← Prompt PackagingConcept preview · not available yet

Built for Prompt Packaging

Prompt Engine

A local script that reads one Azure resource's metadata via your own az CLI session and compiles it into a structured, production-grade prompt for a specific tool pairing (e.g. Databricks ingestion from Blob Storage). Currently in development — not ready for use.

Local & read-only — no hosted connection

You run this yourself with your own az CLI session. The script performs a single read-only ARM lookup (resources.get_by_id) for the one resource you point it at — nothing is written, modified, or transmitted to any server we operate. Your credentials never leave your machine.

Minimal input — identifies exactly one resource

{
  "resource_group_name": "",
  "resource_provider_namespace": "",
  "parent_resource_path": "",
  "resource_type": "",
  "resource_name": ""
}
Previewing: Precision profileIllustrative mockup

Raw Resource Payload · resources.get_by_id

Single resource · read-only lookup

49 lines
{
  "id": "/subscriptions/a3f8c2e1-9b4d-4f6a-8c2e-1a9b4d4f6a8c/resourceGroups/rg-prod-data-eastus/providers/Microsoft.Storage/storageAccounts/stprodingestblob",
  "name": "stprodingestblob",
  "type": "Microsoft.Storage/storageAccounts",
  "location": "eastus",
  "tags": {
    "environment": "production",
    "costCenter": "CC-4821",
    "owner": "data-engineering",
    "dataClassification": "confidential",
    "pipeline": "databricks-blob-ingestion"
  },
  "sku": { "name": "Standard_ZRS", "tier": "Standard" },
  "kind": "StorageV2",
  "properties": {
    "provisioningState": "Succeeded",
    "primaryEndpoints": {
      "blob": "https://stprodingestblob.blob.core.windows.net/",
      "dfs": "https://stprodingestblob.dfs.core.windows.net/"
    },
    "isHnsEnabled": true,
    "accessTier": "Hot",
    "minimumTlsVersion": "TLS1_2",
    "allowBlobPublicAccess": false,
    "allowSharedKeyAccess": false,
    "networkAcls": {
      "defaultAction": "Deny",
      "bypass": "AzureServices",
      "virtualNetworkRules": [
        {
          "id": "/subscriptions/a3f8c2e1-9b4d-4f6a-8c2e-1a9b4d4f6a8c/resourceGroups/rg-prod-data-eastus/providers/Microsoft.Network/virtualNetworks/vnet-prod-data/subnets/snet-databricks",
          "action": "Allow"
        }
      ]
    },
    "encryption": {
      "keySource": "Microsoft.Keyvault",
      "keyvaultproperties": {
        "keyvaulturi": "https://kv-prod-data.vault.azure.net/",
        "keyname": "storage-cmk"
      },
      "services": {
        "blob": { "enabled": true, "keyType": "Account" }
      }
    },
    "primaryLocation": "eastus",
    "statusOfPrimary": "available"
  }
}

Compiled Prompt Output

Precision profile · concept preview

29 lines
SYSTEM — Databricks Ingestion from Blob Storage (Prompt Engine · Precision)

ROLE
You are a senior Azure data engineer. Answer ONLY from the anchored resource facts below.
Do not infer regions, endpoints, or security settings not explicitly present.

ANCHORED FACTS
- Source: stprodingestblob (Microsoft.Storage/storageAccounts) | SKU: Standard_ZRS | Kind: StorageV2
- Region: eastus | HNS (ADLS Gen2): enabled | Access tier: Hot
- Endpoints: blob=https://stprodingestblob.blob.core.windows.net/ | dfs=https://stprodingestblob.dfs.core.windows.net/
- Network: defaultAction=Deny | bypass=AzureServices | VNet rule → snet-databricks allowed
- Security: TLS 1.2 min | shared key access DISABLED | public blob access DISABLED
- Encryption: CMK via Key Vault (kv-prod-data) | blob service encryption ON
- Tags: production, confidential, pipeline=databricks-blob-ingestion

CHAIN-OF-LOGIC (required before recommendations)
1. Confirm Databricks can reach this account only via the allowed VNet rule (snet-databricks) — no public path exists.
2. Map the ingestion auth method to the shared-key-disabled + CMK constraints (must use Entra ID / managed identity, not account keys).
3. Flag any unknowns (e.g. container names, path-level ACLs) as UNVERIFIED — never fabricate.

OUTPUT SCHEMA
{
  "ingestion_auth_method": string,
  "network_path": { "allowed": boolean, "via": string },
  "risk_findings": [{ "severity", "evidence_field", "recommendation" }],
  "unverified_gaps": string[]
}

HALLUCINATION GUARD: If a field is absent, respond "NOT IN PAYLOAD" — do not guess.

Target Impact (illustrative)

Profile 1: Precision profile

Hallucination Risk

Target: Strictly anchored

Context Validity

Target: 100%

Tokens

Baseline (illustrative)

Schema Enforcement

Structured output