Skip to main content

Pillar 5 — Governance

Principle: Optimization that isn't governed erodes. Budgets, ownership, and auditable evidence are what keep this quarter's savings from quietly reappearing next quarter.

Governance is the pillar that makes the other four durable. It turns one-off wins into an operating model: spend has owners, budgets have alerts, and savings have proof that survives a finance review.

Why it matters​

Cost creeps back. A new dashboard, a forgotten warehouse left on XL, a CI job that fans out — without governance, the gains from elimination and efficiency decay within a quarter. Governance is also where FinOps becomes credible to finance: a savings claim with no audit trail is an assertion, not a result.

Chargeback vs showback​

ModelWhat it doesWhen to use
Showbackreports each team's spend; no billingbuilding accountability culture
Chargebackallocates real cost back to team budgetsmature orgs with budget ownership

Both require trustworthy attribution — you can't charge back spend you can't assign. That dependency is why attribution is pillar 2 and governance is pillar 5.

Signed savings evidence​

Savings claims need to survive scrutiny. chukei records conservative avoided-credit estimates and exports Ed25519-signed evidence bundles that show:

  • which queries were served from verified cache;
  • which suspend decisions avoided idle compute;
  • which rewrites changed query cost;
  • which team or tool produced the saving;
  • whether the bundle was altered after export (the signature breaks if so).

This is unique to chukei among cost tools and is built for SOX / FinOps / M&A audit contexts. See the FinOps guide.

Governance checklist​

  • Each team or workload has a spend budget with alerting.
  • Showback (or chargeback) reports go out on a regular cadence.
  • Savings are recorded with conservative, auditable estimates.
  • Evidence bundles are signed and tamper-evident.
  • A periodic review catches warehouses/jobs that drift back up.

Prove the savings. Pilot chukei in suggest-only mode and export a signed evidence bundle from your own traffic — begin with the replay simulator.