The five layers
Two cross-cutting systems run through all five layers: the provenance chain (every layer records where its outputs came from) and multi-tenancy (every row in every layer is organisation-scoped).
The write path
- A connector sync lands deduplicated raw records. Each sync produces a run record with per-stage counters you can watch in the dashboard.
- Normalizers fan raw records out into events (who did what to which entity, when) and resolve actor identities across systems.
- An extraction run executes the staged LLM analysis and writes a new knowledge library version, logging every model call as it goes.
- Indexes are generated for the new knowledge: a semantic embedding, a full-text vector, parent context references, and graph edges between related rules.
The read path
A query, whether it comes from chat, the dashboard, MCP, or the API, hits the query pipeline: three retrieval signals run concurrently (structured, full-text, semantic), get fused, reranked, and optionally expanded through the knowledge graph and parent context. The read path never calls back into the write path. If knowledge isnât in the active library version, no amount of querying will surface it; you need an extraction run.Technology
When something looks wrong, walk the chain in order
1
Sync first
Did the connector sync actually complete? Check the sync-run status and counters on the connector detail page. A sync thatâs
running or failed means the data never arrived.2
Extraction second
Has an extraction run completed since that sync? New events donât affect answers until a run produces a new library version.
3
Library third
Is the library version you expect actually
active? Queries read the active version, not drafts.4
Query last
Use explain mode to see exactly which signals matched and how results were ranked. If a rule exists but doesnât surface, this shows you why.
Related
Events
The common schema everything is analysed in.
Query
The read path in full detail.