Dec. 1, 2025

The Doctrine of Distribution: Why Your Power BI Reports Require Apostolic Succession

Are your dashboards secretly preaching lies? In this episode, we turn data governance into a full-on revival meeting. We name the heresy of ad-hoc share links, stale workspaces and broken RLS that quietly corrupt your “single source of truth”. Then we reveal the doctrine of distribution: org apps as the one canonical doorway, certified datasets as scripture, and deployment pipelines as your release liturgy. You’ll hear a concrete 30-day rite for dragging your analytics from chaos to canon, with clear roles, labels, audiences, tenant rules and capacity care that actually hold under pressure. If you suspect your reports are rumors in a robe, this is your wake-up sermon. Come prepared to repent of manual sharing and leave with a roadmap.

Dear congregation, we scatter reports like leaves in a high wind. And then we wonder why no one can find the tree. Most think a quick share link is harmless. But it breaks lineage, weakens truth, and breeds confusion.Here’s what actually happens when we abandon governance. Manual chaos. Broken RLS. Stale workspaces that quietly mislead. We will establish a sacred pattern. Authoritative datasets. Faithful distribution through Org Apps. And staged deployments as our liturgy. You will leave with a clear pathway to migrate, to adopt pipelines, and to guard access with labels, roles, and tenant discipline. There is one covenant that makes this endure—stay with us.Section I: The Heresy of Manual Sharing—Why Lineage Fails Without Stewardship (650 words)Dear congregation, let us name the sin plainly. Ad‑hoc share links. Email PDFs. Orphaned bookmarks in private folders. No lineage. No accountability. Just fragments of truth torn from their source and traded like rumors in a marketplace.What follows is predictable. Conflicting truths. Two dashboards, same title, different numbers. One copy carries last month’s calculation. Another carries a developer’s untested change. Leaders ask which one is real. We answer with guesses. Wisdom weakens. Community frays.Audit blindness arrives next. When a link spreads beyond our sight, there is no canonical place to trace who saw what and when. We cannot answer basic questions with confidence. Who consumed the sensitive page? Who exported the detailed table? We grope in the dark where we should stand in the light.Then RLS drifts. Roles meant to protect the flock are re‑implemented in each copy. A filter is missed. A condition is inverted. One region sees another’s ledger. Or a manager loses access to their own staff. Exposure and withholding. Both harm the body.Discoverability dies as well. Users beg for links. New joiners ask in chat. Knowledge becomes a scavenger hunt. We shape a culture of favors instead of a pathway of order. When the path is unclear, shadow guides appear. “Use my version,” they say. And the canon fractures.Hold this moral frame. Data without stewardship becomes rumor. Rumor erodes trust and community. We do not gather to trade rumors. We gather to receive truth, to work in unity, to decide with clarity. That requires a doorway. Not a pile of keys.Org Apps are that canonical doorway. The sanctuary where truth is received, not scattered. One entrance. Ordered content. A visible covenant between producers and consumers. When we bless an Org App, we declare: this is where the faithful will find the latest, tested, endorsed truth. Not in a forwarded file. Not in a private bookmark. Here.But hear the warning. Even a doorway fails if the locks are broken. A beautiful entrance means little if the walls do not hold. So let us examine why manual sharing weakens the very locks we rely on.First, lineage. When reports are shared by link outside the app, the chain from report to dataset to certification is hidden from view. Users cannot see endorsements. They cannot see who owns the data. They cannot see refresh health. They consume without context. They decide without confidence.Second, navigation. Manual sharing bypasses the curated order of pages, sections, and overview. The user lands in the middle of a story. They miss the preface. They misunderstand the conclusion. An Org App offers liturgy. Sections for reports. Sections for notebooks. An overview that teaches how to walk. Links that bridge only to governed sources. Manual sharing tears out the bookmarks and throws away the map.Third, change management. A link to a draft becomes a lifeline for a team that never should have seen it. A PDF from a test workspace circulates for months. Meanwhile, the production app is updated and blessed. Manual sharing ignores versions. It creates a chorus of unsynchronized hymns.Fourth, stewardship. Org Apps show owners. They show endorsements. They show labels. They show when content was refreshed. Manual shares hide all of this. They turn stewards into rumor chasers. They replace pastoral care with firefighting.Fifth, culture. When the default is “send me the link,” we teach impatience. We teach exception. We teach that governance is optional when a deadline looms. But remember this truth: haste without order leads to error without mercy. We must teach the community to enter through the door, not climb through the window.So how do we turn? We commit to a simple practice. We publish to a workspace with intention. We build the Org App as the sole doorway. We remove alternate paths. We instruct: if it is not in the app, it is not ready. If it lacks an endorsement, it is not trusted. If it lacks a label, it is not classified. If it bypasses navigation, it is not part of the story.And yet, even with a doorway, we must keep the walls. RLS and OLS are sacred boundaries. They do not live in emails. They do not survive exports. They live in the dataset and in the app’s audiences. Align them. Test them. Guard them. Because once boundaries drift, the sanctuary loses its shape.We have named the heresy of manual sharing. We have seen its fruits: conflicting truths, audit blindness, role drift, and lost pathways. Let us not return to scattered leaves. The doorway stands ready. But to keep it strong, we must speak of guardianship. We must speak of RLS.Section II: When RLS Breaks—Guardianship, Not GuessworkDear congregation, let us face the wound. When RLS breaks, it exposes or withholds. Both harm the body. Exposure shames trust. Withholding starves decision. The sanctuary trembles, not because the data is wrong, but because the boundary failed.Why does it fail? Copies of datasets, each with its own roles. Mismatched role names between environments. Unmanaged audiences that reveal pages to the wrong flock. Brittle testing, done by authors alone, never by the people who actually live inside the rules. These are not accidents. These are practices. And practices can be changed.Hold the law: RLS and OLS are sacred boundaries. They are not suggestions. They are walls. They are doors with names carved above them. They tell each person, “Enter here. Not there.” So we honor them at the source. We model roles at the dataset. We do not patch filters in a report. We do not rely on page‑level illusions. We bind row filters and object limits where the truth is born.Practice this discipline. Start with clear personas. Finance analyst. Store manager. Regional VP. Vendor. Build a test matrix. For each persona, define expected rows, restricted columns, allowed pages, and forbidden exports. Then test in the service, not only in Desktop. Use “view as” with sample users tied to Azure AD groups. Prove that a user in one congregation sees only their pasture. Prove that a steward can survey the field without crossing into private fences.Now, this is important because roles are more than DAX filters. They are relationships. The role name must persist from Development to Test to Production. If the mapping breaks in one stage, drift begins. So we standardize role names. We store them in source control with the PBIR and dataset settings. We script assignments where we can. We document the covenant in plain language. When roles read like scripture, people keep them.App audiences stand beside those roles like ushers at the door. Align them deliberately. Leadership, managers, frontline. Each audience receives only the sections that serve their duty. Do not let navigation cross‑contaminate. Do not show a tab that a role cannot open. Hidden is not governed. Remove what is not theirs. Show what is. This reduces curiosity that tempts boundary testing. It also teaches the user: your path is clear, your duty is enough.Bind sensitivity labels to content as visible vows. If the dataset is Confidential, the report inherits the mark, and the app displays it. Teach the label to travel. Into exports. Into Teams. Into SharePoint. Into email. A label is not decoration. It is a promise that follows the artifact wherever it goes. Without that promise, a harmless screenshot becomes a breach.Define tenant settings as the covenant’s outer wall. Who may publish beyond the organization? Who may share externally? Who may build on certified datasets? Do not leave this to whim. Enforce through security groups. Review quarterly. Record exceptions. We are not closing the gates to keep people out. We are closing the gates to open the right doors with confidence.And yet, even faithful walls require proof. So we test with time. We test after every schema change. We test after role membership shifts in HR. We test when a new region is born. Automate checks where possible. Validate that each audience lands on an allowed page. Validate that each persona returns only their rows. Put a health tile on the steward’s dashboard that turns red when a role assignment is empty, a filter returns zero rows unexpectedly, or a label is missing.Remember this: never patch at the edge. Do not fix a broken role by hiding a visual. Do not fix a leaked column by formatting it blank. These are fig leaves. They cover, but they do not heal. Return to the dataset. Repair the role. Re‑publish through the pipeline. Announce the change in the app’s notes. The body deserves healing, not concealment.Guardianship is not guesswork. It is design. It is rehearsal. It is watchfulness at dawn and dusk. When we keep these boundaries, the sanctuary holds. And the work can proceed in peace.Section III: Stale Workspaces—When the Lamp Goes OutDear congregation, let us walk the nave at night. The lamp has gone out. In forgotten corners, old visuals still glow. A retired dataset hums softly. A bookmark points to a page that no longer speaks. No one tends it. And yet people still come, and they still believe.This is the drift. Abandoned workspaces. Outdated measures that once served well but now mislead. Reports named “Final_v7” that never reached blessing. A refresh failed last quarter, and no one h

Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-show-podcast--6704921/support.

