# Incident Postmortem: <title>

Date: ____  Severity: ____  Author: ____  Status: draft | reviewed

## Summary
Two or three sentences: what happened, who was affected, how it was resolved.

## Impact
- Duration (start to full recovery):
- Customers or tenants affected (query your traces by tenant ID):
- SLOs affected and error budget consumed:

## Timeline (UTC)
| Time | Event |
| ---- | ----- |
|      | First signal (alert, forecast, or customer report) |
|      | Incident declared |
|      | Mitigation applied |
|      | Recovery confirmed |

## Detection
How did we find out? How could we have found out sooner?

## Root cause and contributing factors
Describe the system conditions, not individual mistakes.

## What went well / what was hard

## Action items
| Action | Owner | Due | Ticket |
| ------ | ----- | --- | ------ |