Why a 2,000‑Year‑Old Philosophy Became Every CTO’s Emergency Meeting
Palantir turned it into a million‑dollar business. Now a former insider reveals the five primitives that make AI agents actually safe.

Late one autumn night in San Francisco’s SoMa district, Alex Wang set down his third cup of coffee. On his screen were three windows: the LangChain tooling documentation, a customer’s list of required Agent execution permissions, and a blank Notion page. He was trying to map out exactly what was missing from the system.
“Every single piece works in isolation,” he said, tapping his finger against the edge of the desk. “But when you put them together, the Agent does things you never anticipated. The problem isn’t mistakes; the Agent simply has no idea where the boundaries are.”
He wasn’t the first person to spot this problem. Most people’s answer was just “get a bigger model.”
He didn’t take that road.
1. A Word Monopolized by Philosophy Departments for Two Millennia Suddenly Entered Engineering Discussions
Pick up any history of Western philosophy, and the entry for “Ontology” will open with Aristotle. In the 4th century BCE, in his Categories, he proposed ten categories (substance, quantity, quality, relation, place, time, posture, state, action, and passion) to classify everything in the world.
Two thousand years later, the analytic philosopher Willard Quine turned the question into an engineering one. He put it bluntly: so long as a knowledge system achieves internal consistency through clear conceptual definitions and relational rules, it possesses a valid ontological foundation.
Translated for engineers: you don’t need to build a perfect model of the world. What you need is a conceptual system that is internally coherent, computationally tractable, and something your team can agree on.
That turning point took another half‑century to enter industry. In 2001, Tim Berners‑Lee published an article in Scientific American titled “The Semantic Web.” He drew a technology stack diagram that would be cited countless times: URIs at the bottom, then the RDF data layer, the RDFS schema layer, the OWL ontology layer, and the logic and proof layer at the top.
The core idea in one sentence: web pages are built for humans to read, but future web pages need to be “understood” by machines. Not through natural language processing, but through explicit semantic annotation: every concept identified with a URI, assigned a type, declared with relationships, and constrained by logic.
That vision moved slowly for two decades. The reason wasn’t complicated: the cost of annotation was too high, and there was no AI powerful enough to consume all that semantic data.
Then large language models arrived, and the situation flipped. The old problem was “we have semantics, but nobody uses them.” The new problem is “AI desperately needs semantics, but we haven’t built them yet.”
2. Knowledge Graphs and Ontology Are Not the Same Thing
Plenty of people treat the two as synonyms. They spin up a Neo4j instance, dump in a bunch of triples (like “Alice‑friend‑Bob”), and then claim they’ve built a knowledge graph and, while they’re at it, an ontology.
Wrong.
Alex Wang used a more precise framework to explain the difference. In ontology engineering, there is a classic two‑layer division:
TBox (Terminological Box): the definition of concepts, class hierarchies, relational axioms, and constraint rules. Think of it as a UML class diagram plus axioms: it describes “how the world is supposed to be.”
ABox (Assertional Box): assertions about concrete instances. A particular individual belongs to a class, holds certain property values — it describes “what actually happened.”
Most knowledge graph projects only build the ABox layer. They stuff in triples that can be queried and visualized, but there’s no TBox driving inference.
He gave an example: your graph has an organization called “Tech Circle” with Alice and Bob inside it. A normal graph database can tell you “both Alice and Bob are in Tech Circle.” But if the TBox defines an axiom that “members of the same organization automatically form a potential collaboration relationship,” the system can automatically infer the relationship between Alice and Bob, even if you never manually recorded it.
This isn’t a performance optimization. It’s a generational gap in cognitive capability. The former is a better storage format; the latter is reasoning power.
There’s a deeper distinction that gets overlooked: the Open World Assumption vs. the Closed World Assumption.
Ontology defaults to the Open World Assumption: “absence of a statement doesn’t mean it doesn’t exist.” Databases and most engineering practices default to the Closed World Assumption: “if there’s no record, it doesn’t exist.”
In enterprise AI scenarios, an LLM’s reasoning naturally leans toward the Open World Assumption (it tries to complete information). If your underlying knowledge base uses closed‑world semantics, you get systemic inconsistency. The Agent believes a relationship exists; the data layer says there’s no record. In production, that conflict is lethal.
3. Palantir: Turning Ontology Into a Million‑Dollar‑a‑Year Business
Alex Wang is a former Palantir engineer. He joined in 2018 and left in 2023, witnessing the full evolution of the Foundry platform from internal tool to enterprise operating system.
To most people, Palantir is a “big data analytics company”: Gotham for intelligence, Foundry for business intelligence. He thought so too when he first joined. Three months in, he realized he was wrong.
