AI guide
# RAG-Ready Patterns for Data Platforms
## 【One-Line Pitch】
A practical blueprint for evolving traditional enterprise data platforms into AI-ready foundations that can power trustworthy retrieval-augmented generation (RAG) systems—essential reading for data architects, platform engineers, and technical leaders facing the gap between their current data estate and what generative AI actually demands.
## 【Book Arc】
- **Opening (~0%–6%)**: Establishes the core problem—LLMs lack enterprise context and can't consume dashboards or KPIs the way humans do. Introduces the "enterprise context gap" and frames RAG not as an application concern but as a platform capability that must be designed into the data infrastructure itself.
- **Early (~6%–19%)**: Diagnoses why the RAG readiness gap exists: fragmentation across silos, shallow semantics, governance built for reports rather than retrieval, metadata that can't be executed by machines, and quality signals trapped in dashboards. Draws on the authors' experience building Microsoft's IDEAS platform to distill four hard-won lessons about semantics, metadata, trust, and access control.
- **Early (~19%–28%)**: Introduces the three-pillar RAG-readiness framework—Data Assets, Infrastructure, and Trust Layer—with diagnostic checklists. Deep-dives into Pillar 1: the entity kernel approach, where core business entities (User, Tenant, Subscription, Contract, etc.) are made explicit with identifiers, relationships, and privacy tiers across source, conformed, and product layers.
- **Middle (~28%–38%)**: Covers Pillar 2—Infrastructure—through the discipline of metadata-first pipeline engineering. Contracts (YAML/JSON) come before code; pipelines enforce semantics at runtime; quality becomes a service with machine-readable signals. Includes a case study on fixing stale data by embedding freshness as a retrieval-time signal.
- **Middle (~38%–47%)**: Addresses Pillar 3—the Trust Layer—with scenario-based access control (SBAC) as the centerpiece. Explains how purpose-aware retrieval, quality signals in ranking, and auditable citations make answers defensible. Includes a case study on preventing PII leakage at Microsoft by implementing SBAC within a month.
- **Late (~47%–53%)**: Concludes Chapter 1 with a self-assessment framework across all three pillars and a maturity model (Level 1–4) for each. Transitions into Chapter 2, which begins exploring the semantic backbone in depth—how domain vocabulary and entity kernels scale across the enterprise.
## 【Key Takeaways】
- **The enterprise context gap is the fundamental problem** (Opening): LLMs need retrieval and reasoning over raw, connected knowledge, not aggregates and visualizations. Platforms built for dashboards and pre-shaped questions cannot serve open-ended, cross-domain AI queries without deliberate redesign.
- **RAG readiness is diagnosable and measurable** (Early): The three-pillar framework—Data Assets, Infrastructure, Trust Layer—with concrete checklists lets organizations identify specific gaps (⚠️) and critical weaknesses (❌) rather than vaguely feeling "not ready."
- **Semantics must start at the source** (Early): If core entity meanings aren't captured at acquisition and preserved through layered models, "fixing it in the semantic layer" is too late for RAG. The entity kernel—a small set of explicit core entities with identifiers, relationships, and privacy tiers—is the foundation.
- **Metadata must compile, not just document** (Middle): Contracts as code (YAML/JSON) that are linted at PR time and enforced at runtime transform metadata from documentation into executable policy. Pipelines become the first line of governance, and retrieval inherits meaning automatically.
- **Quality is a runtime signal, not a quarterly report** (Middle): Freshness, coverage, anomaly scores, and confidence must be machine-readable and stored alongside indexes so retrieval can filter, rerank, and augment using them. The "yesterday's numbers" case study shows how embedding freshness thresholds at retrieval restored user trust overnight.
- **Purpose beats permission in the RAG era** (Middle): Scenario-based access control (SBAC) explains why access is needed, under what scenario, and with which permissible joins—complementing RBAC/ABAC. The PII incident at Microsoft demonstrates that trust is a feature, not a compliance tax.
- **Maturity models provide a roadmap** (Late): Most organizations sit at Level 1–2 (ad hoc entities, glossary-only semantics, manual governance). Level 3—federated kernel, SBAC, enforced contracts—marks the first real inflection toward production-ready RAG.
## 【Reading Tips】
- **Deep-read Chapter 1's three-pillar framework** (~19%–47%): This is the conceptual core. The checklists and maturity models are worth returning to as self-assessment tools for your own organization.
- **Skim the Microsoft IDEAS case studies** (~19% and ~44%): They're illustrative rather than prescriptive—useful for building a business case, but the patterns themselves matter more than the specific anecdotes.
- **Pay close attention to the entity kernel section** (~28%): The three-layer model (source, conformed, product) and the four-level semantic maturity progression are the most actionable concepts for data architects.
- **Treat the metadata-first pipeline engineering section** (~34%) as a design philosophy, not a tool tutorial: The book deliberately avoids vendor-specific recipes, so focus on the principles—contracts first, pipelines as enforcers, quality as a service.
- **Note that this is an early-release edition**: Chapters 3–11 are listed but unavailable in this sample. If you need coverage of data quality signals, curated grounding, SBAC implementation details, MCP orchestration, or the RAG readiness scorecard, you'll need the full release.
## 【Coverage Limits】
This guide covers the available content: Chapter 1 (The Pillars of RAG Readiness) in full and the opening of Chapter 2 (Data Foundations). Chapters 3–11—including data quality as a retrieval signal, curated grounding, scenario-based access control implementation, RAG-ready data products, MCP orchestration, enterprise RAG stack design, and the readiness scorecard—are listed but not included in the sampled excerpts.
##
Passage locations
Excerpt 1
ttil. All rights reserved. Published by O’Reilly Media, Inc. , 141 Stony Circle, Suite 195, Santa Rosa, CA 95401. O’Reilly books may be purchased for educati...
View in text
Excerpt 2
thousands of internal teams and millions of external users. For years, our job was clear: create a single source of truth and run it like a mission-critical...
View in text
Excerpt 3
what your glossary editor and SME loop will evolve to meet. Case Study: Three Definitions of a “User” When we began grounding agents at Microsoft, one of the...
View in text
Excerpt 4
ibutes? Infrastructure Pipeline contracts as code? Enforced? Do you have automated lineage/data-quality monitors? Unified indexes: structured & unstructured?...
View in text