知识协同组(Projects / Works / Docs / RAG / Knowledge / Workflow / BPM)


1. 介绍

1.1. 组定位与背景

知识协同组是 AI Harness 在知识与协同工作领域的赋能图景。如果说软件工程组解决的是"代码如何被可靠地写出来",那么知识协同组解决的是"组织已经知道的东西,如何被可靠地取出来、用起来、管起来、流动起来"。

企业落地大模型的第一批真实场景,绝大多数不是写代码,而是:找一份文档、答一个问题、起草一份材料、处理一张工单、跑通一条流程。这些场景的共同特征是——能力瓶颈不在模型本身,而在模型与组织既有知识资产、既有流程资产之间的承载层。这个承载层正是 AI Harness。

本组将这一领域拆分为七个相互衔接的方向:

Projects(项目工作空间)Works(工作任务与工单)Docs(文档创作与协作)RAG(检索增强生成)Knowledge(知识资产治理)Workflow(工作流编排)BPM(业务流程管理)

这七个方向不是并列的功能清单,而是一条能力递进链

图 1-1|知识协同组三层递进能力架构(信息可达 → 工作可编排 → 流程可治理)

知识协同组三层递进能力架构 七个方向 Projects → Works → Docs → RAG → Knowledge → Workflow → BPM · 基于本文分析绘制 第三层 · 流程可治理(L3 + L5 + L6) 让组织行为符合规范并可审计 BPM · 业务流程管理 BPMN 模型 / 事件日志 / 符合性报告 · 结果回流为 L6 审计证据 执行能力 / 流程本体支撑 第二层 · 工作可编排(L3 + L4 + L5) 让多步任务可靠执行 Docs · 文档创作协作 起草—核查—审阅—版本—发布可追溯 Works · 工作任务工单 工作项状态机 / SLA 可度量 Workflow · 工作流编排 服务调用 / 事件 / 断点恢复 检索溯源 / 上下文边界支撑 第一层 · 信息可达(L1 + L6)· 本图重点 让正确的知识在正确权限下可达 RAG · 检索增强生成 切分 / 索引 / 召回 / 重排 / 装配 Knowledge · 知识治理 本体 / 知识图谱 / 权限策略 Projects · 项目工作空间 上下文边界 / 项目级记忆 结构解读:七个方向构成信息可达 → 工作可编排 → 流程可治理的三层递进链,对应 Harness L1 → L3 → L6。 跳过第一层直接建设第三层,是本组最常见的落地失败路径——没有可信检索与知识治理,自动化只会放大错误。

数据来源:基于本文分析绘制的示意图。

1.2. 定义与边界

依据项目参数卡的统一口径,AI Harness(人工智能驾驭层) 位于基础模型与真实业务系统之间,负责把模型的不确定性转化为工程上的可预期性。在本组中,这种转化具体表现为三种可预期性:

可预期性类型含义承载方向对应 Harness 层
信息可达可预期组织知道的东西,模型能在正确权限范围内稳定取到RAG、KnowledgeL1 + L6
工作可编排可预期多步任务能按既定顺序执行、可中断、可恢复、可观测Works、WorkflowL3 + L4 + L5
流程可治理可预期业务流转符合规范、偏差可检出、行为可审计BPM、DocsL3 + L5 + L6

与相邻概念的边界(全文统一)

  • 本组不包含模型训练、微调、推理基础设施(属 06-数据科学组04-硬件研发组)。
  • 本组不包含代码生成与软件交付流水线(属 03-软件工程组),但共享 AGENTS.md / SKILL.md 格式与评测方法学。
  • 本组中 BPM 方向的合规与审计部分,与 08-风险合规组 共享符合性检查(conformance checking)与成文信息要求。

1.3. 三代架构演进在本组的投影

依据参数卡的三代架构演进,本组各方向的成熟度分布如下:

代际时间本组的典型形态缺失能力
第一代 · 提示词工程约 2020—2023文档靠人工撰写;问答靠单体 Prompt + Few-shot无项目工作空间、无知识库、无评估
第二代 · 工具与编排约 2023—2025RAG 原型、通用向量库、基础工作流引擎(Airflow / Temporal)、RPA无上下文工程体系、无检索评测门控、无权限感知检索
第三代 · 运行时与评估2025—至今Contextual Retrieval / GraphRAG、Durable Execution、对象中心流程挖掘(OCEL 2.0)、Projects / Skills / Artifacts 产物化,评估体系成为上线门控

第三代的核心变化是:知识与协同的产物从"对话"变成了"可版本化、可回归、可审计的工程资产"。这一变化直接决定了本组各方向文档都以"产物契约 + 评测门控 + 治理红线"为写作主线。


