News & Intel
LiveDaily AI-curated intelligence on Palantir Foundry, Ontology, AIP, Apollo, contracts, and community feedback. Updated automatically via GitHub Actions every day at 7 AM UTC.
I need to create a 'training' environment that duplicates what is in production
Trying to find the best way to create basically a duplication of applications in production to use for training. I want users to be able to go to workshops and use all the actions without affecting production data. I asked AI FDE on options and the best option was to create a global branch, which seems to work but curious if there were better options others have been using. 2 posts - 2 participants Read full topic
Incremental Inputs
I have an incremental pipeline where my source system sends a full snapshot every sync. My transforms apply CDC (Change Data Capture) to detect inserts, updates, and deletes, then write only the changes as APPEND transactions to the output dataset. Each row has a last_upd_tmstmp (timestamp) and is_deleted (boolean) column. Over time, when a row is updated, the new version is appended but the old version still exists in a previous transaction — so the same primary key appears across multiple transactions. This works fine for the Ontology (it deduplicates by PK, latest transaction wins), but I now want to use this dataset as input for an ML model. For the first run, I need to read the full dataset and deduplicate (keeping the row with the highest last_upd_tmstmp per PK, filtering out is_deleted=true ), then for subsequent weekly runs I only need the latest APPEND (which is already unique within the transaction). My question is: should I deduplicate in my ML transform code using a
Texas Freight Corridor Pressure Monitor — Corridor-Week Anomaly Detection in Foundry & AIP
I built a Foundry-native application that turns public Texas transportation data into an operational corridor pressure monitor. For any selected week, it answers one question: Which Texas freight corridors are behaving normally, running above normal, or showing below-normal/disrupted movement compared to their own historical baseline? Stack: Pipeline Builder → Ontology → Workshop → AIP Generated Content Validation event: Winter Storm Uri, week of 2021-02-15 Object grain: one corridor during one week The system is deliberately scoped as a corridor pressure anomaly monitor . It is not a diesel demand, truck-demand, or fuel-consumption model. The goal was to demonstrate a complete, inspectable Foundry implementation pattern end to end. Why this problem Freight corridors are operational systems. When movement across a major corridor deviates from its own normal pattern, that deviation can reflect weather disruption, logistics stress, demand shifts, or r
Functions Repo + React Frontend
Type Safety and Drift Between Functions Repo and React App — Is This the Intended Pattern? I’m using a Functions repo as the primary layer for queries and actions against my ontology — both as a resource for others (workshops, quiver, etc.) and as the backbone of my own React application via an OSDK-based SDK. The problem: because Workshop has historically had inconsistent support for structured types, I’ve defaulted to using strings instead of properly typed objects throughout my functions. This means by the time I’m in my React app, I’ve already lost type inference. I end up redefining types in both repos, and even though I control both, the drift risk is real. I considered publishing a shared NPM package to centralize the type definitions, but that feels like the wrong abstraction inside Palantir — I’d essentially be papering over a gap in the platform rather than using it correctly. Questions Is the string-over-struct approach a known workaround, or am I genuinely m
How to ingest Oracle Fusion data into Foundry with BI Cloud Connector (BICC)
We recently had to get a fairly large amount of data out of Oracle Fusion and into Foundry, and BI Cloud Connector (BICC) ended up being the cleanest way to do it. This post covers the approach we settled on: one Python external transform that drives BICC end to end and lands each Fusion “datastore” in Foundry as a clean, incrementally updated table. There’s no packaged connector involved, just a transforms repo and a Data Connection source. The transform talks to three Oracle APIs along the way: BICC’s REST API for metadata, the ESS scheduler over SOAP to run the extract, and UCM (WebCenter Content) for the actual file downloads. None of them are complicated on their own; most of the work is just wiring them together in the right order. What you’ll build For each datastore you configure, one incremental transform that: Fetches datastore metadata from the BICC REST API ( /biacm/rest ) Creates/updates a BICC extract Job scoped to that datastore Triggers a VO_AND_PK_EXTRA
