[{"data":1,"prerenderedAt":1653},["ShallowReactive",2],{"site-nav-content":3,"blog:/blog/what-is-human-in-the-loop-ai":163,"blog-index-copy":670,"blog:/blog/what-is-human-in-the-loop-ai:surround":691,"hiring-banner-content":1622,"site-cta-content":1634},{"header":4,"productNav":9,"nav":42,"footer":61,"askAI":116,"id":147,"title":148,"archived":149,"authors":150,"badge":150,"body":151,"date":150,"department":150,"description":155,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":150,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":159,"relatedHeading":150,"seo":160,"series":150,"sitemap":115,"status":150,"stem":161,"subhead":150,"tags":150,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":162},{"productLabel":5,"loginLabel":6,"contactLabel":7,"contactSalesLabel":8},"Product","Log in","Contact","Get started for free",[10,14,18,22,26,30,34,38],{"label":11,"to":12,"description":13},"Overview","/overview","Seven layers. One closed loop.",{"label":15,"to":16,"description":17},"Conflux","/product/conflux","Where your team, workstreams, and agents meet.",{"label":19,"to":20,"description":21},"Agent Teams","/product/agent-teams","Specialist teams - governed from day one.",{"label":23,"to":24,"description":25},"Lifecycle Graph","/product/lifecycle-graph","Intelligence that compounds across every interaction.",{"label":27,"to":28,"description":29},"Company Wiki","/product/wiki","Playbooks and policies where expertise stays.",{"label":31,"to":32,"description":33},"Workstreams","/product/workstreams","From brief to signed-off deliverable on one canvas.",{"label":35,"to":36,"description":37},"Perception Console","/product/perception","Ask your whole business in plain English.",{"label":39,"to":40,"description":41},"Governance","/product/governance","Frontier AI you can actually sign off on.",[43,46,49,52,55,58],{"label":44,"to":45},"Models","/models",{"label":47,"to":48},"Pricing","/pricing",{"label":50,"to":51},"Integrations","/integrations",{"label":53,"to":54},"Security","/security",{"label":56,"to":57},"Partners","/partners",{"label":59,"to":60},"Insights","/blog",{"productHeading":5,"companyHeading":62,"legalHeading":63,"docsLabel":64,"docsUrl":65,"statementLines":66,"copyright":69,"companyLinks":70,"legalLinks":85,"socialLinks":95,"bottomLinks":105},"Company","Legal","Docs","https://docs.gonimbus.ai",[67,68],"Stop training someone else's model.","Control your AI.","© 2026 Nimbus Intelligence, Inc. All rights reserved.",[71,72,73,74,75,77,80,83],{"label":47,"to":48},{"label":50,"to":51},{"label":53,"to":54},{"label":59,"to":60},{"label":76,"to":57},"Partner Program",{"label":78,"to":79},"Careers","/careers",{"label":81,"to":82},"System status","/status",{"label":7,"to":84},"/contact",[86,89,92],{"label":87,"to":88},"Terms of Service","/terms",{"label":90,"to":91},"Privacy Policy","/privacy",{"label":93,"to":94},"Compliance","/compliance",[96,99,102],{"label":97,"href":98},"LinkedIn","https://www.linkedin.com/company/gonimbusai/",{"label":100,"href":101},"X","https://x.com/gonimbusai",{"label":103,"href":104},"Instagram","https://www.instagram.com/gonimbus_ai/",[106,108,110,111,112],{"label":107,"to":88},"Terms",{"label":109,"to":91},"Privacy",{"label":93,"to":94},{"label":81,"to":82},{"label":113,"to":114,"external":115},"LLMs.txt","/llms.txt",true,{"text":117,"prompt":118},"Ask AI about Nimbus",{"I'm researching enterprise intelligence platforms and want to know how Nimbus combines perception, collaboration, and autonomous agents to drive strategic decision-making":119,"platforms":121},{" Summarize the highlights from Nimbus's website":120},"https://gonimbus.ai",[122,127,132,137,142],{"name":123,"label":124,"icon":125,"hrefPrefix":126},"chatgpt","ChatGPT","simple-icons:openai","https://chatgpt.com/?prompt=",{"name":128,"label":129,"icon":130,"hrefPrefix":131},"perplexity","Perplexity","mdi:magnify","https://www.perplexity.ai/search/new?q=",{"name":133,"label":134,"icon":135,"hrefPrefix":136},"grok","Grok","simple-icons:x","https://x.com/i/grok?text=",{"name":138,"label":139,"icon":140,"hrefPrefix":141},"claude","Claude","simple-icons:anthropic","https://claude.ai/new?q=",{"name":143,"label":144,"icon":145,"hrefPrefix":146},"google-ai","Google AI","simple-icons:google","https://www.google.com/search?udm=50&aep=11&q=","content/shared/nav.md","Site navigation",false,null,{"type":152,"value":153,"toc":154},"minimark",[],{"title":155,"searchDepth":156,"depth":156,"links":157},"",2,[],"md","/shared/nav",{"title":148,"description":155},"shared/nav","p6IsjEfjcrwkjwvGsPcuEkpoJSeUn2vJXPTxLWQfw9M",{"id":164,"title":165,"archived":149,"authors":166,"badge":169,"body":171,"date":659,"department":150,"description":660,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":150,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":661,"relatedHeading":150,"seo":662,"series":663,"sitemap":115,"status":150,"stem":664,"subhead":150,"tags":665,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":669},"content/blog/what-is-human-in-the-loop-ai.md","What is Human-in-the-Loop AI",[167],{"name":168,"to":120},"Nimbus Research",{"label":170},"Explainer",{"type":152,"value":172,"toc":634},[173,182,185,202,205,208,213,286,294,298,301,304,315,322,329,336,339,344,350,356,367,373,387,391,397,402,408,414,420,426,434,446,461,464,468,471,478,484,492,496,500,503,507,510,514,517,521,524,528,531,535,542,546,552,556,559,563,566,570,573,577,580,584,587,591,604,608],[174,175,176,177,181],"p",{},"Human-in-the-loop AI, in everyday language, means ",[178,179,180],"strong",{},"a person must approve before the AI can finish the job",".",[174,183,184],{},"Not “a human might read the chat.” Not a footer that says this content was generated. A gate the software cannot skip.",[174,186,187,188,195,196,201],{},"In February 2024, a British Columbia tribunal held Air Canada responsible for a chatbot that invented a bereavement-fare policy. ",[189,190,194],"a",{"href":191,"rel":192},"https://www.cbc.ca/news/canada/british-columbia/air-canada-chatbot-lawsuit-1.7116416",[193],"nofollow","CBC reported"," that the airline’s argument — the chatbot is a separate legal entity — failed. The decision is ",[189,197,200],{"href":198,"rel":199},"https://decisions.civilresolutionbc.ca/crt/crtd/en/525448/1/document.do",[193],"Moffatt v. Air Canada",". A customer relied on the invented fare. A human did not catch the fiction before it became a commitment.",[174,203,204],{},"That is the class of failure this article is about.",[174,206,207],{},"The phrase is older than ChatGPT. Safety engineering already distinguished a signer on every payload from a supervisor with a kill switch. Generative AI borrowed the label and diluted it. Vendors now say “human in the loop” for a thumbs-up on a chat, a weekly review of logs, or a prompt that says “ask the user first.” Only one of those is a