AI spend and model operations · 1,219 words · 6 min read · Updated
Model Replacement Matrix Template
A reusable decision record for comparing a current model with a candidate route inside a defined production task.
A model name is not a replacement case
Teams often compare models at the level of brand, benchmark, or broad impression. Production systems do not consume a model in the abstract. They use a particular configuration for a particular task, with specific context, tools, schemas, retries, fallbacks, and review rules.
The matrix keeps the decision at that level. One application may contain several rows because a candidate can replace the current model for routine extraction while failing on ambiguous documents, or handle internal drafts while remaining unsuitable for external communication.
Freeze the comparison boundary
Record the current prompt or instruction version, retrieval behavior, tool access, output schema, temperature or equivalent settings, and fallback. Otherwise the team may attribute a system change to the model alone.
Compare failures before averages
An aggregate score can hide a new critical failure. Review where each route breaks, whether the failure is detectable, and what action follows. A replacement is unsafe when it creates a severe error that the workflow cannot catch.
The replacement matrix
Use one record for each task and candidate. Keep rejected records so future reviews can reuse the evidence.
- Field
- Task boundary
- What to record
- Workflow, user, input class, model action, output, and downstream action.
- Decision value
- Prevents application-wide claims from replacing task evidence.
- Field
- Current route
- What to record
- Provider, model, configuration, prompt, context, tools, validation, fallback, and release version.
- Decision value
- Creates a reproducible baseline and rollback target.
- Field
- Candidate route
- What to record
- Equivalent configuration detail plus any architectural change.
- Decision value
- Shows whether the comparison is actually model-only.
- Field
- Evaluation set
- What to record
- Normal, difficult, incomplete, adversarial, sensitive, and recent production examples.
- Decision value
- Makes comparison repeatable and tied to real work.
- Field
- Acceptance rules
- What to record
- Critical requirements, reviewer guidance, severity labels, and allowed tolerance.
- Decision value
- Defines what equal or better means for this task.
- Field
- Observed failures
- What to record
- Failure type, frequency in the set, detectability, consequence, and reviewer action.
- Decision value
- Exposes tradeoffs hidden by aggregate scores.
- Field
- Operations
- What to record
- Latency distribution, context limits, rate behavior, availability, logging, support, and data terms.
- Decision value
- Tests whether the route fits production beyond answer quality.
- Field
- Economics
- What to record
- Input, output, tool, retry, fallback, and review cost per accepted task.
- Decision value
- Avoids decisions based only on list price.
- Field
- Release decision
- What to record
- Keep, replace, partial route, shadow, reject, or gather more evidence.
- Decision value
- Turns analysis into an accountable production change.
- Field
- Rollback
- What to record
- Trigger, owner, prior route, data needed, and expected recovery time.
- Decision value
- Keeps substitution reversible.
Replacement decision rubric
A candidate must be credible across quality, operations, economics, and control. A strong average cannot compensate for a failed critical requirement.
Task quality
- Weak
- The candidate wins on generic benchmarks or a small handpicked sample.
- Workable
- The candidate is similar on most examples but failure tradeoffs need review.
- Strong
- The candidate clears critical rules, has understood failures, and performs acceptably across representative classes.
Failure detectability
- Weak
- Severe errors look plausible and pass directly to action.
- Workable
- Some failures can be validated or reviewed, but new gaps remain.
- Strong
- Critical failures are prevented, detected, or routed before material action.
Operational reliability
- Weak
- Latency, limits, availability, logging, and support are unknown.
- Workable
- Basic tests pass but production volume and incident behavior remain unproven.
- Strong
- The route has measured operational behavior, monitoring, fallback, and support fit.
Economics
- Weak
- The decision uses advertised unit price.
- Workable
- Usage and retries are measured, but review burden is estimated.
- Strong
- Cost per accepted task includes retries, fallbacks, tool calls, and material review work.
Exit and rollback
- Weak
- Replacement is a one-way configuration change.
- Workable
- The previous route can be restored manually.
- Strong
- Release share, rollback trigger, owner, and recovery evidence are explicit and tested.
Complete the matrix without benchmark theater
The work is a production change review, not a model tournament.
- 01
Select one task row
Choose a repeated task with attributable traffic and a current acceptance standard. Split mixed task classes before comparison. - 02
Reproduce the current route
Run the current production configuration against the fixed set and record its failures. The baseline must be observed, not assumed. - 03
Configure the candidate fairly
Give the candidate an appropriate prompt, context, schema, and tools while keeping the workflow requirement constant. - 04
Blind the review where useful
Hide route identity from reviewers when brand preference could influence judgment, while preserving evidence needed to diagnose failures later. - 05
Label tradeoffs
Separate critical failure, ordinary error, style difference, latency issue, and operational limitation. Do not collapse them into one score. - 06
Calculate accepted-task economics
Include repeated calls, fallbacks, validation, and meaningful reviewer correction. State assumptions where direct measurement is unavailable. - 07
Choose a release pattern
Use shadow traffic, a task subset, a small percentage, or a reviewer-only mode before full replacement when uncertainty remains. - 08
Record and monitor
Approve the change, preserve the prior route, monitor the same failure categories, and update the matrix with production evidence.
Choose the matrix outcome
The outcome is more precise than pass or fail.
- 01
Does the candidate clear every critical acceptance rule?
- If yes
- Continue to operational and economic comparison.
- If no
- Reject it or narrow the candidate to a task subset where the critical failure does not apply.
- 02
Is the candidate operationally fit at expected volume?
- If yes
- Compare cost per accepted task and release safety.
- If no
- Shadow it, address limits, or reject it even if offline quality is strong.
- 03
Is the candidate economically better after retries and review?
- If yes
- Select a bounded release pattern.
- If no
- Keep the current route or redesign context, validation, and workflow before another substitution.
- 04
Do failures concentrate in an identifiable subset?
- If yes
- Use partial routing and retain a stronger fallback for that subset.
- If no
- Use gradual traffic release with strict rollback or retain the current model.
- 05
Can the team restore the prior route quickly?
- If yes
- Approve the controlled change with monitoring.
- If no
- Complete rollback work before moving production traffic.
What belongs in the approval record
Someone outside the original evaluation meeting should be able to understand and repeat the decision.
- ✓
Named task and owner
The record identifies the workflow task, business owner, technical owner, and reviewer. - ✓
Versioned routes
Current and candidate model, configuration, prompt, retrieval, tools, schema, and fallback are captured. - ✓
Evaluation evidence
Examples, expected outcomes, reviewer notes, critical failures, and unresolved limits are linked. - ✓
Economic assumptions
Volume, token or compute use, retries, fallbacks, and review assumptions are visible rather than implied. - ✓
Release and rollback
Traffic boundary, monitoring band, stop condition, rollback owner, and prior route are explicit. - ✓
Re-review date or trigger
The record states when pricing, model, workload, or failure changes require another comparison.
Questions this article answers
Should a replacement candidate use the same prompt?
Not necessarily. The goal is a fair system comparison under the same workflow requirement. Record configuration differences so the team knows whether gains came from the model, prompt, retrieval, tools, or validation.
How large should the evaluation set be?
Large and varied enough to represent the task decisions that matter. Coverage of critical and difficult classes matters more than a round number. Add production failures over time.
Can a weaker model replace a stronger model?
Yes for a bounded task if it clears that task standard and the workflow catches cases outside its coverage. Capability labels do not replace task evidence.
When should a rejected model be reviewed again?
Revisit when the model, configuration, price, context, workload, or failure-detection design materially changes. Keep the old matrix so the new review starts from known evidence.