Times Series Property
I have a time series property I added to an object. The sync file can display the time series properly, but the quiver for the object type and the workshop cannot display the time series data and says that there is no data/ no value. Did I set something up wrong? 4 posts - 2 participants Read full topic
Screen Capture Walkthru's for Pilot Apps
I’ve built and published a Pilot app and was trying to create documentation and a walkthru for it via the automatic screen record/capture but when I embed the Pilot app in a Foundry workshop and try to screen record it doesn’t pick up the interactions in the embedded widget. I’m assuming this is because the embedded widget can’t expose the interactions to the screen recording-side of things. I’m wondering if there are work-arounds here. 2 posts - 2 participants Read full topic
[FR] Workflow Identity Federation
Note: AI helped to formulate the text but the content is 100% curated by a human Feature Request: Workload Identity Federation for Foundry Multipass 1. Problem Statement Today, any automated workload that needs to call Foundry APIs must hold a long-lived credential : either a personal access token or a TPA client_id + client_secret . These credentials must be stored somewhere - a Foundry dataset, a Foundry Source, a secrets manager, an environment variable - and they carry serious operational risks: Blast radius on leak. A stolen client_secret grants the thief all scopes the TPA holds, indefinitely, until manually rotated. Rotation burden. Secrets must be rotated on a schedule and pushed to every consuming workload. Any lag creates a credential-validity gap. Foundry TPAs only support one active client_secret at a time, making zero-downtime rotation impossible: the old secret must be invalidated before the new one is distributed, guaranteeing a window of f
Potential Schedule Desynchronization & Unexpected Data Staleness on Multi-Parent Triggers
Issue / Behavior Description: We have identified a edge-case behavior with Foundry Dataset Schedules that, while technically working as designed, can easily lead to silent data freshness issues and confusion for users. Scenario / Example: We have a downstream Dataset C defined as the simple union of two upstream Datasets, A and B . Dataset C has a schedule set to trigger when BOTH parent datasets (A and B) complete their build. Under normal operations, both A and B complete their builds around 7:00 AM daily, which then triggers C. The Problem: If a user manually triggers or rebuilds Dataset B during the day (e.g., at 4:00 PM): The schedule system records Dataset B ’s build as complete/up-to-date. The schedule then waits for Dataset A ’s next build. The next morning at 7:01 AM, Dataset A finishes its build. Dataset C immediately builds because both conditions are now fulfilled (A built at 7:01 AM today, and B built
How do you connect to Oracle Primavera Cloud from Foundry?
How do you connect Foundry to Oracle Primavera Cloud? What are potential approaches? 2 posts - 1 participant Read full topic
Agentic Workflows in Foundry: Questions, Answered
We ran a webinar last week on building agentic workflows in Foundry – walking through the tooling you can reach for (Chatbot Studio, AIP Logic, Agent Flow etc.) and how to wire them together. The interesting part wasn’t the tooling overview. It was the questions that came after, once people started thinking about what happens when these agents actually run in production. How does an agent behave when it’s writing data, not just returning an answer? Where is it even running if it’s exposed as a function? What breaks when a workflow runs longer than five minutes? How do you keep sessions and permissions sane? Those are the questions we’re answering below. They came straight from the session, and they’re the ones worth getting right before you publish. What is the execution context of these agents, and how do they affect side effects? An agent is not necessarily a pure function that receives an input and returns a complete answer. The function-shaped interface is
Legends partially or completely missing in png downloads of workshop XY charts
Hello all, I am working on a dashboard on Workshop. When I try to download an XY chart using the custom chart export option, the legends are cut off either completely or partially as shown in the images below. Is there a way to fix this? // Content redacted, so ignore the black/gray/green areas In the first image, there is whitespace on the right of the main chart which should ideally be where the legends are listed but it’s empty. 1 post - 1 participant Read full topic
Calling Foundry CI-Checks (Jemma/Gradle) — Authentication to External Systems and Foundry Serverless Functions?
