Inferensys

Prompt

Data Model Peer Review Facilitation Prompt

A practical prompt playbook for using a Data Model Peer Review Facilitation Prompt in production AI workflows to structure and accelerate schema and data model design reviews.
Data scientist building training data pipeline on laptop, data preprocessing visible, technical workspace.
PROMPT PLAYBOOK

When to Use This Prompt

Define the job, reader, and constraints for a structured data model peer review.

This prompt is for engineering leads, data architects, and senior backend engineers who need to facilitate a rigorous, structured peer review of a proposed data model. The job-to-be-done is not to generate a review, but to produce a facilitation artifact: a review agenda, a set of targeted probing questions organized by risk dimension, and a summary template that captures decisions, unresolved risks, and action items. The ideal user is someone who understands the domain and the proposed model well enough to provide it as input, but wants the AI to enforce review discipline and prevent the common failure mode of reviews that focus only on naming conventions while missing indexing gaps, evolvability traps, or security boundary violations.

Use this prompt when you have a concrete data model artifact to review—a DDL script, an ERD description, a set of table definitions, or a structured schema document. The prompt works best when you supply the model in a structured format (SQL DDL, JSON schema, or a detailed textual description of entities, attributes, relationships, and constraints) along with the intended access patterns, query profiles, and non-functional requirements. Do not use this prompt for reviewing code logic, API design, or infrastructure architecture; those require different review dimensions. Also avoid it when the model is too vague to evaluate—if you cannot describe the entities and their relationships, the review will produce generic advice rather than actionable findings.

The prompt is designed to be wired into a review workflow where a human facilitator runs it before the review meeting, distributes the agenda and questions to reviewers, and uses the summary template to capture outcomes. It is not a replacement for human judgment. The output includes risk areas that require human investigation (e.g., 'Verify whether this indexing strategy handles the pagination pattern on line 42'), not final verdicts. For high-stakes schema changes in production systems—especially those involving data migrations, PII, or financial records—always pair this prompt's output with a human approval gate and a rollback plan review before execution.

PRACTICAL GUARDRAILS

Use Case Fit

Where this prompt works and where it does not. Use these cards to decide if the Data Model Peer Review Facilitation Prompt fits your current review context.

01

Good Fit: Structured Design Reviews

Use when: you have a concrete data model proposal (DDL, ERD, or schema document) and need a systematic review agenda. Guardrail: Provide the schema artifact and access patterns as input; the prompt excels at generating targeted questions across performance, correctness, security, and evolvability dimensions.

02

Bad Fit: Live Database Debugging

Avoid when: you need to diagnose a production outage or debug query performance on a running system. Guardrail: This prompt facilitates design review, not incident response. For production issues, use an incident triage or query analysis prompt instead.

03

Required Inputs

What you must provide: the proposed data model (DDL, ERD, or structured description), known access patterns and query profiles, and any constraints (regulatory, performance SLAs, existing system dependencies). Guardrail: Missing access patterns produce generic questions; always include how the data will be read and written.

04

Operational Risk: Superficial Coverage

What to watch: the prompt may produce a review that touches every dimension but lacks depth on the most critical risks for your domain. Guardrail: After generation, scan the agenda for your top 3 concerns. If they are not prominent, re-run with explicit emphasis on those dimensions in the input constraints.

05

Operational Risk: False Consensus

What to watch: a well-structured review agenda can create an illusion of thoroughness, leading teams to skip deeper manual analysis. Guardrail: Treat the generated agenda as a starting framework, not a completed review. Require human reviewers to populate findings and decisions before closing the review.

06

Variant: Compliance-Heavy Domains

Use when: the data model must satisfy regulatory requirements (GDPR, HIPAA, PCI). Guardrail: Add a compliance dimension to the input constraints and require the output to flag data classification, retention, and access control gaps. Always follow with a dedicated compliance review; this prompt is a facilitation aid, not a certification.

PROMPT PLAYBOOK

Copy-Ready Prompt Template

A reusable prompt with square-bracket placeholders that you can copy, adapt, and wire into your peer review workflow.

