The application validates model-proposed queries

Context

Plain-language authoring needs model judgment without handing authorization or persistence control to the model.

Decision

The model proposes query outcomes over permitted metadata, while the application validates and compiles queries, controls bounded test execution and stores explanatory model content as part of the outcome.

Alternatives Considered

Execute the submitted query without application validation: The draft could violate the language contract or the person’s dataset access.

Include sample records in model context: Personal record values would reach the provider; configured test summaries provide a narrower interface.

Consequences

The LLM foundation meters and records each invocation. An invalid final query is rejected; clarification and unsupported outcomes can still settle successfully.