Enterprise Generative Search — Azure and Open Source · View 16 of 41 · Data
Decisions
- Every stage writes a receipt to the ledger, including the stage that decides nothing has changed. An absent document and an unchanged one must be distinguishable, or view 08 has no answer.
- A deletion is a tombstone plus a cache invalidation, never a silently missing row. Deleted content that keeps answering questions is the failure mode this exists to prevent.
- Injection screening runs at index time as well as at query time, so a poisoned document is known about before it is ever retrieved.
Numbers
- About 240,000 changed items a day; P95 from source change to retrievable is 5 minutes for collaboration content and 24 hours for the archive.
- OCR is the expensive path: 26 M archive pages at Document Intelligence rates dominated the one-off build cost and is why re-OCR is never triggered by a re-embedding.
- Near-duplicate collapse removes about 11% of chunks, which is a direct saving on index size and on retrieved redundancy.
Risks
- Parse failures are the largest hidden quality problem in any corpus of this age. They are surfaced per document to stewards rather than counted in an operations dashboard nobody reads.
- Canonicalisation can merge two documents that are genuinely different versions. The rule is conservative: near-duplicates are collapsed for ranking, never for storage.