wr-itil:mitigate-incident

What problem does it solve?

Records mitigation attempts against an active incident and transitions its lifecycle from Investigating to Mitigating on the first attempt, while preserving a complete audit trail of all subsequent mitigations.

Core Features & Use Cases

• Transitions an incident file from .investigating.md to .mitigating.md on the first mitigation and updates the Status field accordingly.
• Appends each mitigation attempt to the Mitigation attempts timeline with precise UTC timestamps.
• Maintains a chronological Timeline log and a comprehensive audit trail for governance reviews.
• Enables compliant workflows under ADR-011 by requiring evidence-backed hypotheses for the first mitigation and recording outcomes for post-incident analysis.

Quick Start

Invoke the mitigate-incident skill with an incident ID and a concise mitigation description to transition an active incident from investigating to mitigating and record the attempt.