Follow us on:
LInkedIn
Substack

Transcript

1
00:00:00,000 --> 00:00:03,680
Dear congregation, we scatter reports like leaves in a high wind,

2
00:00:03,680 --> 00:00:06,440
and then we wonder why no one can find the tree.

3
00:00:06,440 --> 00:00:08,640
Most think a quick share link is harmless,

4
00:00:08,640 --> 00:00:11,960
but it breaks lineage, weakens truth, and breeds confusion.

5
00:00:11,960 --> 00:00:16,040
Here's what actually happens when we abandon governance, manual chaos,

6
00:00:16,040 --> 00:00:19,560
broken RLS, stalewarkspaces that quietly mislead,

7
00:00:19,560 --> 00:00:23,520
we will establish a sacred pattern, authoritative data sets,

8
00:00:23,520 --> 00:00:26,040
faithful distribution through org apps,

9
00:00:26,040 --> 00:00:28,400
and stage deployments as our liturgy.

10
00:00:28,400 --> 00:00:31,240
You will leave with a clear pathway to my great,

11
00:00:31,240 --> 00:00:33,920
to adopt pipelines and to guard access

12
00:00:33,920 --> 00:00:36,240
with labels, roles, and tenant discipline.

13
00:00:36,240 --> 00:00:39,040
There is one covenant that makes this endure.

14
00:00:39,040 --> 00:00:40,440
Stay with us.

15
00:00:40,440 --> 00:00:42,240
The heresy of manual sharing,

16
00:00:42,240 --> 00:00:45,160
why lineage fails without stewardship.

17
00:00:45,160 --> 00:00:48,560
Dear congregation, let us name the sin plainly.

18
00:00:48,560 --> 00:00:51,120
Ad hoc share links, email PDFs,

19
00:00:51,120 --> 00:00:53,680
orphaned bookmarks in private folders,

20
00:00:53,680 --> 00:00:56,400
no lineage, no accountability,

21
00:00:56,400 --> 00:01:00,120
just fragments of truth torn from their source

22
00:01:00,120 --> 00:01:03,000
and trade like rumors in a marketplace.

23
00:01:03,000 --> 00:01:06,800
What follows is predictable, conflicting truths,

24
00:01:06,800 --> 00:01:10,640
two dashboards, same title, different numbers,

25
00:01:10,640 --> 00:01:13,600
one copy carries last month's calculation,

26
00:01:13,600 --> 00:01:16,200
and other carries are developers untested changed.

27
00:01:16,200 --> 00:01:17,800
Leaders ask which one is real.

28
00:01:17,800 --> 00:01:22,040
We answer with guesses, wisdom, weakens, community phrase,

29
00:01:22,040 --> 00:01:24,720
audit blindness arrives next.

30
00:01:24,720 --> 00:01:27,160
When a link spreads beyond our sight,

31
00:01:27,160 --> 00:01:30,960
there is no canonical place to trace who saw what and when.

32
00:01:30,960 --> 00:01:33,320
We cannot answer basic questions with confidence

33
00:01:33,320 --> 00:01:35,120
to consume the sensitive page

34
00:01:35,120 --> 00:01:37,240
who exported the detailed table.

35
00:01:37,240 --> 00:01:39,840
We grow up in the dark where we should stand in the light,

36
00:01:39,840 --> 00:01:42,640
then our less drifts, roles meant to protect the flock

37
00:01:42,640 --> 00:01:44,280
are re-implemented in each copy.

38
00:01:44,280 --> 00:01:46,760
A filter is missed, a condition is inverted,

39
00:01:46,760 --> 00:01:48,920
one region sees another's ledger,

40
00:01:48,920 --> 00:01:52,240
or a manager loses access to their own stuff,

41
00:01:52,240 --> 00:01:53,840
exposure and withholding,

42
00:01:53,840 --> 00:01:56,680
both harm the body, discoverability dies as well,

43
00:01:56,680 --> 00:01:59,480
uses beg for links, new joiners ask in chat.

44
00:01:59,480 --> 00:02:01,400
Knowledge becomes a scavenger hunt,

45
00:02:01,400 --> 00:02:05,080
we shape a culture of favors instead of a pathway of order,

46
00:02:05,080 --> 00:02:08,760
when the path is unclear, shadow guides appear,

47
00:02:08,760 --> 00:02:11,360
use my version, they say, and the canon fractures.

48
00:02:11,360 --> 00:02:13,680
Hold this moral frame, data without stewardship

49
00:02:13,680 --> 00:02:17,000
becomes rumour, rumour erodes, trust and community.

50
00:02:17,000 --> 00:02:19,160
We do not gather to trade rumours.

51
00:02:19,160 --> 00:02:21,640
We gather to receive truth to work in unity,

52
00:02:21,640 --> 00:02:24,280
to decide with clarity that requires a doorway,

53
00:02:24,280 --> 00:02:25,880
not a pile of keys.

54
00:02:25,880 --> 00:02:28,440
Org apps are that canonical doorway.

55
00:02:28,440 --> 00:02:31,280
The sanctuary where truth is received not scattered.

56
00:02:31,280 --> 00:02:34,160
One entrance, ordered content,

57
00:02:34,160 --> 00:02:38,200
a visible covenant between producers and consumers.

58
00:02:38,200 --> 00:02:41,520
When we bless an Org app, we declare

59
00:02:41,520 --> 00:02:43,520
this is where the faithful will find

60
00:02:43,520 --> 00:02:45,840
the latest tested and dorsed truth.

61
00:02:45,840 --> 00:02:49,880
Not in a forwarded file, not in a private bookmark, here,

62
00:02:49,880 --> 00:02:52,920
but here the warning, even a doorway fails

63
00:02:52,920 --> 00:02:54,840
if the locks are broken.

64
00:02:54,840 --> 00:02:57,640
A beautiful entrance means little if the walls do not hold.

65
00:02:57,640 --> 00:03:00,720
So let us examine why manual sharing weakens

66
00:03:00,720 --> 00:03:03,120
the very locks we rely on.

67
00:03:03,120 --> 00:03:04,640
First, lineage.

68
00:03:04,640 --> 00:03:07,360
When reports are shared by link outside the app,

69
00:03:07,360 --> 00:03:10,400
the chain from report to data set to certification

70
00:03:10,400 --> 00:03:11,560
is hidden from view.

71
00:03:11,560 --> 00:03:14,960
Users cannot see endorsements, they cannot see who owns the data,

72
00:03:14,960 --> 00:03:18,320
they cannot see refresh health, they consume without context,

73
00:03:18,320 --> 00:03:20,160
they decide without confidence.

74
00:03:20,160 --> 00:03:21,920
Second, navigation.

75
00:03:21,920 --> 00:03:26,960
Manual sharing bypasses the curated order of pages, sections,

76
00:03:26,960 --> 00:03:28,080
and overview.

77
00:03:28,080 --> 00:03:29,960
The user lands in the middle of a story.

78
00:03:29,960 --> 00:03:31,040
They miss the preface.

79
00:03:31,040 --> 00:03:32,600
They misunderstand the conclusion.

80
00:03:32,600 --> 00:03:34,680
An Org app offers liturgy.

81
00:03:34,680 --> 00:03:36,560
Sections for reports.

82
00:03:36,560 --> 00:03:38,520
Sections for notebooks.

83
00:03:38,520 --> 00:03:41,040
An overview that teaches how to walk.

84
00:03:41,040 --> 00:03:44,640
Links that bridge only to govern sources.

85
00:03:44,640 --> 00:03:47,520
Manual sharing tears out the bookmarks

86
00:03:47,520 --> 00:03:49,400
and throws away the map.

87
00:03:49,400 --> 00:03:51,520
Third, change management.

88
00:03:51,520 --> 00:03:54,720
A link to a draft becomes a lifeline for a team

89
00:03:54,720 --> 00:03:56,520
that never should have seen it.

90
00:03:56,520 --> 00:03:59,320
A PDF from a test workspace circulates for months.

91
00:03:59,320 --> 00:04:02,480
Meanwhile, the production app is updated and blessed.

92
00:04:02,480 --> 00:04:05,280
Manual sharing ignores versions that creates a chorus

93
00:04:05,280 --> 00:04:06,640
of unsynchronized hymns.

94
00:04:06,640 --> 00:04:07,840
Fourth, stewardship.

95
00:04:07,840 --> 00:04:09,760
Org apps show owners.

96
00:04:09,760 --> 00:04:10,920
They show endorsements.

97
00:04:10,920 --> 00:04:12,040
They show labels.

98
00:04:12,040 --> 00:04:14,080
They show when content was refreshed.

99
00:04:14,080 --> 00:04:16,280
Manual shares hide all of this.

100
00:04:16,280 --> 00:04:18,320
They turn stewards into rumour chases.

101
00:04:18,320 --> 00:04:21,400
They replace pastoral care with firefighting.

102
00:04:21,400 --> 00:04:22,720
Fifth, culture.

103
00:04:22,720 --> 00:04:26,840
When the default is send me the link, we teach impatience.

