Layer: Semantic layer
pii_sensitivity reflects the per-column tag set at index time by the
PII classifier — one of public, internal, confidential, or pii.
The parallel pii_categories list (e.g. ["contact"]) gives the
underlying category names that drove that sensitivity. Block-on-sensitivity
routing flows through get_metric, which propagates pii_categories
from the classifier; this field exposes the same signal for read-time
UX choices.
Pass name as a bare identifier — customer, not public.customer. The
schema qualifier belongs on the bound table, not the entity name. Errors
surface as unknown_name with a list_entities recovery hint.