# Incident Response

> Production incident and major-error response workflow. Use for outages, degraded service, repeated hook/tool failures, security incidents, data loss, rollback decisions, on-call triage, or when MAJOR_ERRORS.md shows blocking failures.

- **Type:** Skill
- **Install:** `agentstack add skill-jh941213-codex-lattice-incident-response`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [jh941213](https://agentstack.voostack.com/s/jh941213)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [jh941213](https://github.com/jh941213)
- **Source:** https://github.com/jh941213/codex-lattice/tree/main/skills/incident-response

## Install

```sh
agentstack add skill-jh941213-codex-lattice-incident-response
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Incident Response

Use this skill when a production incident, major repeated error, rollback decision, or on-call triage is involved.

## Workflow

1. Stabilize first: stop risky changes, preserve logs, and identify the affected service or workflow.
2. Classify severity in `docs/harness/INCIDENT_RESPONSE.md`.
3. Capture timeline, impact, suspected trigger, current mitigation, and owner.
4. Prefer read-only diagnostics before mutating systems.
5. If rollback is safer than forward fix, document the rollback command and validation.
6. Update model-visible major errors only with information the next agent must read.
7. After mitigation, create or update `docs/harness/POSTMORTEM_TEMPLATE.md`.

## Severity Guide

- `SEV0`: data loss, security exposure, total outage, destructive automation.
- `SEV1`: customer-visible outage or broken critical workflow.
- `SEV2`: partial degradation, failed deployment, repeated operational failure.
- `SEV3`: non-urgent defect, flaky check, noisy alert.

## Required Output

Return:

- severity
- impact
- immediate mitigation
- diagnostics run
- rollback or forward-fix decision
- follow-up action items
- postmortem required: yes/no

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [jh941213](https://github.com/jh941213)
- **Source:** [jh941213/codex-lattice](https://github.com/jh941213/codex-lattice)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-jh941213-codex-lattice-incident-response
- Seller: https://agentstack.voostack.com/s/jh941213
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.