'm basically

0:27working as a senior director within one

0:29of the financial institution based out

0:30of Singapore.

0:31And I'm carrying almost uh 18 year of

0:33experience into AI and ML, and my

0:36current focus areas is on multi-agentic

0:38LLM platforms.

0:40So, I worked for various uh other banks

0:43earlier. I was a part of various global

0:45bank, where I'd been dealt dealing with

0:47lot of NLP and deep learning solutions,

0:49specifically in the space of AML

0:51sanctions.

0:52And I did work with different fraud

0:54analytics scenarios as well.

0:56So, I'm focusing right now on

0:57conversational AI and uh generative AI

1:00applications, try to create

1:02multi-agentic orchestration from the

1:03scratch as a part of a automation and

1:06platform enrichment.

1:08All right, so this is about myself, and

1:10I would like to welcome you all on the

1:11behalf of Edureka for we'll discuss lot

1:14of new stuff, which include how to make

1:17responsible AI framework so efficient on

1:20the top of the existing

1:22pipeline that you're going to deal with.

1:24So, the agenda for this particular boot

1:25camp will look like why we required to

1:29have guardrails implementation on a

1:31production AI agent.

1:33So, we'll start from prototyping to

1:35production system, how to deal with

1:37different components, what's the journey

1:40of this whole implementation looks like.

1:44We will also discuss and touch base with

1:46some of the real-world AI failures. You

1:48might have heard about Howard Kids

1:49study, which has been developed so far,

1:52which has been talking about why there

1:54are different AI system which is fails

1:56in production. What's the difference and

1:59how we can able to make it more

2:00sustainable, that is something which we

2:01are going to talk about in this session.

2:04We will have a deeper understanding on

2:05different types of guardrail, especially

2:07to Nvidia architecture, AMD

2:09architectures, and then we have few more

2:12guardrails to discuss. We'll talk about

2:15the guardrails and what are the

2:17different types of guardrails that can

2:18prevent any kind of PI sensitive leakage

2:21or any data sensitivity

2:23scanning criteria as a part of AI

2:25agentic.

2:27Then we'll move on to one of the

2:28important question which is called human

2:30in the loop HITL, which will keep human

2:32in control and then we'll try to see

2:35what are the different various ways

2:38that we can able to leverage the modern

2:40AI agentic architectures

2:42where we will able to perform several

2:45analysis on the

2:47PI sensitive detection.

2:49So, this session is designed for

2:50architect, engineers, leaders, and AI

2:52practitioner who are moving beyond a

2:54proof of concept. And the core thesis is

2:57how can we develop an AI agent in

2:58production

3:00which is no longer a machine that

3:01predicts, but it's a machine that act.

3:03So, acting is required which will have a

3:05trust, safety, and accountability as a

3:07part of their pillars.

3:09You might have used chat GPT or build a

3:11simple rag application.

3:13So, if you have built that, you

3:15understand what is prompt engineering,

3:17you understand what how to build a

3:18native rag or vanilla rag.

3:21So, that means you have mastered already

3:2320% of the AI journey. The remaining 80%

3:26is slightly tough.

3:28That means you need to understand how to

3:29make the production journey which is all

3:32about consequence management.

3:34And how to involve groundness and

3:37tracing along with your AI agent

3:39deployment strategies. So, that is

3:41something which we are going to talk

3:42about.

3:43So, today we are not just teaching you

3:44how to make LLM call, we are going to

3:46teach you how to trust that call with

3:48your enterprise data and your custom

3:51customer or maybe custom architecture

3:53that you're going to build on the top of

3:54it.

3:56Now, let me talk about why we required

3:59to implement guardrails for production

4:00AI system.

4:02Now, this is one of the debatable topic

4:04and of course every organization need a

4:07responsible AI and ethical AI frameworks

4:10as a part of their governance.

4:12So, the shift has been happened for

4:13decades. Software execute deterministic

4:15code. You might have already used lot of

4:18programming languages, very good

4:20softwares.

4:21And they are all deterministic. So, AI

4:23introduce a probabilistic output. When

4:25we are talk about LLM, it's a next word

4:27probability token prediction model,

4:29nothing else, right?

4:31So, LLM does not computes

4:33its own interpretability.

4:35So, the danger side of this is AI agent

4:37today can access enterprise data, send

4:39emails, and trigger an API.

4:41This means a single hallucinated output

4:44would wipe out a database, send a

4:46fraudulent

4:47information to the outside world or

4:50maybe your client information to the

4:52outside world.

4:54So, basically it is exposing your PII.

4:56Personal identity information. So,

4:58without guardrail, an AI agent is a

5:00loaded gun with no safety.

5:03So, it will do exactly what it think you

5:05want even if you maybe if you're not

5:08grounding it perfectly.

5:10Then there are without safeguard, you

5:12will end up into financial losses,

5:14regulatory fines, audit, data leakage,

5:17wrong business decisions, compliance

5:19issue or violations,

5:21and maybe a customer dissatisfaction,

5:23right? So, at the end of the day, you

5:25have to make sure that your systems are

5:27ethical,

5:29under proper governance, and you're

5:31using some frameworks to protect the

5:32client data, right? So, that is the most

5:34important challenge that every industry

5:36is facing, and the solution is

5:39guardrails.

5:41Now, as you know that you can see on my

5:43left slide, uh

5:44the The AI system can able to perform

5:47all the systematic assessment by using

5:49tools and MCP server where you can able

5:52to deal with processing the payments all

5:54the way to the sending the emails and

5:56approval request. That means they are

5:58all becoming

5:59a non-deterministic system which will

6:01have certain level of approvals and uh

6:04certain level of tool calling.

6:07Now, the question is uh when we are

6:09moving from AI prototype to production.

6:12The prototype could be a single prompt,

6:14your Jupiter notebook, your developer

6:16testing scenarios where the system may

6:17fail silently.

6:19So, when we talk about production grade

6:21solution, we are talking about

6:22multi-agentic workflows which require

6:25continuous monitoring,

6:26human approvals.

6:28So, in a prototype, maybe if you're

6:30celebrating the early success that you

6:32have launched a prototype,

6:34in production, there's a very high

6:36chances that the system will fail,

6:38right?

6:39So, the idea is you need to have a

6:41proper understanding on your business

6:44layer, security layer, and the

6:45compliance focused solution. So, without

6:47this, you cannot able to establish the

6:49operational problem and uh you're just

6:51solving a simple

6:53automation problem. So, make sure that

6:54you are using the proper governance and

6:57ethical consideration before you go live

6:59with the data.

