By NHI Mgmt Group Editorial TeamBased on Fiddler: “Server-Side Semantic Mapping for Consistent AI Observability Across Frameworks” (August 19, 2026)

TL;DR: AI observability and governance break when teams cannot reconcile tokens, model names, inputs, outputs, and span types across conventions, according to Fiddler. The practical issue is not collection but semantic consistency: without it, platform teams cannot compare, alert, or enforce reliably across AI stacks.


At a glance

What this is: Fiddler describes server-side semantic mapping for AI telemetry, showing that different frameworks can emit different attribute names for the same operational concept and still be normalised into shared observability semantics.

Why it matters: This matters because IAM, platform, and AI governance teams need telemetry they can compare, alert on, and audit consistently across frameworks, not just telemetry that is collected successfully.


Context

AI observability is not only a collection problem. The harder issue is semantic consistency, where the same operational event arrives with different attribute names across SDKs, frameworks, and telemetry conventions, making cross-platform governance unreliable.

In AI operations, that inconsistency creates a control gap for platform owners, because dashboards, alerts, and evaluators depend on a shared meaning layer before they can support reliable monitoring or enforcement. The identity angle is real here: AI systems, tools, and agent workflows become operational actors that need consistent semantic treatment even when the underlying frameworks differ.


Key questions

Q: How should teams standardise AI observability across multiple frameworks?

A: Create a shared semantic mapping layer that normalises framework-specific attributes into common concepts such as tokens, model identity, inputs, outputs, and span types. Keep the raw attributes too, so engineers can trace source behaviour while dashboards, alerts, and evaluators work from a single interpretation model.

Q: Why does OpenTelemetry not fully solve AI observability governance?

A: OpenTelemetry standardises transport, not meaning. Different AI frameworks can send different attribute names for the same operational concept, so a backend still has to interpret those values before it can compare usage, trace behaviour, or enforce policy across environments.

Q: What are the signs that AI telemetry semantics are failing?

A: Look for dashboards that disagree across teams, metrics that cannot be compared between frameworks, and alerts that fire on one convention but not another. Another warning sign is repeated manual translation of raw attribute names before analysis, which shows the platform lacks a stable semantic layer.

Q: When should organisations centralise AI telemetry mapping instead of handling it in each application?

A: Centralise it when teams use more than one framework or expect frameworks to change over time. A platform-level mapping layer reduces code churn, keeps observability portable, and avoids forcing every application owner to maintain its own interpretation rules for the same AI behaviour.


Technical breakdown

Why telemetry transport is not the same as telemetry interpretation

OpenTelemetry and OTLP solve collection and transport, but they do not guarantee that a backend interprets attributes in the same way across frameworks. That distinction matters because input tokens, output tokens, model names, and span classifications can all be represented differently even when they describe the same concept. Without a semantic layer, observability becomes convention-specific and comparisons between applications become unreliable. The technical problem is not missing data, but inconsistent meaning at ingestion and query time.

Practical implication: normalise AI telemetry semantics before analytics, not after dashboards start breaking.

How server-side semantic mapping preserves framework portability

A server-side mapping layer translates incoming attribute keys into framework-independent concepts such as input_tokens, tool, agent, or evaluator. Because the mapping happens centrally, teams can keep emitting telemetry from different frameworks while the platform reads one shared concept model. This avoids forcing a client-side standard on every application and lets multiple conventions coexist in production. It also means raw attributes remain available for provenance and debugging, which is important when teams need to verify how a concept was resolved.

Practical implication: centralise semantic translation so application teams can change frameworks without rewriting observability logic.

Why span typing matters for AI agents and tool chains

Agent traces often combine model calls, tool execution, retrieval, guardrails, evaluators, and nested agents, but frameworks label those operations differently. Mapping them into a small set of span types gives operators a stable way to group runtime behaviour across workflows. That is especially important when evaluating agentic systems, where a single task can cross several semantic layers before producing an output. The preservation of original attribute names alongside the mapped concept gives teams both standardisation and traceability.

Practical implication: use consistent span typing to compare agent behaviour, while retaining raw attributes for forensic review.


NHI Mgmt Group analysis

Semantic observability is becoming a governance control, not just a telemetry convenience. Once AI systems span multiple SDKs and frameworks, the real risk is not absence of logs but inconsistent meaning across logs, traces, and metrics. A platform can collect everything and still fail to support reliable comparison, alerting, or enforcement if the same concept is named differently in each convention. The practitioner conclusion is straightforward: governance depends on shared semantics before it depends on analytics.

AI agents make semantic drift operationally expensive. As workflows gain tools, retrievers, evaluators, and nested agent steps, the number of places where meaning can diverge increases sharply. That creates an observability problem that looks technical but behaves like identity sprawl in other domains: too many representations, too little authoritative interpretation. The practitioner conclusion is to treat semantic mapping as part of the control plane for AI systems, not a cosmetic reporting layer.

Preserving raw attributes alongside mapped concepts is the right design pattern. Teams need a consistent query surface, but they also need provenance when a framework behaves unexpectedly or a mapping is wrong. Keeping both the original key and the resolved semantic concept avoids losing forensic detail while still enabling standardised monitoring. The practitioner conclusion is to require mappings that are reversible, auditable, and centralised.

