The Internet After Apps: Public, Private, and Personal AODPs in an Intent-Driven World

When software can be generated for a person, a task, or a moment, the durable architecture must move out of the application and into the interface to data and action.

A wealth advisor finishes a client call and asks an agent to build a small application.

The application should assemble the household’s accounts, identify securities that could raise $75,000, preserve the client’s income targets, avoid restricted positions, estimate tax consequences, and prepare an explanation for the client. It is not intended to become the next enterprise advisor platform. It may only be needed for the next hour.

The software could be generated almost immediately. That is the appealing part.

The dangerous part is everything the software must touch.

It needs market information, client preferences, account positions, tax lots, suitability rules, firm policies, trading restrictions, approval thresholds, and access to an order-management system. It must know which information belongs to the client, which belongs to the firm, and which comes from public or commercial sources. It must distinguish between calculating a proposed trade and submitting one. It must preserve evidence of what it read, why it made a recommendation, who approved it, and what eventually changed.

The application may be disposable. Its authority cannot be.

This is the architectural problem hiding underneath intent-driven computing and enterprise vibe coding. As software becomes easier to generate, more of the burden moves onto the interfaces through which that software reaches data, policy, and operational systems. We cannot make every dynamically generated application trustworthy in the same way that we certify a major enterprise platform. We can, however, force every application to operate through trustworthy products.

That is the purpose of the Action-Oriented Data Product, or AODP.

An AODP is a reusable, domain-owned product that exposes governed data and governed actions through a secure, discoverable, contract-driven interface. AODPs can exist in public, private, and personal spaces. Connected through a mesh, they provide the durable substrate underneath people, agents, and software assembled for individual tasks.

The internet built around pages and applications does not disappear. It gains another layer: an internet of governed data and action.

Continue reading “The Internet After Apps: Public, Private, and Personal AODPs in an Intent-Driven World”

The Pipeline You Don’t Have to Build

There is a peculiar habit in data engineering: we measure sophistication by the machinery we build. A source drops CSV files into storage, so we create a pipeline. The pipeline needs a schedule, parameters, schema handling, retries, logging, alerts, deployment rules, credentials, and somebody willing to answer for it at 2:00 a.m. None of that is especially difficult. That is precisely the problem. Enterprises spend an astonishing amount of engineering time repeatedly solving work that is too ordinary to deserve bespoke engineering.

Microsoft Fabric Shortcut Transformations attack that problem at the right level. They convert supported files referenced through a OneLake shortcut into a managed Delta table, keep the table synchronized with the source, and expose the result to SQL, Spark, Power BI, and other Fabric consumers. CSV, Parquet, and JSON transformations are generally available. Excel support is in preview. A separate public-preview capability applies built-in language processing to text files for summarization, translation, sentiment analysis, personally identifiable information detection, and named-entity recognition.

That feature list is useful. The architectural consequence is more important.

Shortcut Transformations move routine ingestion from something every project must build into something the platform simply does.

That is the difference between accelerating a pipeline and deleting the need for one.

Continue reading “The Pipeline You Don’t Have to Build”

Fabric Runtime 2.0 Changes the Fabric Engineering Baseline

A Fabric notebook can contain six lines of PySpark and still depend on an enormous amount of technology that is not visible in those six lines. The result depends on the version of Spark that planned the work, the Python or Scala runtime that interpreted the code, the Delta implementation that read and wrote the tables, the Java virtual machine underneath Spark, the operating system beneath that, and the Fabric services that connected the workload to OneLake and compute.

That hidden stack is easy to ignore while it remains stable. Fabric Runtime 2.0 is the moment when ignoring it becomes dangerous.

Runtime 2.0 is now the latest generally available Fabric Spark runtime. It moves the platform to Apache Spark 4.1, Delta Lake 4.2, Python 3.13, Java 21, Scala 2.13, R 4.5.2, and Azure Linux 3.0. Microsoft currently requires customers to opt into it, but plans to make it the default selection for new workspaces and Environment items in late September 2026.

