AgentsAI Safety 🇨🇳 05.08.2026 08:01

An Evolutionary Architectural Pattern for Managing the Pace of AI Change

OpenAIOpenAI AnthropicAnthropic Solo.ioSolo.io PortkeyPortkey LiteLLMLiteLLM
This article, based on the collective insights from InfoQ's certified architect online event participants, explores the AI gateway as an evolutionary architecture seam. It argues that the rapid evolution of AI models, protocols, and failure modes creates a fundamental pace mismatch with enterprise systems, and an AI gateway can isolate this change. The pattern centralizes model routing, security, observability, and audit in a control plane, allowing the rest of the system to remain stable.
The article identifies the core challenge of enterprise AI as the pace of ecosystem change, not model performance, citing new models, protocols like MCP and A2A, and new security threats. Traditional API gateways fail because they assume determinism, pattern-layer failures, and fully specified operations, whereas agents are non-deterministic and fail at the semantic level. An AI gateway serves as an architectural seam, providing a unified control plane for model routing, security (including zero-trust for agent actions), content guardrails, observability, and audit, enabling components to evolve at their own pace. Practical implementations like kgateway, Portkey, and LiteLLM exist, and a 'policy-as-config' pattern is emerging. The article discusses trade-offs including latency, centralization, probabilistic guardrails, operational costs, and delays in accessing provider-native features. It outlines four stages of organizational evolution: single team/provider, expanded adoption, pressure for consolidation, and integration into a shared layer, noting a rise in AI incidents (362 in 2025) and citing examples like Replit's agent clearing a production database and a $500M unexpected spend on Claude. Open questions remain about the boundary between gateway-enforced and application-enforced policies, and the operational burden of running guardrails.
Abbreviations
LLM = Large Language Model — большая языковая модель
MCP = Model Context Protocol — протокол контекста модели
A2A = Agent-to-Agent — агент-агенту
API = Application Programming Interface — программный интерфейс приложения
PR = Pull Request — запрос на включение
OPA = Open Policy Agent — открытый агент политик
CNCF = Cloud Native Computing Foundation — фонд облачных нативных вычислений
NIST = National Institute of Standards and Technology — Национальный институт стандартов и технологий
CSA = Cloud Security Alliance — Альянс облачной безопасности
ATF = AI Trust Framework — структура доверия к ИИ
OWASP = Open Web Application Security Project — открытый проект безопасности веб-приложений
PII = Personally Identifiable Information — персональные данные
CVE = Common Vulnerabilities and Exposures — общие уязвимости и экспозиции
OAuth = Open Authorization — открытая авторизация
Source: InfoQ 中国 — original
Our earlier posts on this topic ↓
Fresh news