知识协同组(Projects / Works / Docs / RAG / Knowledge / Workflow / BPM)
1. 介绍
1.1. 组定位与背景
知识协同组是 AI Harness 在知识与协同工作领域的赋能图景。如果说软件工程组解决的是"代码如何被可靠地写出来",那么知识协同组解决的是"组织已经知道的东西,如何被可靠地取出来、用起来、管起来、流动起来"。
企业落地大模型的第一批真实场景,绝大多数不是写代码,而是:找一份文档、答一个问题、起草一份材料、处理一张工单、跑通一条流程。这些场景的共同特征是——能力瓶颈不在模型本身,而在模型与组织既有知识资产、既有流程资产之间的承载层。这个承载层正是 AI Harness。
本组将这一领域拆分为七个相互衔接的方向:
Projects(项目工作空间) → Works(工作任务与工单) → Docs(文档创作与协作) → RAG(检索增强生成) → Knowledge(知识资产治理) → Workflow(工作流编排) → BPM(业务流程管理)
这七个方向不是并列的功能清单,而是一条能力递进链。
图 1-1|知识协同组三层递进能力架构(信息可达 → 工作可编排 → 流程可治理)
数据来源:基于本文分析绘制的示意图。
1.2. 定义与边界
依据项目参数卡的统一口径,AI Harness(人工智能驾驭层) 位于基础模型与真实业务系统之间,负责把模型的不确定性转化为工程上的可预期性。在本组中,这种转化具体表现为三种可预期性:
| 可预期性类型 | 含义 | 承载方向 | 对应 Harness 层 |
|---|---|---|---|
| 信息可达可预期 | 组织知道的东西,模型能在正确权限范围内稳定取到 | RAG、Knowledge | L1 + L6 |
| 工作可编排可预期 | 多步任务能按既定顺序执行、可中断、可恢复、可观测 | Works、Workflow | L3 + L4 + L5 |
| 流程可治理可预期 | 业务流转符合规范、偏差可检出、行为可审计 | BPM、Docs | L3 + L5 + L6 |
与相邻概念的边界(全文统一):
- 本组不包含模型训练、微调、推理基础设施(属
06-数据科学组与04-硬件研发组)。 - 本组不包含代码生成与软件交付流水线(属
03-软件工程组),但共享 AGENTS.md / SKILL.md 格式与评测方法学。 - 本组中 BPM 方向的合规与审计部分,与
08-风险合规组共享符合性检查(conformance checking)与成文信息要求。
1.3. 三代架构演进在本组的投影
依据参数卡的三代架构演进,本组各方向的成熟度分布如下:
| 代际 | 时间 | 本组的典型形态 | 缺失能力 |
|---|---|---|---|
| 第一代 · 提示词工程 | 约 2020—2023 | 文档靠人工撰写;问答靠单体 Prompt + Few-shot | 无项目工作空间、无知识库、无评估 |
| 第二代 · 工具与编排 | 约 2023—2025 | RAG 原型、通用向量库、基础工作流引擎(Airflow / Temporal)、RPA | 无上下文工程体系、无检索评测门控、无权限感知检索 |
| 第三代 · 运行时与评估 | 2025—至今 | Contextual Retrieval / GraphRAG、Durable Execution、对象中心流程挖掘(OCEL 2.0)、Projects / Skills / Artifacts 产物化,评估体系成为上线门控 | — |
第三代的核心变化是:知识与协同的产物从"对话"变成了"可版本化、可回归、可审计的工程资产"。这一变化直接决定了本组各方向文档都以"产物契约 + 评测门控 + 治理红线"为写作主线。
2. 七个方向的定位对比
2.1. 定位对比表
| 方向 | 一句话定位 | 核心问题 | 主要产物 | 主层 | 次层 | 关键外部标准/规范 |
|---|---|---|---|---|---|---|
| Projects<br>项目工作空间 | 为一组相关任务提供有边界、有记忆、有权限的上下文容器 | 上下文边界在哪里?什么该共享、什么必须隔离? | 项目知识库、项目指令、项目级记忆摘要 | L1 上下文工程 | L4 记忆状态 / L6 治理安全 | AGENTS.md(就近优先)、Agent Skills |
| Works<br>工作任务与工单 | 把工作项的生命周期建模为可度量、可 SLA 化的状态机 | 谁来做、做到哪一步、超时怎么办? | 工单状态流转、产出物(Artifact)、SLA 报表 | L3 编排控制 | L5 评估观测 | 暂无 AI 工单编排国际标准(见 4.4);可映射 CMMN 1.1 |
| Docs<br>文档创作与协作 | 把文档的起草—核查—审阅—版本—发布变成可追溯流水线 | 内容是否属实?谁改的?依据是什么? | 文档草稿、引用溯源表、版本与审阅留痕 | L1 上下文工程 | L3 编排控制 / L6 治理安全 | ISO 30401:2018 第 7.5 条成文信息(章节结构) |
| RAG<br>检索增强生成 | 决定模型看到什么:切分、索引、召回、重排、上下文装配 | 相关内容能不能被稳定召回并正确装配? | 索引、检索评测集、召回/忠实度跑分 | L1 上下文工程(核心) | L5 评估观测 | 暂无 RAG 正式标准;事实方法学为 RAGAS / BEIR / MTEB |
| Knowledge<br>知识资产治理 | 把企业知识资产当作可识别、可评审、可授权、可审计的对象来管理 | 组织知道什么?谁掌握?是否保持可用与最新? | 本体/知识图谱、权限策略、上架审批记录 | L1 + L4 | L6 治理安全 | ISO 30401:2018(ISO/TC 260,20 页,Amd 1:2022 / Amd 2:2024) |
| Workflow<br>工作流编排 | 决定按什么顺序做:技术任务的服务调用、事件与容错编排 | 中断后能否从断点恢复?循环会不会失控? | 工作流定义(DSL)、Event History、重放轨迹 | L3 编排控制(核心) | L4 记忆状态 / L5 评估观测 | CNCF Serverless Workflow DSL(12 种任务类型、CTK、7 语言 SDK) |
| BPM<br>业务流程管理 | 决定业务按什么规则流转、是否合规、偏差能否检出 | 实际执行与规范模型的偏离有多大? | BPMN 模型、DMN 决策表、事件日志、符合性报告 | L3 编排控制 | L6 治理安全 / L5 评估观测 | BPMN 2.0.2(= ISO/IEC 19510:2013)、CMMN 1.1、DMN 三级一致性、IEEE 1849-2023、OCEL 2.0 |
