Chapter 06 / Examples

Live in production. Pulled from the registry.

Five real services from IFO4 production, with their full UFMS label set. These are the canonical patterns. Copy them, adapt them to your org, paste them into your IaC.

AI workloadCloud Run service

matrix-advisor

The MATRIX consultation engine. New service, ramping AI traffic, billed per consultation, carbon tracked under ai-inference because Vertex calls dominate the cost profile.

Notable

Lifecycle is "new" - on-demand pricing only, no commitments yet. Carbon override sets ifo4_carbon=ai-inference instead of the default compute.

Full label set (17)

ifo4_cccc-1011

ifo4_orgifo4

ifo4_appmatrix

ifo4_svcmatrix-advisor

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecyclenew

ifo4_productmatrix

ifo4_unitconsultation

ifo4_data_classinternal

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbonai-inference

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update matrix-advisor \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1011,ifo4_org=ifo4,ifo4_app=matrix,ifo4_svc=matrix-advisor,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=new,ifo4_product=matrix,ifo4_unit=consultation

DatabaseAlloyDB cluster

ifo4-primary

The primary AlloyDB cluster behind the entire IFO4 platform. Everything writes here. DR-tier-1, tracked under the database carbon bucket.

Notable

Stateful tier-1 disaster-recovery target. Carbon override sets ifo4_carbon=database. Data class confidential because the cluster holds member PII.

Full label set (17)

ifo4_cccc-1013

ifo4_orgifo4

ifo4_appdata

ifo4_svcalloydb-primary

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productifo4-platform

ifo4_unitshared

ifo4_data_classconfidential

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbondatabase

ifo4_chargebackshared

ifo4_dr_tiertier-1

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-primary \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1013,ifo4_org=ifo4,ifo4_app=data,ifo4_svc=alloydb-primary,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=ifo4-platform,ifo4_unit=shared

Data warehouseBigQuery dataset

score_warehouse

The IFO4 Score warehouse. Holds every score snapshot for every member, ever. Storage-heavy, billed per snapshot computation.

Notable

Carbon attributed to storage rather than compute - it is a warehouse, not a query path. Scores are confidential.

Full label set (17)

ifo4_cccc-1012

ifo4_orgifo4

ifo4_appscore

ifo4_svcscore-warehouse

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productscore

ifo4_unitscore-snapshot

ifo4_data_classconfidential

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbonstorage

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update score_warehouse \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1012,ifo4_org=ifo4,ifo4_app=score,ifo4_svc=score-warehouse,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=score,ifo4_unit=score-snapshot

EventingPub/Sub topic

ifo4-platform-events

The shared platform event bus. Every state-change event flows through here on its way to subscribers. Billed per request.

Notable

Inheritable defaults dominate - no carbon or DR overrides. This topic is a transit medium, not a workload.

Full label set (17)

ifo4_cccc-1001

ifo4_orgifo4

ifo4_appplatform

ifo4_svcplatform-events

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productifo4-platform

ifo4_unitrequest

ifo4_data_classinternal

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carboncompute

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-platform-events \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1001,ifo4_org=ifo4,ifo4_app=platform,ifo4_svc=platform-events,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=ifo4-platform,ifo4_unit=request

Regulated verticalCloud Run service

ifo4-healthcare

The healthcare vertical. Holds PHI under HIPAA, billed per tenant. Currently ramping, so commitments are not yet justified.

Notable

Compliance escalates the security tags: ifo4_compliance=hipaa and ifo4_data_class=regulated-phi. Both are required for any resource that may touch protected health information.

Full label set (17)

ifo4_cccc-1008

ifo4_orgifo4

ifo4_appverticals

ifo4_svcifo4-healthcare

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleramping

ifo4_productvertical-healthcare

ifo4_unittenant

ifo4_data_classregulated-phi

ifo4_compliancehipaa

ifo4_residencyus

ifo4_carboncompute

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-healthcare \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1008,ifo4_org=ifo4,ifo4_app=verticals,ifo4_svc=ifo4-healthcare,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=ramping,ifo4_product=vertical-healthcare,ifo4_unit=tenant

IFO4

Chapter 06 / Examples

Live in production. Pulled from the registry.

Five real services from IFO4 production, with their full UFMS label set. These are the canonical patterns. Copy them, adapt them to your org, paste them into your IaC.

