Glossary

The words Keel uses in the app, the API and these docs. (Your organisation's own business glossary lives in the product: see Glossary and ownership.)

Platform

Tenant

Your organisation in Keel. Every row Keel stores belongs to exactly one tenant, enforced by row-level security.

Workspace

A space inside a tenant with its own sources, models and members. Roles (Owner, Admin, Steward, Modeler, Analyst, Viewer) are per workspace; see Permissions.

Module

A licensed part of the platform beyond the shared core: Keel Semantic, Keel Migrate. See Platform and modules.

Private agent

A Keel worker you run inside your network. It reaches your databases so Keel does not have to, and is the only component that ever writes (Keel Migrate runs). See Private agent.

Write plane

The one path by which Keel writes to customer systems: a Keel Migrate run on the private agent, with a separate write credential and an approved plan. Everything else is read-only. See Run and cut over.

Discovery and review

Source

A database Keel reads through a read-only principal. See Connect sources.

Scan

Harvesting a source's metadata and bounded column profiles; also called a discovery run.

Proposal

Anything Keel inferred — a join, a table role, a column's meaning or sensitivity — waiting for a person (or an explicit auto-accept threshold) to accept or reject it. A proposal is never a fact until accepted.

Evidence

The observations behind a proposal: name similarity, value overlap, uniqueness, declared keys, query history.

Confidence

How strongly the evidence supports a proposal, from 0 to 1, shown as Low, Medium or High. See Proposals, evidence and trust.

Modeling

Semantic model

Entities, relationships, dimensions and metrics over your sources — what the data means. See The semantic model.

Fan trap

A join that repeats rows of one side (one-to-many), so a sum over that side would count values more than once. Keel's query compiler detects fan traps and aggregates before joining.

Change request

A reviewed set of model changes on a branch, merged by an approver. See Versioning and change requests.

Release

An immutable, published version of a model. Serving endpoints serve releases.

Governance and serving

Trust score

0–100 for a metric, from certification, data quality results, freshness and ownership.

Certification

A steward's statement that a metric meets the tenant's criteria; it expires and can be revoked. See Policies and certification.

Access policy

Row filters and column masks applied to every query, whoever asks and through whichever interface.

Serving endpoint

A released model exposed to tools: the semantic query API, MCP for agents, exports and the SQL interface.

Lineage

Where a metric or column comes from and what depends on it. See Lineage and impact.

Operations and privacy

Support session

A read-only view of your tenant by Anchor support, possible only while an Owner's time-boxed consent is active, and recorded in your audit log request by request. See Security model.

Offboarding

Deleting a tenant: an optional export of its metadata, then every row in every store, verified. See Operations.

Product analytics

Usage events about how Keel is used — never your data. An Owner can opt the tenant out. See Security model.