Source: https://guthlabs.ai/docs/project-templates/incident-response/

project template / candidate

# Incident response

Proposal-only project record for coordinating incident detection, containment, evidence preservation, recovery, approvals, and retrospective work while keeping external effects human-held.

Status: **candidate**Lifecycle: **candidate**

## Record status

**Record ID**: project:incident-response

**Parent lifecycle**: candidate

**Page lane**: catalog overview

**Lane lifecycle**: candidate

**Owner**: Not separately recorded

**Owner role**: Not separately recorded

**Owner status**: Not separately recorded

**Qualification result**: NOT RUN · held for evidence and human review

**Working browser surface:** [Project templates & workflows — overview](<https://guthlabs.ai/labs.html#templates-workflows>) — Create a local project from this template and validate its forms. This route is local-only; provider, credential, database, customer, publication, deployment, and production effects remain held.

## Purpose and audience

Proposal-only project record for coordinating incident detection, containment, evidence preservation, recovery, approvals, and retrospective work while keeping external effects human-held.

- incident coordinator

- technical responders

- service owners

- communications reviewer

- approver

- retrospective facilitator

## Required or proposed record references

The list defines expected record classes. It does not assert that any instance exists.

- project record

- incident intake record

- scope and impact record

- milestone records

- deadline and workback to-dos

- dependency records

- owner assignments

- evidence references

- approval records

- risk records

- closure and retrospective record

## Route contract

The links below are this site's admitted canonical public records. Source-lane route suggestions are proposals only and are not represented as live or canonical until separately admitted.

[01**overview**/docs/project-templates/incident-response/](<https://guthlabs.ai/docs/project-templates/incident-response/>)[02**forms**/docs/project-templates/incident-response/forms/](<https://guthlabs.ai/docs/project-templates/incident-response/forms/>)[03**deadlines**/docs/project-templates/incident-response/deadlines/](<https://guthlabs.ai/docs/project-templates/incident-response/deadlines/>)[04**tools**/docs/project-templates/incident-response/tools/](<https://guthlabs.ai/docs/project-templates/incident-response/tools/>)[05**field guides**/docs/project-templates/incident-response/field-guides/](<https://guthlabs.ai/docs/project-templates/incident-response/field-guides/>)[06**qualification**/docs/project-templates/incident-response/qualification/](<https://guthlabs.ai/docs/project-templates/incident-response/qualification/>)

## Public claim boundary

Allowed items below are source-lane proposals, not verified current-state claims.

### Candidate claims allowed after source review

- This is a proposal-only project and form design for incident-response coordination.

- The design uses observed local Notebook, PointGuard, Agenda, To-dos, Files, Messages, Approvals, Projects, Field Guides, and Agent Logs surfaces as bounded references.

- The record can preserve source labels, provenance, revisions, links, attachments or local file references, deadlines, and human-review receipts when those fields are implemented.

### Claims held

- Deployment or production availability.

- A connected provider, credential, database, customer index, protected vault, notification channel, or external incident-management system.

- Automatic detection, containment, recovery, scheduling, messaging, publication, or production change.

- Any claim that an incident has occurred, affected customers, been contained, been recovered, or been closed.

- Qualification, compliance, security assurance, or completeness of the response process.

## Sources and evidence

These pointers bind the page to evidence. They do not grant authority or collapse verification into deployment.

- `source_record:project:incident-response`

- `project:incident-response`

- `NotebookCollectionKind.project`

- `NotebookTodoPayload.dueAt`

- `Notebook Agenda deadlines/workbacks`

- `Notebook records canonical IDs, origin, source locators, source SHA-256, provenance, revision, lifecycle, tags, links, attachments, and record revisions`

- `PointGuard persistent cross-app context surface`

- `APP_ROUTES:/app/notebook/projects/`

- `APP_ROUTES:/app/notebook/to-dos/`

- `APP_ROUTES:/app/notebook/agenda/`

- `APP_ROUTES:/app/notebook/files/`

- `APP_ROUTES:/app/notebook/approvals/`

- `APP_ROUTES:/app/notebook/messages/`

- `APP_ROUTES:/app/notebook/agent-logs/`

- `APP_ROUTES:/app/pointguard/`

- `Notebook records provenance and revision contract`

- `Notebook records provenance and revisions`

- `/app/notebook/projects/`

- `/app/notebook/to-dos/`

- `/app/notebook/agenda/`

- `/app/notebook/approvals/`

- `/app/notebook/messages/`

- `/app/notebook/files/`