The prompt template below is designed to be dropped into an AI-assisted peer review harness. It takes a proposed data model, the team's review standards, and any known access patterns, then produces a structured review agenda, a set of probing questions organized by risk dimension, and a summary template for capturing decisions and action items. All placeholders use square brackets so you can safely substitute values in code without conflicting with JSON or template engines.

text
You are facilitating a structured peer review of a proposed data model. Your role is to produce a review agenda, targeted probing questions, and a decision summary template. Do not approve or reject the model. Do not rewrite the schema. Your job is to help the review team examine the model thoroughly.

## INPUTS

### Proposed Data Model
[SCHEMA_DDL_OR_DESCRIPTION]

### Access Patterns and Query Profile
[ACCESS_PATTERNS]

### Review Standards and Policies
[REVIEW_STANDARDS]

### Known Constraints
[CONSTRAINTS]

### Risk Tolerance Level
[RISK_LEVEL: low | medium | high]

## OUTPUT SCHEMA

Return a JSON object with the following structure:

{
  "review_agenda": {
    "sections": [
      {
        "dimension": "performance | correctness | security | evolvability | operability",
        "priority": "high | medium | low",
        "focus_areas": ["string"],
        "time_allocation_minutes": number
      }
    ],
    "total_estimated_minutes": number
  },
  "probing_questions": [
    {
      "id": "string",
      "dimension": "performance | correctness | security | evolvability | operability",
      "question": "string",
      "context_why": "string explaining why this question matters",
      "expected_evidence": "what the team should point to when answering"
    }
  ],
  "risk_areas": [
    {
      "area": "string",
      "severity": "high | medium | low",
      "description": "string",
      "mitigation_discussion_points": ["string"]
    }
  ],
  "decision_summary_template": {
    "decisions_made": [
      {
        "topic": "string",
        "decision": "string placeholder",
        "rationale": "string placeholder",
        "alternatives_considered": ["string placeholder"],
        "action_items": ["string placeholder"]
      }
    ],
    "open_questions": ["string placeholder"],
    "follow_up_owner": "string placeholder",
    "next_review_date": "string placeholder"
  }
}

## CONSTRAINTS

- Cover all five dimensions: performance, correctness, security, evolvability, operability.
- Generate at least 3 probing questions per dimension.
- Flag at least 2 risk areas, even if the model appears sound.
- If [RISK_LEVEL] is "high," increase question depth and add rollback-planning questions.
- Do not invent access patterns. Use only what is provided in [ACCESS_PATTERNS].
- If [ACCESS_PATTERNS] is empty or insufficient, add a risk area noting "unknown access patterns" and generate questions that ask the team to provide them.
- The decision summary template must use placeholder strings, not pre-filled answers.

To adapt this template, replace each square-bracket placeholder with the actual input for your review session. The [SCHEMA_DDL_OR_DESCRIPTION] placeholder accepts raw DDL, an ERD description, or a structured schema document. The [ACCESS_PATTERNS] placeholder should include read and write patterns, expected query shapes, concurrency requirements, and any SLAs. If your organization has formal review standards, supply them in [REVIEW_STANDARDS]; otherwise, the prompt will still produce a useful review using its built-in dimension coverage. The [RISK_LEVEL] parameter controls review depth: set it to "high" for models backing financial, healthcare, or auth systems, and "low" for internal tools with limited blast radius.

Before wiring this into a production review pipeline, test the prompt against at least three known schemas with documented outcomes. Compare the generated probing questions against questions your senior reviewers would ask. If the prompt misses dimension coverage or generates questions that don't match your team's review culture, add a [EXAMPLES] placeholder containing one or two annotated review examples that demonstrate your expected depth and style. Avoid shipping this prompt without a human-in-the-loop step: the AI facilitates the review, but a senior engineer must still lead the session and capture the final decisions.

IMPLEMENTATION TABLE

Prompt Variables

Placeholders required by the Data Model Peer Review Facilitation Prompt. Replace each with concrete inputs before execution. Validation notes describe how to confirm the input is sufficient for a reliable review.

