00:00:19.679 --> 00:00:22.079
Hello and welcome to Full Tech Ahead.
00:00:22.160 --> 00:00:29.839
I'm your host, Amanda Razzani, and with me today, I'm excited to have Federico Romalo, founder and CEO of Density Labs.
00:00:29.920 --> 00:00:31.280
How are you doing today?
00:00:32.159 --> 00:00:33.119
Hello, Amanda.
00:00:33.200 --> 00:00:34.880
It's a pleasure to be here today.
00:00:35.280 --> 00:00:36.880
Happy to have you on the show.
00:00:37.039 --> 00:00:42.399
Can you share a little bit about your background and what do you do over there at Density Labs?
00:00:43.359 --> 00:00:44.079
Yeah, sure.
00:00:44.240 --> 00:00:48.399
So at Density Labs, what we're doing is AI engineering.
00:00:48.880 --> 00:00:57.600
We partner with companies that are trying to figure out how to leverage AI within the organization.
00:00:57.920 --> 00:01:03.759
We take all the hype away and we focused on business impact outcome.
00:01:04.799 --> 00:01:08.799
We track the return of investment of those efforts.
00:01:08.959 --> 00:01:13.040
The other thing we we do is we track the total cost of ownership.
00:01:13.200 --> 00:01:23.599
We've seen a lot of projects where the token consumption goes to the roof and then the cost for running these projects goes super high.
00:01:23.680 --> 00:01:25.519
So we we we work on that.
00:01:25.920 --> 00:01:26.640
Okay, great.
00:01:26.719 --> 00:01:38.480
So we're gonna talk today about your experience in working with these companies and what are some of the challenges and the ROI for software development companies when they're utilizing AI tools.
00:01:38.640 --> 00:01:42.640
I know everybody's trying to harness AI in the best way possible.
00:01:42.879 --> 00:01:50.000
So let's start with the fact, though, that roughly 95% of enterprise AI pilots never reach production.
00:01:50.319 --> 00:01:51.840
Why is that, do you think?
00:01:52.159 --> 00:01:55.439
It's a very interesting situation that is happening with that.
00:01:55.680 --> 00:02:06.079
The main reason is that they test the demo with the best case scenario, and then they don't consider all the use cases.
00:02:06.239 --> 00:02:07.680
That's the first issue.
00:02:07.840 --> 00:02:16.159
The other issue that is happening is that even though AI is a technology tool, it is actually an organizational change.
00:02:16.400 --> 00:02:25.360
And uh a lot of companies don't see it that way, and that's the the uh underlying reason or the root cause of why uh this type of projects fail.
00:02:25.520 --> 00:02:40.240
And the the last issue that I've seen is that because you have so many different possibilities of outcomes or use cases, what we start doing is setting up a model that evaluates another model.
00:02:40.479 --> 00:02:49.280
Uh, that way we reduce those uh that that complexity towards expected outcomes, expected behaviors.
00:02:49.439 --> 00:02:52.479
And then we set guardrails to to avoid that, right?
00:02:52.719 --> 00:03:12.319
But basically that that that issue that that that is that is the the core issue is that it becomes unwindling, unwindly complex when you have so many use cases and you don't have a way to track that the outcome is what you actually expect.
00:03:13.039 --> 00:03:18.159
Can you share a little bit more about you said create a model to review the the model?
00:03:18.319 --> 00:03:19.919
Can you share more about that?
00:03:20.639 --> 00:03:21.599
Yes, absolutely.
00:03:21.840 --> 00:03:32.159
So the first thing we need to understand is that the when we have agents executing and doing actions for us, right?
00:03:32.479 --> 00:03:42.159
What we are actually doing is we're providing tools to a model, to a large language model that is making those decisions and then executing for us, right?
00:03:42.319 --> 00:03:47.919
The issue is that these are non-deterministic outcomes, is what we're going to get, right?
00:03:48.319 --> 00:03:53.360
So, how can we test that the outcome is what we expect?
00:03:53.520 --> 00:04:04.159
What we do is we build uh it's called Eval LLM, and basically uh what we have is another model, and by model what I mean is uh thinking it of as an engine, right?
00:04:04.319 --> 00:04:28.319
Uh, it's the core of every um AI automation tool that we use that can that we can have a conversation or we can it can read images, there are different models, but basically what we do is we set up one model to analyze and make a decision to execute, and then another model to evaluate what the first model is going to do, and then make the decision.
00:04:28.480 --> 00:04:31.439
Okay, does that make sense or it doesn't make sense, right?
00:04:31.600 --> 00:04:40.000
The reason, technical reason we need to use two models is because what we want is to have uh let's call it second opinions, right?
00:04:40.240 --> 00:04:50.399
If we if we have the same models evaluating themselves, then we have the higher probability of them to be to agree to a wrong decision.
