News & Intel
LiveDaily AI-curated intelligence on Palantir Foundry, Ontology, AIP, Apollo, contracts, and community feedback. Updated automatically via GitHub Actions every day at 7 AM UTC.
Incremental Inputs
I have an incremental pipeline where my source system sends a full snapshot every sync. My transforms apply CDC (Change Data Capture) to detect inserts, updates, and deletes, then write only the changes as APPEND transactions to the output dataset. Each row has a last_upd_tmstmp (timestamp) and is_deleted (boolean) column. Over time, when a row is updated, the new version is appended but the old version still exists in a previous transaction — so the same primary key appears across multiple transactions. This works fine for the Ontology (it deduplicates by PK, latest transaction wins), but I now want to use this dataset as input for an ML model. For the first run, I need to read the full dataset and deduplicate (keeping the row with the highest last_upd_tmstmp per PK, filtering out is_deleted=true ), then for subsequent weekly runs I only need the latest APPEND (which is already unique within the transaction). My question is: should I deduplicate in my ML transform code using a
Can an AIP Logic with an optional model input be used with Automate?
I modified an existing AIP Logic to have an optional model parameter to be able to run experiments comparing models. If from the AIP Logic usage panel, I create a new automation, it by default does not list the optional parameters and there is no error. However, if I turn on auto-upgrade, it lists the optional parameters and I get that error again. If I toggle back off auto-upgrade, the optional parameters and error stay. So I can just make a new Automation without autoupgrade to use an AIP Logic with an optional model parameter, but I cannot modify an existing Automation nor use auto-upgrade. 1 post - 1 participant Read full topic
Texas Freight Corridor Pressure Monitor — Corridor-Week Anomaly Detection in Foundry & AIP
I built a Foundry-native application that turns public Texas transportation data into an operational corridor pressure monitor. For any selected week, it answers one question: Which Texas freight corridors are behaving normally, running above normal, or showing below-normal/disrupted movement compared to their own historical baseline? Stack: Pipeline Builder → Ontology → Workshop → AIP Generated Content Validation event: Winter Storm Uri, week of 2021-02-15 Object grain: one corridor during one week The system is deliberately scoped as a corridor pressure anomaly monitor . It is not a diesel demand, truck-demand, or fuel-consumption model. The goal was to demonstrate a complete, inspectable Foundry implementation pattern end to end. Why this problem Freight corridors are operational systems. When movement across a major corridor deviates from its own normal pattern, that deviation can reflect weather disruption, logistics stress, demand shifts, or r
Functions Repo + React Frontend
Type Safety and Drift Between Functions Repo and React App — Is This the Intended Pattern? I’m using a Functions repo as the primary layer for queries and actions against my ontology — both as a resource for others (workshops, quiver, etc.) and as the backbone of my own React application via an OSDK-based SDK. The problem: because Workshop has historically had inconsistent support for structured types, I’ve defaulted to using strings instead of properly typed objects throughout my functions. This means by the time I’m in my React app, I’ve already lost type inference. I end up redefining types in both repos, and even though I control both, the drift risk is real. I considered publishing a shared NPM package to centralize the type definitions, but that feels like the wrong abstraction inside Palantir — I’d essentially be papering over a gap in the platform rather than using it correctly. Questions Is the string-over-struct approach a known workaround, or am I genuinely m
Chronos model in Model Studio / AutoGluon?
