Blameless But Not Toothless: Postmortems That Drive Change
Blameless does not mean consequence-free. The framework that protects individuals while still producing accountable action items.
Split blame from accountability
Blameless and toothless are not the same. The trick is to stay blameless toward individuals while staying ruthless about the systems that produced the incident.
- Blameless toward individuals. The postmortem never says 'Alice caused this'; the human became the trigger, not the cause.
- Accountable toward systems. The postmortem says 'this happened because the deploy pipeline lacks a canary stage.'
- Same incident, different framing. One invites defensiveness; the other invites change.
- Facilitator role. A neutral facilitator catches blame slipping back into the doc and rewrites the sentence on the spot.
Action items with teeth
The output of a postmortem is not a narrative; it is a list of changes that ship. Without owners and deadlines the doc becomes a museum piece.
- One action per factor. Each contributing factor gets one explicit action item; do not bundle.
- Named owner. Individuals or specific teams; never 'the company' or 'platform team' generically.
- Deadline. Concrete date, tracked in the same system as feature work; overdue items page the team lead.
- Rejected items. 'Won't do' is a valid outcome if argued for; the rejection is part of the trail.
Cadence keeps it honest
The trend across postmortems is the real signal. One slipped follow-up is noise; a quarter of slipped follow-ups is a culture problem.
- 30-day review. Of the action items from a month ago, what actually shipped?
- Quarterly trend. Are postmortems leading to change, or have they become ceremony?
- Leadership visibility. The trend lands in front of leadership; pressure is healthy when the framing is fair.
- Repeat-cause flag. The same root cause across two postmortems triggers a deep review, not another postmortem.