Context window exhaustion mid-conversation
Session-scoped memory with selective compression — intent and key facts preserved without blowing token budgets.
Most AI demos die in production. We owned the failure modes — memory, handoff, cost, tenant isolation — and shipped assistants that keep answering when conditions get hard.
Buyers were not asking for another chatbot demo. They needed assistants that would hold under real traffic: WhatsApp inquiry volume, multi-tenant cost pressure, and human escalation when the model is uncertain. Most LLM integrations fail the same way — they work in a demo and break in production.
When an assistant fails at message 40, drops context on handoff, or burns budget without attribution, the business does not get a 'model problem' — it gets silent leads, angry customers, and an AI line item nobody can explain. Production failure is a revenue and trust failure.
7Unit owned architecture and delivery of production assistant systems across client contexts — including WhatsApp inquiry agents — designed around session memory, human handoff with conversation context, per-tenant cost attribution, and graceful degradation when the model layer fails.
We do not claim a single named public client for this pattern page. The outcomes below describe production constraints we engineered for — not a single public scoreboard. We own the system constraints; the client owns domain policy and human staffing for escalations.
LLM-powered assistant systems designed around the constraints that kill most implementations. Applied across WhatsApp inquiry agents, document intelligence pipelines, and coordination agents — same production discipline, different surfaces.
Session-scoped memory with selective compression — intent and key facts preserved without blowing token budgets.
Human escalation carries full conversation context, last model reasoning state, and a suggested next action.
Every LLM call instrumented with tenant_id and conversation_id — cost anomalies visible before they become a surprise bill.
Graceful degradation: queue/retry for async work, immediate human handoff for live conversations.
Naive implementations keep full history in context for every call. We implement session-scoped memory with selective compression.
Rationale: A session that fails at message 40 because the context window is full is not a production system.
Trade-off accepted: Slightly more complex memory architecture in exchange for conversations that do not fail at scale.
When confidence drops, the system hands off with full context — the human does not start from scratch.
Rationale: A handoff that drops context is a restart, not an escalation.
Trade-off accepted: More complex handoff state management in exchange for seamless human escalation.
Every LLM call carries tenant_id and conversation_id. Monthly cost reports per tenant are first-class.
Rationale: Without attribution, one high-volume tenant can make the system unprofitable without any single call looking wrong.
Trade-off accepted: Instrumentation overhead in exchange for full cost visibility per tenant.
When the LLM API fails, async work queues and retries; live conversations escalate to humans immediately.
Rationale: An AI system that fails hard when the model API is unavailable is not production-grade.
Trade-off accepted: More complex fallback logic in exchange for operational continuity under failure.
Memory, handoff, cost, and degradation treated as product requirements — not post-demo patches.
Token spend tracked per conversation and tenant — so AI cost is an operated line, not a mystery.
Escalation carries the thread and suggested next action — not a cold restart for the customer.
If your AI assistant works in a demo but you cannot explain cost, handoff, or what happens when the model fails — you do not have a production system yet. That is the problem we take ownership of.
Product and engineering leaders shipping customer-facing or multi-tenant LLM assistants who need production constraints designed in from day one.