Operations

When to use

Invoke immediately after an incident is mitigated, when a recurring alert needs a reusable runbook, or when a service is entering production support and operational readiness needs a concrete on-call handoff artifact.

Do not invoke for unconfirmed user reports (gather facts first), infrastructure or platform architecture (use infrastructure-platform), system reliability engineering strategy (use reliability), application implementation, security threat modeling, or vendor-specific monitoring setup.

Inputs

Required:

• Incident description or operational scenario, and current mitigation status.
• Timeline raw material: chat transcript, alert log, metrics screenshots, deploy log, audit trail.

Optional: