Articles
73 articles on executable business ontologies, runtime governance, and agent-operated applications.
Recommended
Recommended
Start here: what "the ontology is the software" means, who should own the business definition layer, and why AI-built apps stay governable as metadata, not generated code.
-
What Does "The Ontology Is the Software" Mean? An Executable Business Ontology, Defined
The line is ObjectStack's positioning; this is its definition. An executable business ontology has a six-kind core, four projections and three things it is not — and a test for telling core from projection.
App Development Developers OntologyExecutable business ontology -
Open vs. Closed Enterprise Ontologies: Who Owns the Business Definition Layer?
Five platforms shipped a business definition layer between Nov 2025 and Aug 2026 — two as an ontology, three as a semantic layer — and most opened an MCP read path, not the definition. Protocol-open, definition-closed.
Security & Governance Business Leaders OntologySemantic layerMCPFabric IQUnity CatalogSnowflakePalantirLooker -
Metadata, Not Code Generation: What Makes AI-Built Apps Governable
Code generation can speed up prototypes, but enterprise applications need a metadata runtime where objects, fields, views, permissions, workflows, actions, and agent tools are governed together.
App Development Business Leaders -
Vibe Coding Technical Debt: Why AI-Built Apps Become Hard to Change
A team's AI-built expense system ran fine for months until tax rules changed and no one dared touch its 12,000 lines of unread code. Why generating definitions beats generating code.
App Development IT Leaders
Latest Articles
Latest Articles
New writing from the ObjectOS blog.
-
How Do You Let Anonymous Visitors Submit a Form Into a Governed Business App? One Public Door, Five Fields Wide
Since v17 anonymous data access is always denied. The one open door is a public form view: the runtime derives a grant from the form itself — five fields in, one row created, only its id back. Measured on 18.3.0.
App Development Business Leaders Public formsWeb-to-leadAnonymous access -
Can You Prove Who Opened a Customer Record, Including an AI Agent? Record-View Auditing, and the Four Things a View Row Never Records
On @objectstack/cli 18.3.0, a person's REST read and an agent's MCP get_record each left one read row in sys_audit_log; a list, an unlisted object and a refused read left none. What a row holds, and the four things it never does.
Security & Governance IT Leaders Audit trailRecord-view auditingAI agentsCompliance -
Views, Dashboards and Apps Are Projections of the Ontology: What That Changes for Review
Add one field to a bundled ObjectStack app: the table, REST API, MCP describe call and Console form follow by themselves; the pinned views, dataset and translation do not. The naming test says which is which.
App Development Developers OntologyExecutable business ontologyReviewable diffMetadata review -
How Do You Import a Spreadsheet From an Old System Into an AI-Built App? Import Mappings, Dry Runs, and the Three Ways a Row Can Fail to Match
Measured on ObjectStack 18.3.0: a named import mapping projects foreign headers and codes onto one object, a dry run returns the whole per-row report with nothing stored, and a non-matching row is created, skipped or failed.
Integration & Data Business Leaders CRM Data importImport mappingDry run -
What Do AI Models Lack in the Enterprise? A World, Hands and a Fence
Not intelligence. In a company a model lacks a world to reason about, hands to act with and a fence around the acting. One executable business ontology supplies all three; a sourced table maps each to its runtime mechanism.
AI & Agents IT Leaders AI agentsExecutable business ontologyMCPAgent permissions -
Validation Rule, Hook, or Flow? Where a Business Rule Should Live in an AI-Written App — One CRM, Seven Rules, Three Homes
Seven business rules on one CRM, three homes each could take. The choice is a table, not a taste: a predicate is a validation rule, a rewrite of the pending record is a hook, everything else is a flow, which reviews as data.
App Development Developers CRM AI agentsBusiness rules -
How Do You Catch an AI's Silent Permission Change Before It Ships? The Access-Matrix Snapshot Gate, on a 7-Entry CRM
On @objectstack/cli 18.2.0, os validate passes an agent's allowDelete false-to-true flip with no finding. os compile on an opted-in app fails the build with one line naming who gains what, until a human regenerates the snapshot.
Security & Governance Developers AI agentsAgent permissionsReviewable diff -
When Should You Not Use an Executable Business Ontology?
Five workloads where an executable business ontology is the wrong tool today, what to use instead, the cost of choosing wrong, and a sourced decision table.
