| name | skill-incident-response |
| description | Organiza resposta a incidentes técnicos com contenção, evidência, comunicação, recuperação, timeline e postmortem sem culpa. |
| category | operations |
| risk | high |
| source | orquestrador-native |
Incident Response
Establish severity, impact, scope, owner, and communication channel. Preserve evidence, contain safely, avoid destructive cleanup, and keep a timestamped timeline. Restore service with the smallest reversible action, verify health and customer impact, then document root cause, contributing factors, detection gaps, corrective actions, and owners. Do not expose secrets or personal data in incident notes.