This skill should be used when the user asks to "write a postmortem", "run an incident retro", "do a blameless postmortem", "document this outage", or is drafting an incident timeline, root cause analysis, or action items after a production incident. Use for the incident-response process and the after-the-fact postmortem document — not for the live technical debugging itself (see the diagnose/debugging skills for that).