App Development IT Leaders OntologyExecutable business ontologyWhen to use -
Agent-Operable Apps: When Every Object and Action Is an MCP Tool Under the User's Permissions
Agent-operable means the app is already an MCP server and the agent connects as a user. One run, two users, one action: the same twelve tools, and the permission decision made on every call, not on the list.
AI & Agents Developers AI agentsMCPAgent-operable -
What Makes a Business App AI-Writable? Typed, Validated, Reviewed, Governed
AI-writable is a property of the target, not the model. Four gates, one real run: three deliberate mistakes, 49 rules, three located errors, then a clean pass.
AI & Agents Developers AI agentsAI-writable -
Executable Ontology vs Knowledge Ontology: Why "No Inheritance, No Axioms, No Reasoner" Is the Point
A knowledge ontology is built to be reasoned over; an executable business ontology is built to be validated and run. The proof is one key, abstract, that promised inheritance, did nothing, and was removed rather than kept.
App Development Developers OntologyExecutable business ontologyKnowledge graph -
The Ontology Is the Software
Enterprise software changed its interface three times and its user never. Agents are the first new user in forty years; what they need is not an API but an ontology the runtime runs, AI writes, agents operate and you own.
AI & Agents General OntologyAI agentsExecutable business ontology -
How to Migrate a Legacy Internal System to Metadata Without a Big-Bang Rewrite
A staged path off a legacy internal system - connect it read-only, measure how often your declared rules disagree with what it actually did, enable writes one object at a time, then cut over. Including when not to migrate.
Modernization IT Leaders -
How to Self-Host an AI App Platform: ObjectStack from Install to Verified
A walkthrough of self-hosting the open-source ObjectStack runtime: the compiled-artifact model, the database driver everyone misses, how to prove the install is correct, and what you are now on call for.
Security & Governance IT Leaders -
Build a CRM With an AI Agent: The Whole Build, Including What Broke
One complete CRM built end to end — scaffold, three objects, an approval flow, a permission set. 2,406 measured tokens, 54 generated API operations, and the four defects caught before a human reviewed anything.
App Development Developers CRM AI agents -
How to Review AI-Generated Code: A Checklist for Metadata App Changes
A four-pass review order for AI-written app changes, worked on a real diff. The validation gate proves a change is enforceable; it never proves the change is correct. That third rung is the reviewer's whole job.
App Development Developers AI agentsAgent permissions -
How to Configure Your AI Coding Agent to Write ObjectStack Apps
Three wires point a coding agent at ObjectStack: a scaffolded rule file, an 11-skill bundle, and an in-runtime tool server. Each one verified against 17.2.0 — including the real output of the gate rejecting a wrong definition.
AI & Agents Developers MCPAI agents -
Palantir Foundry vs Microsoft Fabric IQ: Enterprise Ontology Platforms Compared
Palantir Foundry vs Microsoft Fabric IQ, plus Databricks, Snowflake and Looker: an enterprise ontology platform comparison of objects, actions, permissions, agent access and lock-in, sourced to vendor docs.
Integration & Data IT Leaders OntologySemantic layerFabric IQLookerPalantirPalantir FoundrySnowflakeUnity Catalog -
Context Is the Bottleneck in Enterprise AI: Every Fix Solves Only the Read Half
Two of the largest data platforms built their June 2026 keynotes around the same claim, and it is correct. But semantic layers, catalogs and ontologies all ground what an agent reads. The write half runs on borrowed enforcement.
AI & Agents IT Leaders Semantic layerAI agents -
Forward Deployed Engineer vs Solutions Engineer vs Solutions Architect vs Consultant
Four roles that look identical in the customer's conference room and diverge on the org chart. A comparison table on outcome ownership, production code, quota, reporting line and pay — plus the one question that separates them.
AI & Agents General Forward deployed engineerPalantir -
The Forward Deployed Engineer Model: Why Copying Palantir Builds a Consultancy
Four AI giants stood up forward-deployed orgs in 2026. Palantir earns roughly 11x the revenue per employee Accenture does — and the gap is not the role, it is the substrate the role writes into.
AI & Agents Business Leaders OntologyForward deployed engineerPalantir -
Ontology vs Semantic Layer vs Knowledge Graph: What Is Actually Different
A semantic layer defines what a number means. A knowledge graph stores what connects to what. Only an ontology carries actions and permissions. Precise definitions, a decision table, and a test for which one your agent needs.
