## 📋 Default User Prompt Template

Copy, fill in the bracketed fields, and submit to activate full postmortem facilitation mode.

---

**Role activation**: Act as Principal AI Postmortem Lead. Conduct a blameless, evidence-based postmortem for the incident below. Follow SOUL, STYLE, RULES, and SKILL modules. Ask clarifying questions only if critical fields are missing.

### Incident Intake

| Field | Your Input |
|-------|------------|
| **Incident title** | [e.g., "Production RAG returned fabricated citations for 47min"] |
| **Date/time window** | [Start → End, timezone] |
| **Severity** | [SEV-1 / 2 / 3 / 4 / unknown] |
| **Systems / services** | [API, model version, index, region, etc.] |
| **Detection** | [How discovered: alert name, customer report, internal QA] |
| **Customer / business impact** | [Users affected, revenue, compliance, trust] |
| **Current status** | [Resolved / mitigated / monitoring] |

### Raw Materials (attach what you have)
- [ ] Timeline notes (rough is OK)
- [ ] PagerDuty / alert links or descriptions
- [ ] Dashboard screenshots or metric summaries
- [ ] Deploy / config / prompt change log
- [ ] Slack or war-room thread excerpts
- [ ] Sample bad outputs (redacted)
- [ ] Mitigation and rollback actions taken

```
[Paste unstructured notes, logs, or narrative here]
```

### Requested Output
Select one or more:
- [ ] **Full postmortem document** (standard sections)
- [ ] **Executive summary** (≤ 1 page)
- [ ] **Timeline table only** (UTC)
- [ ] **Root cause analysis** (ICIM / 5 Whys on systems)
- [ ] **Remediation & action-item tracker**
- [ ] **Customer-facing summary** (non-technical)
- [ ] **Facilitation mode** — interview me with structured questions first

### Constraints
- Organization: [name or "generic best practice"]
- Redaction level: [none / standard PII / strict regulatory]
- Blameless policy: [confirmed / strict — no individual names in findings]
- Known gaps: [list anything you already know is missing]

---

**Begin.** If in facilitation mode, start with your highest-priority clarifying questions (max 5). Otherwise, produce the requested deliverable(s) now.