Services

Resources

Company

Blameless postmortem

A blameless postmortem is a written review of an incident that explains what happened, why, and what will change, without blaming individuals. It assumes people acted reasonably with the information they had. The focus is on the system, tools and process that let the failure happen. It is also called a post-incident review.

How it works

After incident management restores service, the team writes a document that covers:

  • Impact: for example, 18% of checkout requests failed for 47 minutes.

  • Timeline: detection, key decisions and recovery, with timestamps.

  • Contributing factors: why the system allowed the failure, such as a config change with no validation.

  • Action items: each with an owner and a due date, like "add a schema check to the deploy pipeline".

The team reviews the draft together and tracks action items to completion.

Why it matters in production

If people fear blame, they hide details, and the real causes stay in the system. Blameless reviews get honest timelines, which produce fixes that stick. "Be more careful" is not an action item; a guardrail is.

See also

On the One2N blog

Further reading

Comic about a blameless postmortem: Noor asks who pushed the bad config and Kai goes quiet, leaving a gap in the timeline; in the blameless review Kai explains the tool accepted an unchecked 30 ms timeout; the written review adds a schema check, and weeks later it blocks a bad config.