Background AI agents need idempotency keys and retry limits to avoid repeating actions

·3 views

OpenAI has announced Dots, personal agents that keep working after a user leaves ChatGPT, and SpaceXAI is building a marketplace of specialised Grok bots. The article argues that agents running unattended behave like background workers, so they inherit the same failure modes seen in retrying systems such as Kafka consumers. Crashes or timeouts can cause an agent to repeat side effects like sending the same email, issuing a refund twice, or making a duplicate payment. The author recommends deriving idempotency keys from the intended task rather than each attempt, and checking and recording them atomically, for example with a database unique constraint. Agents should also have retry limits, dead-letter states for human review, replays from known points, and append-only audit logs of every tool call.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

x402 sellers returning 202 after payment: what 14,991 paid calls show

A seller can settle an x402 payment and still answer 202 Accepted, and a plain res.ok check counts that as finished work. The vet402 team, which pays x402 sellers from its own wallets, reports 510 of 14,991 settled payments returned no usable content, mostly due to missing HTTP status, 5xx errors, or 202 responses. Under the reference Express middleware, any status below 400 triggers settlement, so a 202 or empty 200 gets charged while a 500 does not. The post describes how refunds differ between the exact and auth-capture schemes and offers a pre-payment lookup via a public REST endpoint and a hosted MCP server. It also recommends checking the response status and body after each paid call and marking tasks done only when content is actually delivered.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Script reads AWS Cost Explorer CSV to pinpoint cost line items and daily changes

A DEV Community guide explains that AWS Cost Explorer's CSV export shows which usage-type line items changed and when, more useful than its service-level charts. The author provides a short Node.js script, requiring Node 18 or newer and no npm packages, that reads a downloaded CSV without needing AWS credentials. The script ranks the top ten usage types by total cost and flags items whose daily amount roughly doubled across the period. The article also suggests comparing two exports and mentions an optional browser-based tool, from Billtrim, that matches line items to known cost causes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Evaluating Outdoor Computer Vision Goes Beyond Detection Accuracy

The article argues that a convincing detection demo does not settle whether an outdoor monitoring system is ready to deploy. Changing light, distance, reflections, occlusion and weather all shape performance, so evaluating those conditions matters as much as choosing a model. It notes that detections are observations rather than proof of safety, and that a missing detection should not be read as proof of absence. The author recommends separating test data by capture session, keeping a holdout set for real operating conditions, and reporting misses and false alarms by condition. The piece also stresses defining fallback behavior for failed cameras and clarifying which claims are measured versus design goals.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Agents Should Not Inherit Full Environment Secrets, Experts Warn

The article argues that AI agent runtimes can expose sensitive credentials simply because the process can technically access them, not because the agent needs them. It gives a hypothetical support agent whose container injects several secrets through environment variables, even though it only requires one read-only token. A prompt injection hidden in a customer attachment could instruct the agent to dump its environment and send the data externally, turning broad runtime access into misused authority. The author recommends keeping secrets outside the agent's working context, exposing narrow operations instead, and using brokers that issue short-lived, policy-checked access. The article also frames secret scoping as a governance question that teams should be able to answer clearly.

0 comments Read more at DEV Community