How this studio is built

What breaks, and who calls the fallback

Risk & Governance

Each known risk has a way to prevent it and a way to recover. A dedicated Role exists because a coordinator once locked itself out of its own project.

Risk & Governance: how it runs, as a flowchart1Name the riskthe risk, to Systems AdminAny Agent2Write how it is preventeda prevention step in the runbookSystems Admin3Write how it is checkeda regular check that shows whether the prevention still worksSystems Admin4Write how it is recovereda recovery step in the runbookSystems Admin5Assign it to a Rolean owner for the riskSystems AdminRisk & Governance: how it runs, as a flowchart1Name the riskthe risk, to Systems AdminAny Agent2Write how it ispreventeda prevention step in the runbookSystems Admin3Write how it ischeckeda regular check that shows whether theprevention still worksSystems Admin4Write how it isrecovereda recovery step in the runbookSystems Admin5Assign it to aRolean owner for the riskSystems Admin

The pieces

An Agent locked out of its work
Caught by another Agent, not by the one affected.
Machine or account loss
What survives if the hardware doesn't.
Private material reaching a public page
Checked before publication, not after.
Posts silently skipped
A format the publisher can't read is a format that fails loudly now.

Where this was worked out