104
00:04:26,840 --> 00:04:28,440
We teach exception.

105
00:04:28,440 --> 00:04:32,840
We teach that governance is optional when a deadline looms.

106
00:04:32,840 --> 00:04:34,280
But remember this truth.

107
00:04:34,280 --> 00:04:38,520
Haste, without order, leads to error, without mercy.

108
00:04:38,520 --> 00:04:41,360
We must teach the community to enter through the door,

109
00:04:41,360 --> 00:04:42,840
not climb through the window.

110
00:04:42,840 --> 00:04:43,720
So how do we turn?

111
00:04:43,720 --> 00:04:45,200
We commit to a simple practice.

112
00:04:45,200 --> 00:04:47,200
We publish to a workspace with intention.

113
00:04:47,200 --> 00:04:49,880
We build the org app as the sole doorway.

114
00:04:49,880 --> 00:04:51,880
We remove alternate paths.

115
00:04:51,880 --> 00:04:53,120
We instruct.

116
00:04:53,120 --> 00:04:55,640
If it is not in the app, it is not ready.

117
00:04:55,640 --> 00:04:57,920
If it lacks an endorsement, it is not trusted.

118
00:04:57,920 --> 00:05:00,560
If it lacks a label, it is not classified.

119
00:05:00,560 --> 00:05:03,960
If it bypasses navigation, it is not part of the story.

120
00:05:03,960 --> 00:05:07,440
And yet, even with a doorway, we must keep the walls.

121
00:05:07,440 --> 00:05:09,400
Or, unless and all, as our sacred boundaries,

122
00:05:09,400 --> 00:05:10,760
they do not live in emails.

123
00:05:10,760 --> 00:05:12,560
They do not survive exports.

124
00:05:12,560 --> 00:05:14,960
They live in the data set and in the app's audiences.

125
00:05:14,960 --> 00:05:18,600
Align them, test them, guard them.

126
00:05:18,600 --> 00:05:23,040
Because once boundaries drift, the sanctuary loses its shape.

127
00:05:23,040 --> 00:05:27,160
We have named the heresy of manual sharing.

128
00:05:27,160 --> 00:05:30,240
We have seen its fruits, conflicting truths,

129
00:05:30,240 --> 00:05:34,400
audit blindness, role-drift and lost pathways.

130
00:05:34,400 --> 00:05:36,320
Let us not return to scattered leaves.

131
00:05:36,320 --> 00:05:37,800
The doorway stands ready.

132
00:05:37,800 --> 00:05:40,040
But to keep it strong, we must speak of guardianship.

133
00:05:40,040 --> 00:05:41,920
We must speak of RLS.

134
00:05:41,920 --> 00:05:44,640
When RLS breaks,

135
00:05:44,640 --> 00:05:47,880
guardianship, not guesswork.

136
00:05:47,880 --> 00:05:51,120
Dear congregation, let us face the wound.

137
00:05:51,120 --> 00:05:54,760
When RLS breaks, it exposes or withholds both harm the body.

138
00:05:54,760 --> 00:05:56,640
Exposure, shame, trust.

139
00:05:56,640 --> 00:06:00,000
With holding starves decision, the sanctuary trembles,

140
00:06:00,000 --> 00:06:03,160
not because the data is wrong, but because the boundary failed.

141
00:06:03,160 --> 00:06:04,360
Why does it fail?

142
00:06:04,360 --> 00:06:07,920
Copies of data sets, each with its own roles,

143
00:06:07,920 --> 00:06:11,440
mismatched role names between environments,

144
00:06:11,440 --> 00:06:14,920
unmanaged audiences that reveal pages to the wrong flock,

145
00:06:14,920 --> 00:06:18,280
brittle testing done by authors alone,

146
00:06:18,280 --> 00:06:21,920
never by the people who actually live inside the rules.

147
00:06:21,920 --> 00:06:23,240
These are not accidents.

148
00:06:23,240 --> 00:06:25,960
These are practices and practices can be changed.

149
00:06:25,960 --> 00:06:27,280
Hold the law.

150
00:06:27,280 --> 00:06:30,120
RLS and OLS are sacred boundaries.

151
00:06:30,120 --> 00:06:31,960
They are not suggestions.

152
00:06:31,960 --> 00:06:32,920
They are walls.

153
00:06:32,920 --> 00:06:35,600
They are doors with names carved above them.

154
00:06:35,600 --> 00:06:37,600
They tell each person enter here.

155
00:06:37,600 --> 00:06:38,240
Not there.

156
00:06:38,240 --> 00:06:39,600
So we honor them at the source.

157
00:06:39,600 --> 00:06:41,200
We model roles at the data set.

158
00:06:41,200 --> 00:06:43,200
We do not patch filters in a report.

159
00:06:43,200 --> 00:06:45,520
We do not rely on page-level illusions.

160
00:06:45,520 --> 00:06:48,760
We bind row filters and object limits where the truth is born.

161
00:06:48,760 --> 00:06:50,800
Practice this discipline.

162
00:06:50,800 --> 00:06:53,080
Start with clear personas.

163
00:06:53,080 --> 00:06:54,800
Finance analyst.

164
00:06:54,800 --> 00:06:56,200
Store manager.

165
00:06:56,200 --> 00:06:57,680
Regional VP.

166
00:06:57,680 --> 00:06:58,720
Vender.

167
00:06:58,720 --> 00:07:00,720
Build a test matrix.

168
00:07:00,720 --> 00:07:03,680
For each persona, define expected rows,

169
00:07:03,680 --> 00:07:07,480
restricted columns allowed pages and forbidden exports.

170
00:07:07,480 --> 00:07:11,120
Then test in the service, not only in desktop.

171
00:07:11,120 --> 00:07:15,520
Use view as with sample users tight to Azure AD groups.

172
00:07:15,520 --> 00:07:19,840
Prove that a user in one congregation sees only their pasture.

173
00:07:19,840 --> 00:07:22,200
Prove that a steward can survey the field

174
00:07:22,200 --> 00:07:24,720
without crossing into private fences.

175
00:07:24,720 --> 00:07:27,840
Now this is important because roles are more than DAX filters.

176
00:07:27,840 --> 00:07:29,360
They are relationships.

177
00:07:29,360 --> 00:07:32,280
The role name must persist from development

178
00:07:32,280 --> 00:07:34,320
to test to production.

179
00:07:34,320 --> 00:07:37,680
If the mapping breaks in one stage, drift begins.

180
00:07:37,680 --> 00:07:39,560
So we standardize role names.

181
00:07:39,560 --> 00:07:43,080
We store them in source control with the PBR and data set settings.

182
00:07:43,080 --> 00:07:45,560
We script assignments where we can.

183
00:07:45,560 --> 00:07:48,560
We document the covenant in plain language.

184
00:07:48,560 --> 00:07:50,920
When roles read like scripture, people keep them.

185
00:07:50,920 --> 00:07:54,640
App audiences stand beside those roles like ushers at the door.

186
00:07:54,640 --> 00:07:56,480
Align them deliberately.

187
00:07:56,480 --> 00:07:57,360
Leadership.

188
00:07:57,360 --> 00:07:58,280
Managers.

189
00:07:58,280 --> 00:07:59,440
Front line.

190
00:07:59,440 --> 00:08:03,480
Each audience receives only the sections that serve their duty.

191
00:08:03,480 --> 00:08:05,760
Do not let navigation cross-contaminate.

192
00:08:05,760 --> 00:08:08,000
Do not show a tab that a role cannot open.

193
00:08:08,000 --> 00:08:09,120
Hidden is not governed.

194
00:08:09,120 --> 00:08:10,360
Remove what is not theirs.

195
00:08:10,360 --> 00:08:11,160
Show.

196
00:08:11,160 --> 00:08:12,120
What is?

197
00:08:12,120 --> 00:08:15,160
This reduces curiosity that tempts boundary testing.

198
00:08:15,160 --> 00:08:16,720
It also teaches the user.

199
00:08:16,720 --> 00:08:17,960
Your path is clear.

200
00:08:17,960 --> 00:08:19,360
Your duty is enough.

201
00:08:19,360 --> 00:08:22,480
Buying sensitivity labels to content as visible vows.

202
00:08:22,480 --> 00:08:26,120
If the data set is confidential, the report inherits the mark

203
00:08:26,120 --> 00:08:28,000
and the app displays it.

204
00:08:28,000 --> 00:08:29,480
Teach the label to travel.

205
00:08:29,480 --> 00:08:33,440
Into exports, into teams, into SharePoint, into email.

206
00:08:33,440 --> 00:08:35,000
A label is not decoration.

207
00:08:35,000 --> 00:08:38,680
It is a promise that follows the artifact wherever it goes.

208
00:08:38,680 --> 00:08:41,800
Without that promise, a harmless screenshot becomes a breach.

209
00:08:41,800 --> 00:08:44,400
Define tenant settings as the covenants outer wall

210
00:08:44,400 --> 00:08:47,760
who may publish beyond the organization, who may share externally,

211
00:08:47,760 --> 00:08:49,800
who may build on certified data sets.

