- name
- triage
- description
- Triage production incidents involving data corruption, data loss, slow performance, or outages. Classify severity and recommend immediate actions.
# Incident Report Triage
When a user provides an incident report, follow these steps in order.
## Step 1: Classify Severity
Read the incident text and classify:
- Contains "data loss" or "corruption" → Critical → go to Step 2
- Contains "slow" or "timeout" → Degraded → go to Step 3
- Contains "cosmetic" or "typo" → Low → go to Step 4
State the severity classification and transition reason.
## Step 2: Critical Incident Response
1. State: "This is a Critical incident requiring immediate action."
2. Identify the affected component from the report text.
3. Recommend: rollback to last known good state.
4. Recommend: notify the on-call team.
5. Proceed to Step 5.
## Step 3: Degraded Incident Response
1. State: "This is a Degraded incident requiring investigation."
2. Identify the affected component from the report text.
3. Recommend: capture diagnostics.
4. Recommend: scale up if load-related.
5. Proceed to Step 5.
## Step 4: Low Incident Response
1. State: "This is a Low priority incident."
2. Recommend: file a backlog ticket.
3. Proceed to Step 5.
## Step 5: Summary
Provide a structured summary:
- Severity: (Critical/Degraded/Low)
- Component: (identified from text)
- Actions: (list from the corresponding step)
在 GitHub 查看