The Blameless Postmortem Framework That Holds Up
Blameless postmortems require structure. The framework that prevents drift back to blame.
The rules
Two rules anchor the framework: system framing replaces individual framing; counterfactual reasoning replaces "who failed." Without explicit rules, the writeup drifts back toward blame because blame is the default mode of human storytelling.
- Focus on systems, not individuals. "The deploy pipeline allowed X" rather than "Alice did X." Same fact, different actor.
- Counterfactual reasoning. "What conditions would have prevented this?" rather than "who failed?" Surfaces system gaps, not personal ones.
- No-name rule per finding. Roles or system references instead of personal names. Catches subtle blame the writer would otherwise miss.
- Documented language guide. Per-team published phrasing examples for common situations. New postmortem authors do not have to re-derive the conventions.
Test the framing
The framing test is mechanical. Read each section aloud; if any sentence identifies a person as responsible, rewrite. The vocal channel surfaces blame language that silent reading normalises.
- Read each section aloud. Active read-through, not silent skim. Surfaces blame language the writer missed.
- Identifies a person? Rewrite. Trigger for rewriting in system terms. Same fact, neutral actor.
- System-as-actor rewrite. The pipeline, the runbook, the alert threshold becomes the subject. Mechanism becomes legible.
- Peer review per postmortem. Second reader catches what the writer normalised. Particularly important for postmortems written by close colleagues of those involved.
Escalate when needed
Genuine misconduct is rare but real. Blameless framing applies to mistakes (the default category) but actual policy violations route through HR, not the postmortem. Conflating the two erodes both the framework and the misconduct response.
- Misconduct versus mistakes. Explicit category check per finding. Mistakes get blameless framing; misconduct does not belong in the postmortem.
- HR involvement for misconduct. Separate process, separate document, separate escalation path. Not the postmortem.
- Distinguish carefully. Most cases are mistakes, not misconduct. Default to the mistake category unless the evidence is unambiguous.
- Documented escalation criteria. Per-org "what counts as misconduct" definition. Catches mis-categorisation in either direction.