Incident Response Board for Nextcloud Deck
as a normal Nextcloud Deck board.

{
  "schema": "deckloud-template-v1",
  "schemaVersion": 1,
  "slug": "incident-response-nextcloud-deck",
  "locale": "en",
  "title": "Incident Response Board for Nextcloud Deck",
  "description": "A calm path from first signal to blameless review, with severity decided early and mitigation before root cause.",
  "category": "software",
  "tags": [
    "incident",
    "on-call",
    "postmortem"
  ],
  "quickCreateStackKey": "reported",
  "compatibility": {
    "requiresBoardCreate": true,
    "includesAttachments": false,
    "includesComments": false
  },
  "board": {
    "title": "Incident Response",
    "color": "DC2626"
  },
  "labels": [
    {
      "key": "sev1",
      "title": "Sev1",
      "color": "B91C1C"
    },
    {
      "key": "sev2",
      "title": "Sev2",
      "color": "F59E0B"
    },
    {
      "key": "customer-impact",
      "title": "Customer Impact",
      "color": "EF4444"
    },
    {
      "key": "follow-up",
      "title": "Follow-up",
      "color": "3B82F6"
    }
  ],
  "stacks": [
    {
      "key": "reported",
      "title": "Reported",
      "order": 1
    },
    {
      "key": "triage",
      "title": "Triage",
      "order": 2
    },
    {
      "key": "mitigating",
      "title": "Mitigating",
      "order": 3
    },
    {
      "key": "monitoring",
      "title": "Monitoring",
      "order": 4
    },
    {
      "key": "review",
      "title": "Review",
      "order": 5
    }
  ],
  "cards": [
    {
      "stack": "reported",
      "title": "Capture the first signal",
      "description": "Write what you observed before you start guessing why. The first note anchors the timeline.\n\n- [ ] What is broken, from a user's point of view\n- [ ] When did it start, as precisely as you can tell\n- [ ] What changed recently\n- [ ] Who is currently looking at it",
      "labels": [
        "customer-impact"
      ]
    },
    {
      "stack": "triage",
      "title": "Decide severity within five minutes",
      "description": "Severity decides who you wake up. Guessing low to avoid the call is the expensive mistake.\n\n- [ ] Is data being lost right now\n- [ ] Can users complete the core task\n- [ ] Is there a workaround they can use today\n- [ ] Escalate if you cannot answer within five minutes",
      "labels": [
        "sev1",
        "sev2"
      ]
    },
    {
      "stack": "mitigating",
      "title": "Stop the impact before finding the cause",
      "description": "Roll back, fail over, or disable the feature. Root cause is a review task, not an outage task.",
      "labels": [
        "customer-impact"
      ]
    },
    {
      "stack": "monitoring",
      "title": "Watch before declaring it over",
      "description": "Give the system a full traffic cycle at normal load before you close the incident.",
      "labels": [
        "follow-up"
      ]
    },
    {
      "stack": "review",
      "title": "Run a blameless review",
      "description": "Look for the missing guardrail, not the person who typed the command.\n\n- [ ] Write the timeline from the cards on this board\n- [ ] Name what made detection slow\n- [ ] Name what made recovery slow\n- [ ] Create one concrete follow-up with an owner",
      "labels": [
        "follow-up"
      ],
      "dueOffsetDays": 5
    }
  ]
}