gate.",[209,210,212],"h2",{"id":211},"words-youll-hear","Words you’ll hear",[214,215,216,223,234,240,252,258,264,270,280],"ul",{},[217,218,219,222],"li",{},[178,220,221],{},"In the loop."," The process cannot proceed past a gate without a human act. At work, the CRM write does not execute until a named person signs the quoted fields.",[217,224,225,228,229,233],{},[178,226,227],{},"On the loop."," The system runs; a human ",[230,231,232],"em",{},"can"," stop it. Intervention is possible. It is not required per action. At work, this may be acceptable for read-only monitoring. It is not a write control.",[217,235,236,239],{},[178,237,238],{},"Theatre."," A checkbox “I understand this is AI,” or a prompt that says “ask the user first,” while the model may still act.",[217,241,242,245,246,251],{},[178,243,244],{},"Effective oversight."," ",[189,247,250],{"href":248,"rel":249},"https://eur-lex.europa.eu/eli/reg/2024/1689/oj",[193],"EU AI law"," Article 14: for higher-risk systems, people must be able to interpret outputs, stay aware that automation can lull them, and interrupt the system.",[217,253,254,257],{},[178,255,256],{},"Rubber stamp."," A gate that fires so often people auto-click. That is not oversight. It is fatigue.",[217,259,260,263],{},[178,261,262],{},"Named signer."," Identity bound to the decision. Shared inboxes destroy this.",[217,265,266,269],{},[178,267,268],{},"Quote / payload."," The exact change in the language of the live system — opportunity fields, journal lines, email body — not a wall of prompt text.",[217,271,272,275,276,181],{},[178,273,274],{},"Fail-closed."," Missing approval means nothing happens. See ",[189,277,279],{"href":278},"what-is-write-back-governance","What is write-back governance",[217,281,282,285],{},[178,283,284],{},"Maker-checker."," An older control: one person proposes, another authorises. HITL for AI is that instinct when the proposer is a model.",[174,287,288,293],{},[189,289,292],{"href":290,"rel":291},"https://www.reuters.com/legal/new-york-lawyers-sanctioned-using-fake-chatgpt-cases-legal-brief-2023-06-22/",[193],"Mata v. Avianca"," is the cousin case on the legal side: fluent fiction entered a court record because no working check caught invented citations. The loop failed before filing, not after.",[209,295,297],{"id":296},"why-you-should-care","Why you should care",[174,299,300],{},"Enterprise buyers should demand a person at the gate for writes to live business systems and for customer-facing commitments. They may accept “on the loop” for read-only monitoring. They should reject theatre.",[174,302,303],{},"It affects you if AI can:",[214,305,306,309,312],{},[217,307,308],{},"change records or money",[217,310,311],{},"send a customer a message that asserts a policy, price, or term",[217,313,314],{},"affect employment, credit, or people’s rights",[174,316,317,318,321],{},"Place people where ",[178,319,320],{},"risk and reversibility"," change: before writes, before external messages, and at exception thresholds (amount, region, data class).",[174,323,324,325,328],{},"Do ",[178,326,327],{},"not"," put humans on every sentence. A gate that fires fifty times a day will be auto-clicked.",[174,330,331,332,335],{},"The person who already owns that class of change in the analogue process should sign it here. Inventing an “AI champion” who approves finance journals ",[230,333,334],{},"and"," legal emails is how you get a rubber stamp.",[174,337,338],{},"Show the change in the language of the live system. A person cannot oversee what they cannot parse.",[340,341,343],"h3",{"id":342},"what-changes-by-role","What changes by role",[174,345,346,349],{},[178,347,348],{},"Finance."," Journals, forecast overrides, and material fields need the same owner who would sign in the analogue close. A champion who does not own the ledger will click through. Rejects are success: they prove the gate. A six-month zero reject rate is a finding.",[174,351,352,355],{},[178,353,354],{},"Legal."," Customer commitments and filings need a signer who can interpret the payload. Air Canada is customer-facing fiction. Mata v. Avianca is professional fiction entering a record. Legal should also refuse “Act compliant” claims that rest only on a button. Article 14 is a bundle of duties, not a widget.",[174,357,358,361,362,366],{},[178,359,360],{},"Operations."," Place gates at reversibility boundaries. Ops should measure time-to-approved-write and reject rate, and should treat human wait as a first-class ",[189,363,365],{"href":364},"what-is-an-agentic-workflow","workflow"," step, not a Slack nudge.",[174,368,369,372],{},[178,370,371],{},"Go-to-market."," Friction is real. The honest comparison is unreviewed mutation versus incident response, not versus a demo that writes instantly. GTM should not be asked to approve legal emails, and legal should not be asked to approve Amount.",[174,374,375,378,379,382,383,386],{},[178,376,377],{},"Security."," The gate must be unskippable by the model, including after prompt injection. A jailbreak can trick the model into ",[230,380,381],{},"requesting"," a bad write. It should not be able to ",[230,384,385],{},"execute"," without a quote and a signer. Identity binding matters: a generic “approve” in a shared inbox is not a control.",[340,388,390],{"id":389},"what-people-get-wrong","What people get wrong",[174,392,393,396],{},[178,394,395],{},"On the loop as in the loop."," A kill switch is not a per-action signer.",[174,398,399,401],{},[178,400,238],{}," Footers, checkboxes, and “shall I proceed?” in unbound chat.",[174,403,404,407],{},[178,405,406],{},"Too many gates."," Fatigue produces rubber stamps. Fewer gates, better quotes.",[174,409,410,413],{},[178,411,412],{},"Wrong human."," Whoever is online, or an AI champion spanning domains.",[174,415,416,419],{},[178,417,418],{},"Chat as the quote."," Prompt text is not field-level change.",[174,421,422,425],{},[178,423,424],{},"HITL as sufficient for the EU AI Act."," Oversight is necessary, not sufficient, for higher-risk systems.",[174,427,428,429,433],{},"Good looks like: read-only analysis without a click per sentence; quoted writes; named roles; fail-closed execution; rejects stored on the ",[189,430,432],{"href":431},"what-is-a-lifecycle-graph","lifecycle graph","; metrics on reject rates. Failure looks like a prompt, a footer, and a customer who relied on the bot.",[174,435,436,437,440,441,445],{},"The person should sit at ",[178,438,439],{},"release",", not at every internal hand-off between ",[189,442,444],{"href":443},"what-is-multi-agent-ai","agent teams",". Internal critics can reduce garbage. They are not the signer.",[174,447,448,449,452,453,455,456,460],{},"Adjacent ideas are easy to mix. ",[189,450,451],{"href":278},"Write-back governance"," is the fail-closed property of the write. HITL is the human act that satisfies it. A ",[189,454,432],{"href":431}," is how you prove