Anyone can declare an incident. The first person on scene is the incident commander until someone explicitly takes it over.
During the incident, we keep one running log in our incident channel — what's happening, what we tried, what changed. Afterwards, the commander writes a blameless postmortem within five working days.
We practice. Each quarter, we run a tabletop exercise on a scenario we haven't seen before, and we treat the gaps it surfaces as real work.
