StoriesJuly 28, 20266 min read

Who watches the watcher: the blind spot in every automation that alerts you when something breaks

If you have a system that alerts you when something breaks, it has a blind spot: what happens if the one that alerts you goes silent? Here's how we fixed it and what to ask about yours.

Pol

Fundador de AutoBoost

ReliabilityAutomation
Who watches the watcher: the blind spot in every automation that alerts you when something breaks

When a company automates something critical (invoices that book themselves, orders that go out to a distributor, tax notices that need reading every day) it almost always asks the same question before signing off: "if it breaks, will I know?" The answer is usually yes, there's an alert. But there's a question almost nobody asks, and it's the one that actually matters: what happens if the thing that's supposed to alert you breaks itself, silently?

It happened to us, in our own systems, and we're telling it exactly as it happened, because the lesson applies to any business that depends on an automated process.

The problem: silence is indistinguishable from "everything's fine"

We had a process that watches several automations and alerts as soon as one breaks. It worked well, until the day that process itself stopped running. No alarm went off, because the only piece capable of raising an alarm was, precisely, the one that had stopped.

This isn't some exotic failure of large systems. It's the exact same trap any small or mid-sized business falls into when it relies on:

  • A script that checks the tax mailbox and alerts you when something new arrives.
  • A process that syncs stock between the online store and the ERP every night.
  • An automatic alert if an invoice doesn't add up.
  • Any AI automation that acts on its own (sends an order, books a call, records an expense) and that you only hear from when "something beeps."

In every one of those cases, if the watcher stops, you don't see an error. You see silence. And silence, on a dashboard or in an inbox, looks a whole lot like everything being fine.

The decision rule: if your alarm depends on a single piece, you don't have an alarm

This is the part we think is most useful for anyone running operations, not just for whoever writes the code:

Any automation that "alerts you when something fails" has the same blind spot: who alerts you if the alerter dies? If the answer is "nobody," you don't actually have an alert system, you have a system that alerts you almost always, which is a different thing and far more dangerous, because it builds a confidence that isn't warranted.

The fix isn't more code in the same place. It's a second process, independent and sharing nothing with the first, whose only job is to check that the first one is still alive. Here's how we built it:

  1. A second scheduler (not the same task engine that runs the original watcher) checks every 15 minutes whether the main process has shown a sign of life.
  2. If more than those 15 minutes pass with no signal, it checks again.
  3. If 35 minutes go by with still no signal (two missed checks, not one, to avoid false alarms from a one-off delay), the real alarm fires.

The detail that makes the difference is "independent": this second process is built separately, without reusing the first one's code, even though it's tempting to just reuse it since it looks similar. If they shared a library, a queue, or a deployment, a failure in that shared piece would take both down at once, and we'd be right back to a single point of failure wearing a new disguise. Here, duplicating the work was the right call, not an oversight: independence is worth more than saving a few lines when the second program's whole job is to survive the failure of the first.

Why this matters more the more you automate with AI

When automation just sends an email or fills in a field, a silent failure is annoying. But in the projects we build at AutoBoost, the AI usually acts for real on the client's actual system: it creates an invoice in the accounting software, sends a real order to the distributor, writes an opportunity in the CRM. You can see it in cases like invoices that book themselves, where the system creates the invoice and deletes it if something doesn't add up, or in the data platform with AI for a group of pharmacies, where the AI recommends purchases and sends real orders.

The more real the action an AI triggers, the more expensive an outage nobody notices becomes. An order that never goes out, an invoice that never books, a tax notice nobody reads for days: the cost of a silent failure isn't "an error in a log," it's a business problem with a date and money attached to it.

Checklist: how to know if your automation has this blind spot

Before you trust any system that "alerts you when something fails" (whether you built it, a vendor did, or it comes bundled with a SaaS tool), ask these questions:

  • Who checks that the alerter is still alive? If the answer is "nobody" or "the same process," you have the blind spot.
  • Do the watcher and the watched share infrastructure? Same server, same queue, same deployment: if one goes down, does the other go down with it?
  • How long can silence go unnoticed? Put a number on it. If you don't know, it's probably "until someone happens to notice," which isn't a number, it's a hope.
  • Does the alert reach more than one person, through more than one channel? A single email to a single inbox is another single point of failure, even if it doesn't look like one.
  • Has anyone ever tested it by deliberately killing the process? If the failure has never been simulated, you don't know the alert actually works, only that it's never been needed yet.

If any of those questions leaves you without a clear answer, you don't need to rebuild the whole system: usually it's enough to add that second, independent piece whose only job is to ask "are you still alive?", the same way we did.

The lesson any business can take away

You don't need a large technical team to apply this. You need to ask the right question before trusting an automation blindly: it's not "does it alert me if something fails?", it's "what happens if the thing that alerts me is the thing that fails?" It's the same discipline we apply to everything we build: first you sort out the process and understand where it can break silently, and only then do you trust AI to act on it on its own.

If you have automated processes (AI powered or not) that you depend on to invoice, quote, do the books, or alert you of something important, and you're not sure what would happen if the alert itself broke, let's talk. At AutoBoost we build custom software and AI integrated into your actual systems, designed so a silent failure stops being possible. Get in touch and we'll take a look together.

Share article
Who watches the watcher in your AI automations | AutoBoost