the act later. A ",[189,457,459],{"href":458},"what-is-an-ai-workstream","workstream"," is whose job the gate belongs to. None of those is a footer on a chatbot.",[174,462,463],{},"Fatigue is the operational enemy. If every sentence needs a click, people will click. If only irreversible steps need a click, people can still read. Design the quote so a finance owner can say yes or no in the language of the journal, and a legal owner can say yes or no in the language of the email body. Mixed payloads produce mixed, tired humans.",[209,465,467],{"id":466},"how-this-shows-up-in-nimbus","How this shows up in Nimbus",[174,469,470],{},"Read-only connectors mean the loop can analyse without a human per sentence.",[174,472,473,474,477],{},"When a write is proposed, governance ",[178,475,476],{},"quotes"," it and stops. Named roles must sign. Agent teams can draft. They cannot waive the gate. Missing approval is fail-closed.",[174,479,480,481,483],{},"The ",[189,482,23],{"href":431}," stores the human act: who signed, what they saw, what happened next — including rejects. Perception can list rejected items.",[174,485,486,487,489,490,181],{},"See ",[189,488,39],{"href":40},". Companion: ",[189,491,279],{"href":278},[209,493,495],{"id":494},"questions-people-actually-ask","Questions people actually ask",[340,497,499],{"id":498},"isnt-this-just-slower-ai","Isn’t this just slower AI?",[174,501,502],{},"It is slower than ungoverned writes and faster than incident response. Invented policy is cheaper to catch in a quote than in a tribunal.",[340,504,506],{"id":505},"who-should-be-the-human","Who should be the human?",[174,508,509],{},"The owner of the live-system change or the customer commitment, not “whoever is online.” Shared inboxes destroy accountability.",[340,511,513],{"id":512},"does-a-person-at-the-gate-satisfy-eu-ai-law-by-itself","Does a person-at-the-gate satisfy EU AI law by itself?",[174,515,516],{},"No. Higher-risk systems have a bundle of duties. Oversight is necessary, not sufficient. Do not claim “Act compliant” because you have a button.",[340,518,520],{"id":519},"how-do-we-stop-rubber-stamping","How do we stop rubber-stamping?",[174,522,523],{},"Fewer gates, better quotes, metrics on reject rates. A six-month zero reject rate on CRM writes is a finding: either you are perfect, or nobody is reading.",[340,525,527],{"id":526},"is-a-chat-saying-shall-i-proceed-enough","Is a chat saying “shall I proceed?” enough?",[174,529,530],{},"Only if it is bound to identity, shows the payload, and cannot be skipped.",[340,532,534],{"id":533},"what-is-the-difference-between-in-the-loop-and-on-the-loop","What is the difference between in the loop and on the loop?",[174,536,537,538,541],{},"In the loop: the job cannot finish the risky step without a human act. On the loop: a human ",[230,539,540],{},"may"," intervene. Vendors blur them because the second is cheaper to ship.",[340,543,545],{"id":544},"can-agent-teams-approve-each-others-work","Can agent teams approve each other’s work?",[174,547,548,549,181],{},"They can criticise drafts. Release still needs a named human. Multi-agent review is not a signer. See ",[189,550,551],{"href":443},"What is multi-agent AI",[340,553,555],{"id":554},"do-read-only-jobs-need-a-person-every-time","Do read-only jobs need a person every time?",[174,557,558],{},"Usually not. That is the point of connectors defaulting to read-only. Put people where reversibility changes.",[340,560,562],{"id":561},"how-does-this-relate-to-air-canada","How does this relate to Air Canada?",[174,564,565],{},"A customer-facing chatbot made a commitment with no working human catch. The tribunal did not treat the bot as a separate legal person. If your loop can send or display a policy, price, or term, you need a gate or you own the fiction.",[340,567,569],{"id":568},"what-about-mata-v-avianca","What about Mata v. Avianca?",[174,571,572],{},"Lawyers filed invented case law from ChatGPT. The failure was the missing check before the record changed. The same pattern waits in CRM and ERP.",[340,574,576],{"id":575},"can-we-batch-approve-200-records","Can we batch-approve 200 records?",[174,578,579],{},"Not as one click with no visible set. Bulk without inspection is a rubber stamp with worse radius. Show the set.",[340,581,583],{"id":582},"does-logging-approvals-in-slack-count","Does logging approvals in Slack count?",[174,585,586],{},"Only if identity, payload, and outcome are bound and retained as a control record. A thumbs-up emoji is theatre.",[209,588,590],{"id":589},"related-reading","Related reading",[174,592,593,597,598,600,601,603],{},[189,594,596],{"href":595},"what-is-ai-governance","What is AI governance"," and ",[189,599,551],{"href":443}," — the person should sit at ",[178,602,439],{},", not at every internal hand-off.",[209,605,607],{"id":606},"sources","Sources",[214,609,610,616,622,628],{},[217,611,612],{},[189,613,615],{"href":191,"rel":614},[193],"CBC, Air Canada chatbot lawsuit",[217,617,618],{},[189,619,621],{"href":198,"rel":620},[193],"Civil Resolution Tribunal, Moffatt v. Air Canada",[217,623,624],{},[189,625,627],{"href":248,"rel":626},[193],"EU AI Act (Regulation 2024/1689), including Article 14",[217,629,630],{},[189,631,633],{"href":290,"rel":632},[193],"Reuters, New York lawyers sanctioned for ChatGPT fake cases",{"title":155,"searchDepth":156,"depth":156,"links":635},[636,637,642,643,657,658],{"id":211,"depth":156,"text":212},{"id":296,"depth":156,"text":297,"children":638},[639,641],{"id":342,"depth":640,"text":343},3,{"id":389,"depth":640,"text":390},{"id":466,"depth":156,"text":467},{"id":494,"depth":156,"text":495,"children":644},[645,646,647,648,649,650,651,652,653,654,655,656],{"id":498,"depth":640,"text":499},{"id":505,"depth":640,"text":506},{"id":512,"depth":640,"text":513},{"id":519,"depth":640,"text":520},{"id":526,"depth":640,"text":527},{"id":533,"depth":640,"text":534},{"id":544,"depth":640,"text":545},{"id":554,"depth":640,"text":555},{"id":561,"depth":640,"text":562},{"id":568,"depth":640,"text":569},{"id":575,"depth":640,"text":576},{"id":582,"depth":640,"text":583},{"id":589,"depth":156,"text":590},{"id":606,"depth":156,"text":607},"2026-08-17","Human-in-the-loop AI means a person must approve before the AI can finish the job — seeing the exact change, signing with their identity, and leaving a record.","/blog/what-is-human-in-the-loop-ai",{"title":165,"description":660},"explainer","blog/what-is-human-in-the-loop-ai",[663,666,667,668],"human-in-the-loop","governance","approvals","8xJuZYtNYOnCYCsxxbZqk340T6yMdyoPDYPvvIta_v8",{"hero":671,"id":673,"title":674,"archived":149,"authors":150,"badge":150,"body":675,"date":150,"department":150,"description":679,"extension":158,"eyebrow":680,"faqHeader":150,"faqs":150,"footerBand":681,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":60,"relatedHeading":687,"seo":688,"series":150,"sitemap":115,"status":150,"stem":689,"subhead":150,"tags":150,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":690},{"filename":672},"u2221455217_Flat_design_of_a_futuristic_minimalist_landscape__5d589295-cdea-4ea9-a262-be766881accf_1.png","content/blog/index.md","Exploring