2. 七个方向的定位对比

2.1. 定位对比表

方向一句话定位核心问题主要产物主层次层关键外部标准/规范
Projects<br>项目工作空间为一组相关任务提供有边界、有记忆、有权限的上下文容器上下文边界在哪里?什么该共享、什么必须隔离?项目知识库、项目指令、项目级记忆摘要L1 上下文工程L4 记忆状态 / L6 治理安全AGENTS.md(就近优先)、Agent Skills
Works<br>工作任务与工单工作项的生命周期建模为可度量、可 SLA 化的状态机谁来做、做到哪一步、超时怎么办?工单状态流转、产出物(Artifact)、SLA 报表L3 编排控制L5 评估观测暂无 AI 工单编排国际标准(见 4.4);可映射 CMMN 1.1
Docs<br>文档创作与协作把文档的起草—核查—审阅—版本—发布变成可追溯流水线内容是否属实?谁改的?依据是什么?文档草稿、引用溯源表、版本与审阅留痕L1 上下文工程L3 编排控制 / L6 治理安全ISO 30401:2018 第 7.5 条成文信息(章节结构)
RAG<br>检索增强生成决定模型看到什么:切分、索引、召回、重排、上下文装配相关内容能不能被稳定召回并正确装配?索引、检索评测集、召回/忠实度跑分L1 上下文工程(核心)L5 评估观测暂无 RAG 正式标准;事实方法学为 RAGAS / BEIR / MTEB
Knowledge<br>知识资产治理把企业知识资产当作可识别、可评审、可授权、可审计的对象来管理组织知道什么?谁掌握?是否保持可用与最新?本体/知识图谱、权限策略、上架审批记录L1 + L4L6 治理安全ISO 30401:2018(ISO/TC 260,20 页,Amd 1:2022 / Amd 2:2024)
Workflow<br>工作流编排决定按什么顺序做:技术任务的服务调用、事件与容错编排中断后能否从断点恢复?循环会不会失控?工作流定义(DSL)、Event History、重放轨迹L3 编排控制(核心)L4 记忆状态 / L5 评估观测CNCF Serverless Workflow DSL(12 种任务类型、CTK、7 语言 SDK)
BPM<br>业务流程管理决定业务按什么规则流转、是否合规、偏差能否检出实际执行与规范模型的偏离有多大?BPMN 模型、DMN 决策表、事件日志、符合性报告L3 编排控制L6 治理安全 / L5 评估观测BPMN 2.0.2(= ISO/IEC 19510:2013)、CMMN 1.1、DMN 三级一致性、IEEE 1849-2023、OCEL 2.0

2.2. 方向之间的递进与依赖关系

本组建议以 "信息可达 → 工作可编排 → 流程可治理" 三层递进理解七个方向的关系,该递进与 Harness 能力从 L1 上移到 L3、再到 L6 的路径一致(以下为本文分析):

层级目标涉及方向依赖关系
第一层 · 信息可达让正确的知识在正确权限下可达RAG、Knowledge、ProjectsRAG 提供检索面,Knowledge 提供结构面(二者为 GraphRAG 的两个输入端);Projects 提供上下文边界与项目级记忆
第二层 · 工作可编排让多步任务可靠执行Docs、Works、WorkflowDocs 的事实核查依赖 RAG 的引用溯源;Works 是 Workflow 在"工作项/工单"域的具化
第三层 · 流程可治理让组织行为符合规范并可审计BPMBPM 依赖 Workflow 的执行能力,依赖 Knowledge 的流程本体(人—角色—活动—规则),并将符合性结果回流为 L6 审计证据

关键依赖提醒:跳过第一层直接建设第三层,是本组最常见的落地失败路径。没有可信的检索与知识治理,流程自动化只会把错误规模化。


3. 七方向 × Harness 六层能力映射

3.1. 映射矩阵

下表"主层/次层"判定为本文分析结论,非检索所得,引用时请注明。

方向L1 上下文工程L2 工具与执行L3 编排与控制L4 记忆与状态L5 评估与观测L6 治理与安全
Projects★★★ 主★★ 次★★ 次
Works★★★★★★★ 主★★★★ 次★★
Docs★★★ 主★★★★ 次★★★★ 次
RAG★★★ 主★★★★★★ 次★★
Knowledge★★★ 主★★★★★ 主★★★★ 次
Workflow★★★★★★★ 主★★ 次★★ 次★★
BPM★★★★★★★ 主★★★★ 次★★ 次

图例:★★★ 主层(该方向的能力核心)/★★ 次层(重要支撑)/★ 基础依赖。

3.2. 各层在本组的共性实现形态

Harness 层本组的共性实现典型技术选型(示例)
L1 上下文工程切分与索引策略、混合召回、重排、上下文装配与预算控制、小语料免 RAG 判定向量库 + BM25 + RRF 融合、cross-encoder 重排、父子块装配
L2 工具与执行文档/知识库/工单/流程系统的读写连接器;脚本化确定性操作MCP(Model Context Protocol)、Function Calling、沙箱执行器
L3 编排与控制多阶段文档流水线、工单状态机、工作流 DAG、人工介入节点Serverless Workflow DSL、Durable Execution 引擎、BPMN/CMMN 引擎
L4 记忆与状态项目级记忆摘要、会话历史、工件(Artifact)与检查点、Event History项目级 memory summary、Checkpoint / Replay
L5 评估与观测检索评测(Recall@K / nDCG@10)、生成评测(忠实度/相关性)、业务指标(分流率/SLA/符合性)RAGAS、BEIR、MTEB/MMTEB、Trace
L6 治理与安全权限继承与权限感知检索、数据分级、审计留痕、人在回路审批、成本护栏RBAC、护栏模型、审计日志、Budget Guardrail

本组最重要的 L6 结论之一:权限必须落在检索层,而不是仅落在应用层。英国政府 M365 Copilot 跨部门试验的官方报告给出了一手表述——工具"adopts the permissions of the end user and will only retrieve documents that a user could normally access",同时官方也警告"Copilot's ability to search and query using a user's access may highlight issues when users have access to files they shouldn't"(GOV.UK 官方出版物,R1)。这意味着权限继承不是"配置完就安全",而是会放大既有权限配置错误


4. 本组共性挑战与对策

4.1. 挑战一:知识可达性与幻觉风险

现象:模型在没有可靠语料支撑时,会生成语法正确、事实错误的答案。

一手事实(R1):Anthropic 官方博客《Introducing Contextual Retrieval》给出,在 recall@20 口径下,基线检索失败率为 5.7%;采用 Contextual Embeddings 后降至 3.7%;叠加 Contextual BM25 后降至 2.9%;再叠加重排后降至 1.9%,官方原文表述为"reduce the number of failed retrievals by 49% and, when combined with reranking, by 67%"。预处理一次性成本约 $1.02 / 百万文档 token