AI workloadCloud Run service

matrix-advisor

The MATRIX consultation engine. New service, ramping AI traffic, billed per consultation, carbon tracked under ai-inference because Vertex calls dominate the cost profile.

Notable

Lifecycle is "new" - on-demand pricing only, no commitments yet. Carbon override sets ifo4_carbon=ai-inference instead of the default compute.

Full label set (17)

ifo4_cccc-1011

ifo4_orgifo4

ifo4_appmatrix

ifo4_svcmatrix-advisor

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecyclenew

ifo4_productmatrix

ifo4_unitconsultation

ifo4_data_classinternal

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbonai-inference

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update matrix-advisor \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1011,ifo4_org=ifo4,ifo4_app=matrix,ifo4_svc=matrix-advisor,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=new,ifo4_product=matrix,ifo4_unit=consultation

DatabaseAlloyDB cluster

ifo4-primary

The primary AlloyDB cluster behind the entire IFO4 platform. Everything writes here. DR-tier-1, tracked under the database carbon bucket.

Notable

Stateful tier-1 disaster-recovery target. Carbon override sets ifo4_carbon=database. Data class confidential because the cluster holds member PII.

Full label set (17)

ifo4_cccc-1013

ifo4_orgifo4

ifo4_appdata

ifo4_svcalloydb-primary

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productifo4-platform

ifo4_unitshared

ifo4_data_classconfidential

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbondatabase

ifo4_chargebackshared

ifo4_dr_tiertier-1

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-primary \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1013,ifo4_org=ifo4,ifo4_app=data,ifo4_svc=alloydb-primary,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=ifo4-platform,ifo4_unit=shared

Data warehouseBigQuery dataset

score_warehouse

The IFO4 Score warehouse. Holds every score snapshot for every member, ever. Storage-heavy, billed per snapshot computation.

Notable

Carbon attributed to storage rather than compute - it is a warehouse, not a query path. Scores are confidential.

Full label set (17)

ifo4_cccc-1012

ifo4_orgifo4

ifo4_appscore

ifo4_svcscore-warehouse

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productscore

ifo4_unitscore-snapshot

ifo4_data_classconfidential

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carbonstorage

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update score_warehouse \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1012,ifo4_org=ifo4,ifo4_app=score,ifo4_svc=score-warehouse,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=score,ifo4_unit=score-snapshot

EventingPub/Sub topic

ifo4-platform-events

The shared platform event bus. Every state-change event flows through here on its way to subscribers. Billed per request.

Notable

Inheritable defaults dominate - no carbon or DR overrides. This topic is a transit medium, not a workload.

Full label set (17)

ifo4_cccc-1001

ifo4_orgifo4

ifo4_appplatform

ifo4_svcplatform-events

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleexisting

ifo4_productifo4-platform

ifo4_unitrequest

ifo4_data_classinternal

ifo4_compliancesoc2

ifo4_residencyus

ifo4_carboncompute

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-platform-events \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1001,ifo4_org=ifo4,ifo4_app=platform,ifo4_svc=platform-events,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=existing,ifo4_product=ifo4-platform,ifo4_unit=request

Regulated verticalCloud Run service

ifo4-healthcare

The healthcare vertical. Holds PHI under HIPAA, billed per tenant. Currently ramping, so commitments are not yet justified.

Notable

Compliance escalates the security tags: ifo4_compliance=hipaa and ifo4_data_class=regulated-phi. Both are required for any resource that may touch protected health information.

Full label set (17)

ifo4_cccc-1008

ifo4_orgifo4

ifo4_appverticals

ifo4_svcifo4-healthcare

ifo4_ownerderris

ifo4_envproduction

ifo4_platformifo4

ifo4_lifecycleramping

ifo4_productvertical-healthcare

ifo4_unittenant

ifo4_data_classregulated-phi

ifo4_compliancehipaa

ifo4_residencyus

ifo4_carboncompute

ifo4_chargebackshared

ifo4_dr_tiertier-2

ifo4_managed_bycloud-build

gcloud command

gcloud run services update ifo4-healthcare \
  --region=us-central1 \
  --update-labels=ifo4_cc=cc-1008,ifo4_org=ifo4,ifo4_app=verticals,ifo4_svc=ifo4-healthcare,ifo4_owner=derris,ifo4_env=production,ifo4_platform=ifo4,ifo4_lifecycle=ramping,ifo4_product=vertical-healthcare,ifo4_unit=tenant