---
title: "NVIDIA Auto Ontology and the Confident Wrong Answer"
slug: "nvidia-auto-ontology-confident-wrong-answer"
author: "Miguel Amigot"
date: "2026-11-09 12:00:00"
category: "Premium"
topics: "NVIDIA Auto Ontology, confidently wrong AI, text-to-SQL accuracy, semantic layer, enterprise ontology, AI agent evaluation, BIRD benchmark, answerability, MCP, self-hosted AI, own your ontology"
summary: "NVIDIA open-sourced Auto Ontology, an Apache 2.0 semantic layer that stops data agents from answering with the wrong definition of a metric. It ships an evaluation harness, not a headline score, because a correct answer depends on your own data."
banner: ""
thumbnail: ""
linkedin: |
  NVIDIA just open-sourced Auto Ontology, an Apache 2.0 library aimed at the most expensive failure in enterprise AI: the agent that writes valid SQL, gets a number back, and is wrong because it used the wrong definition of "revenue."

  The interesting part is what NVIDIA did not ship. The README publishes no headline accuracy score. It points to a separate harness that runs the same model twice, with and without the ontology, on BIRD, BEAVER, or your own questions, and scores both with a deterministic verifier.

  That is the right instinct. A correct answer is defined by your data and your business definitions, so the proof has to be produced in your environment.

  Which means the ontology and the test set are assets. With ibl.ai, you own all the code and the data, including the ontology your agents answer from.

  #iblai #AgenticAI #EnterpriseAI #NVIDIA #SemanticLayer #AI
---

## The Short Answer

**NVIDIA's Auto Ontology, released as open source under Apache 2.0 in November 2026, targets the confident wrong answer: an agent that runs valid SQL against the wrong meaning of a metric. It ships an evaluation harness instead of a headline accuracy score, because correctness depends on your data. ibl.ai applies the same principle to its ontology, where you own all the code and the data.**

The release lives at [github.com/NVIDIA/auto-ontology](https://github.com/NVIDIA/auto-ontology). The README frames the problem plainly: "a revenue metric answered faster is worth nothing if the number is wrong."

The viral version of this story called it "AutoAlign" and said it shipped "without a single benchmark." Both details are off, and the corrections make the point stronger, not weaker.

## What did NVIDIA actually open-source?

NVIDIA open-sourced **Auto Ontology**, a Python library that builds a semantic layer over enterprise databases so AI agents answer from certified business definitions. [MarkTechPost covered the release on November 1, 2026](https://www.marktechpost.com/2026/11/01/nvidia-auto-ontology-open-source-semantic-layer-ai-agents/), and the [Hacker News thread](https://news.ycombinator.com/item?id=50348962) passed 290 points.

Per the repository, Auto Ontology connects to ten database engines, including PostgreSQL, Snowflake, Databricks, ClickHouse, Trino and DuckDB. It stores its ontology in Postgres with pgvector embeddings for retrieval.

The ontology holds three kinds of definition: **terms** (business concepts such as Customer or Invoice Line), reviewed **SQL attributes** (a margin, a rolling total), and **relationships** (how tables join). On Microsoft's Wide World Importers sample, one compilation produced 31 terms.

The workflow has three stages: the library generates a draft ontology, people certify it, and the agent answers from it. Agents reach it through a read-only MCP server with nine tools, a CLI, or an API.

## Is NVIDIA AutoAlign a real product?

**No NVIDIA product called AutoAlign was released.** The open-source project is Auto Ontology. AutoAlign is a separate company whose hosted guardrails API, including a Factcheck rail, already plugs into NVIDIA's open-source NeMo Guardrails as a [third-party integration](https://docs.nvidia.com/nemo/guardrails/configure-guardrails/guardrail-catalog/third-party/auto-align).

The two are easy to blur because both sit near "catching wrong answers." They work at different layers, and only one of them can run entirely on your own infrastructure.