一手事实(R1):data.world GenAI Benchmark I 显示,在 43 个业务问题上,裸 LLM 的平均执行准确率仅 16.7%,其中"指标与 KPI"与"战略规划"两类高 schema 复杂度问题为 0%;接入知识图谱后准确率提升至 3 倍;其 GenAI Benchmark II 叠加 OBQC(Ontology-based Query Check)与 LLM Repair 后,准确率达 72.55%,相对纯 SQL 提升 4.2 倍

对策

  1. 检索先行,生成在后——没有召回支撑的断言一律不输出("无源不答")。
  2. 为检索链路设定召回评测门控(Recall@K),而非只看端到端答案质量。
  3. 对结构化/高复杂度查询,优先走知识图谱或本体校验路径,而非纯文本 RAG。

平衡提示:上述 16.7% → 3 倍 → 72.55% 出自 data.world 自研基准(43 题、13 张表、单一保险领域、GPT-4 零样本),第三方审慎评价认为其未经大规模第三方复现,应视为该团队自研方法的上限参考,而非行业普遍预期(详见 05-knowledge.md)。

4.2. 挑战二:权限感知与数据分级

现象:向量库与 LLM 本身不擅长按角色限定信息范围;一旦语料入库,权限边界容易在检索环节丢失。

对策

  1. 权限感知检索(permission-aware retrieval):在检索层做结果过滤,而非仅在生成后做脱敏。
  2. 知识图谱可在图层面挂接权限策略,在查询层排除无权节点与关系。
  3. 数据分级前置到入库环节,密级作为索引字段而非事后标签。
  4. 定期以"越权检索用例"做红队测试,把失败用例纳入回归集。

4.3. 挑战三:长上下文的物理局限

现象:即使上下文窗口足够大,模型对中部信息的利用率仍显著下降。

一手/权威事实

  • Lost in the Middle(Liu et al., TACL 2024):多文档问答呈 U 形曲线,答案位于上下文首部或尾部时准确率最高,中部显著下降;某些配置下把相关信息埋在中部,表现甚至低于该模型的闭卷(closed-book)表现,即召回的上下文是净负收益(R2)。
  • RULER(Hsieh et al., NVIDIA,COLM 2024):评测的 17 个长上下文模型中,只有约一半能在 32K 长度维持令人满意的表现(R2)。
  • NoLiMa(Modarressi et al., ICML 2025):在 13 个宣称支持 ≥128K 的模型中,11 个在 32K 时就跌破其自身短上下文准确率的一半;GPT-4o 从 99.3% 降到 69.7%(R2)。
  • 何时可以不用 RAG(R1,Anthropic 官方原文):"If your knowledge base is smaller than 200,000 tokens (about 500 pages of material), you can just include the entire knowledge base in the prompt... with no need for RAG or similar methods."

对策:长上下文不是 RAG 的替代品,而是 RAG 的补充。上下文预算管理、结果重排、关键信息前置与后置,属于 L1 的必备工程动作。

4.4. 挑战四:标准缺位与评测口径不统一

现象:本组七个方向中,只有 Knowledge(ISO 30401)与 BPM(BPMN/CMMN/DMN/IEEE 1849/OCEL)有正式标准组织背书;RAG、Docs、Works 三个方向至今没有对应的 ISO/IEEE 正式标准

本组已确认的信息缺口(须在相关方向文档中如实声明)

缺口状态
"AI 工单编排"的公开国际标准暂无权威标准/规范
"AI 文档版本与审阅"的公开标准暂无权威标准/规范
RAG 的 ISO/IEEE 正式标准暂无权威标准/规范
知识协同场景专用的官方 AGENTS.md / SKILL.md 模板暂无权威标准/规范
Projects 的官方 API/协议规范(非产品文档层面)暂无权威标准/规范
多项目间上下文泄漏率/隔离强度的公开量化评测暂无权威标准/规范
Skill 触发准确率的官方评测方法学暂无权威标准/规范
流程挖掘(非 RPA)市场的权威规模数据暂无权威标准/规范
Chroma / Weaviate 切分研究的原始页面未获取到,相关数值标
ISO 30401:2018 条文原文付费标准,仅获章节结构与二手解读

对策

  1. 有正式标准的方向(Knowledge、BPM)以标准条款为合规基线。
  2. 无正式标准的方向,采用社区/厂商事实标准(de facto)作为工程约定,并明确标注其非标准属性——例如 AGENTS.md 应表述为"开源社区事实标准,由 Linux Foundation 旗下 Agentic AI Foundation 托管",不得写成标准编号。
  3. 建立组织内部的黄金集(Golden Dataset)与门控阈值,用自有数据弥补公共基准缺位。

4.5. 挑战五:人在回路的工程化

现象:人工审阅常被做成"流程末尾的一个补丁",导致回滚成本高、责任归属模糊。

对策

  1. 人工介入点(human-in-the-loop)应作为一等节点写入工作流定义,而非旁路。
  2. 需人工审阅的高风险节点应明确枚举:文档定稿、知识上架、流程发布、涉及资金与法定义务的动作。
  3. 审阅节点必须产出结构化留痕(审阅人、时间、结论、修改理由),供 L5 观测与 L6 审计消费。
  4. CMMN 1.1 的 case / plan item / sentry(entry & exit criteria)语义,是表达"知识工作者临时决策"最接近的标准模型(详见 07-bpm.md)。

