# Incident review — INC-NNN              (blameless)

Date / duration:  YYYY-MM-DD · Xh Ym
Severity:         SEV-?
Author:           <name>

## Summary
One paragraph: what broke, who was affected, how it ended.

## Timeline (UTC)
  T0       detect     — how we found out
  T+0m     triage     — first responders / hypothesis
  T+0m     mitigate   — what stopped the bleeding
  T+0m     resolve    — full restoration

## Impact
Users affected, SLO impact, error budget consumed.

## Root cause
The actual cause — systems, not people.

## What went well / what didn't

## Action items
  - [ ] <owner> — <fix> — due <date>