Enterprise Generative Search — Azure and Open Source · View 19 of 41 · Data
The decision this model encodes
- A citation joins a claim to a retrieval_result, never straight to a chunk. The retrieval_result records which backend returned it, at what rank and why — so an audit can ask not only what was cited but how it was found.
- document_version carries effective_from and superseded_by. Version awareness is in the schema, which is what allows the answer to state an as-of rather than implying currency.
- query stores an acl_fingerprint and never the group names. Enough to prove entitlement at the time, not enough to leak the org chart.
Assumptions
- Representations are rows, not columns, so two embedding model versions can coexist during a migration and be distinguished by index_alias.
- acl_grant is a projection of the source's permissions, refreshed by the entitlement sync. It is never edited in the platform.
Retention
- Audit and provenance are kept 7 years; traces 90 days; conversation state 30 days; feedback indefinitely because it becomes the golden set.
- An erasure request removes chunks, representations and trace bodies, and keeps the provenance reference without its content — the record that an answer was given survives, the content does not.