Artificial intelligence · University
AI system design, monitoring and safe tool boundaries
A useful AI application includes data handling, retrieval or model calls, validation, error handling and a user interface. The model is one component.
Prerequisites
Software interfaces, evaluation and data privacy.
Study notes
System boundary
A useful AI application includes data handling, retrieval or model calls, validation, error handling and a user interface. The model is one component.
Tools
Actions need explicit authorization, narrowly scoped permissions and input validation. Model-generated arguments should not be trusted merely because they are structured.
Operations
Track latency, cost, failures and task-specific quality without logging unnecessary private data. Version changes and provide rollback.
Fallback
Define what happens when evidence is missing, a service fails, or output violates constraints. Human review and safe failure can be more valuable than a forced answer.
Worked examples
Should model-generated tool arguments bypass server-side validation?
Generated arguments remain untrusted inputs requiring authorization and validation.
No
Three sequential stages take 100,200 and 50 ms with no overlap. Find total latency.
Add sequential stage durations.
350 ms
Check your understanding
Which permission design is appropriate for a tool?
- The minimum scope needed for the authorized task
- Trust a browser role string
- Unlimited permanent access by default
- Write access for every read
Why should sensitive prompt contents not automatically enter analytics logs?
A system handles 200 requests and 10 fail. Find observed failure rate.
Which is a sensible response to an unavailable evidence service?
- Show a clear failure or limited answer without inventing evidence
- Expose secrets for debugging to all users
- Fabricate citations
- Pretend the service succeeded
Answers and marking guidance
Answers and marking notes
- The minimum scope needed for the authorized task
Least privilege limits consequences of mistakes.
- Logs can retain and expose private data beyond the task. Minimize or redact content and define appropriate access and retention.
Credit privacy and retention controls.
- 0.05
10/200=0.05.
- Show a clear failure or limited answer without inventing evidence
Failing safely is better than false success.
Further reading and review references
These are reference links, not copied exercises, institutional endorsement or proof of independent review.
AI-assisted preview; independent educational review required. Level labels describe prerequisites, not accreditation or official curriculum alignment.