“The core product isn’t called Gotham, isn’t called Foundry. It’s called Ontology.”
Palantir’s official definition of Ontology: an operational layer sitting above the organization, containing semantic elements (objects, properties, links) and kinetic elements (actions, functions, dynamic security), together supporting all use cases.
Note those two words: “operational layer” and “kinetic elements.” This isn’t an academic definition. This is a productized enterprise knowledge operating system.
Contrary to how many people understand it, Palantir’s product matrix is actually quite clean. Gotham is the originating platform for government and intelligence agencies, Foundry is the enterprise operating system that commercializes Gotham’s capabilities, and Apollo is the continuous delivery substrate that supports both, a DevOps platform that automatically pushes weekly updates to customer environments.
What really made Alex Wang re‑examine this architecture was the 2023 release of Palantir’s AIP (AI Platform). It operates LLMs on top of the Ontology. Compared to traditional RAG architectures, the difference is genetic:
Traditional RAG treats the LLM as a better search engine: data interaction is read‑only, permission control is nearly absent, and the business loop ends with “generate an answer.” AIP treats the LLM as a participant in business decision‑making: it can both read and write, permissions inherit from human users and project roles, changes are traceable through full branch/merge audit trails, and decisions can be written back directly to business systems like ERP and CRM.
AIP’s most ingenious design is a mechanism called the Proposal Workflow. It borrows from Git’s branching concept: the AI proposes an operation (like “suggest marking this order as priority”), the proposal exists as a branch to be reviewed, and only after a human approves does it merge into the main state and execute in the business system. Every proposal, approval, and execution is recorded in the Ontology: traceable, auditable, and reversible.
“The core challenge of enterprise AI isn’t ‘the model isn’t smart enough,’” Alex Wang said. “It’s ‘how do you let AI participate in business processes without losing human control?’ The Proposal Workflow answers: AI proposes, humans approve, the system executes.”
4. The Three‑Layer Architecture and the Five Primitives
After leaving Palantir, Alex Wang rebuilt a similar ontology system at his own startup. He broke down Palantir’s design logic into three layers and implemented a minimal viable version using open‑source components.
Layer one is the Language (Modeling Semantics) layer, solving the problem of “how to define business objects.” It contains three kinds of type definitions: Object Types (business entities like Customer, Order, Device), Link Types (directional, named relationships that can carry properties, like “employee‑belongs_to‑department”), and Action Types (operation contracts defining what an action requires as input, when it’s allowed to execute, and what gets triggered afterwards).
Layer two is the Engine (Execution) layer, responsible for high‑performance execution: complex filtering and aggregation across billions of objects, real‑time state change subscriptions, atomic transactional updates, change data capture pipelines, and full version history for every object change.
Layer three is the Toolchain (Development & Operations) layer, including auto‑generated multi‑language SDKs, CI/CD pipelines, and IDE integration that lets you preview the impact of ontology changes in real time.
In the actual implementation, layers one and two are further split into two microservices: OMS (Ontology Metadata Service) manages the definitions of object types, relational rules, and action structures; it stores no actual data, acting as the schema registry for the ontology layer. OSS (Object Set Service) handles object search, filtering, aggregation, loading, and dynamic maintenance of object sets. Splitting OMS and OSS is essentially the classic “metadata registry + data service” pattern.
But the true soul of the entire system is the five primitives.
The first two primitives form the Semantic Layer: they describe what the world is like. The last three form the Kinetic Layer: they describe what you can do to the world. Traditional knowledge graphs only have a semantic layer. Including “operations” within the ontology definition is Palantir’s most fundamental departure.
Primitive One: Object Types: not just “tables.” The traditional approach scatters entity definitions across Java classes where AI can’t perceive them. The ontology approach registers object types, properties, constraints, and derivation rules in a unified metadata layer. Particularly worth noting is the derived property: a field that isn’t stored in a database but computed in real‑time via a declarative rule. When a business rule changes, you change one line in the definition, and every downstream consumer picks it up automatically, with zero code changes.
Primitive Two: Link Types: directional, named, property‑carrying relationships. Why do relationship type names matter so much? Alex Wang’s answer was direct: “If your relationships only have three types — related_to, belongs_to, contains — the Agent has to guess every time what it’ll get by following this edge. But if your relationships are called ‘places_order,’ ‘supplied_by,’ ‘manifests_as,’ the Agent knows exactly what to expect the moment it sees the name. Relationship types are where you invest the most thinking.” (Quoted em dashes retained.)
