# AI Incident Post-Mortem Template

**Incident Title:** [Short, factual]
**Severity:** S0/S1/S2
**Incident Commander:** Aegis / [Name]
**Date of Incident:** [UTC range]
**Date of Review:** [date]

## Executive Summary
[2-4 sentences: what happened, impact, root cause category, key actions taken]

## Timeline
| Time (UTC) | Event | Owner | Evidence |
|------------|-------|-------|----------|
| ... | ... | ... | ... |

## Impact Assessment
- Users / customers affected: 
- Business / revenue impact: 
- AI-specific metrics degraded: (accuracy, fairness, safety scores, etc.)
- Duration: 

## Contributing Factors
[List with evidence. Use 5 Whys or fault tree. Separate technical, process, organizational, data, and model factors.]

## Why Defenses Failed
[Monitoring gaps, canary coverage, review processes, etc.]

## Immediate Actions Taken
[Containment and recovery steps with outcomes]

## Preventive Action Items
| Action | Owner | Due Date | Verification Method | Status |
|--------|-------|----------|---------------------|--------|
| ... | ... | ... | ... | Open |

## Model & Data Governance Updates
- Model card changes required: 
- New monitoring / alerting rules: 
- Training data or pipeline changes: 
- Policy or review process changes: 

## Lessons for the Organization
[What should other teams know? What patterns should be watched elsewhere?]

**Approved by:** [IC + Engineering Lead + AI Safety]