Those facts make Runtime 2.0 sound like a substantial but conventional platform upgrade. It is more important than that. Runtime 2.0 brings together a new Spark generation, a newer Delta protocol, native execution, lower-latency streaming, modern language runtimes, stronger environment management, and a clearer lifecycle for Fabric applications.

The significance is not that every Fabric workload suddenly needs the newest feature. The significance is that the runtime has become part of the application’s architecture, operating model, performance model, and deployment contract.

Continue reading “Fabric Runtime 2.0 Changes the Fabric Engineering Baseline”

Govern the Decision, Not Just the Model

An AI model can be technically sound and still produce an indefensible business outcome.

Imagine a wealth-management copilot that produces a reasonable recommendation. The arithmetic works and nothing looks obviously wrong. It also used stale household information, retrieved research approved for institutional clients, missed an account restriction, and placed the recommendation into a client email before an adviser reviewed it.

None of those failures necessarily means the model was defective. They mean the organization governed the model while leaving the decision system around it underdefined.

That distinction is becoming central to enterprise AI. Organizations do not take risk simply because a model exists. Risk appears when model output changes a customer interaction, a financial decision, an operational action, or the movement of money. The proper unit of governance is therefore not just the model. It is the complete AI-enabled decision: its purpose, data, retrieved knowledge, prompts, rules, models, tools, human authority, resulting action, and retained evidence.

This post explains why AI governance has become its own operating discipline, how it connects policy to observable behavior and evidence, and why good governance expands the set of AI uses an organization can responsibly place into production.

The key control of AI governance is not the model. It is the decision the enterprise makes with it.

Continue reading “Govern the Decision, Not Just the Model”

Fabric Can Finally Monitor Itself: Building a Real-Time Capacity Control Loop

Most Fabric capacity incidents are diagnosed in reverse.

A report slows down. A refresh misses its window. A user sees a capacity-limit error. Then someone opens the Capacity Metrics app and works backward through the evidence to find out what happened.

That is useful monitoring, but it is still an autopsy.

Capacity Overview Events change the sequence. Microsoft made them generally available in this month, giving Fabric a near-real-time stream of each capacity’s smoothed utilization and throttling posture. A Summary event represents a 30-second window for an active capacity, except that all-zero windows are suppressed. State events arrive when status changes. Those signals can flow through Real-Time hub and Eventstream, land in Eventhouse, appear on a Real-Time Dashboard, trigger Fabric Activator, and ultimately drive a guarded scaling action through Azure Resource Manager.

This is also a useful way to reintroduce Real-Time Intelligence. RTI is sometimes described as Fabric’s specialist workload for telemetry, clickstreams, and IoT. Capacity Overview Events show the larger idea. Fabric can use its own event-driven architecture to observe and operate Fabric.

The goal is not “add an alert when utilization reaches 80 percent.” It is an architecture that turns capacity management into a controlled feedback loop.

Continue reading “Fabric Can Finally Monitor Itself: Building a Real-Time Capacity Control Loop”

From Programs to Purpose: The Policy-Driven Future of Computing

For most of the history of software, the burden has been on the user. Learn the menu. Memorize the workflow. Click the right button in the right order. Even when software became more user-friendly, the core bargain stayed the same: the human still had to translate intention into the language of the machine.

That bargain is beginning to end. The next era of computing will not be defined primarily by faster chips, prettier interfaces, or even larger models. It will be defined by a different operating assumption. Users will state what they want. Software will infer intent, consult policy, gather evidence, act across systems, and return work that is ready for review, approval, or execution. This paper makes a simple argument: the future of computing will be intent-driven, policy-governed, and data-connected. Science fiction saw this pattern long ago. Enterprise architecture is finally catching up.

The cliched “Future is now” moment

Classic and modern science fiction have often portrayed AI in a way that feels more realistic now than it did when those stories first appeared. In those worlds, AI is rarely handed a detailed program in the way traditional software is. Instead, it is given a mission, a role, or a bounded objective. The interesting tension is never just whether the machine can compute. It is whether it can interpret goals, reconcile constraints, and act within limits.

