What problem does it solve? When production breaks, engineers lose time manually reconstructing what changed, which deploy caused it, and who was affected. This Skill automates incident triage, timeline reconstruction, root cause analysis, and postmortem writing so responders can focus on fixing the issue. ## Core Features & Use Cases - Timeline Construction: Builds a chronological timeline separating code commits from confirmed deploys using git history, GitHub Actions, Sentry, and platform deploy signals. - Root Cause Analysis: Ranks suspect commits by temporal proximity, code overlap, and risk area, assigning confidence levels (CONFIRMED, LIKELY, POSSIBLE, UNCONFIRMED) with revert safety checks. - Structured Postmortem: Generates a blameless postmortem document in docs/incidents/ with impact assessment, action items, and optional internal/customer communication templates. - Use Case: Payments start returning 500 errors. Run the skill with the symptom, a --since window, and --service flag to get a ranked suspect list, impact assessment, and a ready-to-share postmortem. ## Quick Start Ask the assistant to investigate the production incident where the payments endpoint returned 500 errors starting two hours ago, with severity 1 and communication templates included.