The IgnitionAI blog
Articles, field notes and insights on enterprise AI: RAG, conversational agents, LLMs and multi-agent systems.
Kimi K3: what a frontier-class open model changes for your sovereignty and your bill
Moonshot AI released the Kimi K3 weights on 27 July 2026: 2.8 trillion parameters, 104 billion active, a 1-million-token context window. For most mid-market companies this changes nothing about self-hosting: the weights alone take around 1.4 TB of GPU memory. It changes three other things: reversibility, the market's price floor, and sovereign hosting. An analysis of the licence, the break-even maths and the decision grid. For CIOs, CTOs and innovation leaders.
RAG and access control: making a RAG inherit Active Directory (Entra ID) permissions
A RAG inherits Active Directory permissions by propagating the user's group membership to the search filter, on three levels: an ACL tag at ingestion, a pre-retrieval filter at query time, a check at response time. An Entra ID / Microsoft Graph tutorial, the six cases that break it (nested groups, token overflow, revocation), and the IAM/RBAC generalisation. For architects, lead engineers and mid-market CTOs.
Why AI projects don't reach production: what the failure numbers actually measure
Depending on the study, 30 to 95% of AI projects don't make it: RAND measures over 80% failure, Gartner at least 30% abandoned after POC, MIT 95% of pilots with no measurable return, S&P Global 42% of companies giving up. These numbers don't measure the same thing, but they point to four causes you can address at scoping. A sourced breakdown and a go/no-go method for CIOs, CTOs and innovation leaders.
How much does an enterprise RAG project cost in 2026? Real ranges, from POC to 100 million vectors
An enterprise RAG is committed in phases: €8,000 for a scoping that decides, €25,000 to €60,000 for a prototype, €80,000 to €250,000 for production, without ever signing the big budget blind. On top sits the line that derails budgets: recurring infrastructure, from $25 to over $5,000 per month depending on architecture. A line-by-line breakdown, a 3-year TCO of 9 vector databases, and the three scoping decisions that bound the cost. For CIOs, CTOs and innovation leaders.
Enterprise RAG in production: 5 critical decisions your first POCs hide from you
The laptop RAG POC holds up in a day. The same system deployed for 500 users over 100,000 documents cracks in three weeks. Five structuring decisions (ingestion, chunking, search, observability, access control) determine whether your RAG will clear that bar. A decision grid for CTOs and Heads of Data at mid-market companies.
Multi-agent architecture in production: three authorization-error patterns observed on engagements
Multi-agent systems fail at the composition layer between agents: an orchestrator with no access control, a sensitive-data sub-agent in a generic pool, loss of user context in the delegation chain. A breakdown of the three recurring error patterns and a mapping to the OWASP LLM06 Excessive Agency framework. For AI architects, lead engineers and CTOs at mid-market companies deploying multi-agent systems.
Microsoft 365 Copilot in the enterprise: the governance audit nobody does
Microsoft 365 Copilot reveals the oversharing accumulated in your tenant and makes it actionable at organisation scale within weeks. Why the prior Microsoft Purview audit changes everything, and how to run it. For CTOs, DPOs and CISOs at French mid-market companies deploying or having deployed Copilot.
The European AI Act: what mid-market CTOs must prepare after the Digital Omnibus
Regulation (EU) 2024/1689 on artificial intelligence, amended by the Digital Omnibus of 7 May 2026, imposes binding obligations on companies operating AI systems. Updated deadlines, risk levels, article-by-article obligations, action plan. For CTOs and Heads of Data at French mid-market companies.
Access control in an enterprise RAG: 5 architectures so you don't expose the executive's salary to the operator
A poorly scoped RAG chatbot exposes the leadership team's payslips to a production operator. Five access-control architectures compared, with their complexity, their security guarantee and their use case. For CTOs, DPOs and CISOs at French mid-market companies.
Tell us about your AI project
A first 30-minute call with a senior consultant. You leave with a documented opinion on feasibility, scope and order-of-magnitude costs. If we believe the project is not ready, we put that in writing.
Reply within 24 business hours from a named consultant.