2.2. 方向之间的递进与依赖关系
本组建议以 "信息可达 → 工作可编排 → 流程可治理" 三层递进理解七个方向的关系,该递进与 Harness 能力从 L1 上移到 L3、再到 L6 的路径一致(以下为本文分析):
| 层级 | 目标 | 涉及方向 | 依赖关系 |
|---|---|---|---|
| 第一层 · 信息可达 | 让正确的知识在正确权限下可达 | RAG、Knowledge、Projects | RAG 提供检索面,Knowledge 提供结构面(二者为 GraphRAG 的两个输入端);Projects 提供上下文边界与项目级记忆 |
| 第二层 · 工作可编排 | 让多步任务可靠执行 | Docs、Works、Workflow | Docs 的事实核查依赖 RAG 的引用溯源;Works 是 Workflow 在"工作项/工单"域的具化 |
| 第三层 · 流程可治理 | 让组织行为符合规范并可审计 | BPM | BPM 依赖 Workflow 的执行能力,依赖 Knowledge 的流程本体(人—角色—活动—规则),并将符合性结果回流为 L6 审计证据 |
关键依赖提醒:跳过第一层直接建设第三层,是本组最常见的落地失败路径。没有可信的检索与知识治理,流程自动化只会把错误规模化。
3. 七方向 × Harness 六层能力映射
3.1. 映射矩阵
下表"主层/次层"判定为本文分析结论,非检索所得,引用时请注明。
| 方向 | L1 上下文工程 | L2 工具与执行 | L3 编排与控制 | L4 记忆与状态 | L5 评估与观测 | L6 治理与安全 |
|---|---|---|---|---|---|---|
| Projects | ★★★ 主 | ★ | ★ | ★★ 次 | ★ | ★★ 次 |
| Works | ★★ | ★★ | ★★★ 主 | ★★ | ★★ 次 | ★★ |
| Docs | ★★★ 主 | ★★ | ★★ 次 | ★ | ★★ | ★★ 次 |
| RAG | ★★★ 主 | ★★ | ★★ | ★ | ★★ 次 | ★★ |
| Knowledge | ★★★ 主 | ★★ | ★ | ★★★ 主 | ★★ | ★★ 次 |
| Workflow | ★★ | ★★ | ★★★ 主 | ★★ 次 | ★★ 次 | ★★ |
| BPM | ★★ | ★★ | ★★★ 主 | ★★ | ★★ 次 | ★★ 次 |
图例:★★★ 主层(该方向的能力核心)/★★ 次层(重要支撑)/★ 基础依赖。
3.2. 各层在本组的共性实现形态
| Harness 层 | 本组的共性实现 | 典型技术选型(示例) |
|---|---|---|
| L1 上下文工程 | 切分与索引策略、混合召回、重排、上下文装配与预算控制、小语料免 RAG 判定 | 向量库 + BM25 + RRF 融合、cross-encoder 重排、父子块装配 |
| L2 工具与执行 | 文档/知识库/工单/流程系统的读写连接器;脚本化确定性操作 | MCP(Model Context Protocol)、Function Calling、沙箱执行器 |
| L3 编排与控制 | 多阶段文档流水线、工单状态机、工作流 DAG、人工介入节点 | Serverless Workflow DSL、Durable Execution 引擎、BPMN/CMMN 引擎 |
| L4 记忆与状态 | 项目级记忆摘要、会话历史、工件(Artifact)与检查点、Event History | 项目级 memory summary、Checkpoint / Replay |
| L5 评估与观测 | 检索评测(Recall@K / nDCG@10)、生成评测(忠实度/相关性)、业务指标(分流率/SLA/符合性) | RAGAS、BEIR、MTEB/MMTEB、Trace |
| L6 治理与安全 | 权限继承与权限感知检索、数据分级、审计留痕、人在回路审批、成本护栏 | RBAC、护栏模型、审计日志、Budget Guardrail |
本组最重要的 L6 结论之一:权限必须落在检索层,而不是仅落在应用层。英国政府 M365 Copilot 跨部门试验的官方报告给出了一手表述——工具"adopts the permissions of the end user and will only retrieve documents that a user could normally access",同时官方也警告"Copilot's ability to search and query using a user's access may highlight issues when users have access to files they shouldn't"(GOV.UK 官方出版物,R1)。这意味着权限继承不是"配置完就安全",而是会放大既有权限配置错误。
4. 本组共性挑战与对策
4.1. 挑战一:知识可达性与幻觉风险
现象:模型在没有可靠语料支撑时,会生成语法正确、事实错误的答案。
一手事实(R1):Anthropic 官方博客《Introducing Contextual Retrieval》给出,在 recall@20 口径下,基线检索失败率为 5.7%;采用 Contextual Embeddings 后降至 3.7%;叠加 Contextual BM25 后降至 2.9%;再叠加重排后降至 1.9%,官方原文表述为"reduce the number of failed retrievals by 49% and, when combined with reranking, by 67%"。预处理一次性成本约 $1.02 / 百万文档 token。
一手事实(R1):data.world GenAI Benchmark I 显示,在 43 个业务问题上,裸 LLM 的平均执行准确率仅 16.7%,其中"指标与 KPI"与"战略规划"两类高 schema 复杂度问题为 0%;接入知识图谱后准确率提升至 3 倍;其 GenAI Benchmark II 叠加 OBQC(Ontology-based Query Check)与 LLM Repair 后,准确率达 72.55%,相对纯 SQL 提升 4.2 倍。
对策:
- 检索先行,生成在后——没有召回支撑的断言一律不输出("无源不答")。
- 为检索链路设定召回评测门控(Recall@K),而非只看端到端答案质量。
- 对结构化/高复杂度查询,优先走知识图谱或本体校验路径,而非纯文本 RAG。
平衡提示:上述 16.7% → 3 倍 → 72.55% 出自 data.world 自研基准(43 题、13 张表、单一保险领域、GPT-4 零样本),第三方审慎评价认为其未经大规模第三方复现,应视为该团队自研方法的上限参考,而非行业普遍预期(详见 05-knowledge.md)。