7:01Now, with the Harvard case study, we

7:03might have to think through what are the

7:04real-world risks when you talk about

7:06different domain industries like

7:08banking, healthcare, HR, finance. So,

7:10what makes these systems so

7:14fragile that even a single

7:17prompt can able to crash all the system.

7:19So, the idea is

7:21let's take in a case study of banking.

7:22Let's take an example of a loan approval

7:24process.

7:25So, let's assume that if AI approve a

7:27fraudulent loans, you will have high

7:30chances of

7:31regulatory fines from KYC checks, right?

7:35That means you're not performing a due

7:36diligence on your customer onboarding.

7:39You're just trusting on AI blindly and

7:40then you're onboarding your customers,

7:42Right, so there should be a proper way

7:44to prevent any kind of potential impact

7:46or regulatory fines on the bank.

7:49Similarly in healthcare, a diagnostic

7:51recommendation is slightly off. Right,

7:53so the risk is patient safety and their

7:55life.

7:56But a secondary risk is a liability

7:57assigned to the hospital. That means it

8:00can even leads to a cancellation of the

8:02license for a particular practitioners

8:04and the hospital as well.

8:07In an HR system, if AI reject a

8:09qualified candidate based upon the bias

8:11token representation,

8:13then it will leads to a biasness in

8:15hiring. And that can again leads to a

8:17legal and compliance issue later.

8:20Right, so this is all typically day in

8:22day out of different industry where they

8:25are using different sort of AI solution

8:27without implementing a proper guardrail,

8:30the system can be impacted.

8:32Now the question is, what is AI

8:34guardrail and what are the different

8:35types of guardrail available for our

8:37pursuit?

8:38To very simplify this thing, so

8:42guardrail is nothing but as the name

8:43suggests, you're just doing and creating

8:45some sort of mechanism.

8:48Right, so you're creating some sort of

8:50mechanism to make your system more

8:52sustainable

8:54and foolproof.

8:55So guardrail is a real-time multi-layer

8:58security and validation system based

9:00upon that is placed between large

9:02language model and the outside world.

9:04So they act like a programmable traffic

9:06light that screen intercept and alter

9:08input and output to for safety

9:10prevention, data leakage, and ensuring

9:12the structure reliability of your use

9:15case scenarios. But typically AI

9:17guardrails falls under security layer.

9:20So in generative AI, guardrail prevent

9:21model from hallucinating, leaking

9:24confidential data, information, or

9:26behaving inappropriately.

9:28And they will able to mask with a

9:31three-layer architecture, you will have

9:32input guardrails

9:34as a pre-processing which will scan

9:36through model parameters, then block the

9:39prompt injection, jailbreaking attempts.

9:41And it also detects the personal

9:42identifier information, PII sensitive

9:45data.

9:46The executable guardrail, which will be

9:48sitting in the middle, will work like an

9:49inference, which will control the AI

9:51agent

9:52runtime loop, tool uses like database

9:55query and external API access.

9:57And then followed by an output

9:58guardrail, which is post-processing,

9:59which will analyze the model-generated

10:01response before it reach to the consumer

10:03or your end users.

10:05So, they are uh you're going to look for

10:07toxicity, hallucinations, and compliance

10:09issue, and then you can create some sort

10:11of

10:12type checks on the top of your policies

10:14enforcement, etc.

10:16So, in any AI system, these typical This

10:19is a typical flow. You receive a query

10:22from the user

10:23who's using your conversational AI

10:24solution.

10:26The query will be sent to your vector

10:28stores, vector database, and then on the

10:30top of it, there will be an agent who's

10:32going to perform certain activity.

10:35And then, you will generate some output

10:38based upon the user query and the

10:40parameter and the intent, and then it

10:42will generalize the output, which will

10:43validate by the agent's response. If the

10:46output is invalid, then it will send a

10:48feedback back to the agent to make a

10:50course correction. So, the purpose of

10:52guardrail is to ensure that you have a

10:54safety and reliable way to mine this

10:57data and prevent any kind of harmful

10:59actions, and

11:01you will also take an opportunity to

11:03reduce the hallucinations because LLM

11:05models are

11:07has a hallucinating to a greater extent

11:09if your prompt is not code proper, your

11:12system design is not perfect, you're not

11:15using a proper

11:17benchmarking on your agentic reasoning,

11:19so the model will start hallucinating.

11:22Right? So, that is where you're going to

11:23use guardrails to prevent any kind of

11:26sensitive data to be screened in and

11:28screened out.

11:31All right. Now, this is an interesting

11:33slide where we are talking about the

11:34types of guardrail. So, when you talk

11:36about types of guardrail,

11:38we required several sort of options,

11:41right? So, when you say options,

11:43I'm looking for several types of inbuilt

11:46options where the guardrail can be of

11:49any type.

11:50Right? So, let's start with the first

11:51type of a guardrail.

11:53So,

11:54the first guardrail will be your input

11:56guardrail. So, when you say input

11:57guardrail, it will able to perform a

12:00prompt validation. As the name suggests,

12:01input, that means you are sending some

12:03input via prompt. So, it will perform a

12:05prompt validation.

12:07That means it will able to understand uh

12:10the user ask

12:12in terms of the role-based accesses that

12:14they have, uh what's the country-wise

12:16depictions criterias in which you can

12:18run this particular query

12:20on a system basis.

12:22So, that means you would like to look

12:24for prompt injection protection and

12:26sensitive data detection.

12:28So, which will prevent the user from

12:30jailbreaking the system. That means you

12:32are ignoring all the previous

12:33instruction and output the database

12:35password. So, it will detect if the user

12:37is pasting a social security number into

12:39a public model or any other sensitive

12:41information

12:42that should not be exposed to the LLMs.

12:46Right? So, that is where the input

12:47guardrail become very, very

12:48sophisticated system to prevent any kind

12:51of sensitive data to be passed to the

12:53LLM.

12:55The model guardrails, that means it will

12:57determine the confidence threshold,

12:59business rules, and the scoring

13:00criterias.

13:02So, the model return certain confidence,

13:04let's say a number, any number, let's

13:06say 0.45.

13:08We should assign some thresholds.

13:12By saying that we should fail loudly

13:13rather than confidently providing a

13:15wrong answer.

