---
name: incident-response
description: Handle production incidents following the standard response protocol
trigger: manual
category: operations
---

## Steps

1. Acknowledge the alert within 5 minutes
2. Assess severity: P0 (full outage), P1 (partial), P2 (degraded), P3 (minor)
3. Open an incident channel in the team communication tool
4. Notify stakeholders based on severity level
5. Investigate root cause using logs, metrics, and traces
6. Implement fix or workaround
7. Verify resolution with monitoring dashboards
8. Write post-incident report within 24 hours

## Parameters

- **severity**: P0/P1/P2/P3 (required)
- **service**: affected service name (required)
- **reporter**: who detected the issue (optional)

## Escalation

- P0: Page on-call lead + engineering VP immediately
- P1: Page on-call lead within 15 minutes
- P2: Notify on-call via chat
- P3: Log and address in next sprint