# Incident postmortem

Incident ID:
Service / environment:
Document version / author / reviewers:
Current incident status and evidence:
Permitted audience:

## Reader summary
Observed symptom, affected task, verified impact, and remaining uncertainty:

## Impact
Time window and time zone:
Affected population and measurement source:
Incomplete work or data reconciliation still needed:

## Evidence timeline
| Event time + zone | Observation time | Event | Source | Confidence or unresolved conflict |
| --- | --- | --- | --- | --- |
| | | | | |

## Contributing conditions
Supported causal sequence:
Hypotheses and evidence needed:
What helped responders / what made the work harder:

## Recovery verification
Mitigation taken and authorized owner:
Service behavior observed after mitigation:
Affected-work outcomes and reconciliation source:
Open recovery owner and next checkpoint, if any:

## Follow-up register
| Action | Owner | Due date | Acceptance evidence | Status | Completion reference |
| --- | --- | --- | --- | --- | --- |
| | | | | | |

## Review decision
Reviewer / reviewed version / date:
Corrections and unresolved questions: