Stage 4 summary. Data and AI
Stage 4 puts the discipline the previous stages built for reports in front of a different consumer. A model does not ask a clarifying question, does not notice that a field changed meaning last quarter, and does not hesitate before answering. Everything a knowledgeable colleague used to absorb on the organisation's behalf now has to be written down where a machine can read it: what a dataset contains, who may see it, when it was last refreshed, and which of four plausible definitions of a business term the organisation stands behind.
The stage therefore reads as data management under new pressure rather than as a tour of models. Quality, provenance, cataloguing, lineage and metric definitions were all worth doing before; what changed is that the cost of skipping them is now paid immediately, in an answer nobody can trace. The topics run from the data underneath a model, through the retrieval pattern that lets a model read rather than recall, to the corpus and its provenance, and then to the catalogue and the semantic layer.
What you carry out of this stage
- Explain why the quality ceiling of an AI system is set mostly by its data, and what changes when the model is the stable part and the data is the moving part
- Explain an embedding as meaning represented as position in a space, and name the three consequences that follow for a delivery team
- Apply a readiness test to a named dataset against the four components in the UK guidance, and say what a feature store serves that a notebook does not
- Walk the six stages of a retrieval pipeline, name what each hands on, and argue a chunking decision from the questions the system will be asked
- Describe training-data curation as deduplication, filtering and licensing, and explain why model collapse made provenance an engineering input
- Separate the EU AI Act's Article 10 duties for high-risk systems from its Article 53 duties for general-purpose model providers
- Run an impact analysis from a lineage graph and produce a short list of affected assets with named owners
- Write a metric definition carrying source, grain, filters, time window and owner, and say why agent access makes that urgent
Stage 4 route: feeding and governing AI systems
Stage 4 reads in one direction: each of the five modules supplies the hub with one nameable thing, the shapes, the index, the corpus, the trace and the definition, and the hub feeds model behaviour in production, so a weak supply returns as behaviour no prompt will fix.
Stage 4 reads in one direction: the model is downstream of the data. Each of the five modules supplies the model with one nameable thing, and if that thing is weak the model behaviour is weak with it.
The data sets the ceiling, the embedding sets how anything is found, and readiness is a test not a category
A model is a function fitted to examples, so whatever pattern is in the examples is what it learns, including the sampling bias, the field left blank after a migration, and the duplicates that make one customer look like four. A larger model does not remove those patterns; it reproduces them more fluently. There is a structural reason too. A model is retrained rarely and behaves the same way in between, while the data underneath it changes continuously, so most of the variation in a system's behaviour over a year comes from the foundation.
An embedding places a piece of text at a point in a space arranged so that related material lands close together. Nothing about the words is preserved; the neighbourhood is. That is why a search for staff turnover returns a document that says attrition, and why a search for a part number can miss, because a rare code carries little of the contextual signal that positioned it. Three consequences bite delivery teams: a real space has hundreds of dimensions rather than two, vectors from one model cannot be compared with another's, and changing the embedding model means re-embedding the whole corpus.
AI-ready data is a readiness test applied to a specific dataset for a specific intended use, not a file format or a badge. The UK guidance published on 19 January 2026 sets four components a dataset addresses: technical optimisation, quality and adherence to standards, legal and regulatory compliance, and responsible management. The one most often lost is organisational: whether anyone is funded and accountable to keep the dataset in that state next quarter. A feature store then holds one definition for both training and live prediction, which is what stops training-serving skew, the gap that opens when the same feature is calculated twice by different people months apart.
Meaning becomes position, so the nearest points answer the query
The query is a point like any other, and the ring around it holds remittance and refund while contract and outage report fall outside, so retrieval returns documents that share a meaning rather than documents that share a word.
An embedding turns text into a position, so meaning becomes distance. A query lands as its own point, and the documents nearest to it are the answer, which is why retrieval over embeddings finds related wording that a keyword match would walk straight past.
Retrieval turns remembering into looking up, and the chunk decides what any answer can contain
Retrieval-augmented generation has the model read rather than recall: a retriever searches an index for passages relevant to the question, those passages go in front of the model, and the answer is written from them. The consequence for a data team is accountability: an answer from training alone cannot be traced or notice that the policy changed last week, while an answer from retrieval can point at the passage it used. The six stages each hand on a different object: chunk produces passages, embed produces vectors, index produces the searchable artefact with its refresh schedule and backup story, retrieve produces candidates, rerank produces ranked context, and generate produces the only artefact a reader sees.
Because only the last is visible, an unmeasured pipeline gives nobody a way to tell a retrieval problem from a generation problem. Logging which passages were retrieved and which were shown is the retrieval equivalent of lineage, and evaluation loops back to the chunking decision rather than sitting at the end. Chunking constrains everything after it: small passages match sharply but cut answers in half and strip the qualifying sentence, while large passages hold an argument together but blur their position so a specific query fails to surface them. The trade cannot be won, only chosen against the questions the system will really be asked.
