Write the incident down

The useful part of an incident is not the adrenaline. It is the durable knowledge left afterward: what failed, why the system allowed it, and which assumption should never be implicit again.