5. 文档导航

序号文档内容建议阅读顺序
0README.md本组概述、七方向定位对比、六层能力映射、共性挑战与对策1
1AGENTS.md组级上位规范:知识类任务的角色边界、语料与检索契约、引用与溯源、幻觉防控、权限与数据分级、人在回路、验收标准2
2SKILL.md组级标准 Skill,定义本组 Skill 的通用结构与触发契约2
301-projects.mdProjects:项目级工作空间、多项目上下文隔离与共享3
402-works.mdWorks:工作任务/工单/产出物的编排与管理4
503-docs.mdDocs:文档创作、协作、版本与审阅4
604-rag.mdRAG:索引、切分、召回、重排、上下文装配(本组技术密度最高)3
705-knowledge.mdKnowledge:知识库/知识图谱/企业知识资产治理3
806-workflow.mdWorkflow:工作流编排、自动化、任务编排引擎4
907-bpm.mdBPM:业务流程管理、流程挖掘、流程自动化与合规5

阅读路径建议

  • 工程落地路径04-rag.md05-knowledge.md01-projects.md03-docs.md
  • 流程自动化路径06-workflow.md02-works.md07-bpm.md
  • 合规审计路径05-knowledge.md07-bpm.mdAGENTS.md

6. 总结

知识协同组是 AI Harness 从"技术概念"走向"组织生产力"的主战场。本组的七个方向构成了一条从上下文边界(Projects)到任务编排(Works / Docs)、从检索增强(RAG)到知识资产治理(Knowledge)、再到工作流与业务流程(Workflow / BPM)的完整链路。

本组的核心工程判断可归纳为五条:

  1. 检索质量决定生成质量的上限。Contextual Retrieval + Reranking 可将检索失败率从 5.7% 降至 1.9%(-67%,R1),这一收益来自工程层而非模型层。
  2. 结构化知识对复杂查询是必需的而非可选的。裸 LLM 在高 schema 复杂度问题上准确率为 0%,知识图谱与本体校验带来的提升是量级性的(R1)。
  3. 长上下文不能替代上下文工程。U 形位置效应与 RULER / NoLiMa 的证据表明,堆上下文可能带来负收益(R2)。
  4. 权限必须下沉到检索层。权限继承会放大既有配置错误,这是本组最典型也最容易被忽视的 L6 风险(R1)。
  5. 标准缺位是常态,评测集是补位手段。本组 7 个方向中 5 个无正式标准,组织内部黄金集与门控阈值应作为事实基线。

需要坦率承认的是,本组存在明显的信息缺口:RAG 切分与检索的多数量化参数来自二手聚合站,Gartner 市场数据全部为二手转述,ISO 30401 条文原文受付费墙限制无法直接引用。这些缺口已在各方向文档的"信息缺口声明"中逐条列出,未做任何编造性补位。


7. 参考资料

  1. Introducing Contextual Retrieval — Anthropic,2024。https://www.anthropic.com/news/contextual-retrieval
  2. Generative AI Benchmark I: Increasing the Accuracy of LLMs in the Enterprise with a Knowledge Graph — data.world。https://data.world/blog/generative-ai-benchmark-increasing-the-accuracy-of-llms-in-the-enterprise-with-a-knowledge-graph
  3. GenAI Benchmark II: Increased LLM Accuracy with Ontology-Based Query Checks and LLM Repair — data.world。https://data.world/blog/genai-benchmark-ii-increased-llm-accuracy-with-ontology-based-query-checks-and-llm-repair
  4. ISO 30401:2018 Knowledge management systems — Requirements — ISO。https://www.iso.org/standard/68683.html
  5. Microsoft 365 Copilot Experiment: Cross-Government Findings Report — GOV.UK,2025。https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report/microsoft-365-copilot-experiment-cross-government-findings-report-html
  6. AGENTS.md — A simple, open format for guiding coding agents。https://agents.md/
  7. Equipping agents for the real world with Agent Skills — Anthropic Engineering。https://anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills
  8. Building Effective Agents — Anthropic Research。https://www.anthropic.com/research/building-effective-agents
  9. Serverless Workflow Specification — CNCF / serverlessworkflow。https://github.com/serverlessworkflow/specification
  10. BPMN 2.0 — Object Management Group。https://www.omg.org/spec/BPMN/2.0/
  11. CMMN 1.1 — Object Management Group。https://www.omg.org/spec/CMMN/1.1/About-CMMN
  12. OCEL 2.0 — Object-Centric Event Log Standard。https://www.ocel-standard.org/
  13. Lost in the Middle: How Language Models Use Long Contexts — Liu et al., TACL 2024。https://arxiv.org/abs/2307.03172
  14. Model Context Protocol Specification Changelog — MCP。https://modelcontextprotocol.io/specification/2025-06-18/changelog

Knowledge Collaboration Group (Projects / Works / Docs / RAG / Knowledge / Workflow / BPM)

1. Introduction

1.1. Group Positioning and Background

The Knowledge Collaboration Group is AI Harness's empowerment blueprint in the knowledge and collaboration work domain. If the software engineering group addresses "how code is reliably written", then the Knowledge Collaboration Group addresses "how what the organization already knows is reliably extracted, used, managed, and made to flow".

The first batch of real scenarios where enterprises deploy large models is, in the overwhelming majority of cases, not about writing code but about: finding a document, answering a question, drafting material, processing a ticket, running a process end to end. What these scenarios share is that the capability bottleneck is not the model itself but the carrier layer between the model and the organization's existing knowledge assets and existing process assets. That carrier layer is precisely AI Harness.