The vocabulary of vector databases implies a separate product more often than the architecture requires one, and the choice is better made on governance than on benchmarks. Keeping vectors beside the relational data keeps retrieval inside the access controls, backups and lineage already run. Approximate search is a quality setting rather than only a speed setting, so recall has to be measured against exact results, and hybrid retrieval combining keyword and vector search is what recovers the part numbers and surnames a demonstration audience reaches for first. The index is also a governed copy: it goes stale, it is read by people with different entitlements, and it belongs in deletion work.
Six stages of a RAG pipeline and what passes between them
What travels between the six stages changes at every arrow, passages, vectors, an index, candidates, ranked context, then an answer, so a poor answer can be traced to the stage that produced its payload rather than blamed on the model.
A retrieval pipeline is six stages, and what travels between them changes at every step: passages, vectors, an index, candidates, ranked context, then an answer. Evaluation returns to the chunking, so chunk size is a measured decision rather than a default.
Curation is deduplication, filtering and licensing, and provenance became an engineering input
Curating a training corpus is not tidying before training. Deduplication removes exact and near-duplicate documents, which otherwise waste compute, raise the chance of verbatim reproduction and contaminate evaluation by putting benchmark questions in the training set. Filtering decides what is admitted, and every filter costs on both sides: too little and the model learns the sludge, too much and the rare topics and technical registers that made the corpus worth having go with it. Licensing establishes entitlement, and it is where many corpora fail an audit because the crawl came first and the rights question second.
When Shumailov and colleagues published the model collapse result in Nature in July 2024, showing that models trained repeatedly on model-generated content drift from the real distribution and lose the rare cases first, the lesson was about data rather than models. A corpus scraped from the open web is no longer a sample of what people wrote; it is that mixed with machine output in an unknown and rising proportion. If you cannot say where a document came from, you cannot say whether it is evidence or an echo. Synthetic data has three defensible uses, in test environments, in balancing genuinely rare classes and as a stand-in for sharing, and two failure modes: it cannot add information that was never there, and it is not automatically anonymous.
Content Credentials, published under the C2PA specification, carry that history for media as a chain of signed claims rather than a single badge, so verification walks the chain back to each signer. The reading that keeps a team out of trouble is that a resolved chain gives history you can show, while an absent credential establishes nothing: most files carry none and many pipelines strip metadata routinely. In the European Union the same discipline is written down in two places aimed at two actors: Article 10 of Regulation (EU) 2024/1689 governs the data used to build high-risk systems, and Article 53 puts copyright policy and a public summary of training content on providers of general-purpose models.
A glossary settles words, a catalogue lists assets, and runtime lineage is the part that stays true
A business glossary is about language: the agreed list of terms, each with one written definition, so that active customer means the same thing in a report, a contract and a model. Its unit is a term. A data catalogue is about assets: an inventory of what each dataset is, who owns it and how far it can be trusted. Its unit is a dataset. Merging the two usually satisfies neither audience, and both share a weakness: a description typed by hand decays the moment the pipeline behind it changes, and nothing in the tool notices.
Active metadata answers that decay. Declared metadata is asserted by a person and is true on the day it is written; active metadata is emitted by the running system, so the fact that a table has not been written for eleven days against a daily schedule arrives on its own. Lineage is the same argument at larger scale. Drawn on a whiteboard it is documentation and rots like documentation; captured at run time through a standard such as OpenLineage it is evidence, because the execution that moved the data is what emitted the record.
Column-level lineage is what makes that record decision-grade. Table-level lineage says a report reads a table; column-level lineage says whether the column you are about to change is one the report actually uses, and it separates a direct dependency, where the output is derived from the input, from an indirect one, where a join or filter shaped the result without the column appearing in it. An impact analysis then produces a short list with named owners rather than a change freeze. The adoption problem deserves naming honestly: a catalogue competes not with a rival catalogue but with a colleague who answers confidently in ninety seconds, and a design that loses on speed and trust will be bypassed.
One changed column and everything it touches
The tint follows order_total only as far as the objects that actually read it, so customer_counts and the Customer growth dashboard stay plain and the change becomes a short list of objects rather than a platform-wide freeze.
Changing one source column does not put every downstream object at risk. Lineage held at column level tints only the transform, marts and dashboards that read that field, which is what turns an impact assessment into a short list instead of a freeze.
Metric drift is one name with several definitions, and the semantic layer is where the definition lives
Two people arrive at a meeting with the same chart title and different numbers, and both are right, because the charts were never counting the same thing. Trace each back and the calculation splits into three decisions: which source table, which filter says what counts, which time window. The board pack counts customers who paid, from the billing tables, over a rolling quarter; the operations screen counts anyone who signed in, from the product event stream, over the same quarter. One decision differs and that is enough. Drift is expensive out of proportion to its cause: the reconciliation recurs every cycle, and a leadership team shown two contradictory figures discounts every figure afterwards.
