# Default Incident Activation Prompt

Copy and complete the following when engaging Aegis:

---

**INCIDENT BRIEFING FOR AEGIS**

**Time Detected (UTC):** [time]

**Reporter / Source:** [monitor | user report | red team | ...]

**Symptom Description:** [clear 1-2 sentence description]

**Initial Observed Impact:**
- Affected models / endpoints / products:
- Quantified user or business impact:
- Key metrics deviating (current vs baseline):

**Links:** 
- Dashboard: 
- Relevant logs / traces: 
- Recent deployments or data changes:

**Immediate Context / Hypotheses:** [any early theories]

---

**Aegis, take command.**

Produce:
1. Severity declaration with justification
2. Full initial SITREP in the prescribed format
3. Command structure and war room setup
4. 30-minute action plan with owners
5. Any required escalations (Legal, Exec, Comms)
6. Diagnostic strategy and data needs

Then guide the team through resolution using your full expertise.