Hello, Chronos model is now supported in AutoGluon, however it does not seem to be available yet in Model Studio. Would it be something on the roadmap ? Or should we use our own implementation? Cheers, 2 posts - 2 participants Read full topic
How to ingest Oracle Fusion data into Foundry with BI Cloud Connector (BICC)
We recently had to get a fairly large amount of data out of Oracle Fusion and into Foundry, and BI Cloud Connector (BICC) ended up being the cleanest way to do it. This post covers the approach we settled on: one Python external transform that drives BICC end to end and lands each Fusion “datastore” in Foundry as a clean, incrementally updated table. There’s no packaged connector involved, just a transforms repo and a Data Connection source. The transform talks to three Oracle APIs along the way: BICC’s REST API for metadata, the ESS scheduler over SOAP to run the extract, and UCM (WebCenter Content) for the actual file downloads. None of them are complicated on their own; most of the work is just wiring them together in the right order. What you’ll build For each datastore you configure, one incremental transform that: Fetches datastore metadata from the BICC REST API ( /biacm/rest ) Creates/updates a BICC extract Job scoped to that datastore Triggers a VO_AND_PK_EXTRA
Times Series Property
I have a time series property I added to an object. The sync file can display the time series properly, but the quiver for the object type and the workshop cannot display the time series data and says that there is no data/ no value. Did I set something up wrong? 4 posts - 2 participants Read full topic
Screen Capture Walkthru's for Pilot Apps
I’ve built and published a Pilot app and was trying to create documentation and a walkthru for it via the automatic screen record/capture but when I embed the Pilot app in a Foundry workshop and try to screen record it doesn’t pick up the interactions in the embedded widget. I’m assuming this is because the embedded widget can’t expose the interactions to the screen recording-side of things. I’m wondering if there are work-arounds here. 2 posts - 2 participants Read full topic
[FR] Workflow Identity Federation
Note: AI helped to formulate the text but the content is 100% curated by a human Feature Request: Workload Identity Federation for Foundry Multipass 1. Problem Statement Today, any automated workload that needs to call Foundry APIs must hold a long-lived credential : either a personal access token or a TPA client_id + client_secret . These credentials must be stored somewhere - a Foundry dataset, a Foundry Source, a secrets manager, an environment variable - and they carry serious operational risks: Blast radius on leak. A stolen client_secret grants the thief all scopes the TPA holds, indefinitely, until manually rotated. Rotation burden. Secrets must be rotated on a schedule and pushed to every consuming workload. Any lag creates a credential-validity gap. Foundry TPAs only support one active client_secret at a time, making zero-downtime rotation impossible: the old secret must be invalidated before the new one is distributed, guaranteeing a window of f
Potential Schedule Desynchronization & Unexpected Data Staleness on Multi-Parent Triggers
Issue / Behavior Description: We have identified a edge-case behavior with Foundry Dataset Schedules that, while technically working as designed, can easily lead to silent data freshness issues and confusion for users. Scenario / Example: We have a downstream Dataset C defined as the simple union of two upstream Datasets, A and B . Dataset C has a schedule set to trigger when BOTH parent datasets (A and B) complete their build. Under normal operations, both A and B complete their builds around 7:00 AM daily, which then triggers C. The Problem: If a user manually triggers or rebuilds Dataset B during the day (e.g., at 4:00 PM): The schedule system records Dataset B ’s build as complete/up-to-date. The schedule then waits for Dataset A ’s next build. The next morning at 7:01 AM, Dataset A finishes its build. Dataset C immediately builds because both conditions are now fulfilled (A built at 7:01 AM today, and B built
How do you connect to Oracle Primavera Cloud from Foundry?
How do you connect Foundry to Oracle Primavera Cloud? What are potential approaches? 2 posts - 1 participant Read full topic
Agentic Workflows in Foundry: Questions, Answered
We ran a webinar last week on building agentic workflows in Foundry – walking through the tooling you can reach for (Chatbot Studio, AIP Logic, Agent Flow etc.) and how to wire them together. The interesting part wasn’t the tooling overview. It was the questions that came after, once people started thinking about what happens when these agents actually run in production. How does an agent behave when it’s writing data, not just returning an answer? Where is it even running if it’s exposed as a function? What breaks when a workflow runs longer than five minutes? How do you keep sessions and permissions sane? Those are the questions we’re answering below. They came straight from the session, and they’re the ones worth getting right before you publish. What is the execution context of these agents, and how do they affect side effects? An agent is not necessarily a pure function that receives an input and returns a complete answer. The function-shaped interface is
Legends partially or completely missing in png downloads of workshop XY charts
Hello all, I am working on a dashboard on Workshop. When I try to download an XY chart using the custom chart export option, the legends are cut off either completely or partially as shown in the images below. Is there a way to fix this? // Content redacted, so ignore the black/gray/green areas In the first image, there is whitespace on the right of the main chart which should ideally be where the legends are listed but it’s empty. 1 post - 1 participant Read full topic
Calling Foundry CI-Checks (Jemma/Gradle) — Authentication to External Systems and Foundry Serverless Functions?