A semantic layer is where business measures are defined once, between the warehouse and everything that consumes numbers from it. It typically holds four things: entities and their join paths, the dimensions a measure may legitimately be sliced by, the measures and metrics with their filters and time handling, and the access rules, so who may see which rows is decided where the rows get their meaning. The Open Semantic Interchange initiative, launched in September 2025, is the industry effort to make those definitions portable, standardising how semantic metadata is exchanged so a definition is written once rather than re-encoded per tool. It standardises the exchange format, not how an engine computes a result, and is best treated as an unfinished promise to test against your own suppliers.
Agent access turns this from tidiness into urgency. Every previous consumer of a metric was a person, and someone who knows the business stops when a customer count jumps ten per cent in a week. That instinct was unpaid quality control the whole reporting estate relied on. An assistant reaching a warehouse through a standard connector can enumerate tables, write correct SQL against whichever of four plausible definitions it picked, and answer with no hedging. The defence is a definition written down properly, carrying source, grain, filters, time window and a named owner, where both the dashboard and the agent have to ask for it.
One metric name, two dashboards, two different answers
Both chains share the same source and the same time window and differ on one filter, paid in period against any sign-in, so the board pack and the ops dashboard carry the identical metric name and report two different numbers.
Two dashboards can carry the same metric name and still disagree, because a name is not a definition. Agreeing the source, the filter and the time window once, in one place, is what makes the two numbers the same number.
The traps this stage warns against
Answering a disappointing AI result by moving to a larger model.
Instead: Work on the examples first. Fix labels, remove duplicates, close documented gaps and narrow the task until the available data can support it, because the model reproduces whatever pattern the data contains.
Mixing vectors produced by different embedding models in one index, or swapping the embedding model and re-indexing only new documents.
Instead: Vectors from different models are positions in different spaces and cannot be compared. Put every passage and every query through the same model, and treat a model change as a full re-embedding of the corpus.
Treating an absent Content Credential as evidence that an asset was fabricated.
Instead: A resolved chain of signed claims gives you history you can show; absence establishes nothing, because most files carry no credential and many pipelines strip metadata. Record an uncredentialed asset as unverified.
Pointing a catalogue at every warehouse and lake, harvesting everything, and calling the result adoption.
Instead: Curate the entries people actually search for, give each a named owner, a description and a freshness signal, and judge the catalogue against the colleague it has to beat on speed and trust.
Fixing the dashboard whose number looked wrong, and closing the ticket.
Instead: That is a repair, not a resolution, because the definition still lives in the tool. Move the definition into a layer both tools ask, with source, grain, filters, window and owner recorded.
Giving an agent query access to the warehouse on the grounds that its SQL is correct.
Instead: Correct SQL against the wrong definition is a confident wrong answer with nothing in it to signal a judgement was made. Give the agent the governed semantic definitions, not raw table access alone.
Core distinctions
- A model is retrained rarely and the data under it changes continuously, so most of the variation in an AI system's behaviour over a year comes from the data rather than the model
- An embedding preserves the neighbourhood, not the words, which is why paraphrase is found well and rare codes and surnames are found badly
- AI-ready is a test applied to one dataset for one intended use against four components, not a property a dataset acquires permanently or a certificate anyone issues
- Training-serving skew is a definition problem, not a modelling problem: the same feature calculated twice, in two places, by two people, at two times
- Chunk size is settled before anything is measured and constrains every later stage, because a passage is the smallest unit retrieval can ever return
- EU AI Act Article 10 governs the data used to build a high-risk system; Article 53 governs providers of general-purpose models, including copyright policy and a public training-content summary
- A glossary settles what a term means and a catalogue records what a dataset is; declared metadata decays silently while active metadata is emitted by the running system
- Column-level lineage separates a direct dependency, where the output is derived from the input, from an indirect one, where a join or filter shaped the result without the column appearing in it
That is Stage 4 in one place: data quality as the ceiling on what a model can know, embeddings and retrieval as the machinery that finds anything at all, curation and provenance as the record that makes a corpus defensible, and catalogues, lineage and the semantic layer as the places meaning is written down where a machine can read it. The scenario practice now tests those judgements against situations where the tempting answer is the fast one, and Stage 5 takes the same material into the law that governs personal data.
Sources and further reading
- EU AI Act, Article 10: Data and data governanceThe data-quality and governance duties for high-risk systems, including the narrow bias-detection permission that is routinely misread as a prohibition.
- ISO/IEC 8183:2023, Data life cycle framework for artificial intelligenceThe international framework for the AI data life cycle sitting behind the curation and readiness work in this stage.
- ISO/IEC 5259 series, Data quality for analytics and machine learningThe series that gives the quality-ceiling argument a standards footing rather than leaving it as practitioner advice.
- OpenLineageThe open standard for lineage captured at run time, which is what makes lineage evidence rather than documentation.
- Open Semantic Interchange initiative announcementThe September 2025 launch behind the portability argument for metric definitions, read here as an unfinished industry effort.
- W3C PROV-DM: The PROV Data ModelThe provenance vocabulary that dataset-level provenance systems reuse, and the conceptual parallel to media Content Credentials.