PlaceholderPurposeExampleValidation Notes

[DATA_MODEL_ARTIFACT]

The complete data model to review: DDL, ERD description, schema YAML, or structured specification

DDL for orders, line_items, customers tables plus proposed indexes

Must be non-empty and parseable as structured schema text. Reject if only a narrative description without field-level detail.

[MODEL_PURPOSE]

Business context explaining what this data model is intended to support

Serves an e-commerce order management system handling 10K orders/day with real-time inventory sync

Must be present and specific. Generic descriptions like 'app database' produce weak reviews. Require workload characteristics.

[ACCESS_PATTERNS]

Expected query patterns, read/write ratios, and critical paths the model must support

90% reads, 10% writes; frequent JOIN on orders.id = line_items.order_id; point lookup by customer_id

Must include at least 3 concrete query patterns. Missing access patterns prevent indexing and denormalization review.

[REVIEW_DIMENSIONS]

Specific review categories to prioritize: performance, correctness, security, evolvability, or all

["performance", "correctness", "security", "evolvability"]

Must be a valid list from allowed set. Null defaults to all four. Single-dimension reviews skip critical checks.

[CONSTRAINTS]

Non-functional requirements: latency budgets, data volume, retention, compliance, multi-tenancy

PII in customers.email; 99.99% write availability; 50ms p99 read latency; GDPR retention 7 years

Optional but strongly recommended. Missing constraints cause false negatives on security and evolvability checks.

[TEAM_CONTEXT]

Team size, expertise, and operational maturity for assessing evolvability recommendations

5 backend engineers, 1 DBA, managed PostgreSQL on RDS, CI/CD with schema migration tooling

Optional. When absent, evolvability recommendations default to conservative. Include for migration-cost realism.

[OUTPUT_SCHEMA]

Expected structure for the review output: agenda, probing questions, risk register, decision log

JSON with fields: review_agenda, probing_questions_by_dimension, risk_items, decision_template

Must be a valid schema definition. Default produces all four sections. Partial schemas skip sections silently.

PROMPT PLAYBOOK

Implementation Harness Notes

How to wire the Data Model Peer Review Facilitation Prompt into an application or workflow with validation, retries, logging, and human review gates.

This prompt is designed to be the first step in a structured review pipeline, not a standalone chat interaction. The typical integration pattern is a webhook or API endpoint that receives a data model artifact (DDL, an ERD description, or a structured schema document) and returns a review agenda. The application layer should wrap the LLM call with pre-processing to validate the input artifact, post-processing to parse the structured output, and a persistence layer to store the review for later comparison against resolved action items.

Start by validating the input payload. The [DATA_MODEL_ARTIFACT] must be non-empty and should be checked for minimum complexity (e.g., at least one entity with attributes). If the input is raw DDL, run a lightweight SQL parser to confirm it is syntactically valid before sending it to the model. For the model call itself, use a model with strong structured output support and a low temperature setting (0.1–0.3) to ensure consistent JSON formatting. The prompt template expects a JSON output with review_agenda, probing_questions, risk_areas, and summary_template fields. Implement a JSON schema validator in your harness to confirm the response matches this contract. If validation fails, retry once with a repair prompt that includes the validation error; if it fails again, log the failure and escalate to a human reviewer rather than silently dropping the review.

Logging and traceability are critical because peer reviews feed into architecture decision records. Store the full prompt, the raw model response, the parsed output, and the validation result in an audit table. Attach a unique review_id and correlate it with the data model version or commit hash. For high-stakes schemas (production databases, PII-bearing tables, financial records), add a mandatory human approval step: the harness should publish the generated review to a review queue, require sign-off from at least one authorized reviewer, and only then mark the review as accepted. The summary_template field in the output is designed to be pre-populated into your team's decision log tool (e.g., a markdown file in a git repository or a Confluence page), so your harness should also handle that rendering step.

Avoid wiring this prompt directly into a CI/CD pipeline without a human-in-the-loop gate. A schema change PR can trigger the review generation automatically, but the output should be attached as a comment or checklist for the PR author and reviewers to work through, not used to auto-approve or auto-reject the change. The probing questions and risk areas are facilitation tools for human judgment, not pass/fail criteria. Finally, build an eval harness that periodically tests the prompt against a golden set of known data models with documented review expectations, checking that all four output sections are present, that risk areas cover performance, correctness, security, and evolvability dimensions, and that probing questions are specific to the model rather than generic.

