Engineering · July 2026 · 4 min read
Building a Trustworthy AI Tutor, Part II: Shipping It to the Public
By Timilehin Shobande · Part II of the BossFx AI Platform story — what happened when a tutor I could trust in private met production.
Not long ago, the tutor from Part I lived behind a login and a feature flag — proven, but private.
Today, anyone can open BossFx Academy, ask a trading question, and get a grounded answer with its sources, without ever creating an account.
Part I was about building a tutor I could trust. Part II is about what happened when it met production.
The work I promised to do
Part I ended on a promise I didn't enjoy making. The tutor's first honest score was a bruising 35.7%, and I said out loud that the number would only move after the work that justified it — no shortcuts, no quietly nudging the baseline to feel better.
So I did the work in the order Part I named it: filled the gaps in the curriculum the baseline had exposed, calibrated the retrieval floor from real data instead of a hopeful guess, and wired the evaluation gate into CI so that nothing merges if quality slips. Only then did I let myself re-measure.
It reached an 80.0% gate pass, with grounding failures sitting at zero across every archived run. I care less about the number than about how it got there — earned in sequence, and impossible to fake past CI. That distinction turned out to matter more than the score itself.
Then I opened the doors
Here's the decision I'm proudest of: for the first phase, the tutor is public with no login at all. That's a product choice, not a shortcut. The whole value of a trustworthy tutor collapses if a nervous beginner has to create an account before they can ask whether they've misunderstood leverage.
Opening it up safely meant treating access as a capability rather than an identity. Anonymous visitors reach only the public parts of the system, their requests are rate-limited, and nothing personal is stored. The authenticated path didn't change at all — anonymous mode is purely additive, and it sits behind a flag I can pull in a single move. It shipped as v1.1.0. The grounding guarantee from Part I didn't change a line; it just started answering strangers.
The humbling part
Getting it working on my machine was the easy 80%. Production was the other 80%, and it was humbling in the most ordinary ways.
A 502 that looked like a catastrophe turned out to be a single wrong value in the deploy configuration — the code was fine. Rows silently failing to save traced back not to the database logic but to seed data that lived in a local file and had never been applied to production, with a foreign key quietly depending on it. A client SDK politely refused to send a request without a login token, breaking the exact feature I most wanted to show off. And a handful of public pages ran the tutor but had never loaded its script, so they fell back to the old engine without a word.
None of these were clever bugs. I found every one the same way this project taught me to work: isolate a single variable, ask what changed since it last worked, and let the evidence — not my first, most flattering guess — pick the cause. Every fix was small and reversible, because I'd built the system so that they could be.
What I actually built
The evaluation gate that made the private tutor trustworthy is the same thing that made the public launch uneventful. There was no launch-day scramble over answer quality, because quality had been a blocking part of every merge for months.
Boring launches are a feature you build long before launch day.
Why I trust it
The code answering questions in production today isn't dramatically different from the code I had months ago. Same retrieval, the same grounding guarantee, much the same pipeline.
What changed is that I trust it now — and, more than that, I know exactly why.
Building the model was never the hard part. Building the engineering discipline around it was: the evaluation gate, the archived runs, the review that lets nothing reach a student unapproved, the habit of small reversible changes. Production trust didn't come from the system being clever. It came from the process being honest — and that's the part you can't bolt on at the end.
I set out to build a tutor that sounds smart. I'm happier that I built one that knows when to say "I don't know," and that I understand well enough to explain why it does.