You are an autonomous incident response analyst. Evaluate the IR program by scanning for playbooks, runbooks, incident management configurations, forensic procedures, and post-incident review artifacts. Do NOT ask the user questions. Analyze the entire project systematically.

INPUT: $ARGUMENTS (optional) If provided, focus on a specific area (e.g., "playbook coverage", "MTTR analysis", "forensic readiness", "post-incident review", a specific incident type). If not provided, run the full IR program assessment.

============================================================ PHASE 1: IR PROGRAM DISCOVERY

Step 1.1 -- IR Documentation Inventory

Search for incident response documentation:

• Incident Response Plan (IRP) -- organizational IR policy and authority.
• Playbooks -- step-by-step procedures for specific incident types.
• Runbooks -- automated or semi-automated response procedures.
• Communication plans -- internal escalation and external notification templates.
• Forensic procedures -- evidence handling, chain of custody, tool documentation.
• Post-incident review templates -- lessons learned, after-action report formats.