# Incident Log — Redacted Template

- Incident ID:
- First observed (local time and timezone):
- Reporter:
- Affected agent/provider:
- Observable symptoms:
- User-reported facts:
- Verified facts and sources:
- Unknowns:
- Systems affected:
- Credentials rotated (names/classes only):
- Provider case ID:
- Next follow-up:
- Resolution and lessons learned:

Never include credential values or customer data.