This group splits this domain into seven interlocking directions:

Projects (project workspace)Works (work tasks and tickets)Docs (document creation and collaboration)RAG (retrieval-augmented generation)Knowledge (knowledge asset governance)Workflow (workflow orchestration)BPM (business process management)

These seven directions are not a parallel feature list but a progressive capability chain.

图 1-1|知识协同组三层递进能力架构(信息可达 → 工作可编排 → 流程可治理)

知识协同组三层递进能力架构 七个方向 Projects → Works → Docs → RAG → Knowledge → Workflow → BPM · 基于本文分析绘制 第三层 · 流程可治理(L3 + L5 + L6) 让组织行为符合规范并可审计 BPM · 业务流程管理 BPMN 模型 / 事件日志 / 符合性报告 · 结果回流为 L6 审计证据 执行能力 / 流程本体支撑 第二层 · 工作可编排(L3 + L4 + L5) 让多步任务可靠执行 Docs · 文档创作协作 起草—核查—审阅—版本—发布可追溯 Works · 工作任务工单 工作项状态机 / SLA 可度量 Workflow · 工作流编排 服务调用 / 事件 / 断点恢复 检索溯源 / 上下文边界支撑 第一层 · 信息可达(L1 + L6)· 本图重点 让正确的知识在正确权限下可达 RAG · 检索增强生成 切分 / 索引 / 召回 / 重排 / 装配 Knowledge · 知识治理 本体 / 知识图谱 / 权限策略 Projects · 项目工作空间 上下文边界 / 项目级记忆 结构解读:七个方向构成信息可达 → 工作可编排 → 流程可治理的三层递进链,对应 Harness L1 → L3 → L6。 跳过第一层直接建设第三层,是本组最常见的落地失败路径——没有可信检索与知识治理,自动化只会放大错误。

数据来源:基于本文分析绘制的示意图。

1.2. Definition and Boundaries

Per the unified definition in the project parameter card, AI Harness (AI harness layer) sits between the foundation models and real business systems, and is responsible for converting the model's uncertainty into engineering predictability. In this group, this conversion manifests concretely as three kinds of predictability:

Predictability typeMeaningCarrier directionCorresponding Harness layer
Information reachability predictabilityWhat the organization knows can be reliably retrieved by the model within correct permission boundsRAG, KnowledgeL1 + L6
Work orchestration predictabilityMulti-step tasks execute in a defined order, and can be interrupted, resumed, and observedWorks, WorkflowL3 + L4 + L5
Process governance predictabilityBusiness flows conform to norms, deviations can be detected, and behavior is auditableBPM, DocsL3 + L5 + L6

Boundaries with adjacent concepts (applied consistently throughout):

  • This group does not cover model training, fine-tuning, or inference infrastructure (belonging to 06-Data Science Group and 04-Hardware R&D Group).
  • This group does not cover code generation and the software-delivery pipeline (belonging to 03-Software Engineering Group), but shares the AGENTS.md / SKILL.md format and evaluation methodology.
  • In this group, the compliance and audit part of the BPM direction shares conformance checking and documented-information requirements with the 08-Risk & Compliance Group.

1.3. Projection of the Three-Generation Architecture Evolution in This Group

According to the three-generation architecture evolution in the parameter card, the maturity distribution of each direction in this group is as follows:

GenerationTimeframeTypical form in this groupMissing capability
1st gen · Prompt engineering~2020–2023Documents written manually; QA via monolithic Prompt + Few-shotNo project workspace, no knowledge base, no evaluation
2nd gen · Tools and orchestration~2023–2025RAG prototypes, general-purpose vector stores, basic workflow engines (Airflow / Temporal), RPANo context-engineering system, no retrieval-evaluation gate, no permission-aware retrieval
3rd gen · Runtime and evaluation2025–presentContextual Retrieval / GraphRAG, Durable Execution, object-centric process mining (OCEL 2.0), Projects / Skills / Artifacts as artifacts, evaluation system serving as the release gate

The core change of the third generation is: the artifacts of knowledge and collaboration have shifted from "conversations" to "versionable, regressable, auditable engineering assets". This change directly determines that the documents for every direction in this group use "artifact contract + evaluation gate + governance red line" as their writing thread.