<table style="width:100%; border-collapse:collapse; margin:1.5rem 0; font-size:0.95rem;">
  <thead>
    <tr style="background:#f5f5f0; border-bottom:2px solid #2175C5;">
      <th style="text-align:left; padding:0.75rem; color:#5f6368;">The viral claim</th>
      <th style="text-align:left; padding:0.75rem; color:#5f6368;">What the primary source shows</th>
    </tr>
  </thead>
  <tbody>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">"NVIDIA open-sourced AutoAlign"</td>
      <td style="padding:0.75rem;">NVIDIA open-sourced <strong>Auto Ontology</strong> (Apache 2.0). AutoAlign is a separate vendor with an API-key guardrail integration in NeMo Guardrails.</td>
    </tr>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">"The first tool built to catch the confident wrong answer"</td>
      <td style="padding:0.75rem;">NVIDIA's own <a href="https://github.com/NVIDIA-NeMo/Guardrails">NeMo Guardrails</a>, open-sourced in 2023, already offers fact-checking and hallucination rails. Auto Ontology is new in where it acts: the meaning of the data, before the SQL runs.</td>
    </tr>
    <tr style="background:#f0f9ff; border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">"Shipped without a single benchmark"</td>
      <td style="padding:0.75rem;">No headline accuracy score is published, but a companion <a href="https://github.com/NVIDIA/auto-ontology-eval">evaluation repository</a> runs BIRD, BEAVER, FDABench-Lite and your own questions.</td>
    </tr>
  </tbody>
</table>

## Why do AI agents give confidently wrong answers on enterprise data?

AI agents give confidently wrong answers on enterprise data because valid SQL is not the same as a correct answer. A query can join the right tables, run cleanly and return a plausible number that uses a definition of "revenue" nobody in finance would sign.

Nothing in that chain throws an error. The model is fluent, the database is happy, and the result arrives with full confidence. That is the failure Auto Ontology is built around, and it is the same one we described in [Worse Than Hallucination: Confidently Wrong](/blog/metacognitive-failure-confidently-wrong-agents).

Auto Ontology's answer has five steps per question: classify intent, retrieve candidate terms by embedding search, write SQL, check filter values and the query against the database, then return the answer with its SQL and the steps taken.

In the README's worked example, the agent reports revenue of $588.80 from 3 invoice lines and shows the full SQL and join path, so a person can check the number against the source rather than trust it.

## How does Auto Ontology decide when not to answer?

Auto Ontology decides when not to answer with an **answerability check**. Before writing SQL, the agent asks whether the ontology covers every concept in the question, and reports the gap instead of guessing.

The repository's example asks for return on ad spend against a sales database that holds no advertising data. The check returns a coverage of 0.5, notes that no term covers "ad spend," and asks the user to clarify or connect another source.

That is the behavior that actually prevents a confident wrong answer. A system that says "this data cannot answer that" is worth more than one that is right 90% of the time and never tells you which 10% to distrust.

## Why did NVIDIA skip a headline accuracy number?

NVIDIA skipped a headline accuracy number because the only number that matters is the one measured on your schema, your definitions and your questions. The [auto-ontology-eval](https://github.com/NVIDIA/auto-ontology-eval) repository is built to produce that number, not to advertise one.

Each run asks the same model the same questions twice. The control arm gets the question plus a schema dump; the treatment arm gets Auto Ontology's retrieved context. One deterministic verifier scores both against gold SQL, with no LLM judge.

<table style="width:100%; border-collapse:collapse; margin:1.5rem 0; font-size:0.95rem;">
  <thead>
    <tr style="background:#f5f5f0; border-bottom:2px solid #2175C5;">
      <th style="text-align:left; padding:0.75rem; color:#5f6368;">Dataset in the eval harness</th>
      <th style="text-align:right; padding:0.75rem; color:#5f6368;">Questions</th>
      <th style="text-align:left; padding:0.75rem; color:#5f6368;">Engine</th>
    </tr>
  </thead>
  <tbody>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">BIRD (Dev / Mini-Dev)</td>
      <td style="text-align:right; padding:0.75rem; font-variant-numeric:tabular-nums;">1,534 / 500</td>
      <td style="padding:0.75rem;">SQLite</td>
    </tr>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">BEAVER (dw sample)</td>
      <td style="text-align:right; padding:0.75rem; font-variant-numeric:tabular-nums;">100</td>
      <td style="padding:0.75rem;">MySQL</td>
    </tr>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">FDABench-Lite</td>
      <td style="text-align:right; padding:0.75rem; font-variant-numeric:tabular-nums;">169</td>
      <td style="padding:0.75rem;">SQLite</td>
    </tr>
    <tr style="border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;">Wide World Importers</td>
      <td style="text-align:right; padding:0.75rem; font-variant-numeric:tabular-nums;">41</td>
      <td style="padding:0.75rem;">Postgres</td>
    </tr>
    <tr style="background:#f0f9ff; border-bottom:1px solid #e5e7eb;">
      <td style="padding:0.75rem;"><strong>Your own data</strong></td>
      <td style="text-align:right; padding:0.75rem;">Your gold questions</td>
      <td style="padding:0.75rem;">Your database</td>
    </tr>
  </tbody>
</table>