212
00:08:49,800 --> 00:08:51,280
Do not leave this to whim.

213
00:08:51,280 --> 00:08:52,880
Enforce through security groups.

214
00:08:52,880 --> 00:08:54,200
Review quarterly.

215
00:08:54,200 --> 00:08:55,600
Record exceptions.

216
00:08:55,600 --> 00:08:58,280
We are not closing the gates to keep people out.

217
00:08:58,280 --> 00:09:01,480
We are closing the gates to open the right doors with confidence.

218
00:09:01,480 --> 00:09:03,760
And yet, even faithful walls require proofs.

219
00:09:03,760 --> 00:09:04,960
So we test with time.

220
00:09:04,960 --> 00:09:06,760
We test after every schema change.

221
00:09:06,760 --> 00:09:09,720
We test after role membership shifts in HR.

222
00:09:09,720 --> 00:09:11,560
We test when a new region is born.

223
00:09:11,560 --> 00:09:13,320
Automate checks were possible.

224
00:09:13,320 --> 00:09:16,120
Validate that each audience lands on an allowed page.

225
00:09:16,120 --> 00:09:19,880
Validate that each persona returns only their rows.

226
00:09:19,880 --> 00:09:22,960
Put a health tile on the Stuart's dashboard that turns red

227
00:09:22,960 --> 00:09:24,920
when a role assignment is empty.

228
00:09:24,920 --> 00:09:27,760
A filter returns zero rows unexpectedly.

229
00:09:27,760 --> 00:09:29,280
Or a label is missing.

230
00:09:29,280 --> 00:09:30,720
Remember this.

231
00:09:30,720 --> 00:09:32,400
Never patch at the edge.

232
00:09:32,400 --> 00:09:36,120
Do not fix a broken role by hiding a visual.

233
00:09:36,120 --> 00:09:38,920
Do not fix a leaked column by formatting it blank.

234
00:09:38,920 --> 00:09:41,520
These are fig leaves that they cover, but they do not heal.

235
00:09:41,520 --> 00:09:42,720
Return to the data set.

236
00:09:42,720 --> 00:09:45,560
Repair the role, republish through the pipeline.

237
00:09:45,560 --> 00:09:48,040
Announce the change in the apps notes.

238
00:09:48,040 --> 00:09:51,240
The body deserves healing, not concealment.

239
00:09:51,240 --> 00:09:52,840
Guardianship is not guesswork.

240
00:09:52,840 --> 00:09:53,800
It is design.

241
00:09:53,800 --> 00:09:54,840
It is rehearsal.

242
00:09:54,840 --> 00:09:57,280
It is watchfulness, a dawn and dusk.

243
00:09:57,280 --> 00:10:00,440
When we keep these boundaries, the sanctuary holds.

244
00:10:00,440 --> 00:10:03,600
And the work can proceed in peace.

245
00:10:03,600 --> 00:10:05,760
Stale work spaces.

246
00:10:05,760 --> 00:10:08,880
When the lamp goes out, dear congregation,

247
00:10:08,880 --> 00:10:11,240
let us walk the nave at night.

248
00:10:11,240 --> 00:10:12,360
The lamp has gone out.

249
00:10:12,360 --> 00:10:15,760
In forgotten corners, old visuals still glow.

250
00:10:15,760 --> 00:10:17,760
A retired data set hums softly.

251
00:10:17,760 --> 00:10:20,520
A bookmark points to a page that no longer speaks.

252
00:10:20,520 --> 00:10:21,440
No one tends it.

253
00:10:21,440 --> 00:10:25,640
And yet people still come and they still believe this is the drift.

254
00:10:25,640 --> 00:10:28,040
Abandoned work spaces.

255
00:10:28,040 --> 00:10:33,160
Outdated measures that once served well, but now mislead.

256
00:10:33,160 --> 00:10:35,960
Reports named Final Seven that never reached blessing.

257
00:10:35,960 --> 00:10:39,440
A refresh failed last quarter and no one heard the bell.

258
00:10:39,440 --> 00:10:41,080
We do not intend to seat.

259
00:10:41,080 --> 00:10:44,760
But silence becomes its own deception when we stop keeping watch.

260
00:10:44,760 --> 00:10:46,320
The risks are plain.

261
00:10:46,320 --> 00:10:48,600
Wrong decisions from old numbers.

262
00:10:48,600 --> 00:10:52,040
Forecasts shaped by stale dimensions.

263
00:10:52,040 --> 00:10:53,200
Shadow governance.

264
00:10:53,200 --> 00:10:59,120
Born from temporary work spaces that somehow survived their purpose.

265
00:10:59,120 --> 00:11:01,520
A manager, principle PDF before month and close.

266
00:11:01,520 --> 00:11:03,880
Another forwards it as if it was scripture.

267
00:11:03,880 --> 00:11:06,440
Weeks later, a boardroom debates a variance

268
00:11:06,440 --> 00:11:07,960
that no longer exists.

269
00:11:07,960 --> 00:11:08,960
The lamp went out.

270
00:11:08,960 --> 00:11:09,960
The room kept talking.

271
00:11:09,960 --> 00:11:12,360
So we learn to read the signs of decay.

272
00:11:12,360 --> 00:11:13,640
No endorsements.

273
00:11:13,640 --> 00:11:15,200
No owners listed.

274
00:11:15,200 --> 00:11:19,440
Usage metrics that show a spike last year and a flat line since.

275
00:11:19,440 --> 00:11:22,200
A data set that fails refresh three times.

276
00:11:22,200 --> 00:11:24,680
Then four while alerts are silent.

277
00:11:24,680 --> 00:11:28,360
A workspace with archived, old and new in the same title.

278
00:11:28,360 --> 00:11:29,680
These are not curiosities.

279
00:11:29,680 --> 00:11:30,920
They are calls to action.

280
00:11:30,920 --> 00:11:33,360
Order is restored by apostolic sources.

281
00:11:33,360 --> 00:11:36,120
Certified data sets stand as the lineage.

282
00:11:36,120 --> 00:11:38,840
Promoted content marks the catechism in progress.

283
00:11:38,840 --> 00:11:40,120
We teach this hierarchy.

284
00:11:40,120 --> 00:11:41,800
Certified is the alter text.

285
00:11:41,800 --> 00:11:43,440
Promoted is the sermon draft.

286
00:11:43,440 --> 00:11:47,240
Anything else belongs in development, not in the sanctuary.

287
00:11:47,240 --> 00:11:51,280
When people can see the seal, they learn which words to trust.

288
00:11:51,280 --> 00:11:53,160
Place workloads with intention.

289
00:11:53,160 --> 00:11:55,360
Fabric capacities are the alter.

290
00:11:55,360 --> 00:11:56,680
Treat them with reverence.

291
00:11:56,680 --> 00:11:58,960
We do not crowd the alter with experiments.

292
00:11:58,960 --> 00:12:01,200
We do not starve it with fragmented capacities.

293
00:12:01,200 --> 00:12:02,040
No one monitors.

294
00:12:02,040 --> 00:12:03,560
We size for refresh windows.

295
00:12:03,560 --> 00:12:06,280
We plan for concurrency at market open and month end.

296
00:12:06,280 --> 00:12:09,200
We observe capacity metrics like weather.

297
00:12:09,200 --> 00:12:12,760
When storms are forecast, we scale or we stagger.

298
00:12:12,760 --> 00:12:15,160
Health becomes a discipline not an afterthought.

299
00:12:15,160 --> 00:12:16,240
We instrument usage.

300
00:12:16,240 --> 00:12:18,840
We define refresh SLAs.

301
00:12:18,840 --> 00:12:22,240
We set failure alerts that notify owners and stewards

302
00:12:22,240 --> 00:12:24,120
not a forgotten mailbox.

303
00:12:24,120 --> 00:12:27,040
We hold regular stewardship meetings 10 minutes each week.

304
00:12:27,040 --> 00:12:31,760
What failed, what aged out, which audience no longer needs this section.

305
00:12:31,760 --> 00:12:33,320
Close the loop.

306
00:12:33,320 --> 00:12:35,520
Speak the truth aloud.

307
00:12:35,520 --> 00:12:36,840
Decide and act.

308
00:12:36,840 --> 00:12:39,520
And when the time comes, we practice sunset rights.

309
00:12:39,520 --> 00:12:42,880
Deplicate clearly archive with naming that warns the passerby.

310
00:12:42,880 --> 00:12:44,880
Retire with grace in the app.

311
00:12:44,880 --> 00:12:47,960
Place banners that guide the flock to the new path.

312
00:12:47,960 --> 00:12:49,560
This report is retired.

313
00:12:49,560 --> 00:12:51,400
Here is the living source.

314
00:12:51,400 --> 00:12:54,840
Keep the redirect in place long enough for habits to change,

315
00:12:54,840 --> 00:12:57,720
but not so long that ghosts linger.

