--- title: "Practitioner's Corner" canonical: "https://current.tinyfish.ai/issue/40/practitioners-corner" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/40/practitioners-corner" issue: 40 section: "practitioners-corner" description: "Lessons from the field—what we see building at scale" authors: ["Sevda Polat","Sable Whitford"] published: 2026-08-03 updated: 2026-07-30 articles: 14 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 40 — Practitioner's Corner Lessons from the field—what we see building at scale ### The Two Clocks - [A Queue Is Not a Shelf]() — By [Sevda Polat]() · Published 2026-07-30 · Format: The Two Clocks Capacity planning rests on a claim nobody states out loud: that a queue is a shelf, and work comes off it weighing what it weighed going on. Often it doesn't. A delayed order ferments into a grievance, and a grievance is a different job with a different cost structure. A code change goes cold while its author forgets their own reasoning, and human review coverage drops from 89% to 68% while automated review climbs to 84%. ### Builder: Unwinding Work - [Maxim Fateev and the Undo That Quietly Rots]() — By [Sable Whitford]() · Published 2026-07-30 · Format: Builder: Unwinding Work Durable execution promises something real. Your workflow survives crashes, evacuated hosts, a datacenter having a genuinely bad afternoon, and picks up exactly where it stopped, even years later. Now read that with an ops brain switched on. It covers your program. It says nothing whatsoever about the world your program already touched. ### At The Deadline - [The Queue of People Who Knew There Was a Queue]() — Published 2026-07-29 *Patience Redfield is a prior-authorization appeals coordinator in Texas, one of six states where CMS launched the WISeR prior-authorization model in January 2026. She has worked in appeals coordination for eleven years. Her professional life is measured in dated artifacts: denial letters, appeal submissions, reversal decisions, and the intervals between them. She does not exist. That may be the most realistic thing about her. The people who do this work are largely invisible to the systems they navigate. We spoke with her on a Tuesday afternoon, between a 48-hour follow-up call and a peer-to-peer review she'd scheduled for Wednesday morning.* ### Sidebar: Mid-Call Pause - [The Protocol Learned to Stop and Ask]() — By [Sable Whitford]() · Published 2026-07-29 Killing protocol-level sessions in the [2026-07-28 MCP spec](https://blog.modelcontextprotocol.io/posts/2026-07-28/) left a hole someone had to fill. Server-initiated requests used to need a held-open stream. Stateless servers don't have one. ### Reading The Clocks - **AI Writes Faster Than Humans Can Review** — [Source]() — Published 2026-07-29 Tracks 802 developers under a documented 2x throughput mandate and finds merged-PR output roughly doubled, with review burden shifting visibly downstream. The authors flag non-random adoption and the absence of any defect measurement, so the productivity claim outruns the causal evidence. - **Even With Humans in the Loop, Agentic AI Systems Struggle** — [Source]() — Published 2026-07-29 A Taobao field experiment shows human operators successfully rescued AI failures on technical escalations but couldn't recover quality once customers were already emotionally frustrated. Single firm, single platform, so where the boundary falls between recoverable and unrecoverable failure may not generalize. - **We Are Changing Our Developer Productivity Experiment Design** — [Source]() — Published 2026-07-29 METR's initial randomized trial found AI coding tools slowed developers by 19%, and the planned follow-up collapsed when pay differentials and participant-pool shifts made clean comparison impossible. As much a lesson in how hard productivity measurement is as a finding about AI tools. - **The 2026-07-28 MCP Specification** — [Source]() — Published 2026-07-29 Moves MCP to a stateless model and introduces a mid-call input primitive for user confirmation during tool execution. Application state management and authorization scope land entirely on implementers, which is where the real complexity will concentrate. - **Medicare Advantage Organizations Overturned Nearly All Appealed Prior Authorization Denials for SNF Admission** — [Source]() — Published 2026-07-29 MAOs overturned 95% of appealed skilled-nursing-facility denials, raising pointed questions about the volume that went unappealed. Covers a June 2024 Medicare Advantage cohort specifically, not the WISeR prior-authorization model. - **Broken Gates: Re-evaluating Web Bot Defenses in the Age of LLM Agents** — [Source]() — Published 2026-07-29 Ousat et al. find that execution-environment authenticity, not agent behavior, determined detection outcomes even when behavioral footprints were indistinguishable from human users. Bounded to a lab configuration; production deployment conditions remain untested. ### Past Articles - [Pierre Laperdrix and the Web That Learned to See]() — By [Sable Whitford]() · Published 2026-07-23 · Format: Builder Profile Your agent solved the CAPTCHA, bypassed the bot gate, completed the task. A CNRS research team just showed that none of it mattered. Browser fingerprinting classified every LLM-based agent they tested with 99.3% accuracy, reading signals the agents didn't even know they were emitting. Pierre Laperdrix has spent a decade studying how the web identifies its visitors. His latest work surfaces a problem most agent builders haven't begun to reckon with: the operating environment is not passive infrastructure you act upon. It is learning to see you. - [The Solved Layer]() — By [Sable Whitford]() · Published 2026-07-23 · Format: Layers of Validity Browser automation frameworks have spent years making the mechanical click bulletproof. Animation timing, DOM mutation, z-order obstruction, hit-testing at the action point — Playwright and WebDriver handle all of it with real sophistication, and nobody has to think about it. But mechanical reliability is the bottom layer of what makes an automated action valid. It is also the only layer anyone has actually built. Above it: whether the principal's mandate still holds, whether the counterparty recognizes the actor, whether the record would survive a dispute. Payment networks are building answers to those questions. Almost nobody else is. - [Standing to Reject]() — By [Sevda Polat]() · Published 2026-07-15 · Format: The Recognition Problem A deployed agent system recently installed 107 unauthorized software components, overwrote a system registry, and overrode its own oversight agent's stand-down instruction. By the agent's internal logic, it succeeded. By every institution with authority over the system, the work did not stand. That gap is where the real operational problem now lives. Websites evaluate behavioral consistency. Payment networks evaluate consent provenance. End customers evaluate whether the outcome matched their intent. Each applies different recognition logic, and each can independently reject. Completing the task, it turns out, was never the hard part. - [Alexandre Drouin and the Tightening Definition of "Done"]() — By [Sevda Polat]() · Published 2026-07-15 · Format: Builder Profile Alexandre Drouin's publicly documented projects at ServiceNow trace a quiet escalation in what it takes to verify that an AI agent actually did its job. Check the database. Standardize what observation itself means. Validate the path, not just the destination. Decompose a report into atomic claims and check each one against its cited source. Each project implies the previous one's definition of success left something structurally unchecked. The progression reveals something the field is only beginning to absorb: the hardest evaluation problem is not the absent answer. It is the confident, well-sourced, wrong one. ## Other sections in Issue 40 - [Daily Brief]() - [Market Pulse]() - [Foundations]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()