Provide a customer with a tailored dataset

Purpose

Give selected customers a versioned dataset that Rhythm staff author and maintain without changing each customer’s application.

How It Works

Rhythm staff create a custom definition and edit its draft. Analysis reports unsafe statement forms and proposes the fields the result exposes. Preview uses a designated validation workspace. Publication produces a version that assignments make available to selected customers. Those customers then use the definition through ordinary dataset queries. A breaking publication reports affected saved questions for acknowledgment. Later pinning behaviour controls which publication a covered workspace uses. Deprecation and disabling have different effects on continued use. Revalidation records changed health when an application’s database shape or grants no longer support a publication. The product should confirm authority for the later behaviours outside the accepted first phase.

Relationships

Tailored tables extend dataset discovery. Saved questions and recipes can refer to their published definitions.

Show evidence (sources, provenance, origins, pinned commits)

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Outcomes: Selected customers receive a tailored dataset.Publication checks identify affected saved questions.Reader permissions still govern custom data.
Surfaces: consoleapi
Intent sources: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12)

Controls

31 controls apply, from the corpus control catalogue.

TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-005 TC-AZ-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-IAM-001 TC-IAM-002 TC-IAM-003 TC-IAM-004 TC-IAM-005 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-PI-001 TC-PI-003 TC-PI-005 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

Permissions

Key	Checked at	Scope
`hq.custom-query-tables.read`	api	global
`hq.custom-query-tables.author`	api	global
`hq.custom-query-tables.publish`	api	global
`hq.custom-query-tables.assign`	api	global

Business Rules

16 rules, 16 to be proved before approval. A rule's product intent is derived from its origin: 0 confirmed by a product decision, the rest inheriting this capability's proposed.

Id	Rule	Kind	Enforced at	Provenance
`01`must prove Proposed	Staff permissions separately govern custom-table reading, drafting and preview, publication and lifecycle changes, and assignment; customer users cannot reach these routes and authoring does not grant publication. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-01`, `TST-PFM-QRY-223`	permission	api	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#is refused to a caller who may author but not publish, the two being separate keys
`02`must prove Proposed	A custom-table identity cannot be reused for a second definition. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-02`, `TST-PFM-QRY-223`	validation	service, database	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#refuses a second definition under the same id, an id being permanent and never reused
`03`must prove Proposed	Draft analysis checks permitted read behaviour, identifies source access requirements and proposes output fields, returning rejected statements as analysis problems. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-03`, `TST-PFM-QRY-223`	validation	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#answers a statement the rules refuse as 200 and its problems, an analysis being data and not an error
`04`must prove Proposed	Custom definitions accept only supported platform placeholders and reject user-declared parameters or unknown placeholders. origin: services-platform:docs/queries/semantic-query-layer.md#A value asked for when a saved query runs (`$parameter`, 2026-10-13) (Andrew, 2026-10-13) proved by `ATS-PFM-QRY-005-04`, `TST-PFM-QRY-223`	validation	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#refuses a draft that declares parameters as 400, a definition taking only the platform's own placeholders
`05`must prove Proposed	Analysis, draft validation, publication and preview use the configured validation workspace; absent configuration leaves reads available but returns unavailable for those operations, and another workspace cannot be previewed. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-004-09`, `ATS-PFM-QRY-005-05`, `TST-PFM-QRY-223`	policy	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#refuses a preview of any other tenant, a customer’s rows needing a staff access grant there is no way to hold
`06`must prove Proposed	A breaking publication waits for acknowledgment of every affected saved query and otherwise returns the changes and dependent query identities. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-06`, `ATS-PFM-QRY-005-18`, `TST-PFM-QRY-223`	policy	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#refuses the publish as 409 rather than breaking the query quietly
`07`must prove Proposed	Assigned active publications appear in the dataset catalog; deprecated publications still resolve and disabled publications produce an explicit execution refusal. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-07`, `TST-PFM-QRY-223`	policy	service	observed services-platform:modules/queries/services/custom-tables/assignment-visibility.ts:visibleCustomTables
`08`must prove Proposed	A custom dataset requires every permission its statement reads, marks readers without them unauthorized, and refuses execution with the missing permission identified. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-08`	permission	service	documented services-platform:docs/queries/semantic-query-layer.md#14.2 What resolves a custom dataset
`09`must prove Proposed	Pins reference published versions, with the most specific covering pin taking precedence; unpinned grants preserve broader pins, and clearing a pin follows another covering pin or the latest publication. proved by `ATS-PFM-QRY-005-09`, `TST-PFM-QRY-223`, `TST-PFM-QRY-372`	lifecycle	service	observed services-platform:modules/queries/services/custom-tables/assignment-visibility.ts:pinnedVersionForTenant
`10`must prove Proposed	Deprecation removes a custom dataset from selection lists while preserving execution, whereas disabling it refuses execution with a reason. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-001-13`, `ATS-PFM-QRY-005-10`, `ATS-PFM-QRY-005-17`, `TST-PFM-QRY-223`	lifecycle	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#disables it, which refuses a run of it rather than answering nothing
`11`must prove Proposed	A published statement whose stored fingerprint no longer matches is refused without exposing statement text. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-11`	invariant	service	documented services-platform:docs/queries/semantic-query-layer.md#14.2 What resolves a custom dataset
`12`must prove Proposed	Custom-table history attributes lifecycle actions to their actors without retaining statement text or record values. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-12`, `TST-PFM-QRY-223`	invariant	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#keeps no statement and no value of the data in the history, which is what it is allowed to carry
`13`must prove Proposed	An assigned custom table’s reference exposes a reverse one-to-many relationship from its referenced dataset only in workspaces covered by the assignment. proved by `ATS-PFM-QRY-005-13`, `TST-PFM-QRY-223`	policy	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#is refused the join by the tenant no assignment names, the definition not being a dataset there
`14`must prove Proposed	Changes to definitions, drafts and assignments must use their read versions, and stale versions are rejected. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-14`, `TST-PFM-QRY-223`	validation	service	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#refuses a save at a version somebody else has moved on from as 409
`15`must prove Proposed	Revalidation revisits active or deprecated publications and pinned versions, records meaningful health changes without statement text or data, limits repeated passing history to once daily, and skips without a validation workspace. proved by `ATS-PFM-QRY-005-15`, `TST-PFM-QRY-250`	lifecycle	service	observed services-platform:modules/queries/services/custom-tables/revalidate-custom-tables.ts:revalidateCustomTables
`16`must prove Proposed	Analysis rejects statements that write or lock records, contain recursion, use forbidden schemas or functions, or fail the single permitted-read requirement. origin: services-platform:docs/queries/custom-query-tables/rhythm-custom-query-tables-architecture.md#Status (Phase 1 accepted by Andrew on 2026-10-12) proved by `ATS-PFM-QRY-005-16`, `TST-PFM-QRY-371`	validation	service	observed services-platform:modules/queries/services/custom-tables/analyze-sql.ts:analyzeSql

Scenarios

Id	Given	When	Then	Provenance
`01`	Rhythm staff publish an organization-count definition assigned to one customer.	That customer lists and executes its new dataset.	The definition is available and returns only the workspace’s own organizations.	test services-platform:modules/queries/tests/e2e/custom-tables.e2e.spec.js#runs it and answers rows of the tenant’s own organizations

Planning

Implementation

Provide a customer with a tailored dataset ​

Purpose ​

How It Works ​

Relationships ​