IMPLEMENTATION TABLE

Expected Output Contract

Defines the structured output schema for the Data Model Peer Review Facilitation Prompt. Use this contract to validate the model's response before routing it to human reviewers or downstream systems.

Field or ElementType or FormatRequiredValidation Rule

review_agenda

Array of objects

Schema check: each item must contain 'topic' (string), 'duration_minutes' (integer), and 'facilitator_notes' (string). Array length must be >= 3.

probing_questions

Array of objects

Schema check: each item must contain 'dimension' (enum: performance, correctness, security, evolvability), 'question' (string), and 'target_role' (string). At least one question per dimension is required.

risk_areas

Array of objects

Schema check: each item must contain 'area' (string), 'severity' (enum: high, medium, low), 'rationale' (string), and 'mitigation_discussion_points' (array of strings). Severity must be a valid enum value.

decision_log_template

Object

Schema check: must contain 'decision' (string), 'rationale' (string), 'alternatives_considered' (array of strings), 'action_items' (array of objects with 'owner' and 'description' strings). Owner field must not be empty.

completeness_checklist

Array of objects

Schema check: each item must contain 'dimension' (enum: performance, correctness, security, evolvability), 'status' (enum: covered, partial, gap), and 'evidence_note' (string). All four dimensions must be present.

source_model_summary

String

Format check: must be a non-empty string summarizing the proposed data model under review. Null or whitespace-only strings should trigger a retry.

review_metadata

Object

Schema check: must contain 'model_name' (string), 'review_date' (ISO 8601 string), and 'reviewer_roles' (array of strings). Date must parse without error. Reviewer_roles must not be empty.

escalation_triggers

Array of strings

Null allowed. If present, each string must describe a condition that would escalate the review. Validate no empty strings in the array.

PRACTICAL GUARDRAILS

Common Failure Modes

When facilitating a data model peer review with an LLM, these are the most common failure modes that degrade review quality. Each card identifies a specific risk and provides a concrete guardrail to embed in your harness.

01

Surface-Level Checklist Review

What to watch: The model produces a generic review that checks for obvious issues (missing indexes, no primary keys) but misses domain-specific risks like incorrect cardinality, implicit business rules encoded in column names, or access patterns the schema cannot serve. Guardrail: Require the prompt to ingest actual query patterns and workload profiles. Add an eval that checks whether the review references at least three specific entities or relationships from the submitted schema.

02

False Consensus on Ambiguous Designs

What to watch: The model agrees with the proposed design without probing trade-offs, especially when the schema looks plausible but hides future problems like soft-delete abuse, overloaded columns, or missing temporal tracking. Guardrail: Include a mandatory 'devil's advocate' section in the output schema. Add a validator that fails the review if fewer than two design alternatives or risk scenarios are discussed.

03

Ignoring Evolvability Constraints

What to watch: The review focuses on current-state correctness but ignores how the schema will handle future changes—adding a tenant column, splitting a table, or introducing a new entity relationship. Guardrail: Add an explicit 'evolvability' dimension to the review rubric. Test the prompt with a schema that has a known rigidity problem (e.g., enums used where a reference table is needed) and verify the review flags it.

04

Hallucinated Constraints or Indexes

What to watch: The model invents constraints, indexes, or relationships that don't exist in the submitted DDL, then critiques or praises the schema based on fabricated details. Guardrail: Require every finding to cite a specific table name, column name, or line from the submitted schema. Add a post-review grounding check that verifies all referenced objects exist in the source DDL.

05

Missing Security and Access Pattern Review

What to watch: The review covers normalization and indexing but skips multi-tenancy isolation, PII exposure, or access control implications baked into the schema design. Guardrail: Add a required 'security and data isolation' section to the review template. Include an eval that checks for tenant-isolation language when the schema contains a tenant or organization identifier column.