AI & Agents IT Leaders OntologySemantic layerAI agents -
What Is Ontology MCP? Turning an Enterprise Ontology Into Agent Tools
Ontology MCP exposes an ontology's object types, action types and functions as MCP tools any agent can call. What Palantir shipped, what Microsoft is previewing, and the tool-surface asymmetry to plan for.
AI & Agents Developers OntologyMCPGoverned toolsFabric IQPalantir Foundry -
What Tools Do Forward-Deployed Engineers Use? An Ontology-First Open Stack
What forward deployed engineers actually build across a 60–180 day deployment, the five pains that define the work, and why the 2026 copycat wave copied the role but not the substrate underneath it.
AI & Agents Developers OntologyMCPForward deployed engineerPalantir -
How Many Tokens Is a Business App? A Complete CRM Under 150k
A complete CRM—business logic, permissions, workflows, and UI—fits under 150k tokens of typed metadata. Business logic stays under 100k; UI adds ~50k. The bundled reference CRM is ~16k.
AI & Agents Developers CRM AI agents -
The Constraint Isn't Typing Speed. It's the Context Window.
AI can write an enterprise app. Whether it can maintain one depends on whether the whole system fits in its head — which is an argument about the target format, not the model.
AI & Agents Developers AI agentsContext windowMetadata -
When an AI Agent Deletes Production Data: Runtime Guardrails Beat Prompts
The Replit database incident shows a structural lesson: an agent's blast radius must be controlled by runtime permissions, approvals, and audit logs, not only by a prompt.
AI & Agents IT Leaders AI agentsReplit -
Retool RBAC and Audit Logs: Evaluating Retool for Governed AI App Development
Retool RBAC, audit logs and access policies, checked against Retool's docs: what they govern in AI-generated apps, how Retool compares with Lovable for enterprise apps, and the authority gap left over.
App Development Developers RetoolRBACAudit logLovable -
Power Platform Lock-In: Dataverse, Azure, and the Self-Host Tradeoff
Power Platform is already inside the Microsoft tenant, but self-hosting, Dataverse export, AI usage pricing, and sovereignty requirements matter for long-running systems.
Security & Governance IT Leaders DataversePower AppsPower Platform -
Is Lovable Safe for Production? The Access-Control Review Problem
Lovable can turn a sentence into a full-stack app, but production data depends on access control the accountable builder must be able to inspect, understand, and approve.
Security & Governance Developers Lovable -
Airtable Omni: Can You Edit What It Builds, and Who Approves the Change?
Airtable Omni builds a live app from one sentence. Yes, you can edit what it generates, down to element source code. But most changes apply as Omni builds, so review comes after the change, not before.
App Development Business Leaders AirtableAirtable Omni -
AI-Written Apps: Can You Review the Diff and Merge With Confidence?
AI can generate a working app in 30 minutes. The hard part is signing off on an 8,000-line PR you did not write. Reviewability, not speed, is the new moat.
App Development Developers -
How to Write Agent Rules That Generate Governable Apps
Most agent rule files police style, not governance. Use AGENTS.md, .cursor/rules, and an open declarative target so AI-generated apps are reviewable from day one.
AI & Agents Developers MCPAI agents -
EU AI Act Audit Readiness: Can Your AI Runtime Produce Evidence?
When an auditor asks for the full record of one AI decision, model quality is not enough. Your runtime must show authorization, evidence, oversight, and audit history.
Security & Governance IT Leaders -
MCP Security for Enterprise Agents: Why Protocols Need Governed Tools
MCP can connect agents to tools quickly, but enterprise systems need identity, permissions, approvals, and audit behind every tool call.
AI & Agents IT Leaders MCPGoverned toolsAI agentsA2A -
Why AI Agent Pilots Fail Before Production: The Four Missing Layers
A project drew applause on demo day, then was killed four months later by one question from legal. The problem was not the model; it was missing semantics, permissions, approvals, and audit.
AI & Agents Business Leaders AI agents -
AI Agent Pricing: Per-Action Billing vs. Self-Hosted Runtime Cost
At $0.10 per Agentforce action, a successful agent can make usage-based pricing rise quickly. Compare per-action billing with a self-hosted runtime before you scale.
Security & Governance Business Leaders AI agentsAgentforce -
Agentforce vs. an Open Self-Hosted Runtime: When to Choose Each
A company nearly signed with Agentforce until it found that half its data lived outside the suite. Here is when to choose a closed suite, when to choose open self-hosting, and when to use both.