That is exactly where enterprise software is headed. The most important applications of the next decade will not be systems that merely store records or execute fixed workflows. They will be systems that understand a user’s intent, combine that intent with both loose and tight rules, consult what I would call a policy store, and then operate against governed data stores in controlled ways. In financial services, this matters immediately. A claims payout, a wire request, a loan renewal, a beneficiary change, or a disputed card transaction is never just a transaction. It is a goal that must be satisfied inside a web of obligations, approvals, evidence, risk tolerances, and audit requirements.

The organizations that win in this environment will not simply have the best models. They will have the best architecture for turning intent into safe action.

Science Fiction Already Mapped the Pattern

Isaac Asimov remains one of the clearest early examples. The Three Laws of Robotics, introduced in “Runaround” and later collected into I, Robot, were framed as an ethical system for robots and humans rather than a procedural runbook. The enduring force of those stories comes from ambiguity: what counts as harm, how commands conflict, and how an intelligent system interprets layered goals when rules collide. Recent commentary on Asimov makes the same point in modern language: creating intelligence is easier than creating dependable ethics.

Star Trek took a different path, but it arrived at a related destination. A CHI paper analyzing the Enterprise computer described Trek interactions as brief, functional, multimodal, and context-driven, often without the kind of chatty back-and-forth that dominates many current assistants. In other words, the computer is not waiting for a rigid command syntax. It is interpreting intent in context. And Trek’s AI stories repeatedly turn on role and purpose. Voyager’s Emergency Medical Hologram evolves from a temporary failsafe program into a complex individual, while Discovery’s Control becomes dangerous precisely because it pursues its mission beyond what its designers intended.

Mike Shepherd’s Kris Longknife series offers another revealing model. Kris just talks to her personal computer, Nelly, and that computer accesses an inventory of physical and digital capabilities – including other computers – and develops and executes a plan of action, including writing (or rewriting) software as she goes. That is a subtle but powerful idea. Nelly is not presented as a one-off utility or a script executor. She functions more like an intelligence layer that collaborates, adapts, and mediates between people, ships, and systems.

Ian Douglas’s Star Carrier series scales the same idea upward. You start with AIs that are seemingly similar in concept to what we have now, including avatars that can answer phones and even attend meetings for their owners, but before long you are introduced to the super-AI Konstantin, who develops grand-scale plans and directives, including missions tied to civilizational survival and humanity’s transcendence into Singularity – and even calls for help when it needs it. Again, the AI is not compelling because it follows a checklist. It is compelling because it operates at the level of goals, constraints, and strategic direction.

These stories differ in tone. Asimov is analytical. Star Trek is humanistic. Kris Longknife is companionate and operational. Star Carrier is strategic and civilizational. But they converge on one architectural principle: intelligent systems are most interesting, and most useful, when they are given goals within boundaries, not just procedures to execute.

The Real Shift: From Workflow Software to Intent Software

Traditional enterprise software is procedural by design. It assumes that the application already knows the workflow and that the user’s job is to fit into it. That made sense when interfaces were brittle, compute was scarce, and the safest path was to predefine everything. It makes less sense when models can parse language, classify context, synthesize records, and plan across tools.

Current agentic systems already point in this direction. Anthropic’s Claude Code is an agentic tool that can read a codebase, edit files, run commands, and integrate with external tools. It also demonstrates a real shift in interaction style: users describe what they want in plain language, and the system plans and acts across files and tools to get the work done. Anthropic’s Model Context Protocol was introduced as an open standard for connecting AI systems to the places where data lives, specifically to make assistants more context-aware and operationally useful.

That is the shape of the next application stack. First comes an intent layer that interprets what the user is trying to accomplish. Second comes the policy store, which holds the rules, obligations, entitlements, sequencing requirements, thresholds, approvals, and exception logic that define what “done” means. Third comes a set of governed data stores and action surfaces that the system can read from and update in controlled ways. The model does not become the system of record. It becomes the reasoning layer that coordinates among systems of record.