2. Positioning Comparison of the Seven Directions

2.1. Positioning Comparison Table

DirectionOne-line positioningCore questionPrimary artifactsPrimary layerSecondary layerKey external standards/specs
Projects<br>Project workspaceProvide a bounded, memory-backed, permissioned context container for a set of related tasksWhere is the context boundary? What should be shared, what must be isolated?Project knowledge base, project instructions, project-level memory summaryL1 Context EngineeringL4 Memory State / L6 Governance & SecurityAGENTS.md (nearest-first), Agent Skills
Works<br>Work tasks and ticketsModel the lifecycle of a work item as a measurable, SLA-capable state machineWho does it, how far along is it, what happens on timeout?Ticket state transitions, artifacts, SLA reportsL3 Orchestration & ControlL5 Evaluation & ObservabilityNo international AI ticket-orchestration standard yet (see 4.4); can map to CMMN 1.1
Docs<br>Document creation and collaborationTurn the document draft—verify—review—version—publish pipeline into a traceable flowIs the content accurate? Who changed it? What is the evidence?Document drafts, citation-traceability table, version and review recordsL1 Context EngineeringL3 Orchestration & Control / L6 Governance & SecurityISO 30401:2018 clause 7.5 documented information (chapter structure)
RAG<br>Retrieval-augmented generationDetermines what the model sees: chunking, indexing, recall, reranking, context assemblyCan relevant content be reliably recalled and correctly assembled?Index, retrieval evaluation set, recall/faithfulness scoresL1 Context Engineering (core)L5 Evaluation & ObservabilityNo formal RAG standard yet; factual methodology is RAGAS / BEIR / MTEB
Knowledge<br>Knowledge asset governanceManage enterprise knowledge assets as identifiable, reviewable, authorizable, auditable objectsWhat does the organization know? Who holds it? Is it kept usable and current?Ontology/knowledge graph, permission policies, publishing-approval recordsL1 + L4L6 Governance & SecurityISO 30401:2018 (ISO/TC 260, 20 pages, Amd 1:2022 / Amd 2:2024)
Workflow<br>Workflow orchestrationDetermines in what order to do things: service calls for technical tasks, event and failure-tolerant orchestrationCan it resume from a checkpoint after interruption? Will loops spin out of control?Workflow definition (DSL), Event History, replay tracesL3 Orchestration & Control (core)L4 Memory State / L5 Evaluation & ObservabilityCNCF Serverless Workflow DSL (12 task types, CTK, 7-language SDK)
BPM<br>Business process managementDetermines by what rules the business flows, whether it complies, and whether deviations can be detectedHow far does actual execution deviate from the normative model?BPMN models, DMN decision tables, event logs, conformance reportsL3 Orchestration & ControlL6 Governance & Security / L5 Evaluation & ObservabilityBPMN 2.0.2 (= ISO/IEC 19510:2013), CMMN 1.1, DMN three-level conformance, IEEE 1849-2023, OCEL 2.0

2.2. Progression and Dependency Between Directions

This group recommends understanding the relationship between the seven directions through a three-layer progression of "information accessibility → work orchestration → process governance", which is consistent with the path of Harness capabilities moving up from L1 to L3 and then to L6 (the following is this document's analysis):

LayerGoalDirections involvedDependencies
Layer 1 · Information accessibilityMake the right knowledge accessible under the right permissionsRAG, Knowledge, ProjectsRAG provides the retrieval surface, Knowledge provides the structural surface (the two input sides of GraphRAG); Projects provides the context boundary and project-level memory
Layer 2 · Work orchestrationMake multi-step tasks execute reliablyDocs, Works, WorkflowDocs' fact-checking depends on RAG's citation traceability; Works is Workflow concretized in the "work item / ticket" domain
Layer 3 · Process governanceMake organizational behavior conform to norms and be auditableBPMBPM depends on Workflow's execution capability and Knowledge's process ontology (people—roles—activities—rules), and feeds conformance results back as L6 audit evidence

Key dependency reminder: skipping Layer 1 and directly building Layer 3 is the most common deployment-failure path in this group. Without trustworthy retrieval and knowledge governance, process automation merely scales up the errors.


3. Mapping of the Seven Directions × Harness Six-Layer Capabilities

3.1. Mapping Matrix

The "primary/secondary layer" determination in the table below is an analytic conclusion of this document, not retrieved from research; please note this when citing.

DirectionL1 Context EngineeringL2 Tools & ExecutionL3 Orchestration & ControlL4 Memory & StateL5 Evaluation & ObservabilityL6 Governance & Security
Projects★★★ primary★★ secondary★★ secondary
Works★★★★★★★ primary★★★★ secondary★★
Docs★★★ primary★★★★ secondary★★★★ secondary
RAG★★★ primary★★★★★★ secondary★★
Knowledge★★★ primary★★★★★ primary★★★★ secondary
Workflow★★★★★★★ primary★★ secondary★★ secondary★★
BPM★★★★★★★ primary★★★★ secondary★★ secondary

Legend: ★★★ primary layer (the capability core of that direction) / ★★ secondary layer (important support) / ★ basic dependency.

3.2. Common Implementation Forms of Each Layer in This Group

Harness layerCommon implementation in this groupTypical technology choices (examples)
L1 Context EngineeringChunking and indexing strategies, hybrid recall, reranking, context assembly and budget control, small-corpus no-RAG determinationVector store + BM25 + RRF fusion, cross-encoder reranking, parent–child chunk assembly
L2 Tools & ExecutionRead/write connectors for document/knowledge-base/ticket/process systems; scripted deterministic operationsMCP (Model Context Protocol), Function Calling, sandbox executor
L3 Orchestration & ControlMulti-stage document pipeline, ticket state machine, workflow DAG, human-in-the-loop nodesServerless Workflow DSL, Durable Execution engine, BPMN/CMMN engine
L4 Memory & StateProject-level memory summary, session history, artifacts and checkpoints, Event HistoryProject-level memory summary, Checkpoint / Replay
L5 Evaluation & ObservabilityRetrieval evaluation (Recall@K / nDCG@10), generation evaluation (faithfulness/relevance), business metrics (deflection rate/SLA/conformance)RAGAS, BEIR, MTEB/MMTEB, Trace
L6 Governance & SecurityPermission inheritance and permission-aware retrieval, data classification, audit trails, human-in-the-loop approval, cost guardrailsRBAC, guardrail models, audit logs, Budget Guardrail

One of the most important L6 conclusions in this group: permissions must be enforced at the retrieval layer, not only at the application layer. The official report of the UK government's M365 Copilot cross-department trial states this in first-hand terms — the tool "adopts the permissions of the end user and will only retrieve documents that a user could normally access", while the officials also warn that "Copilot's ability to search and query using a user's access may highlight issues when users have access to files they shouldn't" (GOV.UK official publication, R1). This means permission inheritance is not "safe once configured", but instead amplifies existing permission-configuration errors.


4. Common Challenges of This Group and Countermeasures

4.1. Challenge 1: Knowledge Accessibility and Hallucination Risk

Phenomenon: Without reliable corpus support, the model generates grammatically correct but factually wrong answers.

