Use when the user asks to write, review, analyze, or improve an incident retro, postmortem, outage review, rollback review, timeline, impact summary, RCA, factor analysis, or corrective action plan after an incident, customer-impacting bug, deploy failure, data issue, or security-adjacent event.