🚨 Incident Records

Incident Records #

One record per incident on Deevnet infrastructure: what broke, how it was found, why it happened, how service came back, and what was done so it does not happen again. Records are numbered INC-NNNN in the order they are opened, like ADRs, and grouped by year.

Change Management states that “manual changes without validation are considered defects.” Most incidents are what happened when a change reached a live site without the validation that would have caught it. Each record is written so the next person meets the failure mode in a document rather than in the dark.

Like Change Records, these are retained information: evidence, written once, updated only as their actions close. How to write one, and the template, are maintained in the runbook under Incident Management.


Records #

IDDateIncidentSiteRoot causeStatusSubstatus
INC-00052026-10-07Core Router Hard Hang During a Provisioning VM RebuildmobileNot established: a second hard hang during a bulk image push across the router, recurring INC-0004OpenMitigated
INC-00042026-09-21Core Router Lost: a Hard Hang, Then Recurring re0 Watchdog Timeoutsmobilere0 (Realtek) watchdog timeouts, recurring; the first event’s hard hang is not yet explainedOpenInvestigating
INC-00032026-09-17OpenBao’s Recovery Key and AppRole Destroyed by a Git ResetmobileOnce-only secrets not locked in (pushed) before git reset --hard in a decrypted repositoryClosedCompleted 2026-09-21
INC-00022026-09-15Controller VM Silent β€” Running but Off the NetworkmobileNot established; restored by a guest rebootOpenMitigated
INC-00012026-09-07Firewall Policy Deleted, Total Connectivity LossmobileEmpty desired set treated as authoritative by an ungated reconcileClosedCompleted 2026-09-19

Status and substatus are defined in Incident Management.

Page last modified: October 7, 2026