postmortems-without-blame

After an incident, the goal is systemic understanding — not assignment of blame to an individual. The person who pushed the button was the proximate cause; the system that let one push break production is the root cause. Frame postmortems around what the *system* should change so the same class of f