AI Infrastructure

Book · First research edition

Capability without engineered evidence is not deployment readiness.

Designed to Be Debugged — why autonomous AI needs state capture, replay, and escalation before it can be trusted. An operational engineering discipline for agentic systems, translated from twenty years of silicon debug practice.

§ 01

The argument

When an agent changes external state, a correct answer is not enough.

The problem

Unseen failures accumulate as operational debt.

Final-output monitoring misses the expensive part. The bills — incident, change, audit, scaling, and trust — arrive later, and they are paid only after an incident. Near misses are data, not noise; most systems throw them away.

The discipline

Silicon solved this in the dark decades ago.

Chips ship with designed-in debug access: independent observation paths, meaningful state exposure, reproducible failure, and a threat model for the debug logic itself. The book translates that design-for-debug (DFX) discipline into agent architectures — before the tool boundary is fixed, not after the incident.

§ 02

The architecture

The Agent Debuggability Stack.

Eight evidence surfaces turn an opaque sequence of model and tool interactions into an evidence-bearing operational run. A reference architecture — layers can be combined or renamed; what matters is preserving the questions each layer must answer.

01Run identity & runtime02Request & authority03Goal & constraints04Evidence & uncertainty05Proposed action & tool interaction06Escalation & intervention07Outcome & side effects08Replay, evaluation & learningEVIDENCE FLOWS DOWN · AUTHORITY IS BOUND AT EVERY LAYER
§ 03

The controls

Stopping is a system capability.

One kill switch is not a control strategy. The Intervention Ladder names the response appropriate to the evidence, the consequence, and the point of commitment — and puts the checkpoint before commitment.

Continue & record01Constrain scope02Clarify with the requester03Require approval04Block the action05Abort & contain06Compensate or roll back07Escalate for investigation08INTERVENTION MUST EXIST BEFORE COMMITMENT · NOT ONLY AFTER HARM

The seven action states

Never infer execution from model language.

Each state is recorded independently, with its own event and timestamp. A failed or timed-out state can never be reported as success, and verification uses a source other than the agent's own claim.

  1. 01Planned
  2. 02Requested
  3. 03Authorized
  4. 04Attempted
  5. 05Executed
  6. 06Observed
  7. 07Verified
§ 04

Inside the book

From the debug room to the deployment review.

Prologue: The Action You Cannot Explain
01Capability Is Not Readiness
02The Cost of the Unseen Failure
03What Silicon Learned in the Dark
04Anatomy of an Inspectable Agent
05Capture, Freeze, Replay
06Stopping Is a System Capability
07Fault Injection for Agentic Systems
08The Deployment Readiness Case
Epilogue: Tuesday, Replayed
Field Guide: The Deployment Readiness Review
Edition
First research edition · v1.0.3
Research cutoff
July 10, 2026
Length
80 pages · 22,475 words
Figures
12 designed figures
Sources
32 in-text · 73 in the research registry
Claims
64 evidence-linked claim rows

Free · no email required

The Deployment Readiness Review — field guide

The book's back-matter checklist as a standalone reference: eight review gates, the seven action states, four outcome measures, and the go/no-go decision rule — everything an engineering team needs to run the review this quarter.

Open the field guide
CompleteManuscript status

The First Research Edition (v1.0.3, research cutoff July 10, 2026) is complete. I am currently entertaining conversations with technical publishers and AI infrastructure teams.

Start a conversation