Service Contract:

Ownership

• Owner:
• Steward:

Purpose

What problem does it solve for the family/me?

Exposure

• Category: Public | Internal | VPN-only | Management
• Ingress: Public | Internal | Management
• DNS names:

Identity

• AuthN: SSO required | SSO + MFA required | local accounts (justify)
• AuthZ: IdP group(s) required
• Break-glass account: yes/no (location)

Data

• Persistence: ephemeral | persistent
• Data class: disposable | standard | critical
• Estimated storage growth:

Network

• Allowed source networks: Internet | LAN | VPN | Admin LAN
• Egress requirements:

Availability

• HA required: yes/no
• Acceptable downtime:

Backup

• Tier: none | standard | critical
• Restore test cadence:

Dependencies

• Needs database:
• Needs object storage:
• Needs SMTP:
• Other:

Observability

• Metrics:
• Logs:
• Alerts:

Change Control

• Deployment method:
• Rollback plan:

Notes / Risks

What could go wrong?