Incident Response

When to Use

Activate this skill when:

• Production service is down or returning errors to users
• Error rate has spiked beyond normal thresholds
• Performance has degraded significantly (latency increase, timeouts)
• An alert has fired from the monitoring system
• Users are reporting issues that indicate a systemic problem
• A failed deployment needs investigation and remediation
• Conducting a post-mortem or root cause analysis after an incident

Output: Write runbooks to docs/runbooks/<service>-runbook.md and post-mortems to postmortem-YYYY-MM-DD.md.