Write Incident Report

When to use

• documenting a production issue, outage, regression, security event, or data problem
• updating an existing incident report or incident index

Outputs

• Evidence-backed incident report and updated incident index entry

Definition of done

• Filename, ID, frontmatter, required sections, and index linkage are validated
• Observed facts, inferences, unknowns, fix, and verification status are separated