Hi community, We are building an integration where Foundry CI-Checks (Gradle/Jemma) needs to authenticate outbound calls as part of a custom Gradle check task. We have two paths we are exploring: Primary Path — Foundry CI to External IP: Foundry CI-Checks needs to call an external system directly via global egress. The CI process needs a secure, automated way to authenticate these outbound calls without any user credentials or interactive authentication. Secondary Path — Foundry CI to Foundry Serverless Function (Workaround): As a fallback, Foundry CI-Checks calls a Foundry Serverless Python Function which then communicates with the external system on its behalf. We know the CI TOKEN exists in the Jemma environment, but it does not appear to be scoped to invoke/execute a Foundry Serverless Function endpoint. Our questions: Has anyone managed to authenticate outbound calls from a Foundry CI Gradle check task to an external system? Has anyone managed to authenticate a call fro
User-delegated authentication from a Custom Widget to an external system
Hi, I’m investigating how to preserve individual user identity when a Foundry Custom Widget triggers operations in an external system. Users authenticate to Foundry through enterprise SSO. The external system has its own OIDC-compatible identity and permission model, and every write must be attributed to the actual user rather than a shared service account. What is the recommended supported pattern for this? Is there an on-behalf-of or token-exchange flow between Foundry and an external identity provider? Can an Action or webhook receive a cryptographically verifiable identity for the Foundry user who invoked it? Can a Custom Widget access any user-delegated token intended for an external audience, or is its runtime token strictly for Foundry APIs? I want to avoid passing an unverified user identifier in the request body or treating a service credential as an individual user. 2 posts - 2 participants Read full topic
When will GPT-5.6 Sol/Terra/Luna, Grok 4.5, and Claude Fable 5 be available in AIP?
Hi Palantir team! What is the expected timeline for adding the following models to AIP’s Language Model Service? GPT-5.6 Sol, Terra, and Luna Grok 4.5 Claude Fable 5 For GPT-5.6 and Grok 4.5, when should we expect them to become available? For Claude Fable 5, which has been generally available since June 9 but is still not listed as a supported AIP model, is it planned for addition? Anthropic states that Fable 5 requires 30-day data retention and is not available under ZDR. Does that requirement affect whether or when it will become available in AIP? We’re interested in using these models across AIP workflows and comparing their performance for our use cases through AIP Evals. Could you also share whether support will extend across AIP Logic, Functions, transforms, agents, and Evals? Thanks! 2 posts - 2 participants Read full topic
Getting objects from a polygon and putting through function
I’m new to Palantir’s tools, so apologize if this is basic. I’m trying to make an application where users can draw a polygon over a number of points on a map, then input both that polygon and the points under it into a custom Python function that outputs a new GeoJSON polygon and displays that. Any guidance on approach or docs would be appreciated. I have the Python code developed and the objects I would like, but plugging it in in Foundry is tricky. 1 post - 1 participant Read full topic
Cannot register legacy uppercase-named same-region S3 bucket
Goal I’m trying to add a same-region S3 bucket with READ ONLY access to my enrollment’s S3 bucket policies allow-list. Background In the connection settings of my Data Connection source, it states: S3 buckets in the same AWS region where your Foundry instance is hosted must also be added to the S3 bucket policies allow-list on the network egress page in Control Panel. Control Panel: Network egress → S3 bucket policies → AWS S3 Bucket Policies I navigated there and attempted to add an AWS S3 Bucket Policy, with it correctly detecting the AWS bucket region: us-east-1 . But when I click save, nothing happens and no error message is visible on the frontend. I believe this is because the bucket has a legacy uppercase name, made before March 2018; it accepts test1 but silently rejects TEST1 — both validated as us-east-1 before I clicked Save. Questions Is there a supported way to register a same-region S3 bucket with a legacy uppercase name? Why is no e
Bug Report: Cannot pass column list
In Pipeline Builder, custom transform paths cannot pass a column list argument into a “Select columns” transform. In the screenshot below, I was able to pass the Column Argument, but it was not possible to pass the Column List Argument instead. I am trying to create a reusable transform to replace my select, filter, and clean steps that I need to manually create for many input SAP datasets. 1 post - 1 participant Read full topic