316
00:12:57,720 --> 00:12:59,320
Now how do we prevent new decay?

317
00:12:59,320 --> 00:13:01,560
We bind stewardship to the artifacts.

318
00:13:01,560 --> 00:13:03,880
Each workspace has two named owners.

319
00:13:03,880 --> 00:13:06,640
Each data set has a steward who attends the council.

320
00:13:06,640 --> 00:13:08,800
Endorsements expire if not renewed.

321
00:13:08,800 --> 00:13:10,280
Health checks run weekly.

322
00:13:10,280 --> 00:13:13,080
If a data set fails refreshed twice, the banner appears.

323
00:13:13,080 --> 00:13:16,760
If a workspace shows 90 days without usage, we schedule its right.

324
00:13:16,760 --> 00:13:17,760
Order is not a project.

325
00:13:17,760 --> 00:13:18,840
It is a rhythm.

326
00:13:18,840 --> 00:13:21,000
And remember capacity as a living covenant.

327
00:13:21,000 --> 00:13:23,000
Test load before promotion.

328
00:13:23,000 --> 00:13:24,720
Simulate peak hours.

329
00:13:24,720 --> 00:13:27,320
Watch query durations and memory pressure.

330
00:13:27,320 --> 00:13:31,760
If doors jam at peak people force windows, they export.

331
00:13:31,760 --> 00:13:32,680
They cache.

332
00:13:32,680 --> 00:13:35,760
They create private copies just in case.

333
00:13:35,760 --> 00:13:38,240
Performance is governance.

334
00:13:38,240 --> 00:13:42,080
When the path is swift and clear, the congregation walks it.

335
00:13:42,080 --> 00:13:45,640
Finally, teach the community to report darkness.

336
00:13:45,640 --> 00:13:47,040
A simple form.

337
00:13:47,040 --> 00:13:48,840
I found a stale report.

338
00:13:48,840 --> 00:13:50,440
Reward vigilance.

339
00:13:50,440 --> 00:13:51,880
Thank the watcher.

340
00:13:51,880 --> 00:13:53,320
Close the loop.

341
00:13:53,320 --> 00:13:54,480
We retired it.

342
00:13:54,480 --> 00:13:56,000
Here is the app.

343
00:13:56,000 --> 00:13:59,000
In doing this, we replace rumor with ritual.

344
00:13:59,000 --> 00:14:01,360
We invite the whole body to tend the lamp.

345
00:14:01,360 --> 00:14:04,120
We have named the drift and its cure.

346
00:14:04,120 --> 00:14:05,440
Keep watch.

347
00:14:05,440 --> 00:14:07,240
Certify the source.

348
00:14:07,240 --> 00:14:09,120
Place with intention.

349
00:14:09,120 --> 00:14:10,320
Measure health.

350
00:14:10,320 --> 00:14:11,920
Retire with banners.

351
00:14:11,920 --> 00:14:15,000
When we do, the sanctuary stays bright.

352
00:14:15,000 --> 00:14:18,920
And the people decide with light, not with shadows.

353
00:14:18,920 --> 00:14:20,560
The doctrine of distribution.

354
00:14:20,560 --> 00:14:23,440
Org apps as the canonical doorway.

355
00:14:23,440 --> 00:14:26,080
Dear congregation, we have named the failures.

356
00:14:26,080 --> 00:14:27,760
Now we turn to the doorway itself.

357
00:14:27,760 --> 00:14:29,320
Org apps are not decoration.

358
00:14:29,320 --> 00:14:30,280
They are the canon.

359
00:14:30,280 --> 00:14:34,080
The place where truth is offered with order, with context,

360
00:14:34,080 --> 00:14:37,680
with lineage, visible on the surface.

361
00:14:37,680 --> 00:14:38,960
Hold the first principle.

362
00:14:38,960 --> 00:14:40,000
One workspace.

363
00:14:40,000 --> 00:14:41,280
Many org apps.

364
00:14:41,280 --> 00:14:41,960
One well.

365
00:14:41,960 --> 00:14:42,600
Many cups.

366
00:14:42,600 --> 00:14:44,840
We do not duplicate water for each flock.

367
00:14:44,840 --> 00:14:47,200
We draw from a single certified dataset.

368
00:14:47,200 --> 00:14:48,920
Then we pour according to duty.

369
00:14:48,920 --> 00:14:51,160
Leadership receives what leaders must see.

370
00:14:51,160 --> 00:14:53,080
Managers receive the tools to act.

371
00:14:53,080 --> 00:14:56,200
Frontline receives the clarity to serve.

372
00:14:56,200 --> 00:14:57,280
One source.

373
00:14:57,280 --> 00:14:58,560
Many ministries.

374
00:14:58,560 --> 00:14:59,360
No forks.

375
00:14:59,360 --> 00:15:00,720
No shadow wells.

376
00:15:00,720 --> 00:15:02,720
Structure is our liturgy.

377
00:15:02,720 --> 00:15:05,400
We do not throw items into a scroll of clutter.

378
00:15:05,400 --> 00:15:07,080
We shape sections.

379
00:15:07,080 --> 00:15:08,320
Reports together.

380
00:15:08,320 --> 00:15:09,640
Notebooks together.

381
00:15:09,640 --> 00:15:11,160
Dashboards together.

382
00:15:11,160 --> 00:15:13,520
Each section named in plain truth.

383
00:15:13,520 --> 00:15:14,920
Sales performance.

384
00:15:14,920 --> 00:15:16,360
Supply chain health.

385
00:15:16,360 --> 00:15:17,760
Financial close.

386
00:15:17,760 --> 00:15:20,440
In the overview, we teach the walk.

387
00:15:20,440 --> 00:15:21,600
Start here.

388
00:15:21,600 --> 00:15:22,880
Read this first.

389
00:15:22,880 --> 00:15:24,120
Then proceed.

390
00:15:24,120 --> 00:15:26,920
The overview is the alter cloth that sets tone.

391
00:15:26,920 --> 00:15:28,120
It clarifies purpose.

392
00:15:28,120 --> 00:15:29,800
It welcomes without confusion.

393
00:15:29,800 --> 00:15:32,560
Now this is important because navigation is governance.

394
00:15:32,560 --> 00:15:37,240
When we combine app navigation with report pages,

395
00:15:37,240 --> 00:15:40,240
we decide how the story unfolds.

396
00:15:40,240 --> 00:15:43,920
When we separate them, we declare hierarchy.

397
00:15:43,920 --> 00:15:46,240
Choose with intention collapsed for the season.

398
00:15:46,240 --> 00:15:47,360
Expanded for the new.

399
00:15:47,360 --> 00:15:49,000
Avoid the labyrinth.

400
00:15:49,000 --> 00:15:50,520
Avoid dead ends.

401
00:15:50,520 --> 00:15:53,640
Each click should feel like a step in procession,

402
00:15:53,640 --> 00:15:55,920
not a stumble into a side hall.

403
00:15:55,920 --> 00:15:57,880
Define audiences explicitly.

404
00:15:57,880 --> 00:15:59,800
Do not trust implication.

405
00:15:59,800 --> 00:16:02,160
Create congregations by name.

406
00:16:02,160 --> 00:16:03,520
Executive council.

407
00:16:03,520 --> 00:16:04,840
Regional managers.

408
00:16:04,840 --> 00:16:06,280
Store associates.

409
00:16:06,280 --> 00:16:07,320
Vendors.

410
00:16:07,320 --> 00:16:09,480
Then map content to duty.

411
00:16:09,480 --> 00:16:12,040
The executive council sees trend, risk, and decision

412
00:16:12,040 --> 00:16:12,440
notes.

413
00:16:12,440 --> 00:16:13,200
Managers.

414
00:16:13,200 --> 00:16:15,680
See drill paths and operational levers.

415
00:16:15,680 --> 00:16:18,720
Associates see today's targets and exceptions.

416
00:16:18,720 --> 00:16:21,760
Vendors see only what the covenant permits.

417
00:16:21,760 --> 00:16:25,400
If a page does not serve a duty, remove it from that audience.

418
00:16:25,400 --> 00:16:26,680
Hidden is not governed.

419
00:16:26,680 --> 00:16:27,960
Absent is clear.

420
00:16:27,960 --> 00:16:29,960
Brand with reverence, not vanity.

421
00:16:29,960 --> 00:16:32,640
The apps, image, and theme are not flair.

422
00:16:32,640 --> 00:16:34,600
They are signals of trust.

423
00:16:34,600 --> 00:16:37,000
A consistent banner tells the community

424
00:16:37,000 --> 00:16:39,160
you are in the right sanctuary.

425
00:16:39,160 --> 00:16:40,520
The color teacher's context.

426
00:16:40,520 --> 00:16:41,800
Finance blue.

427
00:16:41,800 --> 00:16:43,080
Operations green.

428
00:16:43,080 --> 00:16:44,400
Risk amber.

429
00:16:44,400 --> 00:16:48,640
Title, description, and version notes speak in plain words.

430
00:16:48,640 --> 00:16:49,680
What changed?

