SShortSingh.
Back to feed

How a calibration flaw taught a fraud detection AI to approve fraudulent transactions

0
·6 views

A developer building an AI-powered fraud investigation system on TigerGraph discovered that a miscalibrated risk score threshold was causing the agent to incorrectly clear fraudulent transactions as legitimate. The system was designed as an agentic investigator using LangGraph and a TigerGraph graph database, where the AI gathers evidence iteratively before recommending an action and approval route. A key architectural decision kept all regulatory-critical logic — including the Bayesian ledger, policy engine, and approval routing — in a separate core module that is structurally prevented from importing any LLM library. To retrieve relevant past cases, the system fuses vector similarity search with graph traversal, addressing the shortcomings of using either method alone. The project highlights how measurement and calibration errors in underlying data can silently undermine even well-architected AI decision systems.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Builds Code-Native Visual Studio to Fix AI Image Inconsistencies

A developer created Yuwbrndr, a free browser-based design tool, after growing frustrated with AI image generators producing inconsistent and uneditable visuals for technical posts. The tool lets developers build post graphics directly using HTML, Tailwind CSS, and Canvas, giving full control over colors, fonts, and layouts. A key advantage over text-to-image AI is the ability to fix typos or adjust details instantly in code, without regenerating the entire image. Yuwbrndr also includes a Slide Deck mode that exports multi-slide carousels as PDFs or ZIP files of PNGs, formats suited for LinkedIn and X. The creator cites Socialinsider data showing LinkedIn carousels achieve a 5.48% engagement rate versus 2.14% for single images, making the format significantly more effective for developer content.

0
ProgrammingDEV Community ·

How to migrate large enterprise Xamarin apps to .NET MAUI without chaos

Migrating large enterprise Xamarin applications to .NET MAUI presents far greater challenges than small-scale migrations, due to years of accumulated dependencies, custom renderers, native APIs, and production workflows. Developers are advised against simply swapping namespaces and fixing errors, as this approach generates an unmanageable list of issues in complex codebases. Instead, the recommended first step is building a detailed dependency and feature map, breaking the application into trackable units with individual migration statuses. Teams are also cautioned not to freeze product development during migration; new business logic should be written in a shared, framework-agnostic layer to avoid deepening reliance on Xamarin. Microsoft's Upgrade Assistant can accelerate certain transformations, but it is positioned as a tool to support the migration strategy, not replace it.

0
ProgrammingDEV Community ·

How to Let AI Agents Deploy Code Without Granting Dangerous Server Access

AI coding agents like Cursor and Claude can now handle deployments, but giving them broad server access via SSH keys or admin tokens creates serious security risks. A safer approach uses the Model Context Protocol (MCP), which exposes only specific deployment operations — such as deploy, rollback, and log retrieval — as typed tools the agent can call. Authorization is enforced server-side on every request, and all actions are logged through the same audit trail used by human operators. The pattern recommends per-workspace tokens, role inheritance from the issuing user, no shell access for agents, and treating tokens like passwords stored in secret managers. Open-source self-hostable platform Peon is cited as a reference implementation, with its MCP endpoint built directly into the application rather than added as a separate script.

0
ProgrammingDEV Community ·

AI Code Reviewers Evolve from Helpful Suggestions to Hard Deployment Gates

Engineering teams are increasingly moving beyond treating AI code reviews as optional suggestions, instead embedding them as mandatory enforcement checkpoints within CI/CD pipelines. Traditionally, tools like GitHub Copilot Workspace or Amazon CodeGuru flagged potential issues but left the final decision to developers, creating inconsistency as teams grew desensitized to non-binding AI feedback. The new enforcement model removes that discretion by having AI interact directly with the deployment pipeline rather than posting comments in pull request threads. This architecture typically combines a static analysis layer for syntax checks with a semantic layer where large language models assess whether code intent aligns with broader system policy. The transition represents a structural shift in engineering responsibility, raising significant questions about developer autonomy and the appropriate role of algorithmic gatekeeping in software delivery.