deep-retro
ทำ post-incident retrospective ลึก หา root cause ระดับ process และ action items
SKILL.mddeep-retro/SKILL.md
GitHubGoal
Run a thorough post-incident / post-project retrospective to find process-level root causes, produce actionable learnings, and define action items that prevent recurrence
Scope
Use after an incident, failed deployment, major bug, or project milestone, or when the team wants to review why what happened was even possible
Not for debugging a live issue — use /deep-debug first
Not for reviewing work with no incident — use /deep-review-codebase instead
Execute
1. Define Retro Scope
Goal: State what is being reviewed and to what end
- Identify the incident or event to retro: symptoms, duration, impact
- Identify the stakeholders who should join or provide input
- Set a timebox: small ≤ 30 minutes | medium ≤ 1 hour | large ≤ 2 hours
- Collect initial context: logs, metrics, timeline, alerts
2. Build Timeline
Goal: Build a detailed timeline from before the incident to after resolution
- Assemble the events in chronological order
- Mark trigger, detection, response, mitigation, resolution
- Run
/reportto present the timeline: Time, Event, Actor, Evidence - Check for gaps or delays in each phase
3. Gather Evidence
Goal: Collect complete data before analysis
- Run
/deep-debugif there is no clear root cause yet - Run
/analyze-root-cause-analysisto build the causal graph - Collect logs, traces, metrics, screenshots, error messages
- Collect decisions and communication within the team
- Inspect git history:
/follow-tool-gitor/check-git-logs
4. Identify Contributing Factors
Goal: Find the factors that contributed to the incident, not just a single root cause
- Use 5 Whys or a Fishbone diagram to find contributing factors
- Split into categories: people, process, tools, environment, communication
- Mark which factors are controllable and which are not
- Avoid blame — focus on system and process
5. Assess Impact
Goal: Measure the impact concretely
- State the impact on users: count, duration, severity
- State the impact on the team: time to detect, time to resolve, context switching
- State the impact on business: revenue, reputation, compliance
- Run
/reportshowing impact by dimension
6. Extract Learnings
Goal: Summarize what was learned in a real and actionable way
- Identify what worked well (keep)
- Identify what should stop or be adjusted (stop)
- Identify what should start (start)
- Tie learnings directly to contributing factors
- If learnings are unclear → run
/deep-thinking
7. Define Action Items
Goal: Create action items that reduce the chance of recurrence
- Build the action items as a list with owner, due date, success criteria
- Group action items by level: immediate (≤ 1 week), short-term (≤ 1 month), long-term (≤ 3 months)
- Every action item must link to an identified contributing factor
- If code changes → run
/update-teststo create a regression test - If process changes → write a runbook or checklist
8. Communicate And Follow Up
Goal: Communicate the retro results and track the action items
- Run
/reportsummarizing timeline, root cause, impact, learnings, action items - Record the retro in the project's notes file or wiki
- Track action items against their due dates
- In the next retro, review whether the action items actually worked
Rules
1. Blameless Culture
- Never blame individuals — focus on system, process, context
- Use data and evidence, not feelings
- Build psychological safety for the team
2. Process-Level Root Cause
- Find root causes at the process level, not just the technical one
- Ask "why did the process allow this to happen"
- Identify contributing factors across multiple dimensions
3. Actionable Outcome
- Every finding needs an action item or an explicitly recorded decision
- Don't end at "we know now" — there must be follow-up
- Action items must have an owner and a due date
4. Time Bound
Don't spend too long on discussion
If the issue is complex → split across several retro sessions
Finish with an action plan, not just a discussion
Use /deep-debug
### 3. Triage Incidentif needed
Expected Outcome
- A detailed, fact-accurate incident timeline
- Contributing factors and process-level root cause
- An explainable impact assessment
- Actionable action items with owner and due date
- Learnings that reduce the chance of recurrence
- A retro document that stakeholders can understand