4.2. 挑战二:权限感知与数据分级
现象:向量库与 LLM 本身不擅长按角色限定信息范围;一旦语料入库,权限边界容易在检索环节丢失。
对策:
- 权限感知检索(permission-aware retrieval):在检索层做结果过滤,而非仅在生成后做脱敏。
- 知识图谱可在图层面挂接权限策略,在查询层排除无权节点与关系。
- 数据分级前置到入库环节,密级作为索引字段而非事后标签。
- 定期以"越权检索用例"做红队测试,把失败用例纳入回归集。
4.3. 挑战三:长上下文的物理局限
现象:即使上下文窗口足够大,模型对中部信息的利用率仍显著下降。
一手/权威事实:
- Lost in the Middle(Liu et al., TACL 2024):多文档问答呈 U 形曲线,答案位于上下文首部或尾部时准确率最高,中部显著下降;某些配置下把相关信息埋在中部,表现甚至低于该模型的闭卷(closed-book)表现,即召回的上下文是净负收益(R2)。
- RULER(Hsieh et al., NVIDIA,COLM 2024):评测的 17 个长上下文模型中,只有约一半能在 32K 长度维持令人满意的表现(R2)。
- NoLiMa(Modarressi et al., ICML 2025):在 13 个宣称支持 ≥128K 的模型中,11 个在 32K 时就跌破其自身短上下文准确率的一半;GPT-4o 从 99.3% 降到 69.7%(R2)。
- 何时可以不用 RAG(R1,Anthropic 官方原文):"If your knowledge base is smaller than 200,000 tokens (about 500 pages of material), you can just include the entire knowledge base in the prompt... with no need for RAG or similar methods."
对策:长上下文不是 RAG 的替代品,而是 RAG 的补充。上下文预算管理、结果重排、关键信息前置与后置,属于 L1 的必备工程动作。
4.4. 挑战四:标准缺位与评测口径不统一
现象:本组七个方向中,只有 Knowledge(ISO 30401)与 BPM(BPMN/CMMN/DMN/IEEE 1849/OCEL)有正式标准组织背书;RAG、Docs、Works 三个方向至今没有对应的 ISO/IEEE 正式标准。
本组已确认的信息缺口(须在相关方向文档中如实声明):
| 缺口 | 状态 |
|---|---|
| "AI 工单编排"的公开国际标准 | 暂无权威标准/规范 |
| "AI 文档版本与审阅"的公开标准 | 暂无权威标准/规范 |
| RAG 的 ISO/IEEE 正式标准 | 暂无权威标准/规范 |
| 知识协同场景专用的官方 AGENTS.md / SKILL.md 模板 | 暂无权威标准/规范 |
| Projects 的官方 API/协议规范(非产品文档层面) | 暂无权威标准/规范 |
| 多项目间上下文泄漏率/隔离强度的公开量化评测 | 暂无权威标准/规范 |
| Skill 触发准确率的官方评测方法学 | 暂无权威标准/规范 |
| 流程挖掘(非 RPA)市场的权威规模数据 | 暂无权威标准/规范 |
| Chroma / Weaviate 切分研究的原始页面 | 未获取到,相关数值标 |
| ISO 30401:2018 条文原文 | 付费标准,仅获章节结构与二手解读 |
对策:
- 有正式标准的方向(Knowledge、BPM)以标准条款为合规基线。
- 无正式标准的方向,采用社区/厂商事实标准(de facto)作为工程约定,并明确标注其非标准属性——例如 AGENTS.md 应表述为"开源社区事实标准,由 Linux Foundation 旗下 Agentic AI Foundation 托管",不得写成标准编号。
- 建立组织内部的黄金集(Golden Dataset)与门控阈值,用自有数据弥补公共基准缺位。
4.5. 挑战五:人在回路的工程化
现象:人工审阅常被做成"流程末尾的一个补丁",导致回滚成本高、责任归属模糊。
对策:
- 人工介入点(human-in-the-loop)应作为一等节点写入工作流定义,而非旁路。
- 需人工审阅的高风险节点应明确枚举:文档定稿、知识上架、流程发布、涉及资金与法定义务的动作。
- 审阅节点必须产出结构化留痕(审阅人、时间、结论、修改理由),供 L5 观测与 L6 审计消费。
- CMMN 1.1 的 case / plan item / sentry(entry & exit criteria)语义,是表达"知识工作者临时决策"最接近的标准模型(详见
07-bpm.md)。
5. 文档导航
| 序号 | 文档 | 内容 | 建议阅读顺序 |
|---|---|---|---|
| 0 | README.md | 本组概述、七方向定位对比、六层能力映射、共性挑战与对策 | 1 |
| 1 | AGENTS.md | 组级上位规范:知识类任务的角色边界、语料与检索契约、引用与溯源、幻觉防控、权限与数据分级、人在回路、验收标准 | 2 |
| 2 | SKILL.md | 组级标准 Skill,定义本组 Skill 的通用结构与触发契约 | 2 |
| 3 | 01-projects.md | Projects:项目级工作空间、多项目上下文隔离与共享 | 3 |
| 4 | 02-works.md | Works:工作任务/工单/产出物的编排与管理 | 4 |
| 5 | 03-docs.md | Docs:文档创作、协作、版本与审阅 | 4 |
| 6 | 04-rag.md | RAG:索引、切分、召回、重排、上下文装配(本组技术密度最高) | 3 |
| 7 | 05-knowledge.md | Knowledge:知识库/知识图谱/企业知识资产治理 | 3 |
| 8 | 06-workflow.md | Workflow:工作流编排、自动化、任务编排引擎 | 4 |
| 9 | 07-bpm.md | BPM:业务流程管理、流程挖掘、流程自动化与合规 | 5 |
阅读路径建议:
- 工程落地路径:
04-rag.md→05-knowledge.md→01-projects.md→03-docs.md - 流程自动化路径:
06-workflow.md→02-works.md→07-bpm.md - 合规审计路径:
05-knowledge.md→07-bpm.md→AGENTS.md
6. 总结
