Within two working days of a SEV1 or SEV2
Write: a summary in three sentences, the impact (who, how long, how many orders), a timeline with times from the alert and change history, the cause, what fixed it, what made it worse or slower, and follow-ups with owners.
Blameless
Describe what happened and why it made sense at the time. Name systems and decisions, not people.