the future of intelligence.",{"type":152,"value":676,"toc":677},[],{"title":155,"searchDepth":156,"depth":156,"links":678},[],"Deep dives into pre-cognitive intelligence, sentient enterprises, and the evolving landscape of AI-driven business transformation.","Latest Research",{"headline":682,"description":683,"primaryLabel":684,"primaryTo":685,"secondaryLabel":686,"secondaryTo":12},"Stay at the frontier.","Subscribe for product updates and new insights.","Subscribe","/newsletter","Explore the platform","More research",{"title":674,"description":679},"blog/index","eK1RCXdDW8nfLSyKRXGB1mJm9FAmhAO6GWXwNKOMNVE",[692,1154],{"id":693,"title":694,"archived":149,"authors":695,"badge":697,"body":698,"date":659,"department":150,"description":1145,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":150,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":1146,"relatedHeading":150,"seo":1147,"series":663,"sitemap":115,"status":150,"stem":1148,"subhead":150,"tags":1149,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":1153},"content/blog/what-is-institutional-memory-in-enterprise-ai.md","What is Institutional Memory in Enterprise AI",[696],{"name":168,"to":120},{"label":170},{"type":152,"value":699,"toc":1121},[700,703,706,709,718,720,723,778,781,784,810,817,819,822,825,845,848,850,859,870,875,880,889,891,897,903,909,919,925,931,934,955,968,971,973,976,982,998,1000,1004,1007,1011,1014,1018,1023,1027,1030,1034,1040,1044,1047,1051,1054,1058,1061,1065,1068,1072,1075,1079,1082,1086,1089,1091,1100,1102],[174,701,702],{},"Institutional memory is what the company still knows after the person who did the work leaves — after the chat vendor changes, after the model version rolls.",[174,704,705],{},"Individual memory is a hallway conversation and a personal ChatGPT thread. Company memory is playbooks, signed decisions, and live systems, with access control.",[174,707,708],{},"Organisations have always had memory: filing cabinets, shared drives, ERP history, “ask the person who was here last year.” Generative AI created a new amnesia: high-value reasoning happens in disposable threads, on personal accounts, in tools with the wrong retention, or in a vendor’s silo the company cannot query.",[174,710,711,712,717],{},"This is an evidence topic, not a nostalgia topic. Financial reporting changes have needed reconstructable authorisation for decades. Records-management programmes ask for metadata and assigned responsibility. None of those regimes is satisfied by a personal chat thread the predecessor took with them. ",[189,713,716],{"href":714,"rel":715},"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/",[193],"UK ICO guidance on AI and data protection"," still wants purpose and retention thinking when the “user” is a model.",[209,719,212],{"id":211},[174,721,722],{},"Keep four kinds of memory separate on purpose:",[214,724,725,740,750,763],{},[217,726,727,730,731,734,735,739],{},[178,728,729],{},"Asserted policy."," What we ",[230,732,733],{},"want"," to be true: playbooks, guardrails, approved language. See ",[189,736,738],{"href":737},"what-is-a-company-wiki-for-ai-agents","What is a company wiki for AI agents",". At work, this is the current discount floor, not last year’s slide.",[217,741,742,745,746,749],{},[178,743,744],{},"Systems of record."," What ",[230,747,748],{},"is"," true in operations: CRM, ERP, HR, the warehouse. These are memory of the business, not of AI work. At work, the opportunity Amount is here. The reason it changed may not be.",[217,751,752,755,756,759,760,762],{},[178,753,754],{},"Decision memory."," Why we ",[230,757,758],{},"changed"," something with AI in the loop: briefs, approvals, rejected options, source versions. A ",[189,761,432],{"href":431},". At work, this is “who signed this exception, against which playbook version.”",[217,764,765,768,769,772,773,777],{},[178,766,767],{},"Retrieved knowledge."," Documents we ",[230,770,771],{},"might"," use. That is ",[189,774,776],{"href":775},"what-is-enterprise-rag","enterprise RAG",". Lookup without policy and decisions is a search engine, not memory.",[174,779,780],{},"If you collapse all four into “one vector store” — a database of text fingerprints used to find similar documents — you get sludge that cannot tell policy from a brainstorm. You also get a new store of sensitive data.",[174,782,783],{},"Other terms:",[214,785,786,792,798,804],{},[217,787,788,791],{},[178,789,790],{},"Hallway knowledge."," The unofficial version of the rule. It leaves with people. Agents will invent a cousin if it is not asserted.",[217,793,794,797],{},[178,795,796],{},"Provider logs."," The vendor’s artefact. Not scoped to your jobs, not your access-controlled ledger.",[217,799,800,803],{},[178,801,802],{},"Retention."," How long a class of record is kept. Completeness is reconstructability, not hoarding.",[217,805,806,809],{},[178,807,808],{},"Perception."," Asking that memory in ordinary language, with permissions still applied.",[174,811,812,816],{},[189,813,815],{"href":814},"what-is-causal-ai-for-operations","Causal operations"," is the “why did this change?” slice of decision memory. It is not a claim about market lift.",[209,818,297],{"id":296},[174,820,821],{},"It affects you the first Monday after someone leaves, and the first time an auditor asks “why is this exception in the CRM when the playbook still says otherwise?”",[174,823,824],{},"Three verbs:",[214,826,827,833,839],{},[217,828,829,832],{},[178,830,831],{},"Assert."," Put the rule into a controlled surface. If it only lives in a slide, agents will invent a cousin.",[217,834,835,838],{},[178,836,837],{},"Record."," Store the decision chain when AI is in the loop — not every token, the links that let you reconstruct a change.",[217,840,841,844],{},[178,842,843],{},"Ask."," Let the next operator query that memory in ordinary language, with permissions still applied.",[174,846,847],{},"Causal operations questions (“why did this change?”) need decision memory. Remember outcomes, quotes, approvals, and citations — not every failed token. Wiki needs owners; memory without freshness is last year’s discount floor.",[340,849,343],{"id":342},[174,851,852,854,855,181],{},[178,853,348],{}," Close packs inherit exceptions. Finance needs the playbook version and the signer, not a rumour that “we always accrue this way.” Provider ChatGPT exports are not a SOX-style trail. Spend history also belongs in memory: which job consumed the units, which run stopped on a cap. See ",[189,856,858],{"href":857},"what-is-ai-token-economics","What is AI token