00:04:51.600 --> 00:05:02.000
Okay, so when putting AI agents into an engineering org, what are some of the things that break or some of the challenges that you see?
00:05:03.680 --> 00:05:14.879
Even though I am advocating for uh the use of AI, I believe that using at l as little AI as possible is the best approach.
00:05:15.120 --> 00:05:20.959
So when uh what are the best scenarios to leverage AI within an organization?
00:05:21.199 --> 00:05:34.480
So when we have uh business processes, right, um, and we want to automate them, we can use uh an AI agent to just automate the whole workflow, right?
00:05:35.439 --> 00:05:41.519
Or we can build software, we can build code that is actually going to automate that workflow, right?
00:05:41.759 --> 00:05:52.959
So what I am advocating is to build code to solve the automation uh for all the deterministic workflows.
00:05:53.199 --> 00:05:56.639
By deterministic, I mean uh think of math.
00:05:56.800 --> 00:05:59.680
Math is deterministic, one plus one equals two, right?
00:05:59.759 --> 00:06:00.959
It's always the same result.
00:06:01.360 --> 00:06:11.519
So when we have those types of rules, or we can uh set up those types of rules, then we can build code, we can build software that is going to run those automations.
00:06:11.680 --> 00:06:24.319
But when you have to analyze an email, understand the sentiment within it, or um think of it as intuition, you know, you have a problem and you don't know exactly what the outcome should be.
00:06:24.480 --> 00:06:28.720
So you have to uh intuitively find the outcome.
00:06:28.959 --> 00:06:34.000
So for for those problems, AI is great.
00:06:34.160 --> 00:06:48.240
So what I suggest is to build a software for the deterministic workflows and then use models as fallback only when we have a situation that is non-deterministic, right?
00:06:48.480 --> 00:07:08.720
That means we can save money on running tokens or on running models, and uh we can have a faster uh automation process and it's uh safer because when you have a model running um within your organization, somebody has to supervise what it's doing, right?
00:07:09.199 --> 00:07:15.279
Um no agent, no model can be accountable for anything, only humans can.
00:07:15.519 --> 00:07:24.079
So if we have code, it is easier to manage, it is easier to test and make sure that it works properly, right?
00:07:24.399 --> 00:07:37.600
And then the models, they can be um supervised, they can be uh tested, but the level of effort is much higher, and the cost of operating them is much higher, right?
00:07:38.639 --> 00:07:43.759
So you argue that AI agents are not necessarily good junior engineers.
00:07:44.000 --> 00:07:45.600
Explain that a little bit further.
00:07:45.759 --> 00:07:50.800
I see a lot of people using AI agents to develop all sorts of things.
00:07:50.959 --> 00:07:53.920
Where do they encounter problems doing that?
00:07:54.800 --> 00:08:00.160
Well, what I was explaining before was mostly about automating business processes.
00:08:00.319 --> 00:08:07.040
Um, what you're talking about, uh asking me now, is about why uh models are not good software engineers.
00:08:07.279 --> 00:08:21.199
And I think that one of the reasons is that the software engineers, what we do is we abstract, we build abstractions, layers of abstractions of a of a of a problem in real life, right?
00:08:21.439 --> 00:08:25.759
Um, and then we set uh expectations of behavior.
00:08:25.920 --> 00:08:28.160
What do we want the application to do?
00:08:28.399 --> 00:08:41.360
The models are not really good at those levels of abstraction, and they um they lose um they lose that that ability, right, uh of abstracting and understanding what is the core problem.
00:08:41.600 --> 00:08:45.200
They are becoming better though, but they're not there yet, right?
00:08:45.360 --> 00:08:52.080
So the quality of the code becomes uh lower than what a senior engineer could do, right?
00:08:52.240 --> 00:08:54.159
What I called the craftsmanship.
00:08:54.320 --> 00:09:03.840
Now, what is going on is that once you start building code with agents, now the the code is easier to be replaced.
00:09:04.000 --> 00:09:08.639
You can build new code easier because you have agents to help you with, right?
00:09:08.879 --> 00:09:21.200
So even though I I come from that craftsmanship of building high-quality code, now I'm learning that it becomes less relevant when you can just replace it faster, right?
00:09:21.600 --> 00:09:38.000
Um having said that, the key um uh key tip for successfully build software with agents is uh you need to be very, very specific on the specifications, right?
00:09:38.240 --> 00:09:51.919
The more specific, the better, because that's when you can do the analysis on how the application should work, and then the agent can focus on executing and building the application, right?
00:09:52.240 --> 00:09:55.120
So we are seeing the use of AI more and more.
00:09:55.279 --> 00:09:59.759
What are some of the cybersecurity risks, and how do leaders address that?
00:10:00.159 --> 00:10:04.879
The security agents can mimic human behavior, right?
