Blog
Notes on governed metrics
How we model, query and secure the numbers that dashboards and AI agents share. From the people building datahashi.
Agents & MCPSelf-hosting regulated AI agents without leaking warehouse credentials
How a healthcare compliance team gave LLM agents access to clinical treatment analytics inside a private VPC without exposing database passwords.
Governance & trustHow to survive warehouse schema changes without breaking dashboards
Upstream dbt jobs renamed an invoice column to amount_usd, but central semantic mapping and model tests kept dashboards running without a blip.
Modeling & metricsWhy marketing CAC and ROAS never matched finance
How governed derived metrics and transparent lineage unify customer acquisition cost and return on ad spend across marketing channels and finance.
QueryingServe a morning dashboard from rollups, not raw scans
How pre-aggregation rollups serve morning executive dashboard queries from pre-computed tables rather than scanning raw transaction tables.
Governance & trustMulti-tenant customer dashboards: row-level policy isolation
How platform engineers secure embedded customer dashboards using JWT claims, row-level policies, and query metering in a thin semantic layer.
Modeling & metricsE-commerce category tree revenue: safe hierarchical rollups
How retail merchandisers drill down SKU, category, and department revenue without fan-out bugs in a thin semantic layer.
Modeling & metricsSaaS activation and retention without 14 CTEs
How product managers analyze SaaS user activation and weekly retention across entity join graphs in a thin semantic layer.
Agents & MCPSlack bot weekly results: certified metrics for operations
How operations teams connect Slack bots to certified metrics using Model Context Protocol and query time zones in a thin semantic layer.
Modeling & metricsFinance close: one ARR across board decks and dashboards
How semi-additive snapshot measures and model tests keep ARR balances consistent across reporting tools in a thin semantic layer.
Warehouses & setupBigQuery least privilege for agents
Apply BigQuery least privilege so agent-backed semantic serving never needs broad project roles or warehouse passwords in the agent.
Warehouses & setup