economics",[174,860,861,863,864,869],{},[178,862,354],{}," Discovery, customer commitments, and erasure. Legal should insist that decision memory points at systems of record rather than duplicating them, and that retention is typed. Infinite chat fails a privacy review. ",[189,865,868],{"href":866,"rel":867},"https://eur-lex.europa.eu/eli/reg/2016/679/oj",[193],"GDPR"," erasure is harder if you indexed everything into sludge.",[174,871,872,874],{},[178,873,360],{}," Handoffs. The next shift should query “why did this pause?” without reconstructing Slack. Ops should refuse a design that stores every token “because AI” and then cannot delete it.",[174,876,877,879],{},[178,878,371],{}," Win/loss reasons and discount exceptions walk out the door with account owners. GTM should put asserted playbooks in the wiki and signed exceptions on the graph — not in a personal Claude project.",[174,881,882,884,885,181],{},[178,883,377],{}," Memory is a sensitive store. Access control on the graph and wiki is as important as on the CRM. Shadow AI is amnesia by design: the work happened on an account the company cannot query. See ",[189,886,888],{"href":887},"what-is-shadow-ai","What is shadow AI",[340,890,390],{"id":389},[174,892,893,896],{},[178,894,895],{},"CRM as sufficient memory."," CRM remembers the current field. It does not remember which playbook version, which AI run, or which person signed the exception.",[174,898,899,902],{},[178,900,901],{},"Exporting ChatGPT threads."," Vendor artefact. Wrong scope. Wrong access control.",[174,904,905,908],{},[178,906,907],{},"One vector store for everything."," Policy, brainstorms, tickets, and decisions become an undifferentiated similarity soup.",[174,910,911,914,915,918],{},[178,912,913],{},"A business knowledge graph as a substitute."," That graph models customers and products. Institutional memory for AI work models ",[178,916,917],{},"what we did with models"," — and why.",[174,920,921,924],{},[178,922,923],{},"Keeping everything forever."," Hoarding is not completeness. It is a privacy and cost failure.",[174,926,927,930],{},[178,928,929],{},"Remembering every token."," Reconstruct the change. Do not archive the model’s scratch reasoning by default.",[174,932,933],{},"Good looks like four layers kept apart, owners on wiki pages, a lifecycle graph of decisions, permissions on ask, typed retention, and pointers to live systems. Failure looks like a personal thread, a vendor log, and a vector lake.",[174,935,936,937,939,940,943,944,946,947,950,951,954],{},"Adjacent concepts: ",[189,938,776],{"href":775}," is lookup, not memory of what we decided. A ",[189,941,942],{"href":737},"company wiki"," is asserted policy, which goes stale without owners. A ",[189,945,432],{"href":431}," is decision memory of AI-mediated work. ",[189,948,949],{"href":814},"Causal AI for operations"," is the “why did this change?” question that memory should be able to answer. ",[189,952,953],{"href":887},"Shadow AI"," is how memory never starts.",[174,956,957,958,961,962,967],{},"Do not confuse this with a second CRM. Point at the opportunity; do not copy the pipeline. Copies become conflicting official numbers and an erasure problem under ",[189,959,868],{"href":866,"rel":960},[193],". The ",[189,963,966],{"href":964,"rel":965},"https://www.w3.org/TR/prov-overview/",[193],"W3C PROV"," idea — entities, activities, agents — is the right instinct for the decision layer: enough structure to reconstruct, not a lake of tokens.",[174,969,970],{},"A Monday-morning test is enough. Can the next operator, with the right permissions, find the playbook version, the signed exception, and the live field — without the predecessor’s laptop? If the answer depends on a personal chat vendor, you do not have institutional memory. You have a coincidence that the person has not left yet.",[209,972,467],{"id":466},[174,974,975],{},"Nimbus combines wiki (asserted policy), connectors (systems of record), the Lifecycle Graph (decision memory), Perception (ask), and workstream scoping (who may see what).",[174,977,978,979,981],{},"Connectors default to read-only, so analysis can be remembered as ",[230,980,327],{}," having written. Named signers and fail-closed writes make refusals part of memory, not missing events.",[174,983,984,985,987,988,991,992,995,996,181],{},"Product: ",[189,986,23],{"href":24},", ",[189,989,990],{"href":28},"Wiki",", and ",[189,993,994],{"href":36},"Perception",". The job boundary is a ",[189,997,459],{"href":458},[209,999,495],{"id":494},[340,1001,1003],{"id":1002},"isnt-crm-already-our-memory","Isn’t CRM already our memory?",[174,1005,1006],{},"CRM remembers the current field. It does not remember which playbook version, which AI run, or which person signed the exception.",[340,1008,1010],{"id":1009},"can-we-just-export-chatgpt-threads","Can we just export ChatGPT threads?",[174,1012,1013],{},"Provider logs are the vendor’s artefact. They are not scoped to your jobs, and they are not your access-controlled ledger.",[340,1015,1017],{"id":1016},"how-is-this-different-from-a-knowledge-graph-of-customers-and-products","How is this different from a knowledge graph of customers and products?",[174,1019,1020,1021,918],{},"That graph models the business domain. Institutional memory for AI work models ",[178,1022,917],{},[340,1024,1026],{"id":1025},"does-this-mean-storing-everything-forever","Does this mean storing everything forever?",[174,1028,1029],{},"No. Retention follows the type of record. Completeness is reconstructability, not hoarding.",[340,1031,1033],{"id":1032},"how-is-this-different-from-enterprise-rag","How is this different from enterprise RAG?",[174,1035,1036,1037,181],{},"RAG retrieves what exists. Memory of work is what we asserted, what we decided, and what the live system holds. Retrieval without those layers is search. See ",[189,1038,1039],{"href":775},"What is enterprise RAG",[340,1041,1043],{"id":1042},"what-should-we-remember-from-a-run","What should we remember from a run?",[174,1045,1046],{},"The brief, sources (including wiki version), quoted payload, named signer, live-system result, and spend stop if any. Not every failed token, and not secrets in transcripts by default.",[340,1048,1050],{"id":1049},"how-do-we-stop-last-years-policy-living-forever","How do we stop last year’s policy living forever?",[174,1052,1053],{},"Owners and review cadence on the wiki. Archives must not win retrieval against current policy. Freshness is part of memory, not a nice-to-have.",[340,1055,1057],{"id":1056},"can-perception-see-other-departments-decisions","Can Perception see other departments’ decisions?",[174,1059,1060],{},"Only with the same least privilege as the workstream. A go-to-market question should not surface People Ops briefs.",[340,1062,1064],{"id":1063},"is-hallway-knowledge-always-bad","Is hallway knowledge always bad?",[174,1066,1067],{},"It is how