The Incident Decision Log

Decisions during incidents are forgotten. The log that captures what was decided and why.

What to log

Major decisions: rollback or not, escalate or not, which fix to try.

Reasoning: why this decision, what alternatives, what's the gamble.

When

Real time, in the channel, by the IC or scribe.

Don't break flow; one-line entries are enough.

Use

Postmortem reconstructs from the log.

Future similar incidents reference past decisions.