In this article
An AI assistant can give an obsolete answer without a model failure or code change. A refund policy, service price or opening schedule changes while the old version remains retrievable. Launch testing is therefore insufficient. The source itself needs an owner, effective date, change trigger and test plan focused on decisions with meaningful consequences.
The NIST AI RMF Playbook’s Measure function suggests monitoring external inputs, documenting pre- and post-deployment performance, selecting an appropriate interval for checking continued accuracy, and monitoring production behavior as the environment changes. The workflow below is one business implementation of those ideas, not a certification or a verbatim NIST requirement.
Separate knowledge freshness from model quality
If the assistant accurately repeats an expired document, the failure is not an ordinary hallucination. It is a knowledge-lifecycle failure. If the document is current but retrieval selects the wrong section, the problem is retrieval. If the right context is present and the model invents an unsupported claim, it is generation. This separation assigns an owner and corrective action instead of placing every failure in one vague bucket.
Begin with a small, trusted knowledge base, then prevent it from becoming small and stale. Trust comes from reconstructing which source and version were effective when an answer was produced, not from the number of indexed files.
Create a source register, not just a document folder
For each document or knowledge unit, record:
- The authoritative source and location, plus a version or content fingerprint.
- The business owner who approves meaning and the technical owner responsible for ingestion and indexing.
- Effective date, next review date and status: active, being replaced or expired.
- The questions and decisions that depend on it, including language, customer segment and affected products.
- Consequence if wrong, expected usage exposure and a tested rollback path.
Do not treat the file’s modification date as proof of validity. A formatting edit can change the timestamp without changing policy, while a policy may change in another system without touching the document used by the assistant.
Combine scheduled review with change triggers
Reviewing everything monthly is expensive and still may miss a change on the day it takes effect. Review high-consequence sources more frequently and stable content less often, while creating immediate triggers for an approved policy, price change, new regulation, permission change, product launch, or a surge in human referrals and “this is outdated” complaints.
When a trigger arrives, do more than replace a file. Specify when the new wording becomes effective, which customers remain under the old rule, re-index the affected scope and run linked tests. Preserve evidence connecting the deployed knowledge version, source and time so a previous customer answer can be reconstructed.
A hypothetical case: review by exposure, not equally
Assume a knowledge base with 400 units. Eighty high-consequence units cover prices, approvals and customer policy; 320 low-consequence units explain general information. All numbers are hypothetical and are not performance claims about any site or company.
- Reviewing 80 units monthly at eight minutes each requires 640 minutes, or 10.7 hours.
- Reviewing 320 units quarterly at four minutes each requires 1,280 minutes per quarter, averaging 7.1 hours per month.
- Total average effort is about 17.8 hours monthly. At a loaded QAR 120 per hour, review costs roughly QAR 2,136.
Assume the current process creates six stale-knowledge failures a month at an estimable average impact of QAR 450, plus 12 manual corrections at QAR 50: QAR 3,300 total. After a limited pilot, the count falls to two failures and four corrections, or QAR 1,100. Estimated benefit is QAR 2,200, leaving only QAR 64 after review cost.
That is not proof of an attractive return. It shows a near break-even program with sensitive assumptions. If errors are genuinely low consequence, quarterly review may be enough. If one error can grant an unauthorized price or permission, the decision should not be reduced to the average financial value alone.
Test the change before expanding it
Build questions that map each answer to an expected source and effective date. Test the new version on the changed scope and its boundaries: before and after the effective date, customers on older contracts, Arabic and English, and absent information that should trigger referral rather than invention. Record whether retrieval selected the current source, the answer remained grounded and the assistant abstained when two versions conflicted.
Pass the update through an AI release gate weighted by error consequence. You do not need identical depth across the whole system. Use a small broad regression set for side effects and a deep targeted set for the changed knowledge.
A freshness dashboard that drives action
- Share of high-consequence sources with an owner and effective date.
- Expired sources that remain retrievable.
- Time from approved change to a tested production update.
- Answers that can produce a current source when requested.
- Incidents caused by stale knowledge and usage exposed before containment.
- Updates that failed rollback or reintroduced an expired version.
When a failure occurs, record it in the AI incident process based on harm and exposure. Do not close it when the file is replaced; confirm that the old version has disappeared from retrieval results and caches.
Limits and the operating decision
Freshness controls cannot eliminate every error. The authoritative source may be ambiguous, the owner may approve changes late, or user wording may fall outside the test set. Automated comparison also cannot always interpret a legal or commercial difference. Critical sources therefore need a human owner with explicit authority to stop or redirect answers.
The operating decision is to rank sources by decision consequence and usage exposure, then begin with the twenty sources that change a price, obligation or permission. Give each an owner, effective date, change trigger and repeatable test. Expand when update time and stale-knowledge incidents fall without turning the program into indiscriminate manual review of everything.