06

Over-Prioritizing Performance Without Correctness

What to watch: The model recommends denormalization, materialized views, or index additions that improve read speed but introduce update anomalies, staleness windows, or consistency risks. Guardrail: Require every performance recommendation to include a 'consistency impact' statement. Add a validator that flags recommendations lacking a trade-off discussion when write-heavy tables are involved.

IMPLEMENTATION TABLE

Evaluation Rubric

Use this rubric to evaluate the quality of the review agenda, probing questions, and summary template generated by the Data Model Peer Review Facilitation Prompt. Each criterion targets a specific dimension of review completeness.

CriterionPass StandardFailure SignalTest Method

Performance Dimension Coverage

Output includes at least one specific question about indexing strategy, query access paths, or expected read/write load for each entity in [INPUT_DATA_MODEL].

Questions are generic (e.g., 'Is it fast?') or omit a core entity from the performance analysis.

Manual review: check that each entity defined in the input schema has a corresponding performance-oriented question in the agenda.

Correctness Constraint Audit

Agenda explicitly lists all primary keys, foreign keys, unique constraints, and check constraints from [INPUT_DATA_MODEL] and generates a validation question for each.

Missing constraints are not flagged, or the review accepts implicit constraints without requiring explicit DDL verification.

Schema diff: parse the input DDL, extract constraint names, and verify each appears in the 'Correctness' section of the generated review agenda.

Security & PII Surface Scan

Summary template includes a dedicated section for data classification, and the probing questions identify columns likely to contain PII, secrets, or regulated data based on column names in [INPUT_DATA_MODEL].

No security section exists, or the output fails to flag columns named 'ssn', 'password', 'token', or 'credit_card'.

Keyword match: confirm that the output contains a security section and that a predefined list of sensitive column name patterns triggers a corresponding question.

Evolvability & Migration Risk

Output includes a specific question about the rollback plan for the proposed schema change and identifies at least one breaking change risk if [MIGRATION_DDL] is provided.

The review treats the migration as risk-free or fails to mention backward compatibility when [MIGRATION_DDL] contains 'DROP COLUMN' or 'ALTER COLUMN ... TYPE'.

Static analysis: if [MIGRATION_DDL] is non-null, scan the output for the term 'rollback' and verify a warning exists for any destructive DDL commands present in the input.

Action Item Traceability

Every risk or open question in the summary template is linked to a specific decision or action item with an owner placeholder.

The summary contains vague conclusions like 'discuss later' without assigning an owner or a concrete next step.

Structural validation: parse the summary template section and assert that every bullet point under 'Risks' or 'Open Questions' has a corresponding entry in the 'Action Items' table.

Entity-Relationship Completeness

The review agenda identifies all relationships implied by foreign keys in [INPUT_DATA_MODEL] and includes a question about the nature of the relationship (e.g., 1:1, 1:N).

A foreign key exists in the DDL but the review agenda treats the table in isolation without mentioning the parent or child relationship.

Graph check: build a graph of table relationships from the input DDL foreign keys and verify that every edge is referenced in the text of the generated review questions.

Naming Convention Consistency

Output flags any tables or columns in [INPUT_DATA_MODEL] that violate a standard naming convention (e.g., plural vs. singular, snake_case violations) if [NAMING_CONVENTION_RULES] are provided.

The review ignores naming inconsistencies or invents a standard not present in the provided rules.

Rule engine: if [NAMING_CONVENTION_RULES] is provided, apply its regex patterns to the input DDL and confirm that any violations appear in the output's 'Naming & Style' section.

ADAPTATION OPTIONS

Adapt This Prompt

How to adapt

Start with the base prompt and a single schema artifact. Replace [DATA_MODEL_ARTIFACT] with a DDL script, ERD description, or schema YAML. Reduce the review dimensions to 2-3 (e.g., correctness and performance) and skip the summary template. Run interactively in a chat interface rather than wiring into a review pipeline.

Watch for

  • The model skipping dimensions you didn't explicitly remove
  • Overly generic questions that don't reference specific columns or constraints
  • No structured output, making it hard to compare reviews across iterations
Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.