Context
The reviewed workflow moves from a redacted scan plan that requires approval, to a synthetic model pack, to deterministic answers that cite pack evidence or abstain. It is an early independent prototype: live SQL profiling and model-backed answers are not implemented.
Architecture
A React/TypeScript workbench calls an ASP.NET Core API. The current scan endpoint creates a synthetic model pack containing table summaries and relationship evidence; the interface and answer service use that same material.
Engineering Decisions
The scan is a bounded, reviewable plan with redacted connection information and a planned privacy mode based on summaries rather than stored raw rows. Cited relationships preserve whether evidence is declared or inferred.
How It Breaks
Term matching can refuse reasonable wording or select evidence because words overlap rather than meaning does. Synthetic evidence also cannot prove safe live access; least privilege, cancellation, resource limits, and sensitive-metadata handling require separate checks.
Testing & UAT
Repository behaviour checks cover connection-string redaction, plan review, model-pack persistence, and cited answers or abstention. A July 2026 status record reports backend and frontend checks passing, with synthetic SQL execution unavailable in that environment; those checks were not rerun for this case study. A separate JavaScript reproduction uses eight authored cases to debug matching rules. It is not the private C# application, a held-out evaluation, or a product score.
AI: Now / Future
The reviewed answer service is deterministic and deliberately narrow. It demonstrates an evidence-linked response contract without claiming an evaluated generative assistant.
Now
The reviewed application uses deterministic term matching over synthetic evidence. The separate JavaScript reproduction debugs that contract. Neither uses an external model, performs live profiling, or issues database writes.
Future · Proposed
A model-backed explanation layer would receive a reviewed, bounded evidence set and require evaluations for citation correctness, unsupported answers, sensitive-data handling, and prompt injection before broader capabilities.
Observability & Measurements
Future measures should include scan cost, evidence coverage, unsupported answers, incorrect relationship suggestions against a known schema, and the time a user needs to understand a result. No discovery-accuracy, production-scan, or model-quality measurement exists.
What Changed After Testing
The JavaScript debugging cases exposed broad relationship citations, refusal of ordinary wording, and reliance on untrusted descriptions. A narrower rule requires both relationship endpoints, preserves declared versus inferred evidence, and excludes descriptions from fact lookup. The refinement remains outside the private application; representative-user acceptance and model-backed evaluation are still open.
What I’d Change at 10× Scale
At ten times the schema size, I would first measure scan cost and orientation time. Progressive disclosure, bounded profiling, incremental refresh, and visibly aged cached evidence would follow observed bottlenecks.