← Latest papers
🤖 machine learning

FailureAtlas: A Taxonomy of Failure Modes in Multi-Provider LLM Serving Infrastructure

This paper introduces FailureAtlas, a two-axis taxonomy classifying failure modes in multi-provider LLM serving gateways by origin layer and detectability, revealing that the most operationally severe issues are "silent" failures that return successful HTTP responses while corrupting application state.

Original authors: Vishal Pandey, Gopal Singh

Published 2026-07-21
📖 7 min read🧠 Deep dive

Original authors: Vishal Pandey, Gopal Singh

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine you are running a massive, high-tech library where thousands of people are asking a super-smart robot librarian for help. In the old days, you'd just ask the robot, and it would answer. But now, the library has grown so big that no single robot can handle the crowd. So, the librarians built a "Gateway"—a super-efficient receptionist standing between the crowd and the robots. This Gateway's job is to take your question, figure out which robot is free, send the question over, and bring the answer back. It's like a traffic cop for the internet, making sure everyone gets a turn and nothing gets lost.

But here's the tricky part: these robots (called Large Language Models) don't just give one-word answers. They tell long stories, one word at a time, like a stream of water. And they remember everything you said earlier in the conversation. This means the Gateway has to be incredibly careful. It can't just pass messages; it has to keep the story straight, remember who is talking to whom, and make sure the stream of words doesn't get jumbled up. If the Gateway messes up, the robot might still answer perfectly, but it could be answering the wrong question, or it might forget you asked it to write a poem and instead write a grocery list. The problem is, the Gateway often doesn't even know it made a mistake. It just says, "All done!" and moves on.

This is where a new paper called FAILUREATLAS comes in. The authors, who are like digital detectives, realized that while we have maps for how computers break in general, we don't have a map for how these specific "Gateway" systems fail. They built a new kind of map—a "Taxonomy"—to categorize exactly how things go wrong. They found that the most dangerous failures aren't the ones that crash the system and scream for help (like a broken lightbulb). Instead, the worst failures are "Silent." They are like a ghost in the machine: the system looks perfectly healthy, the lights are green, but the story the robot tells you is secretly corrupted. The paper doesn't just guess; they stress-tested these systems and found five specific ways this happens, proving that our current way of watching computers is blind to the most dangerous bugs.

The Map of Broken Things

The authors created a simple two-part grid to sort these failures. Imagine a chessboard where the rows are Where the break happens, and the columns are How we notice it.

The Rows (Where it breaks):

  1. The Road (Network/Transport): The cables or Wi-Fi are acting up, or the computer is trying to do two things at once and gets stuck.
  2. The Stream (Streaming/Protocol): The robot is pouring out words like water, but the Gateway is miscounting the drops, causing the words to merge into nonsense.
  3. The Memory (State/Session): The Gateway forgets what you said five minutes ago, or worse, it mixes up your conversation with your friend's conversation.
  4. The Brain (Model Behavior): The robot itself starts acting weird (though the authors admit this is hard to prove with hard evidence yet).
  5. The Wallet (Governance/Cost): The system tries to save money or limit usage but accidentally locks the door forever.

The Columns (How we notice):

  • Loud: The system screams! It crashes, shows a red error message, or stops working. We see it immediately.
  • Silent: The system whispers. It says "Everything is fine!" (HTTP 200), but the answer is wrong. This is the scary part because nobody is looking for it.

The Five Ghosts in the Machine

The paper fills this map with five real, verified examples of things going wrong. Three were found by looking at public bug reports from other developers, and two were discovered by the authors themselves while stress-testing their own system.

1. The "Copy-Paste" Mix-Up (Silent)

  • What happened: When the robot sends multiple instructions at once (like "draw a cat" and "write a poem"), it sends them in a stream. The Gateway tried to count these instructions but reset its counter for every single word it received.
  • The result: The Gateway told the computer, "Here are two instructions!" but actually sent them as one giant, jumbled mess. The computer tried to read it, failed, and crashed later. The Gateway never knew it broke anything; it just thought it did its job.
  • The fix: The Gateway needs to keep a running tally of the instructions, not reset it for every word.

2. The "Forever Locked" Door (Loud)

  • What happened: The Gateway uses a digital "counter" to make sure it doesn't ask the robot too many questions at once. If the robot gets sick and stops answering, the Gateway is supposed to lower the counter. But if the Gateway crashes while trying to lower it, the counter stays stuck at "Full."
  • The result: Even though the robot is fine, the Gateway thinks it's full and starts rejecting everyone. It's like a bouncer who thinks the club is full because he forgot to let the people who left out the door.
  • The fix: Make sure the counter always goes down, even if things go wrong.

3. The "Traffic Jam" (Loud)

  • What happened: The robot got sick for a split second. The Gateway told 100 different computers to "try again!" at the exact same second.
  • The result: All 100 computers slammed into the robot at once, creating a "thundering herd." The robot got so overwhelmed it crashed completely, and the Gateway couldn't recover.
  • The fix: Tell the computers to wait a random amount of time before trying again, so they don't all hit the robot at once.

4. The "Amnesia" (Silent)

  • What happened: This was the authors' own discovery. They had two computers talking to the robot at the same time. Because the Gateway was trying to be fast, it let the two computers share the same "memory" of the conversation.
  • The result: Computer A asked a question, and Computer B answered it. Then Computer A tried to ask a follow-up, but the Gateway had already overwritten its memory with Computer B's data. The robot answered a question that was never asked. The system said "Success!" but the conversation made no sense.
  • The fix: Give every conversation its own private notebook so they can't steal each other's pages.

5. The "Frozen Hand" (Loud)

  • What happened: The Gateway was built to be super fast and handle many things at once. But one part of it tried to do a slow, old-fashioned task (like checking a database) while it was supposed to be doing fast things.
  • The result: That one slow task froze the whole Gateway. It couldn't answer any other questions, and the system thought the Gateway was dead, so it tried to restart it over and over.
  • The fix: Don't let slow tasks freeze the fast ones; put them in a separate line.

The Big Lesson: The Silent Killer

The most important thing the paper found is that the scariest bugs are the ones we can't see.

In the world of computers, we usually look for "Loud" failures. If a server crashes, we fix it. If an error code pops up, we fix it. But the authors show that in these new AI systems, the "Silent" failures are much worse. They return a perfect "OK" message, pass all the health checks, and look like everything is working. But underneath, the conversation history is getting deleted, the instructions are getting mixed up, and the robot is slowly losing its mind.

The paper argues that we need a new kind of "watchdog." We can't just check if the computer is on; we have to check if the story makes sense. We need tools that can read the conversation and say, "Hey, the robot just forgot what you said three turns ago," even though the computer says everything is fine. Until we build those tools, the most dangerous bugs in our AI infrastructure will remain invisible ghosts, quietly breaking things while we think everything is perfect.

Drowning in papers in your field?

Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.

Try Digest →