--- title: "Practitioner's Corner" canonical: "https://current.tinyfish.ai/issue/3/practitioners-corner" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/3/practitioners-corner" issue: 3 section: "practitioners-corner" description: "Lessons from the field—what we see building at scale" authors: ["Rina Takahashi"] published: 2025-11-13 updated: 2025-11-13 articles: 10 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 3 — Practitioner's Corner Lessons from the field—what we see building at scale ### Dispatches from Production Scale - [The Analyst Who Checks 10,000 Prices]() — By [Rina Takahashi]() · Published 2025-11-13 · Format: Operations Field Notes Every morning, an analyst opens fifty browser tabs. Hotel booking sites, competitor pricing, property by property. They've developed a system: Chrome for Booking.com, Firefox for Expedia, Safari for the regional sites. They know which sites refresh at 6 AM, which ones require clearing cookies, which login flows break on Tuesdays. ### Mapping the Invisible Web - [The Web's Time Zones]() — By [Rina Takahashi]() · Published 2025-11-13 · Format: Field Dispatch You check a hotel website at 9 AM. The room costs $189. Your colleague checks the same hotel, same room, same URL at 9 PM. It costs $159. Most people assume they encountered different promotions or got lucky with timing. ### Theory Meets Production Reality - [What the Manual Operator Knows]() — By [Rina Takahashi]() · Published 2025-11-13 · Format: Parallax View She opens fifteen browser tabs each morning and checks hotel rates across Japan. Takes ninety minutes. Ask her to document the process: "Check the rate calendar, record the prices, flag significant changes." Simple. But watch her work. She scrolls past promotional banners without reading them, navigates federated authentication through muscle memory, recognizes when "fully booked" means genuinely sold out versus holding rooms for regular guests. Site redesigns don't slow her down. The work looks automatic. - [What Automation Discovers It Doesn't Know]() — By [Rina Takahashi]() · Published 2025-11-13 · Format: Parallax View We built a web agent to monitor hotel pricing—the same task the analyst had been doing manually. Authenticate to each site, extract rate data, flag changes. Worked perfectly in testing. In production across fifty properties, it started failing in ways we didn't expect. The agent couldn't distinguish "fully booked" meanings, navigate authentication labyrinths, or adapt to site structure changes. Not technical failures. Knowledge gaps. Automation discovers what was invisible all along. ### The Number That Matters - [63% of Bot Defense Spending Goes to Management]() — Published 2025-11-13 Companies deploying bot mitigation systems spend 63% of their budgets on ongoing management and remediation. The technology itself? Just 37%. ### Field Notes from the Ecosystem November delivered a cluster of operational milestones worth logging. Microsoft hit 99.6% phishing-resistant MFA. Atlassian enforced API rate limits. ISPs stacked 128 users behind single IP addresses. The web scraping market crossed $1 billion with petabyte-scale daily operations. These numbers matter because they expose infrastructure assumptions that no longer hold. IP-based rate limiting fails when carriers multiplex 128 subscribers through one address. Manual security processes can't scale when you need 35,000 engineers working full-time. The operational baseline keeps shifting, visible only when you're running production systems at scale. - **Microsoft Reaches 99.6% Phishing-Resistant MFA** — [Source]() — Published 2025-11-13 Tag: Enterprise Security Microsoft hit 99.6% phishing-resistant MFA enforcement and 99.5% live secret detection across all employees and devices by November 2025. They're running the equivalent of 35,000 full-time engineers on security work alone, the largest cybersecurity operation in digital history. - **Atlassian Enforces Token Rate Limits November 22** — [Source]() — Published 2025-11-13 Tag: API Management Atlassian rolled out API token rate limits on November 22, 2025 across all apps and integrations. Systems now receive HTTP 429 responses with Retry-After headers when they exceed thresholds, breaking any automation that assumed unlimited API access. - **Web Scraping Market Hits $1B, Petabyte Daily** — [Source]() — Published 2025-11-13 Tag: Scale Economics Web scraping reached $1.03 billion in 2025, tracking toward $2 billion by 2030. Billions of pages get scraped daily worldwide. AI training runs now consume 100TB+ datasets per cycle. The unit of measurement jumped from megabytes to petabytes. - **CGNAT Stacks 128 Subscribers Per IP** — [Source]() — Published 2025-11-13 Tag: Network Infrastructure ISPs now place 128 subscribers behind one public IPv4 address, allocating roughly 500 ports each. IP-based rate limiting breaks completely under this model. Modern systems must evaluate multiple HTTP request characteristics, not just source IP. - **Akamai Blocks 82.3% of Automated Traffic** — [Source]() — Published 2025-11-13 Tag: Bot Defense Akamai's bot manager blocks 82.3% of automated traffic on product pages, forcing scrapers into larger proxy pools and custom browser farms. The arms race favors well-funded providers. Smaller operations can't match the capital requirements. ## Other sections in Issue 3 - [Daily Brief]() - [Market Pulse]() - [Foundations]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()