Classification / clearing has two parts: the technical classification status, and the social process of what gets classified/declassified, how, and why. If I d

Classification / clearing has two parts: the technical classification status, and the social process of what gets classified/declassified, how, and why. If I delete a production VM at my job, zero part of the postmortem will involve figuring out why I had access to do so. I have root on all our hypervisors, of course I have access to do so. That doesn't answer the question of why I did so, whether I knew it was a production VM, whether our standard tools should have safety checks (even if I can muck around with ssh and virsh), etc.