知识协同组是 AI Harness 从"技术概念"走向"组织生产力"的主战场。本组的七个方向构成了一条从上下文边界(Projects)到任务编排(Works / Docs)、从检索增强(RAG)到知识资产治理(Knowledge)、再到工作流与业务流程(Workflow / BPM)的完整链路。
本组的核心工程判断可归纳为五条:
- 检索质量决定生成质量的上限。Contextual Retrieval + Reranking 可将检索失败率从 5.7% 降至 1.9%(-67%,R1),这一收益来自工程层而非模型层。
- 结构化知识对复杂查询是必需的而非可选的。裸 LLM 在高 schema 复杂度问题上准确率为 0%,知识图谱与本体校验带来的提升是量级性的(R1)。
- 长上下文不能替代上下文工程。U 形位置效应与 RULER / NoLiMa 的证据表明,堆上下文可能带来负收益(R2)。
- 权限必须下沉到检索层。权限继承会放大既有配置错误,这是本组最典型也最容易被忽视的 L6 风险(R1)。
- 标准缺位是常态,评测集是补位手段。本组 7 个方向中 5 个无正式标准,组织内部黄金集与门控阈值应作为事实基线。
需要坦率承认的是,本组存在明显的信息缺口:RAG 切分与检索的多数量化参数来自二手聚合站,Gartner 市场数据全部为二手转述,ISO 30401 条文原文受付费墙限制无法直接引用。这些缺口已在各方向文档的"信息缺口声明"中逐条列出,未做任何编造性补位。
7. 参考资料
- Introducing Contextual Retrieval — Anthropic,2024。https://www.anthropic.com/news/contextual-retrieval
- Generative AI Benchmark I: Increasing the Accuracy of LLMs in the Enterprise with a Knowledge Graph — data.world。https://data.world/blog/generative-ai-benchmark-increasing-the-accuracy-of-llms-in-the-enterprise-with-a-knowledge-graph
- GenAI Benchmark II: Increased LLM Accuracy with Ontology-Based Query Checks and LLM Repair — data.world。https://data.world/blog/genai-benchmark-ii-increased-llm-accuracy-with-ontology-based-query-checks-and-llm-repair
- ISO 30401:2018 Knowledge management systems — Requirements — ISO。https://www.iso.org/standard/68683.html
- Microsoft 365 Copilot Experiment: Cross-Government Findings Report — GOV.UK,2025。https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report/microsoft-365-copilot-experiment-cross-government-findings-report-html
- AGENTS.md — A simple, open format for guiding coding agents。https://agents.md/
- Equipping agents for the real world with Agent Skills — Anthropic Engineering。https://anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills
- Building Effective Agents — Anthropic Research。https://www.anthropic.com/research/building-effective-agents
- Serverless Workflow Specification — CNCF / serverlessworkflow。https://github.com/serverlessworkflow/specification
- BPMN 2.0 — Object Management Group。https://www.omg.org/spec/BPMN/2.0/
- CMMN 1.1 — Object Management Group。https://www.omg.org/spec/CMMN/1.1/About-CMMN
- OCEL 2.0 — Object-Centric Event Log Standard。https://www.ocel-standard.org/
- Lost in the Middle: How Language Models Use Long Contexts — Liu et al., TACL 2024。https://arxiv.org/abs/2307.03172
- Model Context Protocol Specification Changelog — MCP。https://modelcontextprotocol.io/specification/2025-06-18/changelog
Knowledge Collaboration Group (Projects / Works / Docs / RAG / Knowledge / Workflow / BPM)
1. Introduction
1.1. Group Positioning and Background
The Knowledge Collaboration Group is AI Harness's empowerment blueprint in the knowledge and collaboration work domain. If the software engineering group addresses "how code is reliably written", then the Knowledge Collaboration Group addresses "how what the organization already knows is reliably extracted, used, managed, and made to flow".
