IEEE Sri Lanka Section — Advancing Technology for Humanity

SLAIC Session 3 - Architecting Scalable & Secure AI Agents

July 25, 2025 · 12:30 PM - 2:30 PM @ Online event

Description

"In the third session of the Sri Lanka AI Challenge 2025, experts from Sysco LABS explored the architectural considerations essential for building scalable and secure AI agents. The session provided valuable insights into key principles, design patterns, and real-world implementation strategies aimed at engineers and architects looking to deploy AI solutions at an enterprise scale. The discussion highlighted the evolution of generative AI within enterprise applications, distinguishing between traditional AI and agentic AI. The presenters emphasized the importance of proactive systems that automate tasks with minimal human intervention. They detailed the life cycle of developing AI agents, covering use case identification, deployment, and the critical role of continuous feedback and security in the process. A practical use case was introduced, showcasing an AI-driven travel advisor that utilizes various specialized agents to deliver real-time insights and recommendations. The experts discussed the significance of separating configurations from code to enhance scalability and reusability, as well as the considerations for data sources, integration points, and non-functional requirements such as governance and explainability. The session also focused on essential architectural strategies, including prompt engineering, dynamic mapping, and the need for humanizing AI responses. Examples like a currency and weather API agent illustrated effective user query handling. The importance of fallback mechanisms and the role of an orchestrator to manage interactions among multiple agents were highlighted. Additionally, the iterative nature of development was stressed, emphasizing modularization in services and the necessity for user feedback during the research and development phase. Key technical topics included the importance of parallel execution for optimizing performance, caching techniques, and various evaluation approaches, such as automated evaluations and human-in-the-loop methods. Security concerns, particularly regarding prompt injection and data leaks, were addressed, along with mitigation strategies like prompt sanitization and access controls. The session concluded with a Q&A segment, allowing participants to engage with the speakers, followed by a quiz designed to reinforce the learnings. Overall, the session equipped attendees with the knowledge needed to architect secure and effective AI solutions for enterprise applications while maintaining a focus on scalability and security in AI system architecture. "

IEEE Sri Lanka Section