용어집
실행 가능한 비즈니스 온톨로지를 말하는 어휘.
이 사이트가 쓰는 용어의 정의 모음으로, 인용되도록 썼습니다. 각 항목은 그 자체로 뜻이 통하는 한 문장의 정의로 시작해, 실무에서 그 용어가 무엇을 뜻하는지 설명하고 그 용어를 쓰는 글과 페이지로 연결합니다.
용어 5개
-
승인 워크플로
승인 워크플로는 제안된 변경을 결정 권한을 가진 사람이 명시적인 승인 또는 거절을 기록할 때까지 대기 상태로 두어, 책임 있는 누군가가 서명한 뒤에야 변경이 효력을 갖게 하는 비즈니스 프로세스입니다.
-
지식 그래프
지식 그래프는 조직의 정보를 노드와 타입이 있는 엣지 — 조직이 관심을 두는 엔티티와 그 사이의 레이블이 붙은 관계 — 로 표현함으로써, 사물이 어떻게 연결되어 있는지에 관한 질문을 테이블 조인 대신 관계 탐색으로 답할 수 있게 합니다.
-
온톨로지
온톨로지는 ObjectStack이 쓰는 의미에서 실행 가능한 비즈니스 온톨로지를 가리키며, 비즈니스의 정의 — 객체와 필드, 관계, 액션, 권한, 플로우, 에이전트와 도구 정의 — 를 런타임이 검증한 뒤 실행하는 타입 메타데이터로 작성해, 소프트웨어와 AI 에이전트가 원시 테이블이 아니라 이 하나의 정의를 통해 비즈니스를 운영하게 합니다.
-
행 수준 보안
행 수준 보안(RLS)은 테이블 자체에 술어(predicate)를 붙여 특정 사용자가 읽거나 쓸 수 있는 행을 제한하는 접근 제어 메커니즘으로, 이 제한은 쿼리를 보내는 애플리케이션 코드가 아니라 쿼리 내부에서 적용됩니다.
-
시맨틱 레이어
시맨틱 레이어는 지표, 차원, 엔티티 이름 같은 거버넌스가 적용된 비즈니스 정의의 집합을 원시 데이터 저장소와 이를 조회하는 도구 사이에 두어, "활성 고객"이나 "순매출"이 누가 묻든 어떤 도구에서 묻든 합의된 하나의 계산으로 해석되게 하는 계층입니다.
아직 번역되지 않은 용어
아래 용어는 번역이 나오기 전까지 영어로 표시됩니다.
용어 18개
-
Agent guardrails
Agent guardrails are the constraints placed on what an AI agent may do — from prompt instructions and output filters to runtime permission checks, approval gates, and audit logging — and they divide into the ones an agent can ignore and the ones it cannot.
-
AI agent runtime
An AI agent runtime is the execution environment that runs an agent loop — calling the model, invoking tools, carrying state and memory between steps, and handling retries, timeouts, and concurrency — so that an agent runs as a supervised program rather than as a single prompt.
-
Application definition vs. runtime
Application definition vs. runtime is the architectural split between what an application is — a typed, version-controlled declaration of its objects, fields, relationships, permissions, workflows, actions, and APIs — and what runs it: an engine that reads that declaration on every request and derives the database, the API, the interface, and the permission and audit enforcement from it, so that the definition stays portable and the engine stays replaceable.
-
Application metadata
Application metadata is the structured, typed definition of a business application — its objects, fields, relationships, views, permissions, workflows, actions, and APIs — stored as source files that a runtime reads and executes directly, rather than as generated application code.
-
Audit trail
An audit trail is a chronological, append-only record of who did what to which data and when, written by the system that executed the actions rather than by the parties performing them, so that history can be reconstructed and attributed after the fact.
-
Comprehension debt
Comprehension debt is the widening gap between the software an organization runs and the software anyone in it can still explain — a liability that accrues whenever working code ships faster than the understanding of it, and that comes due at the first change nobody dares to make.
-
Declared vs. enforced
Declared vs. enforced names the gap between what a system’s configuration lets you write down and what its runtime actually checks at execution time — a declaration that nothing enforces reads like a guarantee and behaves like a comment.
-
Definition layer
The definition layer is the tier of a software stack that holds a business’s own declarations — which objects exist, how they relate, who may do what to them, and which steps require approval — as versioned files the organization owns, sitting above the runtime layer that executes those declarations and outside any single vendor that happens to ship an engine for them.
-
Governed runtime
A governed runtime is an application runtime that enforces identity and permissions on every read, write, and tool call, routes decisions through approvals, and writes reads and writes to an audit log, so that an AI agent and the person it acts for are held to exactly the same rules. In ObjectStack, record reads and writes are audited; the built-in AI’s tool calls are audited too on ObjectOS Enterprise.
-
Governed tool layer
A governed tool layer is the layer between an AI agent and a business system in which the agent calls controlled actions rather than raw interfaces, so that every call carries the initiating user identity, is checked against that user permissions, pauses for approval when the action requires one, and lands in an audit ledger.
-
MCP (Model Context Protocol)
MCP (Model Context Protocol) is an open standard that defines how an AI application connects to external tools, data sources, and prompts over a uniform client–server interface, so that any compliant client can use any compliant server without integration code written for that specific pair.
-
Metadata-driven development
Metadata-driven development builds an application by declaring its objects, fields, permissions, workflows, actions, and APIs as typed metadata that a runtime executes directly, instead of writing the code that implements them — a distinction that becomes decisive once an AI agent is doing the writing, because the declaration is small enough for a human to review and the runtime, not the generated code, is what enforces the rules.
-
Object type / action type
Object type and action type are the two halves of an ontology's vocabulary: an object type declares a class of business entity together with its properties and its links to other types, while an action type declares a permitted, permission-checked operation that changes those objects — so that writing is defined as explicitly as reading.
-
Ontology projection
An ontology projection is a view, dashboard, app, or translation derived from an executable business ontology — authored as metadata and validated by the same gate, but not part of the ontology itself, so that changing the core changes the projection while removing a projection leaves the business it showed unchanged.
-
Permission model
A permission model is the structure a system uses to decide who may do what — which principals exist, which containers hold grantable capability, how multiple grants combine, and what happens when nothing grants access — as distinct from any individual permission expressed within it.
-
Reviewable diff
A reviewable diff is a change small enough, and expressed at a high enough level, that the person accountable for it can read every line and judge on business terms whether it is right — the property that decides whether AI-written software gets merged with a signature behind it or on faith in green CI.
-
Typed metadata
Typed metadata is application metadata whose keys and values are constrained by a published schema, so that an unknown field type, a misspelled permission, or a workflow step pointing at an object that does not exist is rejected at a validation gate when the definition is written, instead of being discovered in production after it runs.
-
Vibe coding
Vibe coding is the practice of building software by describing what you want to an AI model in natural language and accepting the code it produces without reading or understanding it — a term Andrej Karpathy coined in February 2025 for giving in to the vibes until you "forget that the code even exists."