Skip to content
Last Furlong
Language: English

Demonstrations

Seven worked examples, graded.

Each asks questions needing a join and an aggregate over a schema the agent was never given. Answers are checked against independently written SQL, so a pass means it got there on its own.

How to read this

Every dataset below is synthetic, generated from a fixed seed. There is no real patient, customer, claim or privileged material in any of them.

The questions are deliberately not lookups. A single-table question proves nothing: a model pattern-matching rather than reading the schema would still answer it. Each one needs a join, and most need an aggregate.

Graded against
Independently written SQL held alongside each dataset. The agent never sees it, and it was not derived from the agent’s output — otherwise a pass would prove nothing.
Hosted — OpenAI
gpt-5.6-terra — between 20 and 21 of 21 across 3 runs. Each run took 374–411s, median 403s. Most recent 2026-08-03. Prompts and query results are sent to OpenAI in this configuration.
Hosted — DeepSeek
deepseek-v4-flash — 21 of 21 correct in all 3 runs. Each run took 329–591s, median 391s. Most recent 2026-08-03. Prompts and query results are sent to DeepSeek in this configuration.
On our hardware
qwen3.6:35b — between 20 and 21 of 21 across 4 runs. Each run took 215–242s, median 230s. Most recent 2026-08-04. Nothing left the network.
We publish failures
Each model is graded several times and the table shows how often each question was answered correctly, because a single run misrepresents this badly. The local model has no question it always gets wrong — but several it does not answer reliably, which a one-run grid would have shown as a flat failure. The models also do not fail the same questions.

Each cell counts how many of that model’s runs answered the question correctly.

The healthcare example, recorded

Under three minutes, end to end, including a check of what left the network. Every command and every line of output is real.

Served from this domain, not an embed — no third-party player, no tracking.

Four where the data cannot leave

These are the engagements we are unusual in being able to take: the model runs on the client’s own hardware and nothing reaches a third party. That used to cost consistency. On the current model it does not — the local column matches the better of the two hosted models question for question, and answers faster than either.

Healthcare provider

Patient records are restricted, and the systems holding them sit behind a firewall with no inbound access.

QuestionAnswerOpenAIDeepSeekLocal
How many patients have an abnormal HbA1c and no active endocrine medication?113/3 · 24.3s3/3 · 18.4s4/4 · 9.8s
How many patients on active Warfarin have had an abnormal potassium result?53/3 · 16.5s3/3 · 16.6s4/4 · 9.6s
How many sites have four or more patients with an eGFR below 60?33/3 · 24.6s3/3 · 17.9s4/4 · 8.7s

Retail and commercial bank

Transaction monitoring runs on a segmented network, and customer data is tightly governed.

QuestionAnswerOpenAIDeepSeekLocal
How many customers have an escalated alert with no SAR filed?83/3 · 15.3s3/3 · 19.3s4/4 · 8.2s
How many customers made three or more cash deposits, each under $10,000, that together total more than $10,000 within any 7-day window?173/3 · 27.9s3/3 · 37.6s4/4 · 29.8s
How many politically exposed customers received funds from a high-risk jurisdiction (AE or PA)?33/3 · 21.6s3/3 · 32.4s4/4 · 11.2s

Property and casualty insurer

Claim files carry medical and financial detail on named individuals, and the claims system is reachable only from inside the network.

QuestionAnswerOpenAIDeepSeekLocal
How many claims handled by junior adjusters are litigated and still open?53/3 · 14.3s3/3 · 12.2s4/4 · 7.4s
How many open claims have total payments exceeding their reserve?63/3 · 19.2s3/3 · 40.6s4/4 · 9.2s
Which adjuster team has the highest total paid on litigated claims?“Desk”3/3 · 17.2s3/3 · 11.4s4/4 · 8.6s

In-house legal department

Privileged material raises a waiver question as well as a policy one, which makes the boundary decision unusually consequential.

QuestionAnswerOpenAIDeepSeekLocal
How many documents are past their retention date but still under an unreleased legal hold?453/3 · 15.7s3/3 · 47.5s4/4 · 9.1s
How many privileged documents belong to matters that are closed and have no unreleased hold?232/3 · 25.3s3/3 · 18.6s4/4 · 10.8s
Which practice area has the most privileged documents?“Commercial”3/3 · 15.1s3/3 · 10.5s4/4 · 8.1s

Three where it can

Most organisations are here, and many do not realise it. The data carries no residency constraint, so an approved hosted model is appropriate — nothing to operate, no hardware to buy, quicker to stand up. We will say so rather than sell you infrastructure you do not need.

