Postmortem

Summary and customer impact

Detection

Which signal fired, what should have fired, and detection delay.

Timeline

Link the completed incident timeline and deployment annotations.

Root cause

State the technical and organizational causes without blame.

Contributing factors

Resolution and recovery

What went well / poorly / luckily

SLO and error-budget impact

Actions

Action	Owner	Due date	Verification	Status

Every action must be testable; avoid “be more careful”.