work actually happens until you assert it. The failure is leaving it only in hallways once agents are in the loop.",[340,1069,1071],{"id":1070},"how-does-switching-model-vendors-affect-memory","How does switching model vendors affect memory?",[174,1073,1074],{},"If memory lived in the vendor’s chat product, you lost it. If it lived in your wiki, graph, and systems of record, you kept it. That is a buying criterion.",[340,1076,1078],{"id":1077},"where-does-shadow-ai-fit","Where does shadow AI fit?",[174,1080,1081],{},"Personal accounts are institutional amnesia: the company cannot assert, record, or ask. Substitution onto a governed path is how memory starts.",[340,1083,1085],{"id":1084},"do-we-need-a-data-team-to-ask-the-memory","Do we need a data team to ask the memory?",[174,1087,1088],{},"Not if the product has an ordinary-language query surface over the graph and wiki, with permissions. That is Perception in Nimbus. A data team is still right for warehouse metrics.",[209,1090,590],{"id":589},[174,1092,1093,987,1096,991,1098,181],{},[189,1094,1095],{"href":431},"What is a lifecycle graph",[189,1097,1039],{"href":775},[189,1099,738],{"href":737},[209,1101,607],{"id":606},[214,1103,1104,1110,1115],{},[217,1105,1106],{},[189,1107,1109],{"href":714,"rel":1108},[193],"ICO, AI and data protection",[217,1111,1112],{},[189,1113,868],{"href":866,"rel":1114},[193],[217,1116,1117],{},[189,1118,1120],{"href":964,"rel":1119},[193],"W3C PROV overview",{"title":155,"searchDepth":156,"depth":156,"links":1122},[1123,1124,1128,1129,1143,1144],{"id":211,"depth":156,"text":212},{"id":296,"depth":156,"text":297,"children":1125},[1126,1127],{"id":342,"depth":640,"text":343},{"id":389,"depth":640,"text":390},{"id":466,"depth":156,"text":467},{"id":494,"depth":156,"text":495,"children":1130},[1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142],{"id":1002,"depth":640,"text":1003},{"id":1009,"depth":640,"text":1010},{"id":1016,"depth":640,"text":1017},{"id":1025,"depth":640,"text":1026},{"id":1032,"depth":640,"text":1033},{"id":1042,"depth":640,"text":1043},{"id":1049,"depth":640,"text":1050},{"id":1056,"depth":640,"text":1057},{"id":1063,"depth":640,"text":1064},{"id":1070,"depth":640,"text":1071},{"id":1077,"depth":640,"text":1078},{"id":1084,"depth":640,"text":1085},{"id":589,"depth":156,"text":590},{"id":606,"depth":156,"text":607},"Institutional memory is what the company still knows after the person who did the work leaves: official playbooks, signed decisions, and live systems — with access control.","/blog/what-is-institutional-memory-in-enterprise-ai",{"title":694,"description":1145},"blog/what-is-institutional-memory-in-enterprise-ai",[663,1150,1151,1152],"institutional-memory","lifecycle-graph","wiki","QKskx6GjKfWSaN9E9kbMHU2XCu29nlgWTKO656jg8aI",{"id":1155,"title":1156,"archived":149,"authors":1157,"badge":1159,"body":1160,"date":659,"department":150,"description":1613,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":150,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":1614,"relatedHeading":150,"seo":1615,"series":663,"sitemap":115,"status":150,"stem":1616,"subhead":150,"tags":1617,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":1621},"content/blog/what-is-enterprise-rag.md","What is Enterprise RAG",[1158],{"name":168,"to":120},{"label":170},{"type":152,"value":1161,"toc":1589},[1162,1172,1181,1191,1198,1201,1203,1267,1274,1276,1279,1282,1307,1314,1316,1321,1326,1331,1336,1346,1348,1354,1364,1370,1376,1382,1388,1394,1400,1402,1414,1421,1429,1431,1435,1438,1442,1445,1449,1460,1464,1467,1471,1476,1480,1488,1492,1495,1499,1507,1511,1522,1526,1529,1533,1541,1545,1551,1553,1560,1562],[174,1163,1164,1165,1168,1169,181],{},"RAG stands for ",[178,1166,1167],{},"retrieval-augmented generation",". In plain language: ",[178,1170,1171],{},"look up, then answer",[174,1173,1174,1175,1180],{},"The model does not rely only on what it was trained on. It first fetches supporting documents from a company corpus, then writes the answer using those documents. The original research paper is ",[189,1176,1179],{"href":1177,"rel":1178},"https://arxiv.org/abs/2005.11401",[193],"Lewis et al., Retrieval-Augmented Generation (2020)",". The idea is older than ChatGPT: give the generator evidence at question time so it is less likely to invent.",[174,1182,1183,1186,1187,1190],{},[178,1184,1185],{},"Enterprise RAG"," is that move with permissions respected. Search runs as a named person or team, not as an admin crawler of everything. Citations include a document, version, and date. It is how you reduce hallucination on ",[230,1188,1189],{},"company"," facts.",[174,1192,1193,1194,1197],{},"It is not, by itself, an operating system, a write gate, or a memory of decisions. ",[189,1195,868],{"href":866,"rel":1196},[193]," does not pause because the “user” of the files is an AI. Retrieval is still processing personal data.",[174,1199,1200],{},"The demo omitted the hard parts. A laptop search over a folder of PDFs is not enterprise RAG. Neither is a chatbot that sometimes browses the public web. Enterprise lookup has to survive access lists, freshness SLAs, poisoned documents, and the difference between “this file exists” and “this is policy.”",[209,1202,212],{"id":211},[214,1204,1205,1211,1217,1223,1229,1237,1243,1249,1255],{},[217,1206,1207,1210],{},[178,1208,1209],{},"Corpus."," The set of files and records the AI is allowed to search. At work, this should be the job’s corpus, not the company’s entire Drive.",[217,1212,1213,1216],{},[178,1214,1215],{},"Embedding / vector store."," A numerical fingerprint of text, used to find similar passages. Similarity search fails on invoice IDs and clause numbers unless you also use keywords. At work, “find contract 88421” is a keyword problem pretending to be a semantic one.",[217,1218,1219,1222],{},[178,1220,1221],{},"Citation."," A clickable source Legal can check — not “according to our documents.” At work, the citation needs a version and a date, or it is a vibe.",[217,1224,1225,1228],{},[178,1226,1227],{},"Hallucination."," Fluent invention. RAG reduces it on company facts. It does not eliminate it, and it does not stop an ungoverned write.",[217,1230,1231,1233,1234,1236],{},[178,1232,729],{}," What the company currently wants. That belongs in a ",[189,1235,942],{"href":737},", not in whichever PDF sounded closest.",[217,1238,1239,1242],{},[178,1240,1241],{},"Chunking."," Splitting files so search can retrieve a passage. Bad chunking is how a table’s header parts company from its numbers.",[217,1244,1245,1248],{},[178,1246,1247],{},"Freshness."," When the index sees a change. At work, “we changed the vendor template yesterday” is an SLA question.",[217,1250,1251,1254],{},[178,1252,1253],{},"Permission-aware search."," The retriever sees what the user (or the job) may see. A superuser crawler is not enterprise; it is a new data