- Pull PagerDuty events in the incident window. Parse alert text and acknowledgments.
- Pull the #incidents Slack channel history for the window. Read every message to identify the material ones.
- Identify the meeting that ran during the incident — calendar lookup, transcript pull.
- Pull the post-mortem doc draft if it exists.
- Pull git push and deploy events from CI logs.
- Manually order every event by timestamp. Label source, actor, what happened.
- Re-read responder threads to extract converged root-cause hypothesis.
~75k tokens