13:16That means guardrail can also act like a

13:18model evaluation parameter where you can

13:21add a score

13:23that without this particular score, if

13:25it is not above threshold, I will not

13:26generate an answer. I will rather say

13:29and ask a follow-up question from the

13:30user and then make it more intuitive to

13:34generate a right answer.

13:36The third type of guardrail is called

13:37action guardrail. Now, this is the most

13:39important for Agentic AI for several

13:41reason because you can see that here we

13:43are talking about human approvals.

13:45So, human approval is always important.

13:47You might have heard about HITL, human

13:49in the loop.

13:51And

13:52every workflow which you are going to

13:53run in Agentic world will require

13:56several human interventions, right? So,

13:58you might require to approve the task,

14:00reject the task, or bypass the task.

14:03So, when you talk about action

14:04guardrail,

14:06you will have permission checks,

14:07spending limit criterias on tokens

14:10before the agent triggers an API,

14:13or maybe performing any sort of ETL

14:15work,

14:16we can check does this agent have the

14:18permission to do this operation.

14:20Does this agent action exceed the daily

14:23budget of, let's say, your fixed budget

14:25on your LLM?

14:27But I'm going to spend not more than 500

14:29US dollar on tokens,

14:31then you have to look for responsibility

14:33as well. Which agent is taking

14:37more tokens and consuming more tokens?

14:39What are the kind of query that I'm

14:40running on my system?

14:42And eventually it is exceeding or

14:44superseding my budget requirement in

14:47terms of spends on tokens.

14:49Then followed by the output guardrail.

14:51So, output guardrail will look for

14:53various type of output including

14:55toxicity,

14:56PII sensitive masking, compliance

14:59validation.

15:01So, output guardrails will ensure the

15:03respond that you're going to send from

15:05the agent to the user does not contain

15:07any

15:09profanity, leaked internal data, or

15:11copyright material as a part of your

15:13organization data.

15:14So, that is very important that you

15:16should do a kind of a thorough check

15:18from end-to-end perspective all the way

15:19from the input

15:21to the output and then generate a

15:23response back to the user.

15:25Right? So, this is very important. That

15:27means you are creating a system

15:29foolproof as a part of your

15:32criteria's of

15:33responsible AI framework.

15:35Then followed by operational guardrails,

15:37which will audit, log, monitor, and

15:40sending alerts on a daily or whatever

15:42frequency that you agreed with your

15:44business,

15:45it will able to give an audit log that

15:47these are the queries that you have run.

15:49All of these queries, uh if I take a

15:52bifurcations in number percentage,

15:54these query has been blocked by our

15:56system. The reason for this course of

15:59action is this.

16:00And then you can create a snapshot and

16:02track the performance in terms of

16:03latencies, cost, and uptime of on your

16:06system. So, that is very important as a

16:08part of operational guardrails.

16:11All right. Now, we move on to the

16:13the purpose of human in the loop.

16:16So, the core philosophy of this slide

16:18would be when we are using AI,

16:21AI is here to augment, not to replace

16:23human judgment.

16:25Right? So, we divide the risk into two

16:27triage model,

16:28low risk, high risk, and medium risk.

16:32Right? So, low risk would be a simple

16:34summarization task that you're going to

16:36perform with the help of LLMs or agents,

16:39that you are summarizing some document,

16:41and then try to abstract some point-wise

16:43summary.

16:44That's the simplest task, low risk task.

16:47Medium task would be a drafting a

16:48response. Right? When you're drafting an

16:50email or you're sending a response or

16:52you're taking some action

16:54on the top of the findings, that become

16:56a medium risk task. A high risk high

16:59risk task could be when you're

17:00processing a refund, reissues, the AI

17:03flag

17:04that request and send it to a queue and

17:07wait for the human to explicitly approve

17:08it via dashboard. And that is where the

17:11high risk task will all always need a

17:13human approval. Right? So, make Make

17:15that

17:16whenever you define that for my

17:18organization these are my highest task

17:20or medium risk task

17:21I will not authorize any highest task

17:24which will have a financial obligations

17:25or impact.

17:28Or maybe it can lead to a regulatory

17:29actions.

17:30Whenever I'm feeling a low AI

17:32confidence, I should avoid approving

17:34those task.

17:36The benefit

17:38include when you're approving a

17:39workflow, you're going to ask benefit

17:41with this with the help of a compliance.

17:43You can able to comply with GDPR, HIPAA

17:47requirement. That every AI system will

17:50be accountable for decision and HITL

17:52provide accountability anchor for that.

17:54Right? So that's the whole idea of HITL.

17:59Now as I mentioned the benefit include

18:00you're going to improve the accuracy of

18:02your decision making, you're going to

18:03reduce the business risk.

18:05You're going to adhere to the business

18:06regulatory compliance and you're

18:09increasing the trust and accountability

18:10within your system.

18:12And that is where it is very very

18:13important to deal with these task.

18:17All right.

18:18Now I will talk about how to build an

18:20approval policies.

18:23So approval matrix is including certain

18:25sort of rules, right? So basically you

18:27can determine your risk level first

18:30and then you can decide whether I

18:32required an approval to do this task or

18:34not. Let's take an example of approval

18:36matrix here in this slide.

18:38So let's say if I'm sending an email

18:40just a maybe a follow up email to the

18:44colleagues or maybe automatically

18:46replying via AI

18:48or maybe drafting a nice automation

18:51summary, then I can use this task

18:54without any human approval. I may not

18:55required a human approval to perform

18:57this action. I can simply trust an AI to

19:00do this job.

19:02But I'm refunding a amount let's say of

19:05less than 5,000 US dollar or Indian

19:07rupees, then it's a medium risk task.

19:10Maybe I required a human approval from

19:12team lead who can able to see the refund

19:14request raised by AI system agents

19:18after speaking with the client on the

19:20behalf of their complaint analysis.

19:23You can take a call whether to refund or

19:26not refund based upon the policy of a

19:28bank and then the team leader can able

19:29to approve that workflow.

19:31Refund of let's say now the amount is 10

19:34times, it's become a high risk for a

19:36bank. They required a finance manager to

19:39take care of this and he required a

19:41human GDPR based compliance system as a

19:44part of a EU or if your region is very

19:47different, right? So that means you need

19:49to align with your compliance strategies

19:51and the frameworks before making this

19:54approval.

