harness-investigate

Root cause analysis for an incident is performed by reconstructing events from available evidence to produce an evidence-graded case file. This workflow guides scope establishment, evidence perimeter mapping, and causality reasoning for a clean diagnosis hand-off.

An evidence-graded case file is a structured investigation document that confirms, deduces, and distinguishes hypotheses with clear criteria. It initializes and updates findings, allowing a different engineer to resume the debugging investigation cold.

Tracing an unfamiliar code area involves forensic investigation and architecture tracing to build a mental model before changes are made. The process maps the evidence perimeter and routes to existing or new case outcomes to document findings.

You can resume an incident investigation started by another engineer using the persisted case file. The structured document includes follow-up sections across iterations, ensuring a clean hand-off at diagnosis time for cold resumption.

When confirmed evidence is unavailable during incident investigation, the workflow enforces citation, delegation, and evidence-light fallbacks. This ensures hypotheses are distinguished and documented without fabricating missing causal links.