Incident Scorecard

For each incident record:

• Symptom observed
• Runbook referenced (which playbook section)
• First two commands run
• Root cause identified
• Fix command(s)
• Verification evidence