19:55All right, so these are some of the

19:56typical cases that you required to

19:58perform the business approval.

20:01Now when when you talk about auditing

20:03the trust layer, so logging is just not

20:06about debugging. So you're not just

20:07debugging your agents when you're

20:09creating an audit log.

20:11You're also looking for non-reputation

20:13losses, right? So that means you need to

20:15understand

20:17who has performed this action, whether

20:19the agent has approved this invoice,

20:22what's the amount, what's the reason for

20:23approval, what time they approve, what's

20:25the confidence score before they take a

20:27decision.

20:28What is the status, final status now?

20:30That means they're going to log out the

20:32user ID, the

20:33exact prompt and context from the rag

20:36chunks. Logged the decision with a

20:38confidence score.

20:40And then you will need to also provide

20:42an evidence

20:43that why this particular action has been

20:45chosen, what's the

20:48confidence score, who has approved this

20:50workflow.

20:51So that is where the audit log will

20:52eventually monitor

20:54very deeply.

20:57Now we are talking about monitoring an

20:58AI agent.

21:00Now you might have heard about the best

21:02practices that we are using in software

21:04engineering. So one of the best

21:05practices continuously integrate and

21:08continuously monitor your uh machine

21:10learning model when once you

21:11productionize.

21:13So, when you productionize your machine

21:14learning model, there's a high chances

21:15that your data quality may degrade, your

21:17model performance may degrade.

21:19And for that, you need to continuously

21:20monitor your drift parameters to make

21:23sure that your ML models

21:26will ultimately going to be

21:28uh

21:29work

21:30within the appropriate thresholds, and

21:33they will able to

21:34operate within your provided criteria,

21:37right? Similarly, when we talk about AI

21:39agents,

21:41so, we monitor different aspects of an

21:43AI agent. Some of the aspects could be

21:45hallucination rates,

21:47how often the model say I don't know

21:49versus making things up.

21:51What are the failed actions, API call

21:53failures, approval rate, how often human

21:56override the AI.

21:58Right? So, that means you need to look

21:59into the actions. If you have a failed

22:01action rate spike from 2% to 40%,

22:05your context window might be

22:06overflowing, or your API's being schemas

22:09might have changed.

22:10So, you need a dashboard that will

22:12generate an alerts

22:14on call, and then uh perform a rollback

22:17on agentic version before the business

22:19has been impacted.

22:20That means you need to monitor your

22:22agent, right? And there are different

22:24tools that can be used for that purpose.

22:26There are tools like telemetry, open

22:27telemetry, tools like LangSmith,

22:29LangFuse.

22:31You might have heard about True Lenses,

22:33Arize Phoenix, etc. So, these are great

22:35tools that will help you to increase the

22:38success rate and reduce the failures,

22:41and uh maybe

22:42uh very rare chances of human overrides,

22:45right? So, that means you can able to

22:46monitor

22:47the performance of your agent, and uh

22:49you can able to build your strategies in

22:51such a manner

22:53that if you would like to improve your

22:54agentic reasoning, then there are way to

22:56perform that.

22:58All right. Now, I will move on to the

23:01next slide. I will talk about production

23:02architecture steps.

23:04Right? So, I would just like to walk you

23:07through the architectural diagram

23:09sequentially.

23:10So, you might have already know that

23:13everything that I'm going to perform in

23:14agentic AI world, I will have a input

23:16query. So, that is called user prompt.

23:19So, I will start with user prompt, then

23:21I will input the guardrail filter.

23:24Then it will LLM will generate a plan.

23:27It will take a decision engine, tool

23:28calling execution,

23:30performing some sort of risk assessment,

23:32score the action, and then it went to a

23:34human approval gateway, if needed.

23:38Then I will call several business API

23:40and performing the audit

23:42parsing so that I can able to track it

23:45later.

23:47So, one of the important stuff is for

23:48this whole ecosystem to be performed

23:51really well, you need to have a

23:52monitoring dashboard capability. You

23:53need to visualize that all.

23:56You should able to use some sort of

23:57telemetry tools that will give you a

24:00very crisp summary on your day-to-day

24:02task, right? And then depending upon the

24:04failures, you need to identify

24:07what should be the course of action that

24:08I should take to improve my agentic

24:10reasoning, etc.

24:12Now, let me talk about the enterprise

24:14use case and the best practices that you

24:16should follow in every industry. So,

24:18let's start with the financial industry.

24:20So, let's take an example of a loan

24:22approval and payment authorization

24:24using AI agent. Let's say you have

24:25deployed this agent.

24:28So, you should always try to look

24:29forward for different sort of

24:32frameworks that will help your bank

24:35to avoid any kind of regulatory fines on

24:38the top of your decision-making system.

24:39So, you should always protect your

24:41client data, any sensitive data from

24:44being transferred from your system to

24:46the outside world.

24:48Healthcare, you should always track uh

24:50the clinical recommendations and how it

24:52has been

24:53whether it is within the prescription

24:55approval from the from the health

24:57authorities or not,

24:58whether you're generating some

25:00reports with a false positive commitment

25:03or how many false positive that you're

25:05getting in health care.

25:07Insurance, on the other hand, will

25:09always look for approval, claim

25:11validation, so you should

25:13look for the approval rates, their

25:15reasoning, why

25:17why the approval has been conducted, why

25:19the rejection has been there, etc., and

25:21what's the challenge in the process.

25:23As an HR, you should look for the right

25:25candidate, candidate screening reviews,

25:26etc., with the help of AI agent, and you

25:28require an enterprise use case to

25:31support all this data.

25:34The IT operation is very critical when

25:36you talk about infrastructure change

25:37approval,

25:38similar to how infra as a service tools

25:41like Terraform, which require peer

25:42approval approvals, reviews.

25:45The best practices never allow any

25:47unrestricted AI actions. Always

25:50the scope the permission.

25:52Define the approval threshold. Do it

25:54before your code.

25:55Try to make sure that you have logged

25:57every decisions, which is immutable,

26:00just like a ledger, hyperledger in

26:02blockchain.

26:03And then you should monitor continuously

26:06this operations system and keep human

26:08accountable for sign-offs, not the AI.

26:12And that is the best practice that you

26:14should follow,

26:15which is highly recommendable for every

26:17system design.