Online retailer

Order and inventory data carries no residency constraint, so an approved hosted model is appropriate and the least work to stand up.

QuestionAnswerOpenAIDeepSeekLocal
How many products are below their reorder point with no open purchase order?63/3 · 17.2s3/3 · 12.8s3/4 · 8s
Which category generated the most revenue from discounted orders?“Outdoor”3/3 · 16.6s3/3 · 10.8s4/4 · 10.6s
Which supplier has the highest proportion of sold items that were returned?“Baltic Works”3/3 · 19.6s3/3 · 14.9s4/4 · 14s

B2B SaaS provider

Usage telemetry is commercially sensitive but not residency-restricted. Hosted is appropriate and quicker to stand up.

QuestionAnswerOpenAIDeepSeekLocal
Among accounts whose subscription is not cancelled, how many used fewer than half their licensed seats in 2026-07?273/3 · 17.2s3/3 · 21.8s4/4 · 15s
How many active accounts had fewer active seats in 2026-07 than in 2026-05 and also have an unresolved support ticket?83/3 · 24.2s3/3 · 37.8s4/4 · 16.6s
Which plan has the highest total monthly recurring revenue among active subscriptions?“enterprise”3/3 · 12s3/3 · 9.9s4/4 · 6.1s

County assessor’s office

Parcel, assessment and sale records are public. There is no residency argument to make, which makes this the clearest case that AI is not off the table.

QuestionAnswerOpenAIDeepSeekLocal
How many parcels have a 2026 assessed value more than 25 percent below their most recent arm's-length sale price?63/3 · 16.8s3/3 · 18.2s4/4 · 10.9s
How many parcels with a pending appeal also had their assessed value rise from 2025 to 2026?43/3 · 17.6s3/3 · 15.3s4/4 · 9.8s
Which neighbourhood has the most pending 2026 appeals?“Cedar Heights”3/3 · 17.9s3/3 · 12.5s4/4 · 7.8s

Which model is your decision, not ours

Most organisations do not need a private model, and we will say so. If your policy already permits an approved AI vendor, a hosted frontier model is the least work: no GPUs to buy, nothing to operate, and the accuracy shown above. That remains our default for most clients. What it is not, on these questions, is the fastest.

What we will not do is pretend that choice is free of consequence. In that configuration your prompts, and the query results the agent reads, are sent to the model provider under your agreement with them. For a great many workloads that is entirely acceptable and already covered by an existing vendor review. For some it is not, and that is the case we are unusual in being able to handle.

Hosted — our default
Nothing to operate and no hardware to buy, priced per token. The most accurate single configuration measured here, though only just. Data reaches the model provider. Right for most clients most of the time.
On your hardware
For data that genuinely cannot leave. Nothing reaches a third party and there is no per-token cost once the hardware exists. Accuracy depends heavily on which open model you run: the local column is a 36B mixture-of-experts on one machine, and moving to it from a 30B coder model closed the gap to the hosted models entirely. So “a bigger model would help” is not the lesson — which model, and how it is tuned, mattered far more than size.
Mixed
Usually the right answer once a deployment matures: restricted data local, everything else through an approved API, decided per use case rather than per vendor.
Switching later
One line of configuration. You are not choosing once and living with it, and you are not locked to us either way.

One result is worth dwelling on, because it reverses the obvious assumption. Earlier measurements had both hosted models more accurate than the local one and slower than it, and we put the latency down to round trips rather than to the models: this is an agentic loop that discovers the schema, describes tables and runs a query across several calls, and when the model is hosted every one of those crosses the internet. Changing the local model tested that reading. The current one matches the better hosted model question for question and answers in about 230s against their 391 and 403. The round trips were the cost. “Hosted is fast, local is private” was always too simple — on these questions, local is now the faster of the two.

OpenAI 20–21/21 × 3 · 374–411s DeepSeek 21/21 × 3 · 329–591s Local 20–21/21 × 4 · 215–242s

Results vary by model, by hardware and by run. Each model here was graded repeatedly, and the figures are ranges and medians across those runs rather than a single measurement — but they were all taken on one date, and they are not a guarantee. We have seen the same local model answer a question correctly in one run and incorrectly in the next, which is exactly why the table counts runs instead of showing one verdict. If a specific model matters to you, the honest answer is to run these graded questions against it rather than trust a table on a website — and we will do that with you, on your schema.

Finish

Want this run against your schema?

An Assess engagement starts by establishing what your data actually permits — which is often less restrictive than people assume. Bring a schema and a question you cannot currently answer.