AI Infrastructure · Spire Digi Solution

AI Evaluation & Observability Platform

Because “it felt fine in testing” isn’t a release process for a probabilistic system.

Delivered at: Spire Digi Solution
Role: Lead architect — evaluation model, scoring pipeline and platform design.

The problem

AI output is probabilistic, so traditional unit tests alone can’t tell a team whether a production AI system is quietly improving or degrading with every prompt, model or RAG change. This platform turns that into a measurable, CI-gated signal instead of a gut feeling.

Business Context

AI output is probabilistic, so a team shipping prompt, model or RAG changes had no reliable signal for whether a change was quietly improving or degrading production behavior. This platform was built to turn that uncertainty into a measurable release gate for Spire Digi Solution rather than a gut feeling.

Architecture

Scroll sideways to see the full diagram
AI Evaluation & Observability PlatformProduction architecture — request flows top → bottom; security & observability span every layerClientslayer 1Dashboards & consoleSDK / API instrumentationEdge & networklayer 2WAF & DDoS shieldL7 filtering · bot controlAPI gatewayrouting · versioningRate limits & quotasper tenant / per keymTLS · TLS 1.3encrypted in transitIdentity & accesslayer 3OIDC / OAuth2SSO · short-lived tokensRBAC + ABACleast privilegeTenant isolationdata · vectors · toolsSecrets → Vaultno static credentialsAI security & guardrailslayer 4focusNeMo Guardrailstopical & safety railsInjection / jailbreak filterinput inspectionPII & secret redactioninbound & outboundPolicy engine · OPAallow / deny decisionsOutput validationgrounding · citationsEvaluation corelayer 5Event collectorhigh-throughput ingestTrace storefull prompt / agent / tool tracesEvaluation enginedeterministic + LLM-judgeScore aggregationblended into one scoreRegression gatesblock bad releases in CIExperiment comparisonmodel · prompt · RAG versionsExecution & toolslayer 6Judge model poolversioned · calibratedAlertingquality · safety · cost driftRetention & PII controlspolicy-basedModel layerlayer 7LLM gateway · routing & quotasPrimary model + auto fallbackSelf-hosted · vLLM / TritonEmbeddings serviceData & statelayer 8PostgreSQLpgvector / QdrantRedis cacheObject storageImmutable audit logcross-cutting — applied across every layer aboveSECURITY & COMPLIANCE · CROSS-CUTTINGSIEM & threat detectionruntime alertsSupply-chain scanningTrivy · Semgrep · GitleaksSBOM & image signingprovenanceAdversarial mappingOWASP LLM Top 10 · MITRE ATLASComplianceEU AI Act · ISO 42001 · NIST AI RMFOBSERVABILITY & OPS · CROSS-CUTTINGOpenTelemetry tracesprompts · steps · toolsMetricsPrometheus / GrafanaEvaluation & regression gatesblock bad releases in CICost & latency analyticsper tenant / routeAlerting & on-callSLOs · error budgetsCI/CD · IaCKubernetes · GitOpsTEN ARCHITECTURE PILLARS · REVIEWED END TO ENDScalabilitySecurityAI Security / GuardrailsReliability & ResilienceObservabilityGovernanceCost OptimizationData & RAG SecurityPerformanceMaintainability / DevSecOpsLegendSecurityGovernance / accessOrchestrationData / modelProcessing / executionObservability / storageTurns a probabilistic system into a measurable, CI-gated signal — so a bad prompt, model or RAG change never ships quietly.

Key capabilities

Full trace capture across prompts, agent steps and tool calls

Deterministic checks plus LLM-judge evaluation blended into one score

CI-integrated regression gates that automatically block a bad release

Experiment comparison across model, prompt and RAG versions

Cost, latency and safety metrics in a single operational dashboard

Security & Risk

The operational risk here isn't a single exploit — it's silent quality drift: a model, prompt or RAG change that degrades output with nobody noticing until a customer does. The platform treats that as a measurable, monitored risk, not a one-off QA pass.

Outcome

A CI-gated evaluation signal that blocks a bad release the same way a failing test suite would — quality and safety become a release gate, not a hope.

Challenges

Blending deterministic checks with LLM-judge evaluation into one score meant reconciling two different evaluation philosophies without letting either dominate — lean too hard on the LLM judge and it inherits the judge's blind spots, lean too hard on deterministic checks and everything qualitative gets missed. Capturing full traces across prompts, agent steps and tool calls also had to happen without adding meaningful latency to the request path being observed.

Lessons Learned

Silent quality drift is the real risk in AI systems, not one dramatic failure. Treating evaluation as a CI-gated release control — the same way a failing test suite blocks a bad deploy — is what turns “it felt fine in testing” into an actual guarantee. It's the same release-gate thinking behind a Production Readiness Assessment: a system is ready because it has measurable gates that catch regressions before they ship, not because it worked in a demo.

Architecture pillars

Designed and reviewed against all ten — see how I evaluate every architecture.

Want this level of review applied to your own system? Start an AI Architecture Review.

ScalabilitySecurityAI Security / GuardrailsReliability & ResilienceObservabilityGovernanceCost OptimizationData & RAG SecurityPerformanceMaintainability / DevSecOps

Technology

PythonFastAPIReactTypeScriptPostgreSQLRedisOpenTelemetryPrometheus / Grafana-compatible metricsVector storeDockerKubernetes

Want something like this, built properly?

I design and ship systems like this one — from architecture through to production.