431
00:16:49,680 --> 00:16:50,640
Why it matters?

432
00:16:50,640 --> 00:16:51,520
Who is affected?

433
00:16:51,520 --> 00:16:52,720
This is pastoral care.

434
00:16:52,720 --> 00:16:53,760
Links are bridges.

435
00:16:53,760 --> 00:16:55,440
But bridges must be blessed.

436
00:16:55,440 --> 00:16:57,280
Embed only governed URLs.

437
00:16:57,280 --> 00:17:00,240
If we link to SharePoint, it carries labels.

438
00:17:00,240 --> 00:17:02,720
If we link to Teams, the team is secured.

439
00:17:02,720 --> 00:17:04,280
If we link to an external system,

440
00:17:04,280 --> 00:17:06,360
we confirm that the door is approved.

441
00:17:06,360 --> 00:17:08,520
Do not smuggle in rogue iframes.

442
00:17:08,520 --> 00:17:11,920
Do not embed a private data set hiding behind a public face.

443
00:17:11,920 --> 00:17:13,520
A bridge to nowhere is a fall.

444
00:17:13,520 --> 00:17:15,880
A bridge to the wrong city is a breach.

445
00:17:15,880 --> 00:17:16,920
Keep vows visible.

446
00:17:16,920 --> 00:17:19,200
Sensitivity labels and tags are the vows.

447
00:17:19,200 --> 00:17:21,680
They declare classification at a glance.

448
00:17:21,680 --> 00:17:23,000
Confidential.

449
00:17:23,000 --> 00:17:24,160
Internal.

450
00:17:24,160 --> 00:17:25,360
Public.

451
00:17:25,360 --> 00:17:27,240
They travel with exports.

452
00:17:27,240 --> 00:17:28,480
They appear in headers.

453
00:17:28,480 --> 00:17:32,160
They remind the hurried mind of sacred boundaries.

454
00:17:32,160 --> 00:17:34,120
Tags add human meaning.

455
00:17:34,120 --> 00:17:35,440
Quarterly close.

456
00:17:35,440 --> 00:17:37,280
FY26 plan.

457
00:17:37,280 --> 00:17:38,360
Pilot.

458
00:17:38,360 --> 00:17:40,200
These words reduce confusion.

459
00:17:40,200 --> 00:17:42,800
They keep rumors from wearing robes.

460
00:17:42,800 --> 00:17:44,400
Three SharePoints require intention.

461
00:17:44,400 --> 00:17:46,200
We do not hand everyone a durable.

462
00:17:46,200 --> 00:17:48,000
We empower stewards.

463
00:17:48,000 --> 00:17:48,960
We grant.

464
00:17:48,960 --> 00:17:50,720
Re-share to owners.

465
00:17:50,720 --> 00:17:53,320
To designated lay ministers.

466
00:17:53,320 --> 00:17:56,040
To those who will teach others how to walk.

467
00:17:56,040 --> 00:17:57,960
And we track it not to punish.

468
00:17:57,960 --> 00:17:58,960
To support.

469
00:17:58,960 --> 00:18:01,520
When reshare becomes a flood, we pause.

470
00:18:01,520 --> 00:18:02,480
We ask why.

471
00:18:02,480 --> 00:18:04,040
Perhaps an audience is missing.

472
00:18:04,040 --> 00:18:07,800
Perhaps the team needs its own cup from the same well.

473
00:18:07,800 --> 00:18:10,080
Capacity awareness is part of the doorway.

474
00:18:10,080 --> 00:18:13,520
Doors that jam at peak hours create sin at the edges.

475
00:18:13,520 --> 00:18:14,440
People export.

476
00:18:14,440 --> 00:18:15,440
People screenshot.

477
00:18:15,440 --> 00:18:16,440
People copy.

478
00:18:16,440 --> 00:18:18,400
So we test load before we bless.

479
00:18:18,400 --> 00:18:20,040
We simulate Monday at 9.

480
00:18:20,040 --> 00:18:21,920
We watch concurrency.

481
00:18:21,920 --> 00:18:26,320
We observe memory and query duration on the fabric altar.

482
00:18:26,320 --> 00:18:29,200
If we foresee a crush, we scale or we stagger.

483
00:18:29,200 --> 00:18:32,080
If a report is heavy, we pre-aggregate.

484
00:18:32,080 --> 00:18:35,000
If a page is slow, we trim the ritual.

485
00:18:35,000 --> 00:18:40,080
Tenon settings are the cannons out of frame who may create orgaps, who may bless them

486
00:18:40,080 --> 00:18:43,840
into distribution, who may build upon certified data sets.

487
00:18:43,840 --> 00:18:44,840
These are not vibes.

488
00:18:44,840 --> 00:18:50,920
They are configured, security groups, not individual names, exceptions recorded and reviewed.

489
00:18:50,920 --> 00:18:54,240
External sharing defined, not discovered.

490
00:18:54,240 --> 00:18:57,400
Allowed audiences documented, audited quarterly.

491
00:18:57,400 --> 00:19:02,360
The door remains open, but it opens by key, not by wish.

492
00:19:02,360 --> 00:19:07,680
And yet, even a well-kept doorway can lose its meaning if we forget the overview's purpose.

493
00:19:07,680 --> 00:19:10,320
Teach the user how to use the app.

494
00:19:10,320 --> 00:19:15,360
One paragraph, why this exists, who it serves, what to do first.

495
00:19:15,360 --> 00:19:17,000
Place a start here, card.

496
00:19:17,000 --> 00:19:20,640
Place a short legend for icons, labels and endorsements.

497
00:19:20,640 --> 00:19:23,160
Provide a link to the stewardship council.

498
00:19:23,160 --> 00:19:24,600
See something wrong.

499
00:19:24,600 --> 00:19:26,080
Tell us.

500
00:19:26,080 --> 00:19:29,840
When the people know how to ask, disorder diminishes.

501
00:19:29,840 --> 00:19:34,480
To remember endorsements as the creed, certified content is the canon.

502
00:19:34,480 --> 00:19:36,320
Promoted content is under review.

503
00:19:36,320 --> 00:19:37,960
Everything else remains in the sacristy.

504
00:19:37,960 --> 00:19:39,920
We display endorsements prominently.

505
00:19:39,920 --> 00:19:41,200
We explain what they mean.

506
00:19:41,200 --> 00:19:42,680
We do not endorse lightly.

507
00:19:42,680 --> 00:19:44,720
We renew endorsements on cadence.

508
00:19:44,720 --> 00:19:46,600
We remove them when ownership lapses.

509
00:19:46,600 --> 00:19:48,160
The badge is not a trophy.

510
00:19:48,160 --> 00:19:50,480
It is a promise that someone keeps.

511
00:19:50,480 --> 00:19:52,520
Finally make the app a living place.

512
00:19:52,520 --> 00:19:54,160
Version notes with each promotion.

513
00:19:54,160 --> 00:19:57,480
A small change log in human words.

514
00:19:57,480 --> 00:20:01,320
We corrected regional aggregation for EMEA.

515
00:20:01,320 --> 00:20:04,800
Store managers will see revised week to date numbers.

516
00:20:04,800 --> 00:20:06,120
Offer a feedback link.

517
00:20:06,120 --> 00:20:08,120
Host monthly office hours.

518
00:20:08,120 --> 00:20:09,520
Pin a health tile.

519
00:20:09,520 --> 00:20:11,760
All data sets are fresh.

520
00:20:11,760 --> 00:20:16,360
This quiet signal prevents panic and reduces tickets.

521
00:20:16,360 --> 00:20:19,160
Steer congregation or gaps are the canonical doorway.

522
00:20:19,160 --> 00:20:20,160
They gather truth.

523
00:20:20,160 --> 00:20:21,160
They display vows.

524
00:20:21,160 --> 00:20:22,160
They shape the walk.

525
00:20:22,160 --> 00:20:23,760
They align roles with audiences.

526
00:20:23,760 --> 00:20:24,960
They protect with labels.

527
00:20:24,960 --> 00:20:26,520
They breathe with capacity.

528
00:20:26,520 --> 00:20:29,520
When we distribute through this doorway, we honor lineage.

529
00:20:29,520 --> 00:20:30,640
We teach order.

530
00:20:30,640 --> 00:20:34,120
We welcome the many without scattering the one.

531
00:20:34,120 --> 00:20:36,560
Apostolic succession in practice.

532
00:20:36,560 --> 00:20:40,080
Employment pipelines as release liturgy.

533
00:20:40,080 --> 00:20:41,440
Deer congregation.

534
00:20:41,440 --> 00:20:44,680
A doorway without a procession becomes a crowd.

535
00:20:44,680 --> 00:20:46,520
So let us set the procession.

536
00:20:46,520 --> 00:20:47,520
Development.

537
00:20:47,520 --> 00:20:48,520
Test.

538
00:20:48,520 --> 00:20:50,160
Production.

539
00:20:50,160 --> 00:20:51,360
Three stages.

540
00:20:51,360 --> 00:20:52,960
One doctrine.

