Incident Management
Incident Lifecycle
The default lifecycle used to move incidents from detection to review.
IncidentFlow models incidents as a sequence of states that preserve context from detection through resolution.
Default States
- Detected: a signal or group of signals indicates a possible problem.
- Investigating: responders or AI clients are collecting evidence.
- Mitigating: the team is applying a fix, rollback, or workaround.
- Resolved: customer impact has ended.
- Reviewed: useful learnings are saved into workspace memory.
Lifecycle Context
Lifecycle transitions should preserve the related signals, deployments, service impact, timeline notes, and follow-up actions that explain why the state changed.