Skip to main content
Feature Store Drift Caught Tecton's Fraud ModelData Governance & Quality
5 min readFor Model Risk & Assurance Teams

Feature Store Drift Caught Tecton's Fraud Model

The Challenge

Your MLOps team might face a recurring issue: sudden degradation in model performance, causing alerts across multiple downstream models. By the time accuracy metrics drop, thousands of poor predictions may have already reached production. Root cause investigations can consume days, with teams scrambling to trace issues through complex data pipelines and upstream systems.

The core problem often isn't the models themselves. Using Tecton's Feature Store, your team transforms raw transaction data into machine learning features through real-time, streaming, and batch pipelines. These features feed multiple fraud detection models simultaneously. When data quality issues or drift occur in shared features like amount_mean_30d or sum_amount_last_24h, the effects ripple across every dependent model. Feature-level issues often manifest hours or days before impacting model performance metrics, creating a visibility gap that leaves your team perpetually reactive.

The Environment and Constraints

Your fraud detection system might rely on three types of Tecton Feature Views, each with distinct characteristics:

Streaming feature views process events continuously and store pre-calculated features for immediate online retrieval, with offline stores updated daily.

Batch feature views execute periodic processing and populate both online and offline stores upon batch execution.

Real-time feature views define request-time transformations, combining values from streaming and batch pipelines with request parameters to calculate features on demand without storing pre-calculated values.

This architecture creates a monitoring challenge. Traditional model-level monitoring only surfaces problems after predictions degrade. You need visibility into feature distributions before they reach models, but standard ML monitoring tools assume you're tracking predictions, actuals, and task-specific performance metrics like AUC or F1 score.

For financial services applications, regulatory expectations add pressure. You need to demonstrate data lineage and quality controls for sensitive features, regardless of model behavior. You can't wait for model drift alerts to trigger investigations.

The Approach Taken

Your team can implement feature-level monitoring by integrating Fiddler directly with Tecton's Feature Views. The strategy centers on treating features as monitoring targets in their own right, separate from any downstream model.

Using Fiddler's fdl.ModelTask.NOT_SET model task type, you focus solely on inputs. This relaxes the requirement to specify model outputs, targets, or task-specific performance metrics. Map Tecton's feature columns to Fiddler input columns and entity join keys to metadata columns:

input_columns = user_transaction_metrics.get_feature_columns()
entity_cols = [col for y in user_txn_recent_activity.entities 
               for col in y.join_keys]

model_spec = fdl.ModelSpec(
    inputs=input_columns,
    metadata=entity_cols,
)

For batch and streaming Feature Views, retrieve historical values using Tecton's get_features_in_range method, pulling 60 days of feature data to establish baselines. For real-time Feature Views that don't store pre-calculated values, use get_feature_for_events to calculate what feature values would have been for past triggering events, essentially replaying transaction history through the feature pipeline.

Establish a rolling baseline referencing feature distributions from two months prior, using one month of data as the comparison window. This approach detects when current feature values diverge from historical patterns. A scheduled daily script publishes incremental feature values to Fiddler, maintaining continuous monitoring coverage.

Results and What Changed

The monitoring system can identify drift in features like amount_mean_30d before any downstream model performance degrades. Alert rules trigger proactive notifications, giving your team time to investigate upstream data sources and transformation logic before poor predictions reach users.

Data integrity monitoring can surface missing values in features such as sum_amount_last_24h and sum_amount_10min, issues difficult to diagnose from model-level metrics alone. You can pinpoint whether performance issues stem from specific data sources, transformation pipeline failures, or upstream system problems, rather than conducting time-intensive investigations across the entire stack.

The shift from reactive to proactive monitoring changes your operational stance. Instead of responding to model degradation after it occurs, you can prevent downstream complications by catching feature-level anomalies early. When one corrupted feature affects multiple models, feature monitoring immediately clarifies that a single upstream problem is causing widespread issues.

What They Would Do Differently

Looking back, your team might identify several areas for refinement. Establish alert thresholds more conservatively at the start, then tune based on actual feature behavior patterns. Initial alerts may generate some noise as the system learns normal variation in feature distributions.

Invest earlier in documenting business logic constraints for each feature. Knowing that customer_age should never exceed 120 or that transaction_amount should follow specific business rules makes validation rules easier to implement and maintain. These constraints are simpler to enforce at the feature level than to infer from model behavior.

Integrate feature monitoring into your CI/CD pipeline from the beginning, rather than adding it after deployment. Testing feature transformations against expected distributions before promotion to production can catch several issues that might later require hotfixes.

Takeaways for Your Team

If you're running Feature Stores that feed multiple models, monitoring at the feature level creates an early warning system that model-level monitoring can't replicate. The hours or days between feature drift and model performance degradation represent your window to prevent impact.

Your monitoring strategy should match your Feature View architecture. Batch and streaming views with offline stores support straightforward historical analysis. Real-time views require event replay to establish baselines, but the investment pays off when you need to validate request-time transformations.

Establish rolling baselines that reference past feature distributions rather than static training data. Your features evolve with your business, and baselines should reflect realistic historical patterns. A two-month offset with a one-month comparison window balances recency with stability.

Treat feature monitoring as a governance control, not just an operational convenience. For regulated industries, demonstrating data lineage and quality validation at the feature level strengthens your model risk management framework. SR 11-7's emphasis on data quality and ongoing monitoring applies to features as much as to models.

When multiple models share features, a single upstream issue becomes a systemic risk. Feature-level monitoring isolates root causes immediately, preventing the scenario where you're troubleshooting five model failures only to discover they all trace to one corrupted data source.

Build business logic validation into your feature definitions. Range checks, type constraints, and distribution expectations are easier to specify and enforce at the feature level than to reverse-engineer from model outputs. These rules also serve as living documentation for your data contracts.

The operational shift from reactive troubleshooting to proactive prevention compounds over time. Every early catch preserves model performance, reduces incident response overhead, and maintains user trust. Your MLOps team spends less time firefighting and more time building.

You Might Also Like