00:10:05.120 --> 00:10:06.720
And that that is becoming an issue.
00:10:06.879 --> 00:10:12.559
It used to be that you could have captchas to to you know separate bots from humans.
00:10:12.799 --> 00:10:26.159
Now agents can overcome CAPTCHAS, they can overcome a lot of the behavior of patterns that we used to use to track bots and feed out cyber attacks.
00:10:26.399 --> 00:10:38.240
Uh, and that complexity is going to increase because the attackers, hackers are also using agents, so they're having they can elaborate, uh, they can build more elaborate uh attacks, right?
00:10:38.720 --> 00:10:49.919
Um on the other hand, on the on the safety part, what we're seeing is uh more increasingly complex applications that can detect attacks.
00:10:50.080 --> 00:10:54.320
Because the issue with with attacks is what happens if you have a lot of false positives, right?
00:10:54.480 --> 00:10:58.000
Then eventually somebody is going to turn off the alarm, right?
00:10:58.320 --> 00:11:03.600
Because who's going to listen for a tool that is not providing real threats, right?
00:11:03.759 --> 00:11:16.000
They're building tools to filter that and being being able to double check if it's actually a threat and can make decisions to autonomously uh fix the the attack, right?
00:11:16.080 --> 00:11:18.879
Or defend for the attack, right?
00:11:19.120 --> 00:11:21.840
Uh so that's going to be very interesting happening.
00:11:21.919 --> 00:11:29.519
And the other thing that I've seen happening is we have we used to have phishing for humans, now we have phishing for agents.
00:11:29.600 --> 00:11:39.840
So we have emails or or links or things like that that uh are target to agents to act on, right?
00:11:40.240 --> 00:11:42.960
And that that is becoming an issue, right?
00:11:43.120 --> 00:11:54.480
And the last thing we're going to see, or where we're seeing already, is um a higher volume of both attacks and uh defense actions because both can be automated now.
00:11:55.840 --> 00:12:05.840
So what tips do you have for business leaders when it comes to building and leading high trust engineering teams across countries and different time zones?
00:12:06.559 --> 00:12:27.519
The first thing is that building a culture around how to build software, understanding uh or being able to transmit to the software engineers that what they're building has an impact to the users, what is the value for the user becomes the most important question that the developer should ask, right?
00:12:27.679 --> 00:12:34.559
Once they understand that, then the developers can leverage agents to build the software, right?
00:12:34.639 --> 00:12:39.919
To build the tests, to test specifically the value for the user, right?
00:12:40.000 --> 00:12:42.879
To spend additional effort on testing that, right?
00:12:43.039 --> 00:12:49.600
Because if you do that, then the application you're going to build is going to be uh more useful for the user, right?
00:12:49.759 --> 00:12:51.759
Um, so that's the first part.
00:12:52.320 --> 00:13:01.840
Uh on the business process automations, I think that the core suggestion that I can give is think of it as an organizational transformation.
00:13:02.000 --> 00:13:05.360
It's not only a technology implementation, right?
00:13:05.840 --> 00:13:10.639
And getting the team to adapt to these new tools, right?
00:13:10.799 --> 00:13:29.200
There are organizations that uh are capable of those of adapt, uh adapting, and that makes them uh leverage AI faster, and they can have a competitive advantage over other organizations that are still trying to figure that out.
00:13:29.679 --> 00:13:30.559
Fantastic.
00:13:30.720 --> 00:13:35.440
Well, if there was one key takeaway you could leave our audience with today, what would that be?
00:13:35.759 --> 00:13:40.480
Think of AI as a new hire that doesn't have accountability.
00:13:40.799 --> 00:13:46.559
Use uh or or lean on the context of your team, right?
00:13:46.720 --> 00:13:53.039
If you have a team with long tenure, lean on that because they know the business, they understand how everything works.
00:13:53.279 --> 00:14:08.080
So what they they need to think is that the new responsibility of the humans is going to be to manage those agents and to guide them when those agents are making a mistake within the business process automation.
00:14:08.240 --> 00:14:10.159
It also applies for software, right?
00:14:10.399 --> 00:14:25.600
But uh, I think that's that's the core takeaway that I can give is lean on that on that team, lean on the humans and help them upskill to use AI as augmentation instead of replacement.
00:14:26.159 --> 00:14:26.799
Absolutely.
00:14:26.960 --> 00:14:30.480
Well, thank you so much for coming on the show and sharing your insights.
00:14:30.960 --> 00:14:31.759
Absolutely.
00:14:32.000 --> 00:14:33.840
A pleasure to be here, Amanda.
00:14:34.080 --> 00:14:35.440
And thank you to our audience.
00:14:35.600 --> 00:14:40.000
If you have any questions or comments, leave them below, and I'll make sure to respond as soon as possible.
00:14:40.080 --> 00:14:42.080
And have a wonderful day.