--- title: "Practitioner's Corner" canonical: "https://current.tinyfish.ai/issue/9/practitioners-corner" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/9/practitioners-corner" issue: 9 section: "practitioners-corner" description: "Lessons from the field—what we see building at scale" authors: ["Nora Kaplan","Rina Takahashi"] published: 2025-12-29 updated: 2025-12-26 articles: 13 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 9 — Practitioner's Corner Lessons from the field—what we see building at scale ### Dispatches from Production Scale - [The Question Compliance Can't Answer]() — By [Nora Kaplan]() · Published 2025-12-25 · Format: Field Dispatch "Show me why the agent flagged this price as anomalous." ### The Builders - [The Browser Engineer Whose Work Becomes Your Automation Challenge]() — By [Rina Takahashi]() · Published 2025-12-24 · Format: Builder Profiles A browser skips rendering off-screen content—faster page loads, satisfied users. But for web agents running thousands of concurrent sessions, elements that exist in the DOM yet won't render until scrolled into view? That's operational complexity disguised as optimization. The performance win that delights consumers creates unpredictability for automation. These tensions don't emerge randomly. They're engineered into browser behavior by people making careful trade-offs about security and speed—trade-offs that become the infrastructure challenges web agents must solve at scale. ### The Number That Matters - [15% of API Changes Break Compatibility. 3% Actually Matter.]() — Published 2025-12-24 A study of 317 Java libraries across 9,000 releases found that 14.78% of API changes break backward compatibility. Less than 3% of those breaking changes actually impact client applications in production. ### Field Notes from the Ecosystem December brought infrastructure changes that expose how platforms are rethinking resource allocation. Rate limiting is evolving from simple request counting to token budgets and complexity-based pricing. Three major platforms shifted their models this month alone. The gap between agent system hype and production reality persists. The most successful implementations use simple orchestrators calling existing APIs, not complex frameworks. Browser automation libraries now bypass sophisticated defenses at 95% success rates. Compromised API keys without rate limiting become unlimited attack vectors. The infrastructure keeping the web operational grows more complex by the month. - **Pipedrive Switches to Token Budgets** — [Source]() — Published 2025-12-24 Tag: Rate Limiting December 2 rollout for all new signups. Daily budget: 30,000 base tokens × plan multiplier × seats. Endpoints consume tokens by complexity and resource demand. Burst limits run on rolling 2-second windows per user. - **Instagram Basic Display Reaches End-of-Life** — [Source]() — Published 2025-12-24 Tag: API Deprecation Shutdown completed December 4. Migration to Graph API mandatory. New constraint: 200 calls per hour per Instagram account. Ten connected accounts yield 2,000 hourly requests total, each maintaining isolated rate limit pools. - **Atlassian Moves to Points-Based Limits** — [Source]() — Published 2025-12-24 Tag: Complexity Pricing Enforcement begins February 2, 2026 for Jira and Confluence Cloud. Calls consume points based on work performed: data volume, operation complexity. Base cost 1 point per request plus per-object charges. Cap: 500,000 points hourly. - **Enterprise Agents Stay Thin and Simple** — [Source]() — Published 2025-12-24 Tag: Agent Architecture Production deployments use LLMs as thin orchestrators calling existing APIs as tools. The shift: from clicking buttons to saying "generate report" while pipelines handle execution. Simple, composable patterns outperform complex frameworks. - **Browser Automation Libraries Hit 95% Success** — [Source]() — Published 2025-12-24 Tag: Bot Detection Playwright-Extra and Undetected-Chromedriver achieve 92-95% success rates against sophisticated anti-bot systems, though requiring substantial resources. Managed solutions reach 90-98% with optimized usage. Approximately 20% of websites deploy advanced anti-bot systems. - **Compromised Keys Exploit Without Limits** — [Source]() — Published 2025-12-24 Tag: API Security Without rate limiting, compromised API keys enable indiscriminate exploitation. Attackers execute automated attacks at scale, rapidly cycling through multiple compromised keys. Rate limits provide essential defense, preventing abuse even when authentication credentials are breached. ### Practitioner Resources - **Cloudflare's Log Loss: When Protection Mechanisms Fail** — [Source]() — Published 2025-12-24 Cascading failures reveal how subsystems protect themselves. Real incident numbers show where theoretical safeguards actually break. - **ClickHouse at 500 Trillion Rows: Where Standard Tools Stop Working** — [Source]() — Published 2025-12-24 OpenTelemetry works until it doesn't. Watch a team hit the wall at 100PB and build custom tooling instead. - **Web Automation's Hidden Surface Area: 2,000 Configurations That Matter** — [Source]() — Published 2025-12-24 Testing across devices and browsers sounds simple until you count: 800+ combinations, each one a potential breaking point. - **Production RAG: When Vector Search Misses the Obvious** — [Source]() — Published 2025-12-24 Semantic search fails on exact phrases. Hybrid retrieval solves what demos hide: the gap between similarity and precision. ## Other sections in Issue 9 - [Daily Brief]() - [Market Pulse]() - [Foundations]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()