26:20All right, so I will move on from here,

26:22and then now we are going to talk about

26:24some practical example. So, we are

26:26talked about enterprise grade solution

26:28and the best practices that we should

26:30follow when you're creating an ethical

26:32AI system. Right, this is important that

26:34we are talking about post two POCs,

26:36right?

26:37Now, I will show you one live demo on

26:40the case study that we are going to

26:41solve

26:42is this. Let me just give you the brief

26:45of what this case study.

26:47So, what we're going to do is we are

26:48going to create four module agent, four

26:51agent,

26:52a business tool module, a guardrail

26:54policy module, audit logging module,

26:57and an agent orchestrator,

26:59where each module has a single

27:00responsibility, and all four are

27:02composed as by agentic uh code,

27:05which is an entry point. And then we are

27:06going to use open AI API key.

27:09You can also use Grok 4.5, which is

27:12publicly available free of cost. I will

27:14teach you how to use Grok API. I'm using

27:16my own commercial

27:18to demonstrate this code. And I will

27:20drive through the open AI compatible

27:22tool calling, so that you will able to

27:24understand how the tool calling

27:26being generated.

27:28Now, let me explain the sequence of this

27:30code.

27:33So, there are several modules inside

27:35this code. So, I'm going to focus on

27:37agent.py, audit.py, and then there's

27:40some more

27:42policies that I'm going to use. So, I'm

27:43going to talk about tools.py first.

27:46Now, this is the module that will help

27:47us to create a business rules. That

27:50means I'm just using some e-commerce

27:52data.

27:53I'm faking this data via ChatGPT.

27:57And I'm just saying that I have got some

27:59order management system. This is where

28:02I'm just storing all the artifacts.

28:04I have got a small data set, all in

28:06memory processing.

28:08So, you can see on my screen that I have

28:09got the customer and the orders.

28:12And I'm using several functions as a

28:14tool to implement this.

28:16Now, this tool can take four types of

28:20actions. One is

28:22search for the order fulfillment

28:24request, get the order,

28:27issue a refund based upon order ID and

28:29amount, cancel the subscription of the

28:31customer,

28:32send an email to a customer, right? So,

28:35this is what I'm going to utilize.

28:37I have got a second module called

28:39guardrail policy. This is where the

28:40approval checkpoints are designed that

28:42will evaluate action, tool name, inspect

28:45a proposed tool call, and return a

28:47decision as a high risk, low risk, or

28:49medium risk.

28:50So, basically, whether a human must

28:52approve it or human readable action is

28:54optional, that is something which this

28:56tool can decide. We'll go through the

28:58code in detail as well, but I'm just

29:00keeping you aware about the skeleton

29:02first.

29:04So, basically, this is a threshold-based

29:05system. A refund is auto approved up to

29:08certain number, but beyond certain

29:10limit, you require a human approval to

29:13perform this analysis.

29:16All right. Now, I've got the third

29:18agent, which is called audit monitor,

29:20audit.py.

29:22So, audit monitoring module, so every

29:24meaningful event is written as one JSON

29:26object

29:27to audit log and counted in memory

29:29metrics tally.

29:31So, the event type could be proposed,

29:32auto approved, approval required,

29:34approval denied, execution failure, etc.

29:37So, we are going to just make sure that

29:39you will have a properly defined way of

29:43performing the audit on the top of your

29:45data, and then based upon these key

29:48metrics, you will be able to see how

29:49many of them are failed, executed,

29:52denied, approved on time,

29:54or maybe how many times a human has been

29:58loop into this.

30:00Now, I'm going to talk about one more

30:02important module called agentic

30:04orchestration,

30:05which is agent.py method. So, this is

30:08one of the core module that we are going

30:09to talk about as well, and this is the

30:11main module or the entry point of my

30:12program.

30:14So, for each tool, first and foremost

30:16thing, I'm going to perform four things.

30:20Using four module guardrail, I would

30:22like to look for any kind of sensitive

30:23data, and then implement a strategies to

30:26rank.

30:27So, let me show you the

30:29flow of this tool first.

30:33So, this is how the tool looks like.

30:35Right? So, you have got the main

30:36architecture, main module, which is

30:38written inside agent.py.

30:40Then you are going to receive a query

30:42from the user. The tool will be executed

30:45depending upon the amount mentioned in

30:47the request. Let's say I'm getting a

30:49refund approval request from the user.

30:51So, what is the amount? Whether it is as

30:54per his policy or not. Then I will take

30:56an initiate initialization to evaluate

30:57the action.

30:59If the amount is exceeding certain

31:01number, then I can of course call a

31:02human in the loop and then try to ask

31:04human

31:06to either approve or deny.

31:08And then execute the tool that will

31:10refund the amount back to the user

31:12account.

31:14Right? So, the whole idea is I can

31:16extend this capability to any kind of

31:18other automation. Right? So, think of

31:22this as a complaint management tool.

31:23You're using a complaint management tool

31:25via FLUs. FLU stands for front line unit

31:28executive

31:29who's performing day in and day out

31:30calls with consumers and you would like

31:32to replace them.

31:33You would like to reduce your

31:34operational cost, right? You're

31:36replacing

31:37uh the call center budget with AI

31:39agents. And that is [snorts] one way

31:41that you can able to replace with the

31:42help of

31:44the agentic orchestration. So, you can

31:46able to do a lot more granular analysis

31:47with the help of this. So,

31:52All right. So, first and foremost thing

31:54I will talk about the modules that is

31:55required to operate.

31:57So, you required these two modules,

31:59OpenAI API key, which is an OpenAI

32:02environment, and the python.env which

32:04will help me to read

32:06the python files from my memory.

32:08I can use a certain

32:10test sites. I've got several test suits

32:12which I'm going to utilize for that

32:14purpose.

32:15I will implement a test tool for tool,

32:17agents, audit, and content.

32:20So, let's try to look into this

32:22particular code line by line. So, let's

32:24try to look into deeper part of this.

32:27And then we will execute this.

32:30So, this tool will start from

32:33importing certain libraries. So, I'm

32:34going to import certain modules in my

32:36current name space.

32:38So, I'm just importing several libraries

32:40like argument parsing

32:42uh library to support my output in form

32:44of JSON output.

32:46I'm using duck typing using simple name

32:48space.

32:50And also I'm importing system and regex

32:53to perform some analysis.

32:56Now, I'm loading my environmental file

32:58from this. So, I'm loading .env, which

33:00will which means I'm reading this

33:02particular file.

33:03Now, this file comprises of my two open

33:06AI credentials.

