Policy

Rudel sandboxes can carry metadata that explains who owns them, why they exist, when they should expire, and where they came from.

Ownership

wp rudel create \
  --name=qa-run \
  --owner=dennis \
  --labels=qa,checkout \
  --purpose="Reproduce payment bug"

Metadata is stored in the environment record and can be updated later:

wp rudel update qa-run-1234 --owner=agent --labels=agent,checkout

Expiry

wp rudel create --name=temp-run --ttl-days=2

or:

wp rudel update temp-run-1234 --expires-at=2026-06-10T12:00:00+00:00

Expired sandboxes are eligible for cleanup unless they are protected.

Protection

wp rudel update qa-run-1234 --protected

Protected sandboxes are skipped by cleanup and require explicit force when destroyed.

Lineage

When a sandbox is cloned from another sandbox, Rudel records source metadata in the new environment record.

That lineage is informational. It helps operators understand how a sandbox was created, but it is not a second source of truth.