# Postmortem Template

Copy this file to `docs/postmortems/YYYY-MM-DD-<slug>.md` for each incident.

---

## Summary

One-paragraph overview: what broke, when, impact, and resolution.

## Timeline

| Time (UTC) | Event |
|------------|-------|
| HH:MM | First alert fired |
| HH:MM | On-call paged |
| HH:MM | Root cause identified |
| HH:MM | Mitigation applied |
| HH:MM | Full recovery confirmed |

## Root Cause

Describe the underlying cause. Avoid blame — focus on systems and processes.

## Impact

- Users affected:
- Duration:
- Data lost or corrupted:
- SLO impact (p50/p95 breach, success rate):

## What Went Well

- ...

## What Went Poorly

- ...

## Action Items

| Action | Owner | Due |
|--------|-------|-----|
| ... | ... | ... |

## Lessons Learned

What should be different next time? What does this reveal about our architecture?