541
00:20:52,960 --> 00:20:58,600
We move in order so the lineage is preserved and the people receive truth without surprise.

542
00:20:58,600 --> 00:21:01,280
In development we shape the words.

543
00:21:01,280 --> 00:21:02,680
We draft measures.

544
00:21:02,680 --> 00:21:03,960
We adjust models.

545
00:21:03,960 --> 00:21:05,720
We try ideas.

546
00:21:05,720 --> 00:21:07,600
But none of this is yet teaching.

547
00:21:07,600 --> 00:21:14,320
It is preparation in test we invite witnesses, stewards, representative users, security reviewers.

548
00:21:14,320 --> 00:21:17,440
They walk the path and confirm the boundaries hold.

549
00:21:17,440 --> 00:21:19,000
In production we preach.

550
00:21:19,000 --> 00:21:23,840
Only then do we bless the app and invite the whole congregation to receive.

551
00:21:23,840 --> 00:21:25,040
Source control is our scripture.

552
00:21:25,040 --> 00:21:30,680
We keep PBIR files, data set definitions and app configuration in Git.

553
00:21:30,680 --> 00:21:32,520
Not as decoration as proof.

554
00:21:32,520 --> 00:21:35,600
Every change carries an author a reason and a place in time.

555
00:21:35,600 --> 00:21:37,320
We review pull requests.

556
00:21:37,320 --> 00:21:39,400
We ask simple holy questions.

557
00:21:39,400 --> 00:21:40,400
What changed why?

558
00:21:40,400 --> 00:21:41,680
Which roles are touched?

559
00:21:41,680 --> 00:21:43,160
Which audiences are affected?

560
00:21:43,160 --> 00:21:44,560
Silence is not accepted.

561
00:21:44,560 --> 00:21:46,360
The record stands.

562
00:21:46,360 --> 00:21:48,320
Data parity matters.

563
00:21:48,320 --> 00:21:54,120
Parameters in dev must mirror test and production with only connection details shifted by

564
00:21:54,120 --> 00:21:55,320
environment.

565
00:21:55,320 --> 00:21:57,200
Gateways aligned.

566
00:21:57,200 --> 00:21:58,200
Schedules aligned.

567
00:21:58,200 --> 00:22:00,480
RLS identical.

568
00:22:00,480 --> 00:22:02,480
OLS identical.

569
00:22:02,480 --> 00:22:05,760
For role differs by name or filter drift begins.

570
00:22:05,760 --> 00:22:06,600
So we codify.

571
00:22:06,600 --> 00:22:07,800
We apply scripts.

572
00:22:07,800 --> 00:22:14,360
We validate after promotion that dev became test and test became production without mutation.

573
00:22:14,360 --> 00:22:17,720
Automated checks stand like faithful angels at the gate.

574
00:22:17,720 --> 00:22:20,360
Validation scripts confirm model size thresholds.

575
00:22:20,360 --> 00:22:25,720
Workspace rules ensure sensitive labels are present before promotion.

576
00:22:25,720 --> 00:22:28,920
Capacity guards test that query durations remain under the mark.

577
00:22:28,920 --> 00:22:32,600
For check fails, the procession pauses.

578
00:22:32,600 --> 00:22:33,680
No shame, no rush.

579
00:22:33,680 --> 00:22:35,880
We fixer the source and we resume.

580
00:22:35,880 --> 00:22:38,840
App versioning is pastoral care in public.

581
00:22:38,840 --> 00:22:41,440
Each promotion carries notes in plain language.

582
00:22:41,440 --> 00:22:42,640
What changed?

583
00:22:42,640 --> 00:22:43,960
Why it matters?

584
00:22:43,960 --> 00:22:45,280
Who is affected?

585
00:22:45,280 --> 00:22:47,880
We do not bury change in a comet hash.

586
00:22:47,880 --> 00:22:49,200
We declare it at the altar.

587
00:22:49,200 --> 00:22:53,720
We respect the users attention by telling them what to expect when they step inside.

588
00:22:53,720 --> 00:22:54,560
Rollback is grace.

589
00:22:54,560 --> 00:22:56,640
We keep the previous build close.

590
00:22:56,640 --> 00:23:02,920
If the new homily confuses or a boundary behaves strangely under peak load, we step back

591
00:23:02,920 --> 00:23:04,480
with humility.

592
00:23:04,480 --> 00:23:08,600
The covenant remains unbroken because the lineage was preserved.

593
00:23:08,600 --> 00:23:09,760
Version N1 is ready.

594
00:23:09,760 --> 00:23:11,720
The congregation keeps working.

595
00:23:11,720 --> 00:23:12,720
We fix.

596
00:23:12,720 --> 00:23:15,040
We return.

597
00:23:15,040 --> 00:23:16,760
Monitoring is the weekly council.

598
00:23:16,760 --> 00:23:17,760
Refresh health.

599
00:23:17,760 --> 00:23:19,320
Capacity signals.

600
00:23:19,320 --> 00:23:20,560
Error telemetry.

601
00:23:20,560 --> 00:23:22,480
Usage patterns by audience.

602
00:23:22,480 --> 00:23:23,920
Our leaders reading the overview.

603
00:23:23,920 --> 00:23:25,920
Our managers stuck on a slow page.

604
00:23:25,920 --> 00:23:27,240
Did a dataset miss its SLA?

605
00:23:27,240 --> 00:23:28,240
We do not guess.

606
00:23:28,240 --> 00:23:31,840
We observe 10 minutes, once each week.

607
00:23:31,840 --> 00:23:33,680
Owners and stewards gather.

608
00:23:33,680 --> 00:23:34,680
Decide.

609
00:23:34,680 --> 00:23:35,680
Act.

610
00:23:35,680 --> 00:23:37,160
The governance loop completes the right.

611
00:23:37,160 --> 00:23:40,600
We certify the canonical dataset after production proves stable.

612
00:23:40,600 --> 00:23:42,160
We endorse the app that holds it.

613
00:23:42,160 --> 00:23:45,120
We link documentation that states the covenant.

614
00:23:45,120 --> 00:23:51,200
What the dataset contains, who owns it, how RLS is enforced when it refreshes, how to

615
00:23:51,200 --> 00:23:52,640
request change.

616
00:23:52,640 --> 00:23:54,120
Reading pages not law.

617
00:23:54,120 --> 00:23:56,880
Remember congregation the pipeline is not bureaucracy.

618
00:23:56,880 --> 00:23:58,760
It is love expressed as order.

619
00:23:58,760 --> 00:24:01,560
It protects the people we serve from unintended harm.

620
00:24:01,560 --> 00:24:04,720
It protects our labor from being twisted by haste.

621
00:24:04,720 --> 00:24:06,680
It protects the sanctuary from drift.

622
00:24:06,680 --> 00:24:11,920
So when you ship, walk the procession, dev to test, test to production, scripture in git,

623
00:24:11,920 --> 00:24:17,520
rolls aligned, angels at the gate, notes on the altar, grace within reach, councils

624
00:24:17,520 --> 00:24:19,640
in rhythm only then.

625
00:24:19,640 --> 00:24:25,600
We bless the app and invite the congregation to drink from the well, certain that the

626
00:24:25,600 --> 00:24:27,800
water is clean.

627
00:24:27,800 --> 00:24:34,080
The 30-day right of migration from chaos to canon, dear congregation the path is before

628
00:24:34,080 --> 00:24:35,080
us.

629
00:24:35,080 --> 00:24:40,400
30 days not as a burden, as a right, from chaos to canon.

630
00:24:40,400 --> 00:24:43,640
We will walk it with order, with light, with humility.

631
00:24:43,640 --> 00:24:45,400
Day 1 to 5.

632
00:24:45,400 --> 00:24:46,400
Inventory.

633
00:24:46,400 --> 00:24:47,880
We map the land.

634
00:24:47,880 --> 00:24:51,000
We list reports, data sets, notebooks, dashboards.

635
00:24:51,000 --> 00:24:55,240
We name every workspace that holds a living metric or a sleeping ghost.

636
00:24:55,240 --> 00:24:57,280
We record owners.

637
00:24:57,280 --> 00:24:59,640
We identify stewards.

638
00:24:59,640 --> 00:25:03,320
We discover audiences by their duty.

639
00:25:03,320 --> 00:25:04,640
Leadership.

640
00:25:04,640 --> 00:25:05,640
Managers.

641
00:25:05,640 --> 00:25:06,880
Frontline vendors.

642
00:25:06,880 --> 00:25:08,160
We sketch lineage.

643
00:25:08,160 --> 00:25:10,680
Which data sets feed, which reports.

644
00:25:10,680 --> 00:25:13,160
Which gateways serve, which sources.

645
00:25:13,160 --> 00:25:16,280
We note refreshed schedules, failure history and endorsements.

646
00:25:16,280 --> 00:25:17,520
No judgment.

647
00:25:17,520 --> 00:25:19,000
Only truth.

648
00:25:19,000 --> 00:25:20,560
Day 6 to 10.

