Speaker
Abstract
Run the same task through the same LLM twice, and you may get two materially different answers. This behavior is often dismissed as the stochastic nature of LLMs, but it creates a serious product risk. In high-stakes domains such as cybersecurity, a model that alternates between classifying the same activity as malicious and benign can undermine customer trust and lead to costly decisions if a real cyber threat is missed.
These “flip-flops” tend to cluster in the gray zone near a decision boundary, where evidence is incomplete, policies are ambiguous, and even human experts may disagree. They also reveal where a system is most vulnerable: adversarial techniques, from malware evasion to LLM jailbreaks, deliberately search for uncertain boundaries they can cross.
Instead of treating every flip-flop as noise, we can use disagreement as a hill-climbing signal. Each inconsistency helps identify the next high-value improvement: clarify a policy, correct a label, add relevant knowledge or precedent, or request focused human feedback. Repeating important evaluations also provides a more representative picture of production behavior than a single successful run.
In this session, you’ll learn a practical workflow that combines active learning, semantic memory for domain knowledge and business policies, and episodic memory for similar historical cases. Together, these techniques create a continuous improvement loop that makes agents more consistent, secure, and aligned with customer-specific decision without relying solely on costly fine-tuning.
You’ll learn how to:
- Measure flip-flops through repeated evaluation and identify reliability risks hidden by one-shot tests.
- Find the gray zone and direct human attention toward the decisions where feedback has the greatest value.
- Use disagreement as a hill-climbing signal to improve policies, labels, memory, and agent behavior.
- Combine semantic and episodic memory to increase consistency without defaulting to retraining.
- Build a continuous learning loop that improves quality while adapting to how customers make decisions.
$2,955, Conference (3 days). Current pricing ends October 13th. All pass options.
QCon San Francisco 2026 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.
From the same track
Monday 16 November
10:35 Ballroom A Session Token Efficiency at Uber Details coming soon. 11:45 Ballroom A Session AI How Airbnb Guardrailed Its AI Customer Support Agent Weiping Peng Distinguished Engineer @Airbnb, Previously Principal Architect @Salesforce for AI platform When Airbnb launched its AI customer support assistant, the feature made the news — the guardrails built to make it safe to ship did not. Yet an AI agent that talks to millions of customers, remembers a conversation across turns, and can trigger account actions is a… 13:35 Ballroom A Session LLM Flip-Flops: From Reliability Risk to a Hill-Climbing Signal Dianhuan Lin Staff Engineer @Datadog Run the same task through the same LLM twice, and you may get two materially different answers. This behavior is often dismissed as the stochastic nature of LLMs, but it creates a serious product risk. 14:45 Seacliff D Unconference Unconference: Guardrails & Safety Nets 15:55 Ballroom A Session Practical Concerns Running Agents in Production Amanda Walker Sr. Director, Engineering - Privacy, Safety and Security @Google Details coming soon. 17:05 Ballroom A Session Building Secure Runtime Sandboxes for Code-Generating Agents Details coming soon.