How Apache DataFusion Runs SQL In-Process
Apache DataFusion is an embeddable query engine: SQL goes in, runs as columnar Arrow batches inside your own process, and results come out without a separate service.
APRA's April 2026 letter flags single-provider concentration as a CPS 230 risk, so AI stacks need a rehearsed substitution path. This flow maps five stages, from workload classification to provider swap.
APRA's April 2026 letter names single-provider concentration as an operational risk under CPS 230, turning vendor choice into a resilience question. The flow runs left to right in five stages: classify the workload, draw a substitutability boundary around the model vendor, log automated decisions, thread one decision id through metrics, traces and the audit ledger, then rehearse the swap. Each stage produces evidence the previous one cannot: classification scopes the boundary, the boundary makes substitution cheap, and the ledger lets you prove the chain under audit.
APRA's April 2026 letter flags single-provider concentration as a risk under CPS 230, which is about operational resilience rather than cost or features. If one provider's outage or exit stops routing or scoring, the obligation stays with you, so the vendor becomes an architectural dependency worth designing around early.
Keep provider-specific calls behind a thin adapter or a single gateway so routing, failover, and cost attribution happen in one place. Clera's migration moved a 500 GB database with 500+ tables overnight while production traffic continued, which only works when the exit path was designed before it was needed.
The Privacy Act amendment effective 10 December 2026 requires disclosure of automated decision-making, so routing and scoring logic has to be explainable. Thread one decision id through metrics, logs, traces, and the audit ledger so you can reconstruct why a request was routed or scored as it was, including guardrail blocks and human handovers.
The posts behind it
Clera, an AI talent agent representing 200,000+ candidates, migrated its 500 GB production Postgres database to ClickHouse Managed Postgres after outgrowing its previous provider. The previous database suffered from point lookups taking multiple seconds, 100% CPU for six straight days, and timeouts. Clera evaluated Supabase, Neon, PlanetScale, and ClickHouse, choosing ClickHouse for its local NVMe storage that avoids network-attached disk latency. In sysbench TPC-C testing, ClickHouse showed 16–42% higher throughput than the runner-up. The team migrated 500+ tables from the EU to the US overnight using ClickPipes and manual replay, with production traffic still hitting the database. After migration, CPU usage dropped to 10–20%, and no settings have been changed since the cutover.
Production-grade LLM agents require deterministic machinery around the probabilistic model, not a larger model. A maturity model defines six levels: determinism, evaluation, confidence, safety and governance, operability, and production-grade build, each assuming the one below. Teams should fix their weakest level in order, starting with determinism before evals, and contain the model to a single node in a fixed graph where it proposes actions a separate component applies after approval. A self-assessment checklist with items like evals as a CI gate and layered guardrails helps teams identify their current level, with fewer than half ticked indicating they are earlier than the demo suggests. The post links to a series of 25 deep-dive articles covering each rung of the maturity model.
Level 5 covers operability for LLM systems: daily running, cost control, provider outage survival, and fast shutdown on misbehavior. A single gateway funnels all model traffic, measuring cost, routing requests, enabling failover, and hosting an instantaneous kill switch; a shared decision_id threads metrics, logs, traces, and the audit ledger. Observability supplements RED metrics with a decision layer capturing auto vs. human splits, guardrail blocks, judge disagreements, token spend per tenant and capability, and shadow-eval pass ratios via tiered structured logs. Cost controls attribute spending at the gateway per tenant and capability, with hard budget ceilings; optimization follows order: skip model, batch, cache, right-size, trim—each step profiled against quality. The platform spine includes stateless agent services, the gateway, an audit datastore, cache, secrets store, and object storage—scoped with least-privilege IAM and encryption, avoiding queues or vector stores until warranted.
AI self-service is deployed in 51% of Australian contact centers but only 38% deliver expected results, with handover failures and regulatory changes driving a new evaluation approach. Only 13% achieve smooth self-service-to-human handovers, and 84% of Australians rate straightforward handover as important, yet 98% expect self-service volume to grow. The Privacy Act amendment effective 10 December 2026 requires disclosure of automated decision-making, affecting routing and scoring logic, while APRA’s April 2026 letter flags single-provider concentration as a risk under CPS 230. Australia reversed its voluntary AI stance in July 2026, announcing mandatory AI Standards and a Digital Duty of Care, with legislation expected in early 2027. Vendor selection now depends on security classification, composability for substitution, and decision logging, with the Commonwealth Bank’s experience—cutting then reversing AI-driven job cuts after increased call volumes—illustrating that containment quality and agent capability are better objectives than headcount reduction.
More like this
Apache DataFusion is an embeddable query engine: SQL goes in, runs as columnar Arrow batches inside your own process, and results come out without a separate service.
A model deployed on AKS is open by default. See how MaaS policies insert Authorino authentication and Limitador rate limits in front of vLLM, so bad keys and over-quota requests stop at the gate.
See how Caddy handles a request for a static site, from DNS resolution through container routing to file_server, and how TLS and redirects fit into the flow.
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
One useful email. Unsubscribe anytime.