The first batch of real scenarios where enterprises deploy large models is, in the overwhelming majority of cases, not about writing code but about: finding a document, answering a question, drafting material, processing a ticket, running a process end to end. What these scenarios share is that the capability bottleneck is not the model itself but the carrier layer between the model and the organization's existing knowledge assets and existing process assets. That carrier layer is precisely AI Harness.
This group splits this domain into seven interlocking directions:
Projects (project workspace) → Works (work tasks and tickets) → Docs (document creation and collaboration) → RAG (retrieval-augmented generation) → Knowledge (knowledge asset governance) → Workflow (workflow orchestration) → BPM (business process management)
These seven directions are not a parallel feature list but a progressive capability chain.
图 1-1|知识协同组三层递进能力架构(信息可达 → 工作可编排 → 流程可治理)
数据来源:基于本文分析绘制的示意图。
1.2. Definition and Boundaries
Per the unified definition in the project parameter card, AI Harness (AI harness layer) sits between the foundation models and real business systems, and is responsible for converting the model's uncertainty into engineering predictability. In this group, this conversion manifests concretely as three kinds of predictability:
| Predictability type | Meaning | Carrier direction | Corresponding Harness layer |
|---|---|---|---|
| Information reachability predictability | What the organization knows can be reliably retrieved by the model within correct permission bounds | RAG, Knowledge | L1 + L6 |
| Work orchestration predictability | Multi-step tasks execute in a defined order, and can be interrupted, resumed, and observed | Works, Workflow | L3 + L4 + L5 |
| Process governance predictability | Business flows conform to norms, deviations can be detected, and behavior is auditable | BPM, Docs | L3 + L5 + L6 |
Boundaries with adjacent concepts (applied consistently throughout):
- This group does not cover model training, fine-tuning, or inference infrastructure (belonging to
06-Data Science Groupand04-Hardware R&D Group). - This group does not cover code generation and the software-delivery pipeline (belonging to
03-Software Engineering Group), but shares the AGENTS.md / SKILL.md format and evaluation methodology. - In this group, the compliance and audit part of the BPM direction shares conformance checking and documented-information requirements with the
08-Risk & Compliance Group.
1.3. Projection of the Three-Generation Architecture Evolution in This Group
According to the three-generation architecture evolution in the parameter card, the maturity distribution of each direction in this group is as follows:
| Generation | Timeframe | Typical form in this group | Missing capability |
|---|---|---|---|
| 1st gen · Prompt engineering | ~2020–2023 | Documents written manually; QA via monolithic Prompt + Few-shot | No project workspace, no knowledge base, no evaluation |
| 2nd gen · Tools and orchestration | ~2023–2025 | RAG prototypes, general-purpose vector stores, basic workflow engines (Airflow / Temporal), RPA | No context-engineering system, no retrieval-evaluation gate, no permission-aware retrieval |
| 3rd gen · Runtime and evaluation | 2025–present | Contextual Retrieval / GraphRAG, Durable Execution, object-centric process mining (OCEL 2.0), Projects / Skills / Artifacts as artifacts, evaluation system serving as the release gate | — |
The core change of the third generation is: the artifacts of knowledge and collaboration have shifted from "conversations" to "versionable, regressable, auditable engineering assets". This change directly determines that the documents for every direction in this group use "artifact contract + evaluation gate + governance red line" as their writing thread.
2. Positioning Comparison of the Seven Directions
2.1. Positioning Comparison Table
| Direction | One-line positioning | Core question | Primary artifacts | Primary layer | Secondary layer | Key external standards/specs |
|---|---|---|---|---|---|---|
| Projects<br>Project workspace | Provide a bounded, memory-backed, permissioned context container for a set of related tasks | Where is the context boundary? What should be shared, what must be isolated? | Project knowledge base, project instructions, project-level memory summary | L1 Context Engineering | L4 Memory State / L6 Governance & Security | AGENTS.md (nearest-first), Agent Skills |
| Works<br>Work tasks and tickets | Model the lifecycle of a work item as a measurable, SLA-capable state machine | Who does it, how far along is it, what happens on timeout? | Ticket state transitions, artifacts, SLA reports | L3 Orchestration & Control | L5 Evaluation & Observability | No international AI ticket-orchestration standard yet (see 4.4); can map to CMMN 1.1 |
| Docs<br>Document creation and collaboration | Turn the document draft—verify—review—version—publish pipeline into a traceable flow | Is the content accurate? Who changed it? What is the evidence? | Document drafts, citation-traceability table, version and review records | L1 Context Engineering | L3 Orchestration & Control / L6 Governance & Security | ISO 30401:2018 clause 7.5 documented information (chapter structure) |
| RAG<br>Retrieval-augmented generation | Determines what the model sees: chunking, indexing, recall, reranking, context assembly | Can relevant content be reliably recalled and correctly assembled? | Index, retrieval evaluation set, recall/faithfulness scores | L1 Context Engineering (core) | L5 Evaluation & Observability | No formal RAG standard yet; factual methodology is RAGAS / BEIR / MTEB |
| Knowledge<br>Knowledge asset governance | Manage enterprise knowledge assets as identifiable, reviewable, authorizable, auditable objects | What does the organization know? Who holds it? Is it kept usable and current? | Ontology/knowledge graph, permission policies, publishing-approval records | L1 + L4 | L6 Governance & Security | ISO 30401:2018 (ISO/TC 260, 20 pages, Amd 1:2022 / Amd 2:2024) |
