SOP Policy
Rule
Any manual operational process must have a written SOP in this docs site before it is used in production.
Scope
This includes (non-exhaustive):
- Creating or rotating secrets
- Running workflow dispatches with privileged effects
- Terraform applies
- Cluster upgrades
- Incident mitigations
- Manual VM start/stop operations
Minimum SOP template
Each SOP must contain:
- Purpose: what outcome this procedure achieves
- Prerequisites: required permissions, tools, and environment
- Exact steps: numbered, deterministic actions
- Validation: commands/checks proving success
- Rollback/Recovery: how to back out safely
- Audit note: where to record that the action happened
Enforcement
- PRs introducing new manual operations must include/update an SOP page.
- If no SOP exists, operation is considered non-compliant and should be blocked.