{
  "schema": "longtermcapabilities-agentic-incident-response/v1",
  "version": "1.64.0",
  "releaseId": "lts-1.64.0-upgrade-safe-rewrites-and-privacy-erasure-integrity",
  "generated": "2026-08-03T20:40:00Z",
  "path": "/insights/agentic-ai-incident-response/",
  "phases": [
    {
      "phase": "Detect",
      "decision": "Is behavior outside the approved use, authority, cost, reliability, or security envelope?",
      "minimum_evidence": "Alert, trace identifiers, affected tasks, versions, identities, and time window."
    },
    {
      "phase": "Classify",
      "decision": "Is the issue model, retrieval, policy, identity, tool, state, coordination, human review, or downstream effect?",
      "minimum_evidence": "Failure family, consequence class, active harm, and confidence level."
    },
    {
      "phase": "Contain",
      "decision": "What can be paused or revoked without making the situation worse?",
      "minimum_evidence": "Independent stop path, credentials, queues, tool gateways, and affected tenants or cases."
    },
    {
      "phase": "Preserve",
      "decision": "Which evidence must be retained for reconstruction without expanding sensitive-data exposure?",
      "minimum_evidence": "Immutable trace, policy decisions, tool effects, state versions, approvals, and hashes."
    },
    {
      "phase": "Reconcile",
      "decision": "Which external effects are complete, duplicated, missing, partial, or unknown?",
      "minimum_evidence": "Idempotency keys, durable identifiers, status queries, and business-state comparison."
    },
    {
      "phase": "Recover",
      "decision": "How will service and business state be restored in a controlled sequence?",
      "minimum_evidence": "Recovery plan, rollback or forward fix, backlog strategy, and validation owners."
    },
    {
      "phase": "Validate",
      "decision": "What demonstrates that the corrective control works and the accepted boundary is restored?",
      "minimum_evidence": "Representative rerun, adverse test, monitoring period, and signed decision record."
    },
    {
      "phase": "Learn",
      "decision": "Which architecture, contract, evaluation, or authority assumption must change?",
      "minimum_evidence": "Failure-chain map, remediation backlog, evidence-to-close register, and review date."
    }
  ],
  "boundary": "Architecture and operations checklist; not forensic, legal, regulatory, or emergency-response advice."
}