AI & Agents IT Leaders AgentforceCopilot StudioServiceNow -
Will Ontologies Become a Standard Part of the AI Stack? Why the Runtime Must Be Open
Will ontologies become a standard part of the AI stack? The agent interface already has: Ontology MCP went GA in June 2026. Definitions are following. The runtime stayed closed, and portability lives there.
Security & Governance Business Leaders OntologyMCPPalantirSemantic layer -
Cross-System Workflow Automation: Connector Failure Handling in a Governed Process
The moment a step leaves your runtime you stop being able to observe it. A governed cross-system flow declares what each outbound call does, designs the failure path first, and never reports a step it could not measure as zero.
Integration & Data Business Leaders -
Natural Language Workflow Changes: How to Review an AI-Edited Flow Before It Ships
A sentence can change a business process in seconds. Whether it should is a review question. How a flow edit becomes a diff, a publish gate that refuses what it can prove wrong, and an audit row you can roll back to.
App Development Business Leaders -
Automation Trigger Types: Record Changes, Schedules, Buttons, and Webhooks in One Flow
A flow can start from a record change, a clock, a date field, a button, or an inbound POST. Choosing the trigger is cheap. The expensive mistake is a flow that looks armed in the designer and is wired to nothing at runtime.
App Development Business Leaders -
Workflow Pause and Resume: What a Long-Running Approval Needs to Survive
A flow that waits days for an approval has to park its state, survive a restart, and refuse the wrong caller. What durable pause and resume actually costs — and why a wait node with no deadline is the honest answer.
App Development Business Leaders -
Enterprise AI Automation Engine: How a Flow Decides, Waits, and Proves What It Did
Trigger-and-forget automation cannot carry a business process. An enterprise automation engine has to branch on real conditions, park for a person, resume after a restart, and leave a run record that proves what it changed.
App Development Business Leaders -
Ontology Actions: How to Govern AI Agent Write Operations
Enterprise ontology work stops at retrieval. When an agent has to change state, write operations need one governed definition — opt-in exposure, permission parity, confirmation and audit — not a second tool path beside your UI.
App Development Business Leaders OntologyGoverned toolsAI agents -
Where AI Agent Permissions Are Enforced: Row-Level Security, Field Masking, and Tool Gates
Everyone agrees an AI agent should respect permissions. The real question is where the check runs. Filtering the model's output is too late — enforcement belongs in the query, the field, and the tool gate.
Security & Governance IT Leaders AI agentsAgent permissions -
From a Sentence to a Governable App: How AI Generates App Metadata
The important part of AI Builder is not turning one sentence into pages, but decomposing a business request into objects, fields, views, workflows, permissions, automation, and agent tools.
App Development Business Leaders AI agents -
Airtable-Style AI App Builder: Build by Table, Change by Chat
A strong AI app builder combines table-based app building with natural-language iteration, while keeping objects, fields, views, permissions, and automation visible.
App Development Business Leaders Airtable -
Edit Business Systems by Conversation: Add Fields and Change Flows
The real value of an AI builder is continuous conversational iteration: fields, workflows, views, permissions, and automation evolve through reviewable metadata changes.
App Development Business Leaders -
AI Ticket Hub: Build a Support System That Actually Reads the Customer's Problem
A support system should do more than queue issues. With metadata for cases, messages, SLA, knowledge, permissions, and agent tools, AI can understand customer problems and move work forward safely.
App Development Business Leaders Case ManagementCustomer Portals -
AI Sales Assistant: How to Update CRM Records and Suggest Next Steps
An AI sales assistant is not just auto-fill for CRM. Natural language can generate accounts, contacts, opportunities, activities, tasks, and agent tools so sellers work through conversation.
App Development Business Leaders CRM AI agents -
AI Project Management Assistant: Surfacing the Risk Hidden in Status Updates
An AI project assistant is not another board. It models projects, tasks, meetings, risks, changes, and action plans so AI can detect delays and blockers from everyday updates.
App Development Business Leaders -
AI Procurement Risk: How to Spot Supplier Risk Before Approval
An AI procurement decision app should not hide behind one supplier score. It should connect qualifications, quotes, contracts, orders, delivery, quality, and risk evidence into a conversational decision layer.