store.",[217,1256,1257,1260,1261,1266],{},[178,1258,1259],{},"Prompt injection via documents."," Retrieved text that instructs the model to ignore policy. The ",[189,1262,1265],{"href":1263,"rel":1264},"https://genai.owasp.org/llm-top-10/",[193],"OWASP Top 10 for LLM applications"," treats that as a security surface.",[174,1268,1269,1270,181],{},"What enterprise RAG is not: a chatbot that sometimes browses the public web; a dump of all tickets into a vector database; a replacement for official playbooks; or permission-aware search sold as a work OS. Search that respects permissions is still search. It does not gate a write. See ",[189,1271,1273],{"href":1272},"/blog/nimbus-vs-glean","Nimbus vs Glean",[209,1275,297],{"id":296},[174,1277,1278],{},"It affects you if answers about policy, customers, or finance will be trusted — and if those answers later need a source you can click.",[174,1280,1281],{},"Enterprise lookup adds:",[214,1283,1284,1290,1295,1301],{},[217,1285,1286,1289],{},[178,1287,1288],{},"Permissions."," SharePoint, Salesforce, and Drive access lists still apply.",[217,1291,1292,1294],{},[178,1293,1247],{}," If the index updates on Sundays, your SLA is weekly.",[217,1296,1297,1300],{},[178,1298,1299],{},"Poisoned documents."," Retrieved text can instruct the model to ignore policy.",[217,1302,1303,1306],{},[178,1304,1305],{},"Purpose."," Indexing everything “just in case” is a privacy and quality problem.",[174,1308,1309,1310,1313],{},"Treat RAG as ",[178,1311,1312],{},"infrastructure with an SLA",", not as a magic brain. Separate asserted versus retrieved. Scope retrieval to the job. Demand citations. Assign owners the way you would for a search service. GDPR erasure is harder if you forgot the index.",[340,1315,343],{"id":342},[174,1317,1318,1320],{},[178,1319,348],{}," Retrieval of last year’s close pack is not the close checklist. Numbers in retrieved slides go stale. Finance should insist that thresholds live in asserted wiki tables, and that RAG citations are dated. A fluent answer about recognition policy without a clickable source is not usable in a close.",[174,1322,1323,1325],{},[178,1324,354],{}," Citations are the point. “According to our documents” is not reviewable. Legal also owns the processing question: indexing HR files into a shared vector store is a new copy of personal data. Erasure requests have to hit the index, not only the source system.",[174,1327,1328,1330],{},[178,1329,360],{}," Freshness and owners. Ops should treat the retriever like any other search service: uptime, lag, and who gets paged when the wrong SOP is served. Chunking errors show up as “the agent missed the table.”",[174,1332,1333,1335],{},[178,1334,371],{}," Competitive decks and old playbooks are semantically close to this quarter’s question. Without a conflict rule that wiki wins, GTM will ship last year’s discount floor because it matched the query. RAG without assertion is folklore with better ranking.",[174,1337,1338,1340,1341,1345],{},[178,1339,377],{}," Superuser crawlers, poisoned documents, and a second store of sensitive text. Security should ask who the retriever authenticates as, whether ",[189,1342,1344],{"href":1343},"what-is-model-context-protocol","MCP"," helpers search as a superuser, and whether prompt injection in a PDF can change tool behaviour. Network search products are not write gates.",[340,1347,390],{"id":389},[174,1349,1350,1353],{},[178,1351,1352],{},"Indexing everything."," Quality falls. Privacy rises. Purpose disappears.",[174,1355,1356,1359,1360,181],{},[178,1357,1358],{},"RAG as an OS."," Lookup does not isolate jobs, quote writes, or store decisions. See ",[189,1361,1363],{"href":1362},"what-is-an-enterprise-ai-operating-system","What is an enterprise AI operating system",[174,1365,1366,1369],{},[178,1367,1368],{},"RAG as the wiki."," Retrieved files are what exists. The wiki is what is in force.",[174,1371,1372,1375],{},[178,1373,1374],{},"Citations without versions."," Legal cannot check “the wiki” or “our Drive.”",[174,1377,1378,1381],{},[178,1379,1380],{},"Warehouse SQL as a substitute."," “What is our revenue recognition policy?” is retrieval. “What was Q4 revenue by region?” is structured query. Many jobs need both.",[174,1383,1384,1387],{},[178,1385,1386],{},"Assuming hallucination is solved."," Missing files still produce fluent guesses. Ungoverned writes still land.",[174,1389,1390,1391,1393],{},"Good looks like: permission-aware retrieval scoped to the ",[189,1392,459],{"href":458},", hybrid keyword plus similarity, dated citations, a wiki conflict rule, an index SLA, and a write gate that does not care how good the retrieval was. Failure looks like a tenant-wide vector lake labelled “the brain.”",[174,1395,1396,1397,1399],{},"Lewis et al. (2020) showed that lookup-then-answer reduces invention on facts in the corpus. Enterprise buyers still have to decide which corpus, whose permissions, and whether a retrieved PDF is allowed to outrank the ",[189,1398,1152],{"href":737},". The paper does not answer those questions. Your runtime must.",[209,1401,467],{"id":466},[174,1403,1404,1405,1408,1409,1413],{},"Nimbus uses RAG-like retrieval ",[178,1406,1407],{},"inside"," a work OS, not as a standalone search SKU. Wiki is asserted policy. Connectors supply live context. Workstreams pre-scope the corpus. Governance still gates any write. The Lifecycle Graph stores which sources were used for a decision — retrieval becomes part of ",[189,1410,1412],{"href":1411},"what-is-institutional-memory-in-enterprise-ai","institutional memory",", not a forgotten context window.",[174,1415,1416,1417,1420],{},"A common plug so AI apps can use the same tools — ",[189,1418,1419],{"href":1343},"Model Context Protocol"," — can standardise access to repositories. It does not implement access lists for you. A tool that searches Drive as a superuser is still a superuser.",[174,1422,486,1423,987,1425,991,1427,181],{},[189,1424,990],{"href":28},[189,1426,31],{"href":32},[189,1428,39],{"href":40},[209,1430,495],{"id":494},[340,1432,1434],{"id":1433},"will-rag-stop-the-model-making-things-up","Will RAG stop the model making things up?",[174,1436,1437],{},"It reduces invention on facts that exist in authorised files. It does not make the model honest about missing files, and it does not replace a person on a live-system change.",[340,1439,1441],{"id":1440},"is-indexing-everything-just-in-case-a-good-idea","Is indexing everything “just in case” a good idea?",[174,1443,1444],{},"No. Indexing without a purpose is a privacy and quality problem. Scope the corpus to the job.",[340,1446,1448],{"id":1447},"how-is-this-different-from-a-company-wiki","How is this different from a company wiki?",[174,1450,1451,1452,1455,1456,1459],{},"The wiki is what the company ",[230,1453,1454],{},"wants"," to be true. RAG is what ",[230,1457,1458],{},"exists"," in