Agent Operations
Agent Post-Incident Review
Also: blameless review, postmortem
A short blameless write-up after an incident: timeline, cause, what worked, what did not and what changes.
In more detail
The review closes the loop by changing something: a rule, a permission, the threat model, or a new test scenario so the failure cannot return unnoticed. Blameless means focusing on the system and its controls, not on finding someone to blame.
