Ownership: From Untagged to Accountable

Why this matters

A third of the lab estate runs workloads nobody claims: old experiments, departed teammates' scaffolds, duplicated fixtures from three migrations. They consume quota, confuse incident response (whose is this), and one of them holds a stale credential with broad rights. Nobody created a problem on purpose; ownership simply had no process, so entropy accumulated owners' absence. The L66 lab remediates fixtures; this lesson makes the remediation a standing practice.

Concepts

Ownership means a named human (or a tiny named group) who answers for the resource: its cost, its patches, its incidents, its deletion. Every resource carries owner, purpose and expiry labels from birth; labels are set at creation by templates and admission defaults, not by later archaeology. Untagged inventory is queried on schedule: no owner, expired purpose, owner departed. Each finding gets one of three verdicts: assign (a human claims it with a purpose), fix-and-keep, or delete with a backup where the data matters.

Remediation runs as a plan, not as a purge. Notify owners with a deadline, default-assign team leads for the ambiguous, quarantine the unclaimed (restricted network, no secrets) before deleting, and keep the deletion log with restore windows for state. Surprise deletions teach teams to hide resources; announced remediation with a path to claim teaches labeling. The fixture remediation quotes each verdict with its evidence.

Freshness beats heroics. Admission defaults require owner labels on create; expiry labels force periodic re-justification; scheduled audits catch drift. The untagged rate is a platform metric on a dashboard, trending down, reviewed alongside cost. Heroes who clean quarterly are celebrated once; the process that prevents the mess ships daily.

Worked example

A fixture estate holds thirty resources, nine unclaimed. The learner queries the untagged, notifies (simulated), assigns four with purposes, quarantines three, deletes two with logged restore windows. The remediation plan records each verdict with evidence, and admission defaults land so the next audit finds fewer.

Common wrong move

Deleting first and asking later. The unclaimed resource that ran the quarterly report nobody documented becomes an incident with no restore path. Quarantine before delete, log everything, restore windows always.