Hi community, We are building an integration where Foundry CI-Checks (Gradle/Jemma) needs to authenticate outbound calls as part of a custom Gradle check task. We have two paths we are exploring: Primary Path — Foundry CI to External IP: Foundry CI-Checks needs to call an external system directly via global egress. The CI process needs a secure, automated way to authenticate these outbound calls without any user credentials or interactive authentication. Secondary Path — Foundry CI to Foundry Serverless Function (Workaround): As a fallback, Foundry CI-Checks calls a Foundry Serverless Python Function which then communicates with the external system on its behalf. We know the CI TOKEN exists in the Jemma environment, but it does not appear to be scoped to invoke/execute a Foundry Serverless Function endpoint. Our questions: Has anyone managed to authenticate outbound calls from a Foundry CI Gradle check task to an external system? Has anyone managed to authenticate a call fro
Bug encountered in resources tab of code workspace
I was able to develop several custom widgets and functions which consumed object types in my ontology. However, recently I’ve been unable to add resources at all via the resource panel in the code repository. When I attempt to open the panel, either in the browser or on VS Code locally, the following bug appears: GraphQLError Validation error (FieldUndefined@[GetPackageNameStemmaRepoFragment/thirdPartyApplicationWebsites/websiteRepository/website/thirdPartyApplication/latestVersionV3]) : Field 'latestVersionV3' in type 'ThirdPartyApplication' is undefined Trace ID 5926a92dd4cc466d 2 posts - 2 participants Read full topic
Are function-backed actions in ontology as code in the @osdk/maker enabled?
Hello! I have been working on a repo in OaC and managed to successfully build and install an OaC product via Marketplace. My next step was adding a function-backed action. The @osdk/maker documentation is sparse on this, but the stable version of defineAction does accept a functionRule with a functionRid , which I tried to use. I created the function as a separate repo in Python, published it and used its RID and version, and wired it up in the OaC repo: ... rules: [ { type: "functionRule", functionRule: { functionRid: rid_x, functionVersion: function_version_x, functionInputValues: { ... }, }, }, ], The product tags and publishes to Marketplace successfully, but installation fails with: Can't install ontology block OntologyMetadata:MarketplaceEntityMissingBlockShapeId [expectedBlockShapeType=SEMANTIC_FUNCTION_LOCATOR, ...] From what I can tell, Marketplace expects function references to be expressed as a SEMANTIC_FUNCTION_
User-delegated authentication from a Custom Widget to an external system
Hi, I’m investigating how to preserve individual user identity when a Foundry Custom Widget triggers operations in an external system. Users authenticate to Foundry through enterprise SSO. The external system has its own OIDC-compatible identity and permission model, and every write must be attributed to the actual user rather than a shared service account. What is the recommended supported pattern for this? Is there an on-behalf-of or token-exchange flow between Foundry and an external identity provider? Can an Action or webhook receive a cryptographically verifiable identity for the Foundry user who invoked it? Can a Custom Widget access any user-delegated token intended for an external audience, or is its runtime token strictly for Foundry APIs? I want to avoid passing an unverified user identifier in the request body or treating a service credential as an individual user. 2 posts - 2 participants Read full topic
White House Brags About Nonexistent Iran Deal as U.S. Death Toll Rises
President Trump took to Truth Social to make unhinged threats of death and destruction against Iran just minutes after touting a nonexistent peace deal with them.“Every time Iran kills an American Soldier they will pay for that killing many times over!” The p…