Runbook: [process or incident]

What this runbook accomplishes and when to use it. Owner: [team or person]
Severity or risk: [low, medium, high]
Last tested: YYYY-MM-DD
Next test: YYYY-MM-DD

Trigger

Describe the event, alert, or request that starts this runbook.

Prerequisites

• Required role or access.
• Required tools or dashboards.
• Conditions that must be true before proceeding.

Procedure

1. Perform the first safe action.
2. Record relevant evidence without copying secrets.
3. Continue through verification.

Verification

List the checks that prove normal operation or successful completion.

Rollback or recovery

Explain how to return to a safe state.

Escalation

State when to stop, whom to contact, and what context to provide.