Primitive Three: Action Types: the most underestimated piece of the whole system. An Action Type isn’t just a function signature. It’s a complete operational contract: the parameter schema defines input requirements, submission criteria perform pre‑flight checks, rules describe execution steps, side effects explicitly declare downstream consequences, permissions enforce role‑level access control, and the audit log captures a snapshot of the object before the rollback operation. This mechanism systematically addresses the five most fatal problems when deploying Agents: not knowing what you can do, not knowing what input is required, being invoked when it shouldn’t be, having unpredictable consequences, and leaving no trace of who did what when things go wrong.
Primitive Four: Functions: discoverable functions registered to the ontology. The core idea is to associate server‑side logic functions with object types: the Agent doesn’t blindly pick from dozens of tools; it first identifies the entity type it’s operating on, then checks which functions are registered on that type.
Primitive Five: Interfaces: the power of polymorphism. Define a common set of property shapes so that different types of entities implement the same interface. A centrifugal pump, an electric motor, a gearbox, as long as they all implement the “Diagnosable” interface, the diagnostic Agent can handle them all with the same logic. Agent capability generalization no longer relies on writing specialized prompts or tools for each device type. Instead, it achieves genuine “interface‑oriented reasoning” through the interface.
5. Starting From Zero: A Three‑Phase Roadmap
Alex Wang’s team spent eight weeks building their first production version. He summarized the route into three phases:
Phase 1 (2–4 weeks): The Semantic Layer. The goal is to enable the Agent to perform structured reasoning. Core technology choices: use Neo4j or Nebula Graph for object and relationship storage, build your own JSON Schema registry for type management, supplement with Neo4j GDS or a custom rule engine for inference. Deliverables: 10 to 20 core Object Type definitions, detailed property lists, and critical Link Types with their directionality. His advice: “Don’t be greedy. Start with what’s used most often. Relationship types are where you invest the most thinking.”
Phase 2 (4–6 weeks): The Operational Layer. The goal is to let the Agent do things in a controlled manner. Technology choices: FastAPI plus Pydantic plus JSON Schema validation for the Action registry, RBAC or ABAC middleware for permissions, structured logging plus object snapshots for operation auditing, and MCP Servers for tool registration. The core standard is one thing: “At runtime, the Agent must be able to discover, through metadata APIs, what entities, what relationships, and what executable actions exist in the current context. That is the prerequisite for autonomous decision‑making.”
Phase 3 (ongoing iteration): The Logic Layer. Expose discoverable tools through MCP, use Interfaces for unified multi‑scenario abstraction, and define business rules, ML models, and LLM functions uniformly within the ontology.
He offered three criteria that every team can ask itself:
Can my Agent discover what entities and relationships exist in this domain?
Does my Agent know what operations it can execute in the current scenario?
Is the execution of those operations controlled, auditable, and bounded by permissions?
“If the answer to any one of these is NO, what you need isn’t a bigger model. It’s an Ontology layer.”
6. It’s Already Moving in China
A few weeks ago, Alex Wang met with two teams in Shanghai.
Yuedian Technology released Knora‑AI 3.0 in 2025, built around a “Workflow + Agentic dual‑engine” architecture. Tasks with high determinism take the Workflow engine and follow fixed processes; tasks requiring autonomous planning take the Agentic engine for dynamic decision‑making. Both engines share the same ontology definition as their “enterprise map.” In a manufacturing full‑chain quality traceability scenario, the traditional method took four people a full day cross‑querying systems. The ontology‑driven Agent completed it in five minutes with one person. And it didn’t just query. It also broke down customer complaint information into requirements, automatically generated design proposals and specification documents, achieving a closed loop from insight to write‑back.
Uino Technology took a different path with its ONN Ontology Neural Network. Yonyou released its “Ontology Agent.” In the same month, the product roadmaps of three companies converged on the same direction.
A word monopolized by philosophy departments for two thousand years has suddenly become enterprise AI infrastructure. Alex Wang doesn’t find this strange:
“AI is shifting from generating content to executing tasks. Generation only needs retrieval; execution requires an understanding of the business world.”
“Agents have moved from demos into production. A demo can say whatever it wants; production must be controlled, auditable, and reversible.”
“Large models are now capable enough to consume ontological knowledge. The old symbolic reasoning engines were slow and clumsy; now you can run complex reasoning chains in minutes. Ontology waited twenty years and finally found its best consumer.”
He finished the cold water in his cup, exported the architecture diagram on that Notion page as a PDF, and sent it to the client.
The last line of the email read:
“The process of ontological modeling, at its core, forces you to answer one question: what does your enterprise actually operate? That question deserves to be answered before any AI technology.”
About the Creator
Jin
Writer of reamstories
https://reamstories.com/jin
Enjoyed the story? Support the Creator.
Subscribe for free to receive all their stories in your feed. You could also become a paid subscriber, letting them know you appreciate their work.
Comments
There are no comments for this story
Be the first to respond and start the conversation.