| Workflow<br>Workflow orchestration | Determines in what order to do things: service calls for technical tasks, event and failure-tolerant orchestration | Can it resume from a checkpoint after interruption? Will loops spin out of control? | Workflow definition (DSL), Event History, replay traces | L3 Orchestration & Control (core) | L4 Memory State / L5 Evaluation & Observability | CNCF Serverless Workflow DSL (12 task types, CTK, 7-language SDK) |
| BPM<br>Business process management | Determines by what rules the business flows, whether it complies, and whether deviations can be detected | How far does actual execution deviate from the normative model? | BPMN models, DMN decision tables, event logs, conformance reports | L3 Orchestration & Control | L6 Governance & Security / L5 Evaluation & Observability | BPMN 2.0.2 (= ISO/IEC 19510:2013), CMMN 1.1, DMN three-level conformance, IEEE 1849-2023, OCEL 2.0 |
2.2. Progression and Dependency Between Directions
This group recommends understanding the relationship between the seven directions through a three-layer progression of "information accessibility → work orchestration → process governance", which is consistent with the path of Harness capabilities moving up from L1 to L3 and then to L6 (the following is this document's analysis):
| Layer | Goal | Directions involved | Dependencies |
|---|---|---|---|
| Layer 1 · Information accessibility | Make the right knowledge accessible under the right permissions | RAG, Knowledge, Projects | RAG provides the retrieval surface, Knowledge provides the structural surface (the two input sides of GraphRAG); Projects provides the context boundary and project-level memory |
| Layer 2 · Work orchestration | Make multi-step tasks execute reliably | Docs, Works, Workflow | Docs' fact-checking depends on RAG's citation traceability; Works is Workflow concretized in the "work item / ticket" domain |
| Layer 3 · Process governance | Make organizational behavior conform to norms and be auditable | BPM | BPM depends on Workflow's execution capability and Knowledge's process ontology (people—roles—activities—rules), and feeds conformance results back as L6 audit evidence |
Key dependency reminder: skipping Layer 1 and directly building Layer 3 is the most common deployment-failure path in this group. Without trustworthy retrieval and knowledge governance, process automation merely scales up the errors.
3. Mapping of the Seven Directions × Harness Six-Layer Capabilities
3.1. Mapping Matrix
The "primary/secondary layer" determination in the table below is an analytic conclusion of this document, not retrieved from research; please note this when citing.
| Direction | L1 Context Engineering | L2 Tools & Execution | L3 Orchestration & Control | L4 Memory & State | L5 Evaluation & Observability | L6 Governance & Security |
|---|---|---|---|---|---|---|
| Projects | ★★★ primary | ★ | ★ | ★★ secondary | ★ | ★★ secondary |
| Works | ★★ | ★★ | ★★★ primary | ★★ | ★★ secondary | ★★ |
| Docs | ★★★ primary | ★★ | ★★ secondary | ★ | ★★ | ★★ secondary |
| RAG | ★★★ primary | ★★ | ★★ | ★ | ★★ secondary | ★★ |
| Knowledge | ★★★ primary | ★★ | ★ | ★★★ primary | ★★ | ★★ secondary |
| Workflow | ★★ | ★★ | ★★★ primary | ★★ secondary | ★★ secondary | ★★ |
| BPM | ★★ | ★★ | ★★★ primary | ★★ | ★★ secondary | ★★ secondary |
Legend: ★★★ primary layer (the capability core of that direction) / ★★ secondary layer (important support) / ★ basic dependency.
3.2. Common Implementation Forms of Each Layer in This Group
| Harness layer | Common implementation in this group | Typical technology choices (examples) |
|---|---|---|
| L1 Context Engineering | Chunking and indexing strategies, hybrid recall, reranking, context assembly and budget control, small-corpus no-RAG determination | Vector store + BM25 + RRF fusion, cross-encoder reranking, parent–child chunk assembly |
| L2 Tools & Execution | Read/write connectors for document/knowledge-base/ticket/process systems; scripted deterministic operations | MCP (Model Context Protocol), Function Calling, sandbox executor |
| L3 Orchestration & Control | Multi-stage document pipeline, ticket state machine, workflow DAG, human-in-the-loop nodes | Serverless Workflow DSL, Durable Execution engine, BPMN/CMMN engine |
| L4 Memory & State | Project-level memory summary, session history, artifacts and checkpoints, Event History | Project-level memory summary, Checkpoint / Replay |
| L5 Evaluation & Observability | Retrieval evaluation (Recall@K / nDCG@10), generation evaluation (faithfulness/relevance), business metrics (deflection rate/SLA/conformance) | RAGAS, BEIR, MTEB/MMTEB, Trace |
| L6 Governance & Security | Permission inheritance and permission-aware retrieval, data classification, audit trails, human-in-the-loop approval, cost guardrails | RBAC, guardrail models, audit logs, Budget Guardrail |
One of the most important L6 conclusions in this group: permissions must be enforced at the retrieval layer, not only at the application layer. The official report of the UK government's M365 Copilot cross-department trial states this in first-hand terms — the tool "adopts the permissions of the end user and will only retrieve documents that a user could normally access", while the officials also warn that "Copilot's ability to search and query using a user's access may highlight issues when users have access to files they shouldn't" (GOV.UK official publication, R1). This means permission inheritance is not "safe once configured", but instead amplifies existing permission-configuration errors.
4. Common Challenges of This Group and Countermeasures
4.1. Challenge 1: Knowledge Accessibility and Hallucination Risk
Phenomenon: Without reliable corpus support, the model generates grammatically correct but factually wrong answers.