The harness also refuses to print a headline number when more than 5% of questions got no model output. A rate-limited run scores near zero and looks exactly like a weak model, so the guard stops a broken run from becoming a quoted statistic.

The last row is the one that counts. Public benchmarks tell you a method works somewhere; your own gold questions tell you whether it works on the definitions your finance, registrar or claims team actually uses.

## Where does your data go when you run Auto Ontology?

Auto Ontology's services and catalog run on your own infrastructure: Docker Compose or a Helm chart, with the ontology in your Postgres.

Its four model roles default to NVIDIA-hosted NIM endpoints on build.nvidia.com, but accept self-hosted NIM or any OpenAI-compatible endpoint, so the whole stack can stay inside your perimeter.

One optional feature leaves the perimeter. Setting a KumoRFM key routes predictive questions to a hosted service that uploads connected tables, up to 20 by default. The README tells you to complete your organization's data review first, which is the right warning.

The README also notes that the backend and ingestion ports must stay on a private network, since the ingestion endpoints carry no authentication of their own. Teams in regulated sectors should read that section before any pilot.

## Who should own the ontology your AI agents answer from?

The organization whose definitions it encodes should own the ontology your AI agents answer from. Certified terms, reviewed SQL attributes and the gold questions that prove them are institutional knowledge, built and reviewed by people.

That is the case for ibl.ai's [Agentic Ontology](/product/agentic-ontology): an MIT-licensed [organizational ontology](https://github.com/iblai/ontology) you self-host and expose to any authorized agent over MCP. Auto Ontology's Apache 2.0 license points the same direction, and the two ideas are compatible.

On ibl.ai you own all the code and the data, the platform stays model-agnostic across any LLM, and there is no per-seat pricing. 1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.

Teams that also want runtime guardrails on the agents reading that ontology can run them on [NemoClaw](/service/nemoclaw), where ibl.ai deploys sandboxed agents with NVIDIA NeMo Guardrails inside your perimeter.

For the architecture behind a semantic layer you keep, see [The Semantic Layer AI Agents Need — and Who Should Own It](/blog/semantic-layer-for-ai-agents).

## Frequently Asked Questions

### Is NVIDIA Auto Ontology free to use commercially?

Yes. The repository is licensed under Apache 2.0, which permits commercial use. NVIDIA maintains the code and does not accept external pull requests, but issues and integration requests are open.

### Does Auto Ontology replace a semantic model I already have?

No. The README says it complements the semantic models customers already own, and it imports and exports definitions in the Apache Ossie format.

### Does it publish an accuracy score?

Not in the main README. The companion eval repository measures the accuracy difference with and without the ontology, on public benchmarks or on your own gold questions.

## Why does owning the AI stack matter?

**ibl.ai is the agentic AI platform where you own all the code and the data. You self-host the entire stack inside your own perimeter, run it model-agnostic across any LLM and switch anytime, and pay by usage with no per-seat pricing — so you can deploy anywhere: your cloud, on-premise, GovCloud, or fully air-gapped.**

- **You own all the code and the data.** Full source code under a perpetual license, running on your infrastructure. Not API access to someone else's platform — the stack itself is yours.
- **Model-agnostic.** Run any LLM — Claude, GPT, Gemini, Llama, Command, or your own fine-tune — and switch providers without rewriting the platform.
- **No per-seat pricing.** Usage-based billing against a budget cap you set. Cost tracks what your organization actually uses, not how many people you employ.
- **Deploy anywhere.** Your cloud, your VPC, on-premise, GovCloud, or a fully air-gapped network with no outbound connectivity.

1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.

ibl.ai is family-owned and operated from New York, NY — a U.S.-headquartered, domestically-owned long-term partner, not a vendor that sells licenses and moves on.
