Reference · Atlas

Your business, made legible to the AI.

Most enterprise AI hallucinates because it has nothing to ground against. Jubi Atlas is what the AI reads from instead of guessing: canonical metrics, glossary terms, entity relationships, and the permission rules Guardian enforces on every request.

Doc · atlas-overview Audience · BI & analytics · data governance · CISO Companion · security-model
One platform — three surfaces JubiStudio workspace + JubiGuardian protects + JubiAtlas grounds shared identity · shared audit · shared brand
01 · The three layers

Three things every business already knows. Written down once.

Every enterprise has these definitions somewhere — in spreadsheets, in heads, in deprecated wiki pages. Atlas is where they live as a single source the AI reads from, with the people who own them.

01 · Canonical metrics
Verified formulas

One definition of revenue. Not eleven. Verified formulas live in Atlas; the AI uses them, not its best guess from column names. When finance changes the formula, the answer to "what's our gross margin?" changes everywhere at once.

Example:
finance.gross_margin_quarterly
Glossary & entity model
02 · Glossary & entities

The AI knows what churn means in your business, and whether customer, account, and buyer are the same thing or three different ones. Entity relationships are explicit, so the AI doesn't have to guess which join is right.

Example:
customer ↔ account (1:N)
"churn" = no_orders_60d
03 · Permission semantics
Who sees what

Atlas defines field-level visibility: who can read which columns, under what conditions, with what masking. Guardian enforces it on every request. The AI cannot return what the user isn't allowed to see, whether through retrieval, summary, or inference.

Example:
customer.email · pii
visible_to: account_owner
02 · Defines vs enforces

Atlas defines. Guardian enforces.

Two responsibilities, two components. Atlas writes down what your business means and who can see what. Guardian inspects every request against those definitions in real time.

Atlas
defines
Metric formulas, glossary terms, entity edges, permission semantics. Versioned. Owned by analysts and data governance.
→ on every
request →
Guardian
enforces
Reads the user's identity, looks up what Atlas says they're allowed to see, validates the model's answer against canonical metrics. Logs the decision.
→ to →
User
grounded answer
Answer or refusal, with citation. Replayable end to end. The same question gets the same answer.

The split matters. Definition is a slow act — analysts editing Atlas with intent. Enforcement is per-request and high-frequency. Mixing the two is what produces shadow AI: rules that live nowhere, enforced inconsistently. See the security model for Guardian's full per-request flow.

03 · Reachable vs unavoidable

Two postures. Atlas is the truth in both.

Atlas grounds the AI either way — third-party copilot or Jubi-built agent. The difference is enforcement: external AIs can call Atlas as a tool; Jubi agents are required to.

Mode 1 · BYOAI
Atlas reachable
Bring-your-own-AI · third-party copilots

Guardian sits on the routes a third-party AI takes when it touches your data. Atlas is exposed as a tool the model can call. The model may ground in Atlas; it isn't forced to.

Useful when the model lives outside your perimeter (ChatGPT, Copilot, vendor-embedded assistants) and you can't enforce a path. You still get identity binding, tool-call inspection, and audit at the boundary.

Posture: Atlas reachable · audit at the boundary
Mode 2 · Jubi agents
Atlas unavoidable
AI you build on Jubi · in-perimeter

For agents your teams build on the Jubi platform, Guardian owns the full request path. Atlas grounding is enforced at the output gate — answers without an Atlas-anchored citation don't reach the user.

This is where the strongest claim holds: same question, same answer, replayable end to end, with field-level permission semantics applied per token of output.

Posture: Atlas enforced · 6/6 gates fire · full replay
04 · How Atlas is built

Analysts curate. Workspace by workspace.

Atlas is curated, not generated. Analysts own each definition; AI can help draft and propose, but humans decide what's true. The unit of curation is the workspace: a scope, a set of definitions, and a small team who own them.

01

Scope a workspace

An analyst picks the tables, dashboards, and collections that belong to a domain — finance, ops, customer success. The workspace is a permissioned slice of the warehouse.

02

Annotate the data model

In Context Studio, the analyst marks which fields are PII, which columns mean what, and which dashboards are verified. The catalog tracks coverage so it's visible what's annotated and what isn't.

03

Define glossary terms and metrics

Term definitions go in the glossary. Metric formulas are written once, named, and versioned. The AI uses these names in answers — the user can click through to the definition.

04

Write playbooks for repeated analyses

Common questions become playbooks: a named, parameterised analysis the AI can run on a schedule or on demand. Playbooks are reviewed and validated by the analyst before they go wide.

05

Atlas references it all

The workspace publishes its definitions into Atlas. Guardian uses the published version on every request. When the analyst updates a metric formula, the next answer reflects the change.

Roadmap · Phase 1

The editing UI for the semantic layer (glossary terms, metric definitions, playbook content) is in active build. Today, Context Studio supports browsing and scoping; the in-product editing experience is being added in the next release.

05 · What an Atlas record looks like

The shape of the truth.

Three small examples — a metric, a glossary term, and a permission rule — to make Atlas concrete. The schema is more elaborate in practice; this is the spirit.

Canonical metric
name       finance.gross_margin_quarterly
definition (revenue - cogs) / revenue
grain      quarter
owner      finance-analytics
verified   2026-04-15
source     card #1842 (Metabase)
Glossary term
term       churn
scope      customer-success
definition customer with no order in 60d
aliases    churned, lapsed
not        cancelled (different concept)
owner      cs-ops
Permission rule
field      customer.email
class      pii
visible_to account_owner, support
masked_for all_other
summary    forbidden (no inference path)
enforced   guardian · output gate
Entity edge
from       customer
to         account
cardinality 1 : N
join       customer.id = account.customer_id
notes      a customer may hold multiple accounts
owner      data-eng
Continue → Security model. How Guardian sees every request — Mode 1 (BYOAI) and Mode 2 (Jubi agents) pipelines, R1–R5 risk catches, audit coverage, and where Atlas's definitions are enforced gate by gate. Read the security model →