First-hand fact (R1): Anthropic's official blog post "Introducing Contextual Retrieval" states that, at the recall@20 metric, the baseline retrieval failure rate is 5.7%; it drops to 3.7% with Contextual Embeddings; to 2.9% when Contextual BM25 is added; and to 1.9% when reranking is added on top — the official wording is "reduce the number of failed retrievals by 49% and, when combined with reranking, by 67%". The one-time preprocessing cost is about $1.02 / million document tokens.
First-hand fact (R1): data.world's GenAI Benchmark I shows that across 43 business questions, a bare LLM achieves only 16.7% average execution accuracy, and 0% on the two high-schema-complexity categories "metrics and KPIs" and "strategic planning"; after connecting a knowledge graph, accuracy rises to 3×; with GenAI Benchmark II adding OBQC (Ontology-based Query Check) and LLM Repair, accuracy reaches 72.55%, a 4.2× improvement over pure SQL.
Countermeasures:
- Retrieve first, generate later — never output a claim not backed by recall ("no answer without a source").
- Set a recall-evaluation gate (Recall@K) on the retrieval chain rather than looking only at end-to-end answer quality.
- For structured/high-complexity queries, prefer the knowledge-graph or ontology-validation path over plain-text RAG.
Balance note: the above 16.7% → 3× → 72.55% figures come from data.world's own benchmark (43 questions, 13 tables, a single insurance domain, GPT-4 zero-shot); third-party cautious assessments consider it not validated by large-scale third-party reproduction, so it should be treated as an upper-bound reference for that team's own method, not as an industry-wide expectation (see 05-knowledge.md).
4.2. Challenge 2: Permission Awareness and Data Classification
Phenomenon: Vector stores and LLMs are not inherently good at limiting the information scope by role; once the corpus is ingested, permission boundaries are easily lost in the retrieval step.
Countermeasures:
- Permission-aware retrieval: filter results at the retrieval layer rather than only redacting after generation.
- The knowledge graph can attach permission policies at the graph level, excluding unauthorized nodes and relations at the query layer.
- Push data classification upstream into the ingestion step, making sensitivity level an index field rather than a post-hoc label.
- Regularly run red-team tests with "over-permission retrieval" cases and fold the failures into the regression set.
4.3. Challenge 3: Physical Limitations of Long Context
Phenomenon: Even when the context window is large enough, the model's utilization of information in the middle remains markedly lower.
First-hand / authoritative facts:
- Lost in the Middle (Liu et al., TACL 2024): multi-document QA shows a U-shaped curve — accuracy is highest when the answer sits at the head or tail of the context and drops significantly in the middle; under some configurations, burying the relevant information in the middle even performs below the model's closed-book performance, meaning the recalled context is a net loss (R2).
- RULER (Hsieh et al., NVIDIA, COLM 2024): of the 17 long-context models evaluated, only about half maintain satisfactory performance at 32K length (R2).
- NoLiMa (Modarressi et al., ICML 2025): among 13 models claiming ≥128K support, 11 fall below half of their own short-context accuracy already at 32K; GPT-4o drops from 99.3% to 69.7% (R2).
- When RAG can be omitted (R1, Anthropic official wording): "If your knowledge base is smaller than 200,000 tokens (about 500 pages of material), you can just include the entire knowledge base in the prompt... with no need for RAG or similar methods."
Countermeasure: long context is not a substitute for RAG, but a complement to it. Context budget management, result reranking, and placing key information at the head and tail are essential L1 engineering actions.
4.4. Challenge 4: Missing Standards and Inconsistent Evaluation Criteria
Phenomenon: Among this group's seven directions, only Knowledge (ISO 30401) and BPM (BPMN/CMMN/DMN/IEEE 1849/OCEL) are backed by formal standard bodies; the RAG, Docs, and Works directions still have no corresponding ISO/IEEE formal standard.
Confirmed information gaps in this group (must be honestly declared in the relevant direction documents):
| Gap | Status |
|---|---|
| Public international standard for "AI ticket orchestration" | No authoritative standard/spec yet |
| Public standard for "AI document versioning and review" | No authoritative standard/spec yet |
| ISO/IEEE formal standard for RAG | No authoritative standard/spec yet |
| Official AGENTS.md / SKILL.md template dedicated to knowledge-collaboration scenarios | No authoritative standard/spec yet |
| Official API/protocol spec for Projects (beyond product-documentation level) | No authoritative standard/spec yet |
| Public quantitative evaluation of inter-project context-leakage rate / isolation strength | No authoritative standard/spec yet |
| Official evaluation methodology for Skill trigger accuracy | No authoritative standard/spec yet |
| Authoritative market-size data for process mining (non-RPA) | No authoritative standard/spec yet |
| Original pages of the Chroma / Weaviate chunking research | Not obtained; related figures marked [To be verified] |
| Original text of ISO 30401:2018 clauses | Paid standard; only chapter structure and second-hand interpretation obtained |
Countermeasures:
- For directions with formal standards (Knowledge, BPM), use the standard clauses as the compliance baseline.
- For directions without formal standards, adopt community/vendor de facto standards as engineering conventions, and clearly mark their non-standard nature — for example, AGENTS.md should be described as "a de facto open-source community standard, hosted by the Agentic AI Foundation under the Linux Foundation", not written as a standard number.
- Establish an internal Golden Dataset and gate thresholds in-house, using proprietary data to compensate for the lack of public benchmarks.
4.5. Challenge 5: Engineering the Human-in-the-Loop
Phenomenon: Human review is often treated as "a patch at the end of the process", leading to high rollback costs and ambiguous accountability.
Countermeasures:
- Human-intervention points (human-in-the-loop) should be written into the workflow definition as first-class nodes, not as a bypass.
