Incident Response
Overview
Product manual for stakeholder reports, incident protection, SRE review, governed action review, degraded states, emergency paths, and release evidence.
Incident Response is the product area for reporting, triaging, coordinating, and evidencing degraded or emergency states. It coordinates response but does not bypass protocol authority, timelocks, canonical truth, or release gates.
Incident pages use message, report, and governed-action fields. Exact message composition and reply fields are listed in Input Field Reference.

| Visible field | What the user enters or selects | What it is for |
|---|---|---|
Incident type | Select compromised wallet, asset safety, vault exposure, market risk, or status projection. | Classifies the incident report. |
Entity type | Select investor, vault, market, asset, or partner. | Identifies affected object family. |
Role | Select investor, depositor, borrower, liquidator, or partner member. | Identifies reporter or affected role. |
Affected address, vault, market, or reference | Enter an address or reference ID. | Identifies the affected object. |
JSON summary: describe the incident evidence | Enter JSON or text evidence summary. | Records report evidence and context. |
Submit Report | Click after filling the incident fields and connecting a wallet. | Submits the stakeholder incident report. |
Search | Type report, status, type, role, or subject. | Filters incident report rows. |
Severity | Select or read severity where surfaced. | Classifies operational urgency. |
Status | Select or read report status. | Shows review stage. |
Timelock State | Read queued, executable, cancelled, expired, or invalid state. | Shows governed action status. |
Queue | Click where governed action queue is available. | Queues a sensitive action. |
Execute | Click after delay has passed and action is valid. | Executes a queued governed action. |
Cancel | Click where cancellation authority is available. | Cancels a queued action. |