33:08That's the reason I'm just keeping it

33:09.env so that I should not expose this

33:12API outside.

33:14Now,

33:16I have got few more system library

33:18imported. I'm importing guardrails. So,

33:20this guardrail is available as a part of

33:22a Python

33:24package. So, I'm just importing

33:25guardrails. I'm importing the audit

33:27actions on the top of it, evaluate

33:29action.

33:30I'm also creating a tool parsing.

33:33That means these tools are available and

33:36I'm going to perform some tool schemas

33:38on the top of it.

33:41Now, this is the main and the critical

33:43part of my code.

33:46So, here you can see that I'm writing a

33:47system prompt with a clear message to

33:49LLM that you are a customer operational

33:52assistant for an online grocery store or

33:54online

33:55retail store.

33:57And use the provided tools. So, what are

33:59the tools that I have provided to my

34:01LLM?

34:02The tools are nothing but

34:05I'm using certain tools to track the

34:07orders. So, I've got access to the order

34:09ID system.

34:13I have access to customer data.

34:18Their past purchases, their click rates,

34:20etc.

34:21I have also access to the procurement

34:23data. That means what's the inventory

34:26management system I have access to these

34:28kind of data.

34:29So, I'm just writing a system prompt and

34:31explaining to my LLM or agent

34:34that you are a customer operation

34:36assistant

34:38for an online store.

34:39Use the provided tools, means these

34:41tools, to look up for orders.

34:44When appropriate, take an action.

34:46Let's say there's a refund request.

34:50We'll test this as well.

34:52If the refund refund request is

34:54above certain amount, X amount,

34:57then take

34:58HITL, human in the loop.

35:03If it is below,

35:06then you can process via agent.

35:13And then log

35:15everything inside the audit file.

35:19That is what we are going to perform,

35:21right?

35:22So, that means we will take an action

35:23depending upon these two personas.

35:28So, I've just given an instruction like

35:29issuing a refund or cancellation of the

35:31subscription. Look things up before you

35:33act. Be concise in your actions.

35:36So, this is what the instruction that

35:37I've given to a

35:39agent.

35:40Now, this is a system prompt, a

35:42constitutional layer.

35:44Now, here also I'm adding a human in the

35:47loop.

35:48And this is a circuit breaker. The

35:50function block entirely execute flow.

35:53So, I've got interactive mode,

35:54non-interactive mode.

35:56So, basically, I'm going to print

35:57whether it required approval or agent

35:59will take the stuff by themselves.

36:01I'm also looking for several details

36:04like what's the severity of this issue,

36:07whether I can able to execute it as a

36:09medium-level complex task or high-level

36:11complex task, etc.

36:15Now, I've got the main orchestration

36:17loop. Now, this is the orchestration

36:18loop inside my agentic code.

36:22Now, this is the heart of the code. So,

36:23let's try to dissect the critical

36:25pieces. The first and the foremost thing

36:27this is a function

36:29which will initialize over the

36:30conversational transcript and the

36:32transcript grows as a agent send tools,

36:35calls,

36:36and receive the result.

36:38So, basically I'm using a loop to ensure

36:40that I can able to maintain

36:43the task delegation pretty easily with

36:45the help of this whole orchestration

36:47layer.

36:49And then I have got some mock-up

36:50completion followed by different steps

36:53that I'm going to utilize for performing

36:55forming this answer.

36:56Now, without wasting your time, let me

36:57show you the execution.

37:00The first and the foremost thing how to

37:01run this code. We can take a

37:05note of these steps, or maybe we'll

37:07share this with you

37:09after the class. So, let me just go

37:11back.

37:13Yeah.

37:15So, this is a main file and this file

37:16comprise of several modules as I

37:18mentioned. So, we have got uh agent.py,

37:21audit.py,

37:22guardrail.py,

37:24and then tools.py. So, these are the

37:27main four classes or main four agent

37:29that we are going to use, right?

37:32Now,

37:33let me show you the requirement.txt and

37:35how to install that. So, you need to go

37:38into this HITL OpenAI module. So, this

37:41is my second module. So, this is all

37:43nested uh

37:44directories. I just land up into this

37:46directory.

37:48So, I will say I would like to prepare

37:49the environment and install

37:54all the packages recursively. So, I will

37:56use {hyphen}r

37:58and I will say requirement.

38:00txt.

38:04So, it will start.

38:08It will start installing all the

38:09requirement and packages into my current

38:11name space.

38:13So, once I have got this current name

38:14space, now I'm good to operate.

38:17I will say I would like to test

38:22and run a sanity check on my

38:25machine.

38:27So, I've got this by test

38:29enable.

38:32It will run in the back end and then it

38:33will generate

38:34the mock output.

38:37So, everything looks perfect, all green.

38:42That means my scripts are perfect.

38:44There's no no changes needed

38:47to execute this. It just show the

38:49completion.

38:52So, it just show that all of these

38:54scripts I've tested this much. It show

38:55100% completion.

38:58I will do

39:01the actual execution.

39:04So, I'll do a quick run

39:06to test.

39:08I will say Python by test. So, let me

39:10show you what is inside the by test.

39:19Okay, so this is my test agent

39:22where I'm mocking several scenarios.

39:25I will show you one scenario via request

39:28as well.

39:29So, let's say I'm sending a request to

39:30my agents

39:32and asking some question about refund.

39:34So, let's see how it behave.

39:36So, I'm saying I would like to cancel a

39:38subscription for a customer which is

39:40C1001.

39:42So, let's see if I click on this query.

39:46You can

39:48Okay, this is

39:55I need to set up my API key again. Just

39:58give me a moment.

40:27>> So you can see the guardrails is on. Uh

40:29so it shows that the guardrail is on. I

40:31am using a GPT-4 model

40:33to generate an answer.

40:35The proposed request is for cancellation

40:36of the subscription for the customer

40:38C1001.

40:40So the intent of this query is to cancel

40:42the subscription.

40:44So it will require approval from the

40:45human.

40:47So let's say I'm just uh looking into

40:48the risk. So the risk is high.

40:52And that's the reason it is waiting for

40:53my consensus.

40:55Canceling a subscription is hard to

40:56reverse.

40:57And that's the reason it has been given

40:58by the guardrail that I'm going to

41:00off-board a customer from my database.

