Blameless means
Blameless means we focus on what failed in the system — processes, tooling, alerting, communication — not on who made a mistake. Engineers make good decisions with the information available at the time. The postmortem identifies where the system let them down.Timeline
Postmortem template
Create a new doc in your wiki using the Postmortem template. Fill in:- Incident summary — one paragraph: what happened, when, and what the impact was.
- Timeline — chronological log of events (use UTC). Include when the issue started, when it was detected, key actions taken, and when it was resolved.
- Root cause — what was the underlying cause? Use “5 Whys” if helpful.
- Contributing factors — what else made this worse or harder to detect?
- Impact — number of users affected, duration, data involved.
- What went well — things that helped during response.
- Action items — concrete, assigned, with due dates. At least one per significant contributing factor.
The review meeting
Keep it to 30–45 minutes. The incident owner facilitates. Everyone who was involved should attend; others are welcome. Agenda:- Walk through the timeline (10 min)
- Discuss root cause and contributing factors (10 min)
- Review and assign action items (15 min)
Action items
Action items without owners don’t get done. Every item needs:- A clear description of what “done” looks like
- A single owner (not a team)
- A due date