- High-risk nodes requiring human review should be explicitly enumerated: document finalization, knowledge publishing, process release, and actions involving money and legal obligations.
- Review nodes must produce structured records (reviewer, time, conclusion, reason for change) for L5 observability and L6 audit to consume.
- CMMN 1.1's case / plan item / sentry (entry & exit criteria) semantics are the closest standard model for expressing "knowledge-worker ad hoc decisions" (see
07-bpm.md).
5. Document Navigation
| No. | Document | Content | Suggested reading order |
|---|---|---|---|
| 0 | README.md | Group overview, positioning comparison of the seven directions, six-layer capability mapping, common challenges and countermeasures | 1 |
| 1 | AGENTS.md | Group-level superordinate spec: role boundaries for knowledge tasks, corpus and retrieval contracts, citation and traceability, hallucination prevention, permissions and data classification, human-in-the-loop, acceptance criteria | 2 |
| 2 | SKILL.md | Group-level standard Skill, defining the common structure and trigger contract of this group's Skills | 2 |
| 3 | 01-projects.md | Projects: project-level workspaces, multi-project context isolation and sharing | 3 |
| 4 | 02-works.md | Works: orchestration and management of work tasks / tickets / deliverables | 4 |
| 5 | 03-docs.md | Docs: document creation, collaboration, versioning and review | 4 |
| 6 | 04-rag.md | RAG: indexing, chunking, recall, reranking, context assembly (highest technical density in this group) | 3 |
| 7 | 05-knowledge.md | Knowledge: knowledge base / knowledge graph / enterprise knowledge asset governance | 3 |
| 8 | 06-workflow.md | Workflow: workflow orchestration, automation, task-orchestration engines | 4 |
| 9 | 07-bpm.md | BPM: business process management, process mining, process automation and compliance | 5 |
Suggested reading paths:
- Engineering rollout path:
04-rag.md→05-knowledge.md→01-projects.md→03-docs.md - Process automation path:
06-workflow.md→02-works.md→07-bpm.md - Compliance / audit path:
05-knowledge.md→07-bpm.md→AGENTS.md
6. Summary
The Knowledge Collaboration Group is the main battleground where AI Harness moves from "technology concept" to "organizational productivity". The group's seven directions form a complete chain from context boundaries (Projects) to task orchestration (Works / Docs), from retrieval augmentation (RAG) to knowledge asset governance (Knowledge), and on to workflows and business processes (Workflow / BPM).
The group's core engineering judgments can be summarized in five points:
- Retrieval quality sets the ceiling for generation quality. Contextual Retrieval + Reranking can reduce the retrieval failure rate from 5.7% to 1.9% (-67%, R1), and this gain comes from the engineering layer rather than the model layer.
- Structured knowledge is necessary, not optional, for complex queries. A bare LLM scores 0% on high-schema-complexity questions, and the lift from knowledge graphs and ontology validation is order-of-magnitude (R1).
- Long context cannot replace context engineering. The U-shaped positional effect and evidence from RULER / NoLiMa show that piling on context can produce net-negative returns (R2).
- Permissions must be pushed down to the retrieval layer. Permission inheritance amplifies existing configuration errors — this is the most typical and most easily overlooked L6 risk in this group (R1).
- Missing standards are the norm; evaluation sets are the compensating device. Five of the group's 7 directions lack formal standards, so an internal Golden Dataset and gate thresholds should serve as the factual baseline.
To be candid, the group has obvious information gaps: most of the quantitative parameters for RAG chunking and retrieval come from second-hand aggregation sites, all Gartner market data is second-hand retelling, and the original text of ISO 30401 clauses cannot be directly cited due to the paywall. These gaps are listed item by item in the "information-gap declarations" of each direction document, with no fabricated compensation.
7. References
- Introducing Contextual Retrieval — Anthropic, 2024. https://www.anthropic.com/news/contextual-retrieval
- Generative AI Benchmark I: Increasing the Accuracy of LLMs in the Enterprise with a Knowledge Graph — data.world. https://data.world/blog/generative-ai-benchmark-increasing-the-accuracy-of-llms-in-the-enterprise-with-a-knowledge-graph
- GenAI Benchmark II: Increased LLM Accuracy with Ontology-Based Query Checks and LLM Repair — data.world. https://data.world/blog/genai-benchmark-ii-increased-llm-accuracy-with-ontology-based-query-checks-and-llm-repair
- ISO 30401:2018 Knowledge management systems — Requirements — ISO. https://www.iso.org/standard/68683.html
- Microsoft 365 Copilot Experiment: Cross-Government Findings Report — GOV.UK, 2025. https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report/microsoft-365-copilot-experiment-cross-government-findings-report-html
- AGENTS.md — A simple, open format for guiding coding agents. https://agents.md/
- Equipping agents for the real world with Agent Skills — Anthropic Engineering. https://anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills
- Building Effective Agents — Anthropic Research. https://www.anthropic.com/research/building-effective-agents
- Serverless Workflow Specification — CNCF / serverlessworkflow. https://github.com/serverlessworkflow/specification
- BPMN 2.0 — Object Management Group. https://www.omg.org/spec/BPMN/2.0/
- CMMN 1.1 — Object Management Group. https://www.omg.org/spec/CMMN/1.1/About-CMMN
- OCEL 2.0 — Object-Centric Event Log Standard. https://www.ocel-standard.org/
- Lost in the Middle: How Language Models Use Long Contexts — Liu et al., TACL 2024. https://arxiv.org/abs/2307.03172
- Model Context Protocol Specification Changelog — MCP. https://modelcontextprotocol.io/specification/2025-06-18/changelog