649
00:25:20,560 --> 00:25:21,560
Classify.

650
00:25:21,560 --> 00:25:24,920
We apply sensitivity labels where they were absent.

651
00:25:24,920 --> 00:25:27,080
We correct where they were wrong.

652
00:25:27,080 --> 00:25:28,720
Confidential internal, public.

653
00:25:28,720 --> 00:25:31,720
We endorse where content is stable and owned.

654
00:25:31,720 --> 00:25:34,960
We hold back endorsement where ownership is unclear.

655
00:25:34,960 --> 00:25:37,080
We add tags for meaning.

656
00:25:37,080 --> 00:25:38,400
Quarterly close.

657
00:25:38,400 --> 00:25:39,400
Pilot.

658
00:25:39,400 --> 00:25:40,720
FY plan.

659
00:25:40,720 --> 00:25:43,800
We let labels and tags speak before we do.

660
00:25:43,800 --> 00:25:46,800
We align tenant settings with this new clarity.

661
00:25:46,800 --> 00:25:48,080
Who can share externally?

662
00:25:48,080 --> 00:25:50,400
Who can build on certified data sets?

663
00:25:50,400 --> 00:25:53,680
We write these choices into groups, not names.

664
00:25:53,680 --> 00:25:54,680
Day 11 to 15.

665
00:25:54,680 --> 00:25:55,680
Reactor.

666
00:25:55,680 --> 00:25:57,280
We consolidate to certified data sets.

667
00:25:57,280 --> 00:26:00,840
We remove duplicate measures that drifted in private copies.

668
00:26:00,840 --> 00:26:04,440
We fix RLS and OLS at the data set, not the report.

669
00:26:04,440 --> 00:26:05,880
We define personas.

670
00:26:05,880 --> 00:26:08,800
We test them with sample users in the service.

671
00:26:08,800 --> 00:26:14,960
We correct filters, rename roles to be clear and consistent and store their definitions

672
00:26:14,960 --> 00:26:15,960
with the artifact.

673
00:26:15,960 --> 00:26:17,720
We resolve refresh errors.

674
00:26:17,720 --> 00:26:20,640
We remove data sources that are no longer sanctioned.

675
00:26:20,640 --> 00:26:24,840
We simplify where complexity hides ignorance.

676
00:26:24,840 --> 00:26:26,520
Day 16 to 20.

677
00:26:26,520 --> 00:26:30,760
Build we create org apps per audience, not one app for all.

678
00:26:30,760 --> 00:26:32,000
Many cups from one well.

679
00:26:32,000 --> 00:26:34,280
We craft overview pages in plain words.

680
00:26:34,280 --> 00:26:35,600
Why this app exists?

681
00:26:35,600 --> 00:26:36,600
Who it serves?

682
00:26:36,600 --> 00:26:37,600
What to do first?

683
00:26:37,600 --> 00:26:39,120
We structure sections.

684
00:26:39,120 --> 00:26:40,120
Reports.

685
00:26:40,120 --> 00:26:41,120
Notebooks.

686
00:26:41,120 --> 00:26:42,440
Dashboards.

687
00:26:42,440 --> 00:26:44,480
We shape navigation.

688
00:26:44,480 --> 00:26:47,360
We find where the story flows.

689
00:26:47,360 --> 00:26:49,520
Separated where hierarchy matters.

690
00:26:49,520 --> 00:26:51,320
We brand with reverence.

691
00:26:51,320 --> 00:26:55,280
Theme, image, title and description align to the Ministry of the content.

692
00:26:55,280 --> 00:26:57,000
We embed only governed links.

693
00:26:57,000 --> 00:26:58,640
We keep labels visible.

694
00:26:58,640 --> 00:27:00,200
Day 21 to 25.

695
00:27:00,200 --> 00:27:01,200
Pipeline.

696
00:27:01,200 --> 00:27:02,200
We connect Git.

697
00:27:02,200 --> 00:27:07,080
We bring PBR, data set definitions and app configuration under source control.

698
00:27:07,080 --> 00:27:11,160
We establish development, test and production workspaces.

699
00:27:11,160 --> 00:27:16,920
We rehearse the procession, promote to test, validate roles, validate performance, validate labels,

700
00:27:16,920 --> 00:27:24,760
promote to production only when the angels, our automated checks, approve.

701
00:27:24,760 --> 00:27:26,560
We practice rollback.

702
00:27:26,560 --> 00:27:31,200
We ensure version notes are prepared in human words.

703
00:27:31,200 --> 00:27:33,920
Day 26 to 28.

704
00:27:33,920 --> 00:27:35,320
Capacity and alerts.

705
00:27:35,320 --> 00:27:39,560
We size workloads with intention on the fabric altar.

706
00:27:39,560 --> 00:27:42,120
We test concurrency at the known rush hours.

707
00:27:42,120 --> 00:27:45,680
We set, refresh, SLA's by audience need.

708
00:27:45,680 --> 00:27:51,160
We wire health dashboards and notifications to owners and stewards who will respond.

709
00:27:51,160 --> 00:27:53,440
We place a health tile in each app.

710
00:27:53,440 --> 00:27:56,480
All data sets are fresh or attention required.

711
00:27:56,480 --> 00:27:57,960
We do not shame.

712
00:27:57,960 --> 00:27:59,200
We inform.

713
00:27:59,200 --> 00:28:00,720
Day 29.

714
00:28:00,720 --> 00:28:01,960
Sunset writes.

715
00:28:01,960 --> 00:28:04,360
We deprecate stale workspaces.

716
00:28:04,360 --> 00:28:07,240
We archive with banners that warn the passerby.

717
00:28:07,240 --> 00:28:09,160
We retire what no longer serves.

718
00:28:09,160 --> 00:28:13,400
We post redirects in the old places that people still visit.

719
00:28:13,400 --> 00:28:15,000
This report is retired.

720
00:28:15,000 --> 00:28:18,200
The living source now resides in the org app.

721
00:28:18,200 --> 00:28:21,680
We keep the redirect long enough for habits to shift.

722
00:28:21,680 --> 00:28:24,240
Not longer.

723
00:28:24,240 --> 00:28:25,480
Day 30.

724
00:28:25,480 --> 00:28:26,920
Covenant ceremony.

725
00:28:26,920 --> 00:28:31,920
We publish the governance guide where the congregation gathers, sharepoint or teams as

726
00:28:31,920 --> 00:28:33,840
our digital sanctuary.

727
00:28:33,840 --> 00:28:39,120
We announce the Stuart Council and its cadence, weekly for health, monthly for change,

728
00:28:39,120 --> 00:28:42,600
quarterly for renewal of endorsements and tenant settings.

729
00:28:42,600 --> 00:28:44,920
We invite the whole body to participate.

730
00:28:44,920 --> 00:28:45,920
See something?

731
00:28:45,920 --> 00:28:46,920
Tell us.

732
00:28:46,920 --> 00:28:50,520
We close the loop with action and with notes in the app.

733
00:28:50,520 --> 00:28:52,800
So when you begin, remember the rhythm.

734
00:28:52,800 --> 00:28:53,800
Inventory.

735
00:28:53,800 --> 00:28:54,800
Classify.

736
00:28:54,800 --> 00:28:55,800
Refactor.

737
00:28:55,800 --> 00:28:56,800
Build.

738
00:28:56,800 --> 00:28:57,800
Pipeline.

739
00:28:57,800 --> 00:28:58,800
Capacity.

740
00:28:58,800 --> 00:28:59,800
Sunset.

741
00:28:59,800 --> 00:29:00,800
Covenant.

742
00:29:00,800 --> 00:29:02,800
Eight movements.

743
00:29:02,800 --> 00:29:04,800
30 days.

744
00:29:04,800 --> 00:29:05,800
Not perfection.

745
00:29:05,800 --> 00:29:06,800
Direction.

746
00:29:06,800 --> 00:29:08,560
Once the right is complete.

747
00:29:08,560 --> 00:29:11,560
The work continues in gentle cadence.

748
00:29:11,560 --> 00:29:12,560
We keep watch.

749
00:29:12,560 --> 00:29:13,560
We tend the lamp.

750
00:29:13,560 --> 00:29:16,600
We pour from one well into many cups.

751
00:29:16,600 --> 00:29:19,080
The charge and the call.

752
00:29:19,080 --> 00:29:21,720
Hold this single truth.

753
00:29:21,720 --> 00:29:23,080
Distribution is doctrine.

754
00:29:23,080 --> 00:29:29,920
And org apps with pipelines keep the lineage pure so the congregation decides in light.

755
00:29:29,920 --> 00:29:31,440
Not rumour.

756
00:29:31,440 --> 00:29:32,440
Walk now.

757
00:29:32,440 --> 00:29:34,840
Migrate your reports into org apps.

758
00:29:34,840 --> 00:29:46,560
Establish deployment pipelines with notes and rollback.

759
00:29:46,560 --> 00:29:51,160
See all content with roles, labels, audiences, tenant discipline and capacity care.