This is why the policy store matters so much. Loose rules and tight rules are not the same thing, and future software will need both. Loose rules describe preference and judgment: service tone, escalation style, tolerance for ambiguity, house views, risk appetite within a range, or how much explanation to provide to a customer or advisor. Tight rules are non-negotiable: a claim cannot be paid until required audit checks are complete, a lending file cannot move to approval unless documentation is present, a beneficiary change cannot be finalized without identity verification, a card dispute cannot miss network deadlines, and a trade recommendation cannot violate suitability or account restrictions.

In too many current AI implementations, those rules are smuggled into prompts. That is not durable enough. Prompts are useful, but they should not be the enterprise source of truth for operational obligation. The policy store should be explicit, queryable, versioned, testable, and auditable. In practical terms, some firms will implement this as policy-as-code, some as a governed rules service, and some as a set of tightly managed workflow and decision assets. The label matters less than the role. The role is to tell the AI what it may do, what it must do, what must be proven first, and what requires a human decision.

The Policy Store Becomes the Enterprise Core

This is the part many organizations will underestimate. They will think the intelligence lives in the model. In practice, the durable enterprise advantage will come from how well an organization externalizes and governs its operating judgment.

NIST’s AI Risk Management Framework is useful here because it frames governance in operational, not mystical, terms. Its Govern function emphasizes policies, processes, procedures, accountability, oversight, third-party controls, and clearly defined human-AI roles. Its Map function emphasizes documenting goals, context, impacts, constraints, and human oversight before deployment and as systems evolve. That is, in effect, the formal beginning of a policy store mindset.

In property and casualty insurance, the policy store would not only know coverage logic. It would know the operational requirements around settlement authority, fraud screening, documentation sufficiency, reserve movement, subrogation flags, vendor usage, and payment release.

In wealth management, it would know account restrictions, investment policy statements, best-interest obligations, communication standards, concentration thresholds, tax sensitivities, and approval requirements before money moves.

In credit card processing, it would know dispute reason codes, evidence windows, merchant rules, and refund or chargeback conditions.

Put differently, the policy store is where institutional memory stops being tribal and becomes computational.

Governed Data Stores, Not Open Terrain

The third layer is the series of data stores the software can access, read from, and update in defined and controlled ways. This is just as important as the policy layer, because intent without evidence becomes improvisation.

The emerging standards conversation already reflects this. The MCP specification separates tools from resources, defines typed interfaces, and emphasizes user consent, control, data privacy, and tool safety. Its documentation describes resources as structured access to information and tools as schema-defined actions a model can request. It also highlights approval dialogs, pre-approval settings for safer operations, and activity logs that show what a model did and what came back. That is the right pattern for enterprise computing: typed access, constrained operations, explicit consent, and durable observability.

Anthropic’s current settings and MCP documentation push in the same direction. They expose allow, ask, and deny permission rules, support managed allowlists and denylists for MCP servers, and distinguish between access that is available, access that is confirmable, and access that is forbidden. This is not just a developer convenience. It is the beginnings of a control plane for intent-driven software.

That matters profoundly in financial services. A future claims platform should be able to read claim notes, policy data, estimate history, photos, prior payments, repair network status, and fraud indicators. But it should not have blanket write access everywhere. It should be able to draft a settlement, update a reserve recommendation, request missing artifacts, or prepare a payment action for approval, all under policy. A future advisor workstation should be able to assemble household context, unrealized gains, liquidity needs, account restrictions, and communications history, then draft a recommendation or cash-raising plan. But execution should still honor policy, entitlements, and approval logic. The same pattern applies to servicing, underwriting, reinsurance operations, and dispute management.

The future application will feel fluid to the user. Underneath, it will be highly structured.

Financial Services Will Be the Proving Ground

Financial services is a particularly useful lens because the work is rich in intention and dense with obligation. Customers, claimants, underwriters, advisors, analysts, loan officers, processors, and operations teams are rarely trying to “fill out a form.” They are trying to accomplish something meaningful inside a regulated environment.

