Data pipelines have a property that makes them uniquely dangerous: they fail silently. A web application returns a 500 error when something goes wrong. A data pipeline returns a result that looks plausible but is wrong. The error is not in the output—it is in the process that produced it.
The weakest link principle. A pipeline with ten stages is as reliable as its least reliable stage. If nine stages have 99.99% reliability and one stage has 99% reliability, the pipeline has 99% reliability—not the 99.9% that averaging would suggest. The weak stage dominates. This means that pipeline improvement should focus on the weakest stage first, not on the stages that are easiest to improve.
Validation at every boundary. The minimum discipline for a reliable pipeline is validation at every stage boundary: schema validation (does the data have the expected fields with the expected types?), range validation (are the values within plausible bounds?), cardinality validation (are there the expected number of records?), and timeliness validation (is the data fresh enough for its intended use?). Validation at every boundary means that errors are caught at the stage that produced them, not propagated to downstream stages where diagnosis is more difficult.
Monitoring the monitors. Pipeline monitoring must itself be monitored. If a monitoring alert fails to fire because the monitoring system was restarted or the alert threshold was misconfigured, the pipeline continues running with a false sense of security. The solution is meta-monitoring: a separate, lightweight check that verifies the monitoring system is operational and that alerts are being generated at the expected frequency.
Procurement requirements. EU procurement tenders for data-intensive systems increasingly specify data quality requirements in measurable terms: completeness percentages, freshness SLAs, and accuracy thresholds. These requirements are not satisfied by a general commitment to data quality—they require evidence of pipeline monitoring, validation, and alerting at each stage. SAM.gov data service contracts reference similar requirements under NIST SP 800-53 SI controls.
Pipeline discipline is not glamorous. It does not produce visible features. It produces something more valuable: trust in the data that every downstream system depends on.