Portable AI observability reduces dependency on any single framework's telemetry dialect. If every framework change requires code changes in dashboards, alerts, and evaluators, the organisation has built hidden lock-in into its observability stack. Semantic abstraction breaks that dependency and lets the platform absorb framework variation without losing control fidelity. The practitioner conclusion is to measure portability as an operational requirement, not a nice-to-have.

Server-side semantic mapping creates the boundary where AI governance can actually scale. The article's most useful contribution is the idea that meaning should be resolved in the platform, not duplicated in every producer. That approach is what lets monitoring, evaluation, and governance work across teams without forcing one telemetry dialect everywhere. The practitioner conclusion is to align AI governance around shared semantic concepts, not around whichever framework happened to instrument first.

From our research library:

What this signals

Semantic drift is now an AI governance problem. When the same token, model, or span concept is named differently across frameworks, teams can still collect telemetry but lose the ability to enforce one operational truth. That is why semantic mapping belongs in the control plane, not in ad hoc dashboard logic.

Portable AI observability needs a stable concept layer. Fiddler's approach shows that the real control is not whether a framework emits traces, but whether those traces can be reconciled into a consistent meaning model across the estate. The 7% of security leaders who admit they do not know how often their AI systems are making autonomous changes to infrastructure, according to the 2026 Infrastructure Identity Survey, illustrates how weak observability becomes a governance blind spot when runtime behaviour is not interpretable.

Semantic observability debt: the longer teams let each framework define its own telemetry language, the harder it becomes to compare, audit, or automate AI governance across the environment. The practical response is to treat mapping governance as a standing control, with change management around every new SDK or telemetry convention.


For practitioners

  • Define a shared AI telemetry semantic layer Map tokens, model identity, inputs, outputs, span types, and evaluator signals to platform-wide concepts before they feed dashboards or policy logic.
  • Preserve raw telemetry attributes for traceability Store the original attribute key alongside the resolved concept so engineers can debug framework-specific behaviour without losing the standardised view.
  • Standardise span typing across agent workflows Classify model calls, tool actions, retrieval steps, guardrails, and evaluators with the same span taxonomy across frameworks and SDKs.
  • Treat semantic mappings as runtime governance controls Allow controlled updates to mappings when frameworks change, but keep the change process auditable so observability semantics do not drift silently.

Key takeaways

  • AI observability can fail even when telemetry is collected correctly if frameworks do not agree on what the data means.
  • Server-side semantic mapping gives platform teams a way to normalise AI telemetry without forcing one client-side convention everywhere.
  • For practitioners, the key control is to standardise meaning centrally while preserving raw attributes for debugging and auditability.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

OWASP Agentic AI Top 10 addresses the attack and risk surface, while NIST AI RMF, NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
OWASP Agentic AI Top 10ASI03 — Identity & Privilege AbuseAgent workflows and tool actions need stable semantic classification to govern identity and privilege behaviour.
Recommendation — Map agent actions to a stable semantic layer so identity and privilege events remain comparable across tools.
NIST AI RMFGOVERN — AI Governance and AccountabilityThe article is fundamentally about governance of AI observability and control-plane semantics.
Recommendation — Establish governed AI telemetry semantics before you rely on monitoring, evaluation, or enforcement.
NIST CSF 2.0DE.CM-01 — Networks and systems are monitored to detect anomalies and eventsConsistent observability semantics are required for monitoring AI behaviour across frameworks.
Recommendation — Normalise AI telemetry so monitoring and alerting can detect comparable events across the environment.
NIST SP 800-53 Rev 5AU-3 — Content of Audit RecordsThe article stresses preserving original attributes alongside mapped concepts for auditability.
AU-12 — Audit Record GenerationTelemetry mapping depends on generating usable records for downstream analysis and governance.
Recommendation — Retain original telemetry attributes in audit records alongside semantic mappings for traceability. Generate audit records that capture both raw attributes and resolved semantic concepts.

Key terms

  • Semantic Mapping: Semantic mapping connects technical metadata to business meaning so users and systems interpret a data asset consistently. It reduces ambiguity across teams by aligning terms, definitions and relationships, which is essential when the same dataset supports reporting, analytics and AI use cases.
  • Span Type: A span type is a classification label used to describe what kind of operation a telemetry span represents, such as an LLM call, tool action, retriever step, or evaluator. Stable span typing makes traces easier to analyse consistently across different AI frameworks and agent workflows.
  • Telemetry: Telemetry is the raw data collected from systems, including logs, metrics, and traces. It becomes useful for governance only when it is correlated with identity, entitlement, and workload context so teams can interpret behaviour instead of just storing events.
  • Observability Plane: The cloud logging, monitoring and telemetry layer that records activity and supports detection. When identities can create, update or delete observability objects, that plane becomes part of the attack surface and can be used to hide or move activity.

Deepen your knowledge

The NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, workload identity, and secrets management. It helps security and identity practitioners apply governance discipline to the control planes that modern systems depend on.
NHIMG Editorial Note
Published by the NHIMG editorial team on August 21, 2026.
Updated on October 12, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org