Log triage pipeline: deterministic steps and LLM judgment seam via one HTTP call

aronchick · x · 2026-09-26

Part 7 of aronchick's thread, with ten real pipeline examples built with Expanso: in a log triage pipeline, everything deterministic (receive, fingerprint, count, route) runs as fixed rules on Expanso nodes with no model; only judgment (actionable? severity? whose problem?) goes to the LLM. The seam between the two halves is a single readable HTTP call, and known-routine log lines bypass the model entirely via a fixed archive rule.

Related event: aronchick: In LLM data pipelines, draw the determinism boundary first(7 posts)→

Original post →

More from coding & agent

coding & agent channel →