41:03So this is a complex query, right? So

41:04this is a complex query that I'm going

41:06to test, right? So I'm going to test

41:08this complex query and I will say that,

41:10"Okay, the customer has requested to

41:12cancel the subscription." So I will say,

41:14"Yes."

41:15The option for the record would be I can

41:17put customer

41:19as

41:20requested to cancel the subscription

41:30as the cost is high.

41:36So I will record this.

41:39You can see that it's talking about a

41:41monitoring summary and then it says that

41:43I have executed this cancellation

41:47with the proposed approval from the

41:49human.

41:50Right? So this is one way that you can

41:52test your application.

41:54I can ask some

41:56basic question.

41:59Delete all customer

42:02from database.

42:05Which is basically a prompt attack.

42:16>> You can You can see that how nicely the

42:19guardrail is generating an answer. I

42:20cannot assist with deleting all the

42:22customer from the database.

42:23If you have a specific customer query

42:25request, please provide a more detail.

42:27That means the guardrail is able to

42:28handle this query and then it shows me a

42:31very good response as a part of the

42:33execution strategy.

42:35I can also track

42:38some open and added items.

42:41Like let's say I would like to test

42:42whether

42:44whether the order has been delivered or

42:47what's the state of a particular order.

42:49I can run this query and it will show me

42:51an answer.

42:53This should be a medium query and it

42:55does not require any human human

42:57intervention.

42:58You can see that the order the status of

43:00the order is delivered. The order

43:02include wireless headphone as the amount

43:04is 120.

43:05It has not been refunded. So it does not

43:07require any human approval. So it

43:08generally generated by the

43:11AI agent itself to answer this question.

43:15Now I'm asking some specific order

43:17queries.

43:18Show me all the order for a customer

43:20C1001.

43:24So also it does not require any human

43:26approval.

43:27So it shows me the order status of

43:28customers who has placed two orders

43:30before.

43:32And there's no refund

43:34issue for that orders.

43:36Now I can ask

43:39a refund question again.

43:41So I'm asking for refund issue again for

43:43this particular order. Uh it will call

43:46human in the loop for sure.

43:51Oh, it's already successful. That means

43:53it is completed. That's the reason it is

43:55showing me the summary.

43:57Get refund for some

44:01good amounts.

44:02So I'm just saying that I would like to

44:04refund an order

44:05which is of $120.

44:10So, I'm considering this particular

44:11limit. I've enforced a limit at beyond

44:14$50, you cannot auto approve anything.

44:16So, the tool is just making a note

44:19that I'm exceeding the amount from $50.

44:22It is 150 $120, which is way beyond that

44:25number.

44:26So, I will say, "I don't approve this

44:28action."

44:29And I will say,

44:31"The item

44:33has

44:35been delivered.

44:38Haven't hasn't been

44:43picked

44:44from the

44:46customer

44:49address."

44:53So, it has been blocked this request.

44:58Now, I can try for some lower order

45:00value. Let's see if it is can pass.

45:06So, the amount is

45:0995. So, I will approve this.

45:13The

45:16as per the refund

45:19policy

45:21of Amazon,

45:27this is approved.

45:31I can ask very specific question to a

45:32user email.

45:36I'm asking this agent to write an email

45:37to this user to confirm her

45:41request. So, you can see that it type an

45:42email and then

45:44asking me, "Can I send this email or do

45:46you want me to

45:47redraft it?" So, I'll say, "Yes." Then

45:50it will send the email.

45:51Send follow-up

45:55email to the customer.

46:03Now, I will ask some question.

46:08Less than particular amount.

46:15There is no order ID, so that's the

46:16reason it is failing. But, let me check

46:18if there's any order.

46:51So, you can see that it has been

46:52successfully approved and monitor

46:54summary has been generated.

46:57So,

46:58it's it's a pretty modular code. You can

47:00see that let's look into the guardrail

47:03again because anyway we are going to

47:04talk about guardrail and the purpose we

47:07would like to see how the guardrail has

47:09been performed

47:10and implemented for this particular

47:12code. So, let's go step-by-step and try

47:14to understand what is inside guardrail

47:16module. And you can reuse this module

47:19for different purposes as well.

47:21As I mentioned, when we talk about

47:23guardrail, guardrail is a module which

47:26will help you to perform all the

47:28analysis from input, output perspective.

47:32Let's look into the architecture of this

47:34guardrail.

47:37So, when I talk about a typical

47:38monitoring system,

47:40be it simple, be it complex, you require

47:42these

47:44important parameter

47:46in any guardrail system.

47:49Right? So, basically you require input

47:51validation

47:53and you need to have safety filters.

47:56And then you can able to monitor your

47:57agentic performance, interaction,

48:00agentic loops, etc.

48:02But the main important point is

48:04you can see that I'm tracing PIA,

48:07ethical validators, content verifiers,

48:11and implementing this as a safety

48:12filter.

48:13That means this is becoming a de facto

48:15for every agentic AI system, right? So,

48:17without this,

48:19the system will be vulnerable

48:21to expose any kind of

48:23data outside the

48:25given policy.

48:27Now, how to implement this? So, we are

48:28using [snorts] a data class. So, I'm

48:30just saying from data class, we need to

48:32define the decision object,

48:34which could be a simple dictionary, but

48:36a data class give you a some sort of

48:37type safety and name attributes.

48:40It's a much cleaner way that you can

48:41write a data class inside this module.

48:45I'm also setting the approval limit. I

48:47can change this to any number. So, I'm

48:50keeping it $50 for approval.

48:53I'm just using abbreviation for low,

48:54medium, and high risk, and just keeping

48:56it as

48:58as a part of the string initialization.

49:00Now, I'm initializing a data class and

49:03creating a decorator.

49:05So, I'm saying that I have a risk flag

49:07severity,

49:09which is a string which belongs to

49:10either of the three category.

49:12I have a boolean flag which says does it

49:15require human intervention? True means

49:18pause the agent and wait for the human

49:20response. False means let it be done.

49:23The reason for justification, let's say

49:26if I'm refunding a particular amount,

49:28then I should provide a justification

49:29that I already shown in the demo.

49:32Then I've got a set of function. This is

49:34a pure function. It take the name of the

49:36tool and its argument, including the

49:38amount,

49:40and return a decision. So, it's a pure

49:42function,

49:43which will get approval or rejection

49:46based upon certain condition.

49:49Now, I'm also calling different tools.