files. If they conflict, the wiki should win unless a human promotes a change.",[340,1461,1463],{"id":1462},"can-warehouse-sql-replace-rag","Can warehouse SQL replace RAG?",[174,1465,1466],{},"They answer different questions. Policy prose is retrieval. Regional revenue is a query. Many real jobs need both.",[340,1468,1470],{"id":1469},"is-glean-or-similar-an-enterprise-ai-os","Is Glean (or similar) an enterprise AI OS?",[174,1472,1473,1474,181],{},"Permission-aware search is still search. It does not, by itself, quote a CRM write or bind a named signer. See ",[189,1475,1273],{"href":1272},[340,1477,1479],{"id":1478},"why-do-invoice-numbers-fail-in-vector-search","Why do invoice numbers fail in vector search?",[174,1481,1482,1483,1487],{},"Embeddings capture similarity of meaning, not identity of tokens. Hybrid search — keywords plus vectors — is how you find ",[1484,1485,1486],"code",{},"INV-88421"," instead of a semantically nearby invoice.",[340,1489,1491],{"id":1490},"how-fast-should-the-index-update","How fast should the index update?",[174,1493,1494],{},"As fast as the decision you are supporting. If a template changed yesterday and the agent still cites last month, your SLA is wrong. Publish the lag.",[340,1496,1498],{"id":1497},"what-is-document-based-prompt-injection","What is document-based prompt injection?",[174,1500,1501,1502,1506],{},"A retrieved file that says, in effect, “ignore previous instructions.” Treat retrieved text as untrusted input. The ",[189,1503,1505],{"href":1263,"rel":1504},[193],"OWASP LLM list"," is the starting point. A wiki conflict rule and a write gate still matter.",[340,1508,1510],{"id":1509},"does-gdpr-apply-to-the-vector-index","Does GDPR apply to the vector index?",[174,1512,1513,1514,597,1518,181],{},"Yes, if it holds personal data. The index is another copy. Erasure, purpose, and access control apply. See the ",[189,1515,1517],{"href":866,"rel":1516},[193],"GDPR text",[189,1519,1521],{"href":714,"rel":1520},[193],"ICO AI guidance",[340,1523,1525],{"id":1524},"can-mcp-make-retrieval-respect-permissions","Can MCP make retrieval respect permissions?",[174,1527,1528],{},"Only if the helper is built that way. The protocol will happily pass superuser results.",[340,1530,1532],{"id":1531},"should-customer-facing-chatbots-use-rag-on-the-public-website-plus-internal-policy","Should customer-facing chatbots use RAG on the public website plus internal policy?",[174,1534,1535,1536,1540],{},"Internal policy in a customer bot is how invented fares happen unless a human still owns the commitment. Air Canada’s case — ",[189,1537,1539],{"href":191,"rel":1538},[193],"CBC"," — is retrieval-plus-generation without a working gate.",[340,1542,1544],{"id":1543},"how-do-we-know-which-sources-a-decision-used","How do we know which sources a decision used?",[174,1546,1547,1548,1550],{},"Record them on the ",[189,1549,432],{"href":431},". A context window that evaporates is not memory.",[209,1552,590],{"id":589},[174,1554,1555,597,1557,181],{},[189,1556,738],{"href":737},[189,1558,1559],{"href":1411},"What is institutional memory in enterprise AI",[209,1561,607],{"id":606},[214,1563,1564,1569,1574,1579,1584],{},[217,1565,1566],{},[189,1567,1179],{"href":1177,"rel":1568},[193],[217,1570,1571],{},[189,1572,868],{"href":866,"rel":1573},[193],[217,1575,1576],{},[189,1577,1265],{"href":1263,"rel":1578},[193],[217,1580,1581],{},[189,1582,1109],{"href":714,"rel":1583},[193],[217,1585,1586],{},[189,1587,615],{"href":191,"rel":1588},[193],{"title":155,"searchDepth":156,"depth":156,"links":1590},[1591,1592,1596,1597,1611,1612],{"id":211,"depth":156,"text":212},{"id":296,"depth":156,"text":297,"children":1593},[1594,1595],{"id":342,"depth":640,"text":343},{"id":389,"depth":640,"text":390},{"id":466,"depth":156,"text":467},{"id":494,"depth":156,"text":495,"children":1598},[1599,1600,1601,1602,1603,1604,1605,1606,1607,1608,1609,1610],{"id":1433,"depth":640,"text":1434},{"id":1440,"depth":640,"text":1441},{"id":1447,"depth":640,"text":1448},{"id":1462,"depth":640,"text":1463},{"id":1469,"depth":640,"text":1470},{"id":1478,"depth":640,"text":1479},{"id":1490,"depth":640,"text":1491},{"id":1497,"depth":640,"text":1498},{"id":1509,"depth":640,"text":1510},{"id":1524,"depth":640,"text":1525},{"id":1531,"depth":640,"text":1532},{"id":1543,"depth":640,"text":1544},{"id":589,"depth":156,"text":590},{"id":606,"depth":156,"text":607},"Enterprise RAG is looking up authorised company files before the AI answers, with permissions respected — lookup-then-answer, not an operating system.","/blog/what-is-enterprise-rag",{"title":1156,"description":1613},"blog/what-is-enterprise-rag",[663,1618,1619,1620],"rag","retrieval","knowledge","0nzyVDNSVz_C1CRbLIQnUhimJK_EGwW9s_e9H6c8tyo",{"enabled":149,"message":1623,"linkLabel":78,"linkHref":79,"id":1624,"title":1625,"archived":149,"authors":150,"badge":150,"body":1626,"date":150,"department":150,"description":155,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":150,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":1630,"relatedHeading":150,"seo":1631,"series":150,"sitemap":115,"status":150,"stem":1632,"subhead":150,"tags":150,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":1633},"We're hiring! Join the team building the Sentient Enterprise.","content/shared/hiring.md","Hiring banner",{"type":152,"value":1627,"toc":1628},[],{"title":155,"searchDepth":156,"depth":156,"links":1629},[],"/shared/hiring",{"title":1625,"description":155},"shared/hiring","-6bioYD7lKYokGUVU3ff4hHTvB-sDyOMuCptKHnojfk",{"fold":1635,"id":1639,"title":1640,"archived":149,"authors":150,"badge":150,"body":1641,"date":150,"department":150,"description":155,"extension":158,"eyebrow":150,"faqHeader":150,"faqs":150,"footerBand":1645,"headline":150,"image":150,"industry":150,"jobType":150,"listed":149,"location":150,"navigation":115,"openRoles":150,"pageLayout":150,"path":1649,"relatedHeading":150,"seo":1650,"series":150,"sitemap":115,"status":150,"stem":1651,"subhead":150,"tags":150,"video":150,"whyJoin":150,"workplaceType":150,"__hash__":1652},{"headline":1636,"description":1637,"primaryLabel":8,"primaryTo":1638,"secondaryLabel":686,"secondaryTo":12},"Run frontier AI your business actually owns.","Governed agent swarms, 2,000+ integrations, and a knowledge graph that stays inside your walls. Free 7-day trial.","/checkout","content/shared/cta.md","Site CTAs",{"type":152,"value":1642,"toc":1643},[],{"title":155,"searchDepth":156,"depth":156,"links":1644},[],{"headline":1646,"description":1647,"primaryLabel":8,"primaryTo":1638,"secondaryLabel":1648,"secondaryTo":84},"See what governed AI looks like on your stack.","Connect your tools, run a workstream, and keep every decision on your ledger - free for 7 days.","Talk to our team","/shared/cta",{"title":1640,"description":155},"shared/cta","YHK6Fb8AvCPR1zZq7R_xiXUG0hwhP5UxHA8Ix52JQp4",1787194074043]