Cloud operating model and governance
Produce a provider-neutral account or project hierarchy, resource-owner map, region policy, tag standard, and escalation route from a supplied inventory. Do not delete or retag live resources as a diagnostic.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Network boundaries and traffic flow
Draw a packet and return path with DNS view, route, egress, policy, listener, and logging point. DNS returning an address does not establish reachability or authorization.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Federated identity and data protection
Review a supplied human or workload access path for principal, session, trust claims, explicit denies, secret exposure, encryption-key policy, elevation expiry, and audit evidence.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Compute, data, and service decisions
Write a short decision record from workload shape, durability, recovery, quota, residency, lock-in, ownership, and total cost. A managed service changes responsibilities; it does not remove them.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Infrastructure lifecycle, state, and drift
Review a fixture plan or saved state change for replacement, deletion, lock ownership, sensitive data, drift, and rollback limits. Escalate a stateful replacement before any authorized change.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Cloud operational controls and evidence
Use supplied inventory, audit history, configuration history, compliance, quota, and service-health evidence to distinguish drift, control-plane change, quota constraint, and workload incident.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Failure domains, capacity, and recovery
Turn business recovery requirements into dependency, capacity, quota, backup, restore, and tabletop evidence. A snapshot proves that data was captured, not that recovery meets an objective.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Cost governance and sustainable efficiency
Build a tagged unit-cost baseline from sanitized billing data and propose a reversible optimization with availability, security, retention, and owner guardrails.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.
Operable cloud foundation capstone
Deliver a bounded architecture diagram, ADR, plan-review decision, risk register, restore exercise plan, owner matrix, and stakeholder update. State what remains unknown and who decides the next action.
- •Start with an observable fact, then state what it does and does not establish.
- •Use a bounded, read-only exercise before recommending an authorized, reversible action.
- •Record the owner, decision boundary, and next update or escalation condition.