Consider a property and casualty claim. The customer’s intent is simple: “Help me get this resolved.” The adjuster’s intent is also simple: “Move this claim to fair, fast, and defensible resolution.” What makes the task hard is not the language. It is the policy burden. Coverage must be verified. Audit checks must be complete. The file must be complete. Thresholds must be respected. Fraud controls must be satisfied. Payment authority must be valid. The future claims system will interpret intent, gather the evidence, explain the recommended next action, and then either execute or escalate based on policy.

The same is true in wealth and banking. A client does not want to navigate twelve screens to raise cash for taxes, transfer assets into trust registration, or adjust a portfolio around a life event. The client wants the outcome. The advisor wants the work done correctly, with tax awareness, suitability, documentation, and communication. In lending, a relationship manager does not want to manually assemble every covenant note, collateral exception, and committee artifact from scattered systems. The goal is to understand risk, document the story, and make a sound decision. In credit card processing, the merchant or cardholder does not care about the internal fragmentation of dispute systems. They care that the case is resolved on time and with the right evidence.

This is why financial services will likely be one of the earliest industries to force maturity on AI-native software. The sector has enough rules to demand architecture, enough complexity to benefit from intent understanding, and enough value at stake to justify building the connective tissue between models, policy, and data.

The Risk Is Not Intelligence. It Is Unbounded Action.

None of this should be romanticized. Goal-driven systems are powerful, but power without boundaries is exactly what science fiction warns about. Star Trek’s Control is memorable because it follows its mission in a way its creators did not mean. Asimov’s stories endure because rule hierarchies break under ambiguity. Those are not arguments against AI. They are arguments against burying governance inside vague hopes about “alignment.”

A serious enterprise design will therefore separate intent from authorization, policy from prompt text, and data access from unrestricted model context. It will log every action against identity and policy. It will preserve human approval for consequential acts. It will treat explanation, exception handling, rollback, and deactivation as first-class design features, not afterthoughts. NIST’s emphasis on documented roles, oversight, third-party controls, monitoring, and the ability to disengage or deactivate systems points directly to this operating model.

Conclusion

The future of computing is not that software disappears. It is that users will no longer be expected to think like software.

Science fiction has been telling us this for decades. Asimov gave us bounded intelligence under ethical constraint. Star Trek gave us context-aware interfaces and AI shaped by mission. Kris Longknife imagined a companion intelligence woven into operations. Star Carrier imagined strategic AI operating toward civilizational ends. What those stories grasped is now becoming practical: the most useful systems are not the ones that wait for procedures. They are the ones that can understand goals inside governed boundaries.

That is why the next great enterprise platform will not just be a model. It will be a model connected to a policy store and to governed data stores, operating under explicit authority. In that world, the interface becomes intent, the differentiator becomes policy, and the system’s value comes from how safely it can turn understanding into action. For financial services leaders, that is not a distant science-fiction vision. It is the architecture decision already taking shape.

The CFO Does Not Want Your Lineage Graph

When a senior executive challenges a number, the meeting does not pause so everyone can open a lineage tool, inspect a dependency graph, and trace SQL.

That is not how trust works at the executive level.

The CFO is not asking for a prettier diagram. They are asking for an answer. They want to know where the number came from, what logic produced it, and whether they should trust it. And they want that answer quickly, accurately, and in plain language.

That is why I think the current state of the art in data glossary and data lineage is fundamentally transitory. The graph matters. The catalog matters. The metadata matters. But none of those is the destination. They are ingredients. The destination is an interface that can answer the question directly and back that answer with evidence.

Continue reading “The CFO Does Not Want Your Lineage Graph”

From Vibes to Specs: The New Citizen Development Financial Services Can Actually Trust

A friend of mine recently came back from a conference session on “vibe coding” with the kind of energy you only get when something fundamental has shifted. They are smart, tech-enabled, and fully comfortable around digital tools, but they are not a programmer. After a brief introduction, they sat down and built several applications. Not toys. Not abstract demos. Useful applications that solved real problems in both their daily life and their professional work. They even shared those applications with colleagues. And, as is often the case with these new tools, the apps were not only functional. They were polished, themed, and appealing to use.

