Runbooks

Available runbooks

• Rate Limit by User
• Kill-Switch Incident Response
• Shadow Mode Rollout
• SaaS Disconnect
• Reject Spike
• Bad Bundle Rollback
• Global Shadow + Kill-Switch Override
• Budget Exhaustion

Usage notes

• Keep runbooks explicit and deterministic.
• Prefer safe-first mitigations before break-glass options.
• Always define exit criteria and rollback ownership.
• Link post-incident notes to policy diffs and alert evidence.