Write runbooks an exhausted on-call engineer (or an agent) can execute at 3am without prior context, and that fail safe.
