Note from production
Discipline beats talent in production work
Why reliable systems come from boring loops: clear boundaries, observability, review points, and follow-through.
Talent can help you move fast once. Discipline is what keeps a system improving after the exciting part is over.
Production work is mostly boring loops: make the behavior visible, reduce moving parts, fix the sharp edge, review the next risky change, write down what the team learned, and repeat.
That is the work I trust. Not heroic rewrites. Not clever abstractions. A reliable system is built through small decisions that compound.
Reliability is a loop, not a trait
Teams sometimes describe a system as reliable because it has survived so far or because the engineers supporting it are experienced. Neither property creates a dependable operating model.
A production system improves when the team can repeat a small loop:
- Observe the user outcome and the system behavior behind it.
- Identify the most expensive uncertainty or failure mode.
- Make one bounded change.
- Verify the result with evidence.
- Capture the new rule in code, automation, documentation, or ownership.
- Repeat with the next risk.
The loop matters more than any one tool. Tests, dashboards, runbooks, reviews, and deployment automation are useful when they keep the loop moving with less guesswork.
Legibility comes before optimization
When a system feels fragile, the first instinct is often to replace a component, split a service, or introduce a new platform. That can add another moving part before the team understands the current one.
I prefer to make the behavior legible first:
- draw the critical workflow and state transitions;
- name the owner of each boundary;
- trace one successful and one failed request;
- expose queue, retry, timeout, and dependency behavior;
- document how a change reaches production;
- identify which manual recovery steps are currently keeping the product alive.
This evidence shows whether the problem is capacity, coupling, an unclear contract, or an inconsistent operating habit. It also creates a baseline against which a change can be judged.
In the shared API delivery case study, teams were already delivering. The improvement came from moving repeated setup, release knowledge, and ownership into shared templates, automation, and review practices. The work became easier to repeat, not merely faster once.
Reproducibility removes heroics
Heroic production work often looks impressive because the recovery depends on knowledge that only one person has. The same situation is a system risk.
Reproducibility means another engineer can:
- build and test the current version;
- understand what a release changes;
- find the evidence for a failure;
- perform or review the recovery step;
- explain why the system is safe to continue operating.
This does not require writing a document for every action. The best knowledge is often executable: a test that protects a contract, a deployment gate that rejects a bad candidate, an alert tied to user impact, or a migration tool that records what it changed.
Documentation still matters where judgment is involved. A short decision record can preserve why one tradeoff was accepted and what would cause the team to revisit it.
Small changes need strong finish lines
“Make a small change” is not a quality strategy by itself. Small changes still accumulate risk when nobody defines what complete means.
A useful finish line connects the change to its operating evidence:
- the intended behavior is explicit;
- relevant automated checks pass;
- the user-facing path is exercised;
- telemetry can confirm the result after release;
- failure and rollback behavior are understood;
- ownership of the next signal is clear.
For AI-assisted work, that finish line is especially important. Producing a plausible implementation is cheap. Proving that it respects the current contract and behaves correctly in the real workflow remains the work.
Incidents should change the system
An incident is not resolved when traffic recovers. It is resolved when the team has reduced the chance, duration, or uncertainty of the next occurrence.
The follow-through may be one of several things:
- an invalid state becomes impossible;
- a timeout becomes bounded and retryable;
- an alert moves closer to the user outcome;
- a manual check becomes an automated gate;
- an ambiguous owner becomes explicit;
- a hidden release step becomes part of the normal pipeline.
The purpose is not to eliminate every failure. It is to make failure easier to see, contain, explain, and learn from.
The production AI reliability case study illustrates this compounding approach. Evaluation thresholds, worker health, bounded processing, and usage telemetry are separate controls, but together they form a release and recovery system the team can operate repeatedly.
A practical weekly operating rhythm
For a team stabilizing a live product, a simple rhythm is often enough:
- Choose one critical workflow, not the entire architecture.
- Review outcome, failure, latency, and cost evidence for that workflow.
- Select one intervention with a measurable finish line.
- Ship it through the normal review and release path.
- Verify the result and record the next highest uncertainty.
This keeps architectural work connected to production behavior. It also prevents a reliability backlog from becoming a second product roadmap with no delivery capacity.
A Production Systems Review is useful when the team cannot yet see which loop to start with. It produces the workflow map, evidence-backed risks, and sequence. The long-term benefit still comes from the team’s discipline in running that sequence after the review ends.