runbook-writing

Use when authoring or editing a runbook that an oncall engineer will read at 3am with a page in hand and incomplete context. Triggers when the user mentions "write a runbook", "this alert needs a runbook", "what should the responder do", "playbook for this alert", "oncall doc", or "I keep getting paged for this and there's no doc". The skill covers the runbook structure that survives sleep deprivation, trigger conditions linked to alert rules, immediate actions ordered by reversibility, escalation tree, related-runbook crosslinks, and post-incident updates. For the alert that fires the page, see monitoring-and-alerting. For the incident response itself once mitigation has happened, see incident-response. For the post-mortem after, see post-mortem-writing.