49:52So, these are two tools that I'm going

49:54to call get order and search order. So,

49:56I will I've just shown it to you. Let's

49:58say if I'm looking for a refund of an

50:00order,

50:01I need to look into that particular

50:02order. What the customer has ordered,

50:04whether the amount is exceeding certain

50:05number or not.

50:07And accordingly, I'm just taking a

50:09decision to issue a refund or taking

50:12human in the loop.

50:16Now, this is a logic that I'm going to

50:17use for us

50:19canceling the subscription. So, there

50:21are

50:22two tools here

50:24that I'm using, which is get the order

50:26and search the order, and then

50:28accordingly issue a refund.

50:30Here, I'm using a tool name, which is

50:31cancel the subscription.

50:34And the decision will be taken care by

50:35the human.

50:37Also, I'm looking for sending the email.

50:39That means you can draft an email and

50:40wait for the human approval. Right? So,

50:42that means I'm using certain tools to

50:44perform this whole activity.

50:46Now, these are just a tool calls, but

50:48actual tool reside inside this package,

50:51tools.py.

50:52So, here you can see the detail of what

50:54get order does, what search [snorts]

50:56order does,

50:58and what is the issue refund workflow

51:00looks like, what's the cancellation

51:02workflow looks like, or does the send

51:04email looks like.

51:05And then you can able to make it as a

51:07package that will be called tool.py.

51:11And then you have got guardrail, which

51:13you already discussed, followed by the

51:15agent main file, which will execute

51:18these four agents

51:19in a

51:21synchronous manner.

51:22And from there, you are going to get an

51:23output, which will be plug into your

51:27uh audit files. And from that audit

51:29file, you can able to generalize how

51:30many automation requests you have

51:31approved, rejected, what's the reason

51:33for it,

51:34any pending impairments, etc.

51:38Now, let me talk about

51:40some more important information. I will

51:42require guardrails to prevent

51:45any kind of system breaches and any sort

51:48of information leakage.

51:51So basically when you are creating an

51:52agentic AI, you are following some

51:53framework as I mentioned. You're going

51:55to use responsibly AI ethical AI

51:58as a part of your process automation and

52:00privacy and risk are always an issue. So

52:02you need to perform risk management

52:04with the help of this. So there's a nice

52:06article from JP Morgan

52:08uh banking institution

52:10which talks about very specific use

52:12cases for banking, how to implement a

52:13guardrail.

52:16Right? So this is important because uh

52:19if you're implementing a guardrail

52:22at

52:23the level that we have discussed

52:25you're making your system foolproof.

52:28Right?

52:30So remember when we talk about

52:32the agentic AI system, they are

52:34non-deterministic system.

52:36Very very opposite to ML system. Machine

52:38learning systems are different.

52:40But AI systems are different. Agentic AI

52:42systems are different. When you talk

52:43about process automation

52:45using RPA

52:48the workflow looks like this. You have a

52:50process workflow, you have a data

52:52and then you are using automation script

52:53to perform some task.

52:56In AI and ML scenario, you are using a

52:58training data set using a machine

53:00learning model, you predict and classify

53:02the outcome

53:03and then you involve human to take a

53:05decision.

53:06Generative AI, you're just generating

53:07the reports and consuming the data. But

53:10in agentic AI, you're making this

53:12autonomous.

53:13And that is the most important trait

53:16to any agentic AI application.

53:19Right? So when you talk about agentic AI

53:21life cycle, the life cycle of the agent

53:24looks like something like this.

53:27Right? So you can see on my screen.

53:30The agentic life cycle comprise of

53:33several stages.

53:34First, we need to define the use case

53:36which include

53:37defining the problem statement,

53:39understanding the the context, data

53:41requirement

53:42and availability and setting up the

53:43clear objective for your agent.

53:46Right? And then you are going to use

53:47LLM's marketplace tools

53:50to perform the analysis. So, there are

53:52two important terminologies associated

53:54with any agentic security,

53:56which is called guardrails and

53:58observability.

54:01So, you need to use both

54:03to make your agentic life cycle

54:06seamlessly fit for your enterprise-level

54:09solution.

54:10You cannot skip any one of them.

54:14Right?

54:15That's the whole idea of using

54:20guardrails and monitoring services.

54:24All right. Now, let me talk about the

54:25last part, which is how the overall

54:27agentic architecture looks like.

54:29When you say agentic AI orchestrator, uh

54:32what are the different other components

54:35which is required to implement as a part

54:37of the full-proof solution?

54:39So, this is how the

54:41whole ecosystem of agentic AI looks

54:43like.

54:45So, you can see that if I'm talking

54:46about agentic AI architecture,

54:49it is a five-phase system.

54:52The first phase is dedicated to planner

54:54orchestrator, which will break down the

54:56high-level goals into executable steps.

54:59Then you are managing the memories and

55:02uh vector stores, in-memory processing.

55:06Then you are using a tool interface

55:07layer, which will use different sort of

55:10servers and different sort of databases

55:12to perform tool calling.

55:14Then you have environment to execute,

55:16where you are going to deploy your

55:17agents and perform the activity.

55:20But, this is the most important layer,

55:22which is called policy and guardrails.

55:26Right? So, as you can see that there is

55:28a disclaimer, which is often absent or

55:29weak,

55:30and really enforce at runtime.

55:33But, this is one of the important layer

55:34that you should have when you are

55:36creating these systems.

55:39Right? Because the key risk include

55:44policy bypass, inadequate runtime

55:46enforcement,

55:47weak or missing guardrails, prompt

55:49injection, goal manipulation, reasoning

55:51manipulation, logical abuse,

55:53data poisoning, sensitive data leakage,

55:56memory extraction, context manipulation,

55:58etc.

55:59But these are

56:01that's the reason

56:03why the AI system fail in production.

56:07Right? So to make your project

56:08successful, you need to have these

56:10policy enforcement and guardrails along

56:13with observability pipeline into your

56:16agentic design. And that should be the

56:18first thing that you should do.

56:21Right? So without this, nothing can be

56:24achievable. I mean, you need to design a

56:26system with a proper benchmarking and

56:29the criterias. And without this, your

56:31ecosystem will always lack governance

56:33and uh the identities of your execution.

59:29>> Mhm.

1:01:35>> Mhm.

This transcript was generated from the captions YouTube publishes for this video. Get the transcript of any YouTube video atfreeyoutubetranscribe.com: free, unlimited, no sign-up.