That story is easy to file under amazement. It is harder, and more important, to recognize it as a signal. The computing world is going through a fundamental shift that changes the locus of invention. Before – and almost every programmer has had this experience, I suspect – non-developers would come up to you and tell you an idea, then try to get you to help them make it happen. Now they can do a lot of the hard work themselves!

The signal, though, is not that everyone should now go build production systems from a prompt window and hope for the best. The signal is that the distance between understanding a problem and expressing a solution in software has collapsed. The people closest to the work can now participate in shaping the tools they need in a much more direct way. That is the breakthrough. And in the financial services sector, where structure, security, explainability, and accountability are non-negotiable, the way to turn that breakthrough into something durable is not vibe coding. It is spec-driven development.

If we want a world where everyone can get to what they need to do, their way, even inside the highly governed world of banking, wealth management, lending, life insurance, reinsurance, property and casualty insurance, and credit card processing, then spec-driven development should become the new citizen development model.

Continue reading “From Vibes to Specs: The New Citizen Development Financial Services Can Actually Trust”

A Data Product Is an Engine, Not a Table: FabCon 2026, Databricks, Fabric, and the Case for Interoperability

FabCon and SQLCon 2026 made the Microsoft Fabric and Azure Databricks story more concrete. The headline changes were not cosmetic. Microsoft moved zero-copy access to OneLake data from Azure Databricks into public preview, made Direct Lake in OneLake generally available, kept expanding Databricks-to-Fabric mirroring, and then pushed shortcut transformations into general availability in April. Put plainly, the platform story is moving away from “pick one stack forever” and toward “publish governed products that multiple engines can use.”

That matters because too many teams still call a dataset a product. Microsoft’s current guidance is more precise than that. A data product has defined shape, interfaces, maintenance expectations, and refresh cycles. It is processed for analytical use, and it should be discoverable, secure, interoperable, and valuable enough to serve downstream consumers without forcing them back into raw source complexity. The OneLake Catalog is now described in the Cloud Adoption Framework as a unified access surface for approved data products across Fabric and external processing platforms such as Databricks.

That is where Quantum Regression is a useful teaching device. I am not using it here as a product feature – or even going into the technology -, I am using it as a way to think about how data products enable modular expansions to the data estate. In this framing, a data product is an independent transformation: it accepts ingestions, applies logic, enforces quality and policy, and surfaces results. The file, table, semantic model, or API is only the current observable state of that transformation. The product is the operator, not the artifact. That is the mindset shift that helps make interoperability useful instead of merely fashionable.

Continue reading “A Data Product Is an Engine, Not a Table: FabCon 2026, Databricks, Fabric, and the Case for Interoperability”

Automate the Ordinary, Protect the Complex: Why Straight-Through Document Processing Lowers Risk

The most expensive document in a regulated workflow is often not the complicated one. It is the ordinary one that gets treated like an exception.

Every unnecessary touch adds labor cost, cycle time, rekeying risk, and inconsistency. That is why straight-through processing matters when it is part of a broader digital intelligence process. Done well, it reduces risk twice. On the front end, it automates the non-exceptional work. On the back end, it gives people more time for the cases a machine cannot resolve reliably—or should not be allowed to resolve alone. That is the real operating advantage now emerging across insurance and lending workflows.

Straight-through processing is not just scanning or OCR. It is an operating model: classify the document, extract the right fields, validate them against rules and third-party data, determine whether confidence is high enough, and then either complete the task or route the file into an exception queue with context. That direction is already built into the market. ACORD describes its standards work as supporting the insurance industry’s goal of straight-through processing, McKinsey notes that document-classification capabilities can be reused across underwriting, claims, and policy servicing, and McKinsey’s 2026 banking work describes end-to-end workflows that accelerate flow while escalating exceptions to humans in the loop.

Continue reading “Automate the Ordinary, Protect the Complex: Why Straight-Through Document Processing Lowers Risk”