First-hand fact (R1): Anthropic's official blog post "Introducing Contextual Retrieval" states that, at the recall@20 metric, the baseline retrieval failure rate is 5.7%; it drops to 3.7% with Contextual Embeddings; to 2.9% when Contextual BM25 is added; and to 1.9% when reranking is added on top — the official wording is "reduce the number of failed retrievals by 49% and, when combined with reranking, by 67%". The one-time preprocessing cost is about $1.02 / million document tokens.

First-hand fact (R1): data.world's GenAI Benchmark I shows that across 43 business questions, a bare LLM achieves only 16.7% average execution accuracy, and 0% on the two high-schema-complexity categories "metrics and KPIs" and "strategic planning"; after connecting a knowledge graph, accuracy rises to ; with GenAI Benchmark II adding OBQC (Ontology-based Query Check) and LLM Repair, accuracy reaches 72.55%, a 4.2× improvement over pure SQL.

Countermeasures:

  1. Retrieve first, generate later — never output a claim not backed by recall ("no answer without a source").
  2. Set a recall-evaluation gate (Recall@K) on the retrieval chain rather than looking only at end-to-end answer quality.
  3. For structured/high-complexity queries, prefer the knowledge-graph or ontology-validation path over plain-text RAG.

Balance note: the above 16.7% → 3× → 72.55% figures come from data.world's own benchmark (43 questions, 13 tables, a single insurance domain, GPT-4 zero-shot); third-party cautious assessments consider it not validated by large-scale third-party reproduction, so it should be treated as an upper-bound reference for that team's own method, not as an industry-wide expectation (see 05-knowledge.md).

4.2. Challenge 2: Permission Awareness and Data Classification

Phenomenon: Vector stores and LLMs are not inherently good at limiting the information scope by role; once the corpus is ingested, permission boundaries are easily lost in the retrieval step.

Countermeasures:

  1. Permission-aware retrieval: filter results at the retrieval layer rather than only redacting after generation.
  2. The knowledge graph can attach permission policies at the graph level, excluding unauthorized nodes and relations at the query layer.
  3. Push data classification upstream into the ingestion step, making sensitivity level an index field rather than a post-hoc label.
  4. Regularly run red-team tests with "over-permission retrieval" cases and fold the failures into the regression set.

4.3. Challenge 3: Physical Limitations of Long Context

Phenomenon: Even when the context window is large enough, the model's utilization of information in the middle remains markedly lower.

First-hand / authoritative facts:

  • Lost in the Middle (Liu et al., TACL 2024): multi-document QA shows a U-shaped curve — accuracy is highest when the answer sits at the head or tail of the context and drops significantly in the middle; under some configurations, burying the relevant information in the middle even performs below the model's closed-book performance, meaning the recalled context is a net loss (R2).
  • RULER (Hsieh et al., NVIDIA, COLM 2024): of the 17 long-context models evaluated, only about half maintain satisfactory performance at 32K length (R2).
  • NoLiMa (Modarressi et al., ICML 2025): among 13 models claiming ≥128K support, 11 fall below half of their own short-context accuracy already at 32K; GPT-4o drops from 99.3% to 69.7% (R2).
  • When RAG can be omitted (R1, Anthropic official wording): "If your knowledge base is smaller than 200,000 tokens (about 500 pages of material), you can just include the entire knowledge base in the prompt... with no need for RAG or similar methods."

Countermeasure: long context is not a substitute for RAG, but a complement to it. Context budget management, result reranking, and placing key information at the head and tail are essential L1 engineering actions.

4.4. Challenge 4: Missing Standards and Inconsistent Evaluation Criteria

Phenomenon: Among this group's seven directions, only Knowledge (ISO 30401) and BPM (BPMN/CMMN/DMN/IEEE 1849/OCEL) are backed by formal standard bodies; the RAG, Docs, and Works directions still have no corresponding ISO/IEEE formal standard.

Confirmed information gaps in this group (must be honestly declared in the relevant direction documents):

GapStatus
Public international standard for "AI ticket orchestration"No authoritative standard/spec yet
Public standard for "AI document versioning and review"No authoritative standard/spec yet
ISO/IEEE formal standard for RAGNo authoritative standard/spec yet
Official AGENTS.md / SKILL.md template dedicated to knowledge-collaboration scenariosNo authoritative standard/spec yet
Official API/protocol spec for Projects (beyond product-documentation level)No authoritative standard/spec yet
Public quantitative evaluation of inter-project context-leakage rate / isolation strengthNo authoritative standard/spec yet
Official evaluation methodology for Skill trigger accuracyNo authoritative standard/spec yet
Authoritative market-size data for process mining (non-RPA)No authoritative standard/spec yet
Original pages of the Chroma / Weaviate chunking researchNot obtained; related figures marked [To be verified]
Original text of ISO 30401:2018 clausesPaid standard; only chapter structure and second-hand interpretation obtained

Countermeasures:

  1. For directions with formal standards (Knowledge, BPM), use the standard clauses as the compliance baseline.
  2. For directions without formal standards, adopt community/vendor de facto standards as engineering conventions, and clearly mark their non-standard nature — for example, AGENTS.md should be described as "a de facto open-source community standard, hosted by the Agentic AI Foundation under the Linux Foundation", not written as a standard number.
  3. Establish an internal Golden Dataset and gate thresholds in-house, using proprietary data to compensate for the lack of public benchmarks.

4.5. Challenge 5: Engineering the Human-in-the-Loop

Phenomenon: Human review is often treated as "a patch at the end of the process", leading to high rollback costs and ambiguous accountability.

