MLOps & Production MLAdvanced18 min read5 questions

Monitoring, Drift Detection & Incident Response

Models decay silently. Learn what to monitor when labels arrive months late, how to distinguish drift types, and how to run an ML incident.

Covers: Data drift vs concept drift, PSI and KS tests, delayed labels, retraining triggers, ML incident response

A deployed model is a depreciating asset. The world moves, your inputs change, user behaviour adapts to your own predictions — and unlike a crashed service, a degrading model returns 200s the whole way down.

Filter
0/5 mastered
AdvanceddriftmonitoringdegradationAsked at Stripe, Meta Integrity

30-second answer

Data drift is a change in P(X) — the inputs shift but the input→output relationship holds. Concept drift is a change in P(Y|X) — the same inputs now imply a different outcome. Label drift is a change in P(Y), the base rate. Concept drift is the most dangerous because it is invisible in input monitoring: your features look perfectly normal while the model is systematically wrong.

AdvancedretrainingmonitoringautomationAsked at Uber, Stripe

30-second answer

Scheduled retraining is simple and predictable but wastes compute when nothing changed and reacts too slowly when something did. Trigger-based retrains on a signal — drift above threshold, performance below floor, or enough new labels — which is more efficient but needs reliable signals. Continuous/online learning adapts fastest but is hard to validate and easy to poison. Most production systems use scheduled retraining with a trigger override and a mandatory offline gate before any deploy.

Advancedincident-responsedebuggingoperationsAsked at Stripe, Netflix

30-second answer

Mitigate first, diagnose second. Check whether the impact is user-visible and, if so, roll back or fall back to a safe default immediately — do not debug in production while users are affected. Then work up the stack: is it the model, the features, the upstream data, or a genuine world change? The most common cause by far is an upstream data pipeline change, not the model.

AdvancedlatencyoptimizationdistillationAsked at Meta, Pinterest

30-second answer

Profile first to find where the 800 ms goes — it is frequently feature fetching or serialisation rather than the model. Then work through: batching and async I/O, caching, model-level optimisation (quantisation, ONNX/TensorRT export, operator fusion), architectural changes (distillation to a smaller model, a two-stage cascade), and finally hardware. Distillation and cascades usually give the biggest wins.

AdvancedcostinfrastructureefficiencyAsked at Netflix, Pinterest

30-second answer

Attribute costs first — training, inference, storage, data processing — because teams are usually wrong about the split. Then: right-size instances and use spot for training, cache aggressively, use cascades and smaller distilled models for inference, autoscale to real traffic instead of peak, delete unused features and stale artefacts, and kill models nobody uses. The last one is usually the single biggest saving and nobody looks for it.

Showing 5 of 5 questions for model-monitoring-and-drift-detection.

Check your understanding

5 questions · no sign-up, nothing stored

0/5 answered
Question 1

1.Concept drift is the most dangerous form because:

Question 2

2.At 10 million rows/day, alerting on KS-test p-values is a bad idea because:

Question 3

3.An automated retraining pipeline should:

Question 4

4.Predictions shifted sharply at 03:00. Your FIRST diagnostic step should be:

Question 5

5.In a cascade with an 88% early-exit rate, a 2 ms fast model and a 180 ms slow model, average latency is roughly:

Hands-on challenge

Build it — this is what you talk about in a deep-dive round.

Build an ML monitoring and incident-response toolkit

Instrument a deployed model with the observability an on-call engineer would actually need.

Requirements

  • Per-feature PSI and KS drift reporting against a versioned reference window, with severity classification.
  • Label-free monitoring: prediction distribution shift, confidence collapse, and a proxy-outcome correlation.
  • A retraining policy with triggers, cooldown, and a mandatory offline gate before promotion.
  • A triage script that bisects model-vs-input using a golden batch and ranks suspect features.

Stretch goals

  • Implement a cascade and report the escalation rate, average latency and accuracy delta.
  • Simulate three incident types (unit change, null spike, gradual drift) and verify your monitors catch each.