Incident Response Steps

Decompose incident response for {{model}} {{incident_type}} into steps.

Immediate response:
- Detect and alert
- Assess severity
- Engage response team

Containment:
- Implement immediate mitigations
- Limit blast radius
- Preserve evidence

Resolution:
- Root cause investigation
- Fix implementation
- Validation testing

Recovery:
- Service restoration
- User communication
- Post-incident review

Output runbook with escalation paths and {{sla_requirements}}.