Countermeasures:

  1. Human-intervention points (human-in-the-loop) should be written into the workflow definition as first-class nodes, not as a bypass.
  2. High-risk nodes requiring human review should be explicitly enumerated: document finalization, knowledge publishing, process release, and actions involving money and legal obligations.
  3. Review nodes must produce structured records (reviewer, time, conclusion, reason for change) for L5 observability and L6 audit to consume.
  4. CMMN 1.1's case / plan item / sentry (entry & exit criteria) semantics are the closest standard model for expressing "knowledge-worker ad hoc decisions" (see 07-bpm.md).

5. Document Navigation

No.DocumentContentSuggested reading order
0README.mdGroup overview, positioning comparison of the seven directions, six-layer capability mapping, common challenges and countermeasures1
1AGENTS.mdGroup-level superordinate spec: role boundaries for knowledge tasks, corpus and retrieval contracts, citation and traceability, hallucination prevention, permissions and data classification, human-in-the-loop, acceptance criteria2
2SKILL.mdGroup-level standard Skill, defining the common structure and trigger contract of this group's Skills2
301-projects.mdProjects: project-level workspaces, multi-project context isolation and sharing3
402-works.mdWorks: orchestration and management of work tasks / tickets / deliverables4
503-docs.mdDocs: document creation, collaboration, versioning and review4
604-rag.mdRAG: indexing, chunking, recall, reranking, context assembly (highest technical density in this group)3
705-knowledge.mdKnowledge: knowledge base / knowledge graph / enterprise knowledge asset governance3
806-workflow.mdWorkflow: workflow orchestration, automation, task-orchestration engines4
907-bpm.mdBPM: business process management, process mining, process automation and compliance5

Suggested reading paths:

  • Engineering rollout path: 04-rag.md05-knowledge.md01-projects.md03-docs.md
  • Process automation path: 06-workflow.md02-works.md07-bpm.md
  • Compliance / audit path: 05-knowledge.md07-bpm.mdAGENTS.md

6. Summary

The Knowledge Collaboration Group is the main battleground where AI Harness moves from "technology concept" to "organizational productivity". The group's seven directions form a complete chain from context boundaries (Projects) to task orchestration (Works / Docs), from retrieval augmentation (RAG) to knowledge asset governance (Knowledge), and on to workflows and business processes (Workflow / BPM).

The group's core engineering judgments can be summarized in five points:

  1. Retrieval quality sets the ceiling for generation quality. Contextual Retrieval + Reranking can reduce the retrieval failure rate from 5.7% to 1.9% (-67%, R1), and this gain comes from the engineering layer rather than the model layer.
  2. Structured knowledge is necessary, not optional, for complex queries. A bare LLM scores 0% on high-schema-complexity questions, and the lift from knowledge graphs and ontology validation is order-of-magnitude (R1).
  3. Long context cannot replace context engineering. The U-shaped positional effect and evidence from RULER / NoLiMa show that piling on context can produce net-negative returns (R2).
  4. Permissions must be pushed down to the retrieval layer. Permission inheritance amplifies existing configuration errors — this is the most typical and most easily overlooked L6 risk in this group (R1).
  5. Missing standards are the norm; evaluation sets are the compensating device. Five of the group's 7 directions lack formal standards, so an internal Golden Dataset and gate thresholds should serve as the factual baseline.

To be candid, the group has obvious information gaps: most of the quantitative parameters for RAG chunking and retrieval come from second-hand aggregation sites, all Gartner market data is second-hand retelling, and the original text of ISO 30401 clauses cannot be directly cited due to the paywall. These gaps are listed item by item in the "information-gap declarations" of each direction document, with no fabricated compensation.


7. References

  1. Introducing Contextual Retrieval — Anthropic, 2024. https://www.anthropic.com/news/contextual-retrieval
  2. Generative AI Benchmark I: Increasing the Accuracy of LLMs in the Enterprise with a Knowledge Graph — data.world. https://data.world/blog/generative-ai-benchmark-increasing-the-accuracy-of-llms-in-the-enterprise-with-a-knowledge-graph
  3. GenAI Benchmark II: Increased LLM Accuracy with Ontology-Based Query Checks and LLM Repair — data.world. https://data.world/blog/genai-benchmark-ii-increased-llm-accuracy-with-ontology-based-query-checks-and-llm-repair
  4. ISO 30401:2018 Knowledge management systems — Requirements — ISO. https://www.iso.org/standard/68683.html
  5. Microsoft 365 Copilot Experiment: Cross-Government Findings Report — GOV.UK, 2025. https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report/microsoft-365-copilot-experiment-cross-government-findings-report-html
  6. AGENTS.md — A simple, open format for guiding coding agents. https://agents.md/
  7. Equipping agents for the real world with Agent Skills — Anthropic Engineering. https://anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills
  8. Building Effective Agents — Anthropic Research. https://www.anthropic.com/research/building-effective-agents
  9. Serverless Workflow Specification — CNCF / serverlessworkflow. https://github.com/serverlessworkflow/specification
  10. BPMN 2.0 — Object Management Group. https://www.omg.org/spec/BPMN/2.0/
  11. CMMN 1.1 — Object Management Group. https://www.omg.org/spec/CMMN/1.1/About-CMMN
  12. OCEL 2.0 — Object-Centric Event Log Standard. https://www.ocel-standard.org/
  13. Lost in the Middle: How Language Models Use Long Contexts — Liu et al., TACL 2024. https://arxiv.org/abs/2307.03172
  14. Model Context Protocol Specification Changelog — MCP. https://modelcontextprotocol.io/specification/2025-06-18/changelog