Most enterprise AI governance is broken by design.
Runtime filters, output classifiers, LLM-as-judge checks — they all share one fatal flaw. By the time they fire, the sensitive data has already left the warehouse.
You're not preventing a breach. You're documenting one.
Every runtime guardrail is a post-hoc annotation. The query ran. The rows moved. Something downstream then decided whether you were allowed to see them.
That is an audit finding waiting to be written, and no amount of classifier accuracy fixes the ordering problem.
Moving governance to compile time
The fix is architectural: attach policy to business concepts rather than to tables or endpoints, and evaluate it while the query is being built.
| Runtime governance | Compile-time governance | |
|---|---|---|
| Policy attached to | Tables, endpoints, outputs | Entities, metrics, relationships |
| Fires | After execution | Before SQL is emitted |
| Unauthorised request | Returns filtered result | Fails to compile |
| Data movement | Already happened | Never happens |
| Audit artefact | A log line | The exact SQL plus the predicates applied |
Attach a policy to NetRevenue and ChurnRisk and it travels with the concept — into every query, every tool, every agent, without being re-implemented per surface.
What a control plane has to do
- Resolve intent against a typed, versioned semantic graph
- Prove a join path exists — no path, no query
- Inject RBAC, ABAC and row/column predicates per persona
- Emit dialect-perfect SQL for the target engine
- Record a point-in-time reproducible audit trail
Step 3 is the one people skip, and it's the one that makes the difference between an AI system you can ship into a regulated workflow and one that stays in pilot forever.
The agent never sees a table it wasn't entitled to — not because it behaved, but because the query was never compiled.
The full breakdown — the control plane architecture in detail, how policies compose across scopes, and what the audit output looks like — is here:
👉 The Semantic Control Plane: Deterministic Governance for AI
Originally published at colrows.com/blogs/semantic-control-plane
Top comments (0)