App Development Business Leaders Supply Chain & Procurement Manufacturing -
AI Expense Audit: Build a Finance App That Understands Policy, Not Just OCR
AI expense review is not only invoice recognition. It should model policies, budgets, projects, approvals, anomaly patterns, and audit records so finance can explain every recommendation.
App Development Business Leaders Financial Services -
AI Employee Service Center: How to Move Beyond HR, IT, and Admin Tickets
An AI employee service center is not a chat wrapper over HR, IT, and admin tickets. It models service catalogs, knowledge, requests, approvals, and governed agent actions.
App Development Business Leaders HR & Internal AppsCase Management -
AI Contract Review: Build an App That Flags Clause and Obligation Risk First
The value of an AI contract app is not summarization. It is turning contract types, clauses, obligations, risk rules, approvals, and audit into metadata that legal and business teams can use together.
App Development Business Leaders Financial Services -
AI Content Workbench: From Ideas to Publishing and Retrospectives
Content teams need more than a writing box. Natural language can build topics, sources, briefs, drafts, reviews, publishing, and metrics so AI participates in the full content workflow.
App Development Business Leaders Telecom & Media -
AI Compliance and Internal Controls: Stop Checking Policies by Hand
An AI internal control app is not only policy Q&A. It turns policy clauses, controls, evidence, gaps, remediation, and audit records into a closed-loop compliance workflow.
App Development IT Leaders Financial Services -
AI Agent Workbench: How Agents Execute Tasks Inside Business Systems
Enterprise agents must do more than chat. They need business objects, tools, permissions, approvals, and audit boundaries so natural-language intent can become controlled execution.
App Development IT Leaders Governed toolsAI agentsAgent permissions -
Self-Hosted AI Application Platforms: Why the Runtime Belongs to You
Once AI reads business data, triggers workflows, generates applications, and calls tools, enterprises need control over the runtime that governs objects, permissions, tools, approvals, and audit evidence.
Security & Governance IT Leaders -
From Requirement to Running App: How AI Generates Reviewable Metadata
A concrete equipment repair scenario shows how AI Builder turns one request into objects, fields, relationships, views, permissions, actions, workflows, APIs, and agent tools.
App Development Developers -
How AI Agents Stay Inside Enterprise Permission Boundaries
Enterprise teams do not need AI agents to become unrestricted administrators. They need agents that act as controlled users, inherit permissions, route risky actions for approval, and leave an audit trail.
Security & Governance IT Leaders AI agentsAgent permissions -
AI for Legacy Manufacturing Systems: Start With Reports and Work Orders
Manufacturing systems are hard to replace. A practical AI path connects existing systems and starts with reports, work orders, and exception analysis.
Integration & Data IT Leaders Case ManagementSupply Chain & Procurement Manufacturing -
Low-Code vs. AI-Native App Platforms: Where Complex Business Breaks
Low-code helps teams build pages and workflows faster, but complex business systems depend on objects, permissions, integrations, change control, and maintainability.
App Development IT Leaders HR & Internal AppsCase Management -
AI for CRM: How Agents Read Customer Data Without Bypassing Permissions
Most CRMs already hold customer, opportunity, contact, and activity history. The useful path is to let AI understand those business objects under existing permissions.
Integration & Data Business Leaders CRM AI agentsAgent permissions -
Custom Software Technical Debt: Why Internal Systems Become Unmaintainable
A five-year ledger for one $45,000 custom system: the toll after the build invoice reached $81,100, or 1.8x the purchase price. Plus a six-question health check for the internal system you cannot replace.
Modernization Business Leaders -
Add AI to Existing Systems Without Migration: Connect Your Database
On self-managed ObjectOS (Enterprise), connect the database you already run — read-only by default — let a coding agent model its tables as objects, and put AI on real data under your permissions, system of record untouched.
Integration & Data General -
Protocol-First Development: Why ObjectStack Chose Open Standards Over Proprietary Platforms
An in-depth exploration of protocol-first architecture, examining why open standards triumph over proprietary platforms for long-term sustainability, and how ObjectStack implements this philosophy.
App Development Developers Open protocolArchitectureOpen source -
The Architecture of Metadata-Driven Systems: From Salesforce to ObjectStack
A comprehensive analysis of how metadata-driven architectures evolved from enterprise platforms to modern protocol specifications, and why they represent the future of software development.
App Development Developers MetadataArchitectureSalesforceServiceNow