A method is performed to provide assurance for a service enabled on a network. A definition of the service is received. The definition includes a service type, a service instance, and configuration information used to enable the service. From the service type and the service instance, a service tag that is unique to the service is generated so as to distinguish the service from other services on the network. Based on the definition, the service is decomposed into a subservice dependency graph of subservices and dependencies between the subservices. Based on the subservice dependency graph, the subservices are configured to record and report subservice metrics indicative of health states of the subservices. The subservice metrics are obtained from the subservices. The service tag is applied to the subservice metrics to produce service-tagged subservice metrics. The service-tagged subservice metrics are analyzed to determine a health state of the service.