Engineering Leadership

Chapter 10 of 314 min readOpen access

Reliability Is a Product Feature

Treating uptime and failure behaviour as something users buy, not an ops afterthought.

Builders do not disappear after deployment. They stay close to production, metrics, reliability, and team systems because that is where product truth appears.

The Bug That Revealed the Real Workflow

A production incident affects a small group of customers. At first, the team treats it as a normal bug. A background job failed and delayed notifications. Engineering fixes the job.

During the incident review, support explains that the delayed notifications caused managers to miss time-sensitive approvals. Those approvals were the real workflow. The team had thought notifications were secondary. For these customers, they were the product.

The incident becomes more than a technical failure. It becomes product research.

Reliability is not separate from user experience. Reliability is part of the product.

You Build It, You Run It

"You build it, you run it" does not mean every developer must become an operations specialist. It means teams should own the consequences of what they ship.

Ownership includes:

  • Knowing how the feature behaves in production.
  • Understanding failure modes.
  • Providing useful logs and metrics.
  • Responding to incidents.
  • Learning from failures.
  • Improving the system after release.

When developers never see production, they design with incomplete feedback.

Production as User Feedback

Users reveal truth through behavior. Production systems reveal truth through signals.

Useful signals include:

  • Error rates.
  • Latency.
  • Drop-off points.
  • Retry rates.
  • Queue delays.
  • Failed payments.
  • Search results with no clicks.
  • Support tickets after release.
  • Feature adoption by segment.

Builders treat these signals as part of the product conversation.

Observability for Product Journeys

Technical monitoring often focuses on services: CPU, memory, request rate, error rate. Product observability focuses on journeys:

  • Can a new user complete onboarding?
  • Can a customer place an order?
  • Can an admin resolve an exception?
  • Can a team invite a member?
  • Can a subscription renew?

For each critical journey, define:

  • Start event.
  • Success event.
  • Failure events.
  • Latency expectations.
  • Business impact of failure.
  • Alert threshold.
  • Recovery path.

This helps engineering see what users experience.

Incident Reviews as Learning Systems

Good incident reviews are not blame sessions. They are learning systems.

Ask:

  • What happened?
  • How did we detect it?
  • How did users experience it?
  • What made response slower?
  • What assumptions were wrong?
  • What product or system improvement would prevent recurrence?
  • What did we learn about the user journey?

Avoid shallow action items like "be more careful." Build better safeguards.

Graceful Degradation

A reliable product does not always avoid failure. It fails carefully.

Graceful degradation means the system preserves as much user value as possible when something breaks.

Examples:

  • If recommendation fails, show popular items.
  • If export is delayed, queue it and notify the user.
  • If payment provider is down, preserve cart and retry safely.
  • If AI response fails, offer a fallback path.
  • If analytics is delayed, show last updated time.

The goal is to protect trust.

Error Budgets

An error budget defines how much unreliability is acceptable for a service over time. If the budget is healthy, the team may choose to ship faster. If the budget is exhausted, reliability work becomes priority.

This creates a practical trade-off between speed and stability.

For product engineers, the lesson is broader: reliability decisions should be explicit. Not every system needs the same uptime, but every important system needs intentional reliability.

The Production Learning Loop

The Production Learning Loop:

  1. Ship.
  2. Observe.
  3. Detect.
  4. Respond.
  5. Learn.
  6. Improve.
  7. Prevent.

Shipping is not the end. It starts the loop.

Founder Lens

Reliability affects retention, brand, revenue, and trust. Customers do not care whether a failure came from product, engineering, infrastructure, or a vendor. They experience one product.

A founder can forgive occasional incidents. They cannot trust a team that learns nothing from them.

Developer Lens

After your next release, check:

  • Did users use it?
  • Did errors change?
  • Did support tickets change?
  • Did latency change?
  • Did logs explain failures?
  • Did the release create manual work?
  • What should we improve?

This is ownership.

AI-Era Lens

AI features introduce new reliability questions:

  • What happens when the model is slow?
  • What happens when the answer is wrong?
  • How do we log prompts and outputs safely?
  • How do we evaluate quality?
  • What fallback exists?
  • How do we prevent sensitive data exposure?

AI reliability is product reliability.

Common Mistakes

  • Treating release as the finish line.
  • Monitoring services but not user journeys.
  • Running blame-heavy incident reviews.
  • Ignoring graceful degradation.
  • Alerting on noise instead of user impact.
  • Adding AI features without evaluation and fallback.

Builder Checklist

  • I know the critical journey my work supports.
  • I can define success and failure signals.
  • I add logs and metrics where they help diagnosis.
  • I understand the rollback path.
  • I participate in incident learning.
  • I design fallbacks for important dependencies.
  • I treat reliability as user trust.

Exercise: Instrument One Journey

Choose one customer journey. Define:

  • What should be logged?
  • What should be measured?
  • What failure would hurt trust?
  • What alert matters?
  • What recovery path exists?
  • What product question can production answer?

Closing Thought

Users do not experience your architecture diagram. They experience whether the product works when they need it.

Key takeaways

  • Reliability is part of the product, not a separate ops concern: the workflow a feature actually protects is often not the one the team assumed.
  • Build product observability around user journeys (can a customer place an order, can a subscription renew), not just service metrics like CPU and request rate.
  • Run incident reviews as learning systems, not blame sessions, and design graceful degradation so a failure preserves as much user value as possible.
  • The Production Learning Loop (ship, observe, detect, respond, learn, improve, prevent) means shipping starts the loop rather than ending it.

In the age of AI

The advantage was never the model. It's knowing what to build with it — and having a team that can actually ship it.

That's the part I help with: finding where AI genuinely makes your business faster, deciding what's worth building, and standing behind it once it's live.

Four offices, one very full passport

Every dot on this map is a conversation I still remember.

World map showing ViitorCloud offices in Ahmedabad, Zürich, Washington D.C. and Port Louis, and the countries where Vishal Rajpurohit has spoken and travelled
Germany
Indonesia
Saudi Arabia
Spain
Japan
Denmark
Turkey
Singapore
Ireland
Czechia
France
Thailand
Sweden
Mexico
Qatar
Italy
South Korea
Poland
United Kingdom
Malaysia
Belgium
Canada
UAE
Netherlands
Vietnam
Norway
Oman
Portugal
Australia
Austria
New York, USA
Chicago, USA
Las Vegas, USA
San Francisco, USA
Los Angeles, USA
Ahmedabad, India — headquarters
Zürich, Switzerland
Washington, D.C., United States
Port Louis, Mauritius
  • Where I've spoken
  • Office
Sixty seconds from the roadQuick lessons and keynote moments — tap to watch