Learn
incident
16 registry resources · 9 tutorials, 5 runbooks · roadmap: Data Quality, Reliability, Warehousing, Cloud, Python + SQL, Observability, Data Processing, Agentic Data Engineering, Streaming
What this topic covers
DE//AGENT currently lists 16 resources under incident: 9 tutorials, 5 runbooks, 1 skill. Everything below is derived from the live registry — counts, capabilities, verification state and security posture come from the curated records, never from marketing copy.
Also present: 1 agent.
What you can learn here
Documented learning objectives across these resources:
- Write a blameless timeline — via Incident Postmortem Writer
- Separate trigger from contributing factors — via Incident Postmortem Writer
- Convert findings into dated, owned action items — via Incident Postmortem Writer
- Read a failing expectation precisely — column, rule, value — via Respond to a failing quality expectation
- Quantify a failure — how many rows and which ones — via Respond to a failing quality expectation
- Decide block vs quarantine vs pass-with-warning on evidence — via Respond to a failing quality expectation
- Run the reliability checklist over your own pipeline end to end — via Capstone — the reliability checklist for a pipeline you can page on
- Drill the incident path — match the alert, walk the runbook, capture the timeline — via Capstone — the reliability checklist for a pipeline you can page on
22 more objectives live on the individual resource pages.
Where this fits in the learning roadmap
These resources map to stages: Data Quality (2), Reliability (5), Warehousing (1), Cloud (1), Python + SQL (1), Observability (1), Data Processing (2), Agentic Data Engineering (1), Streaming (2). Follow the four-phase roadmap to place this topic inside a progression instead of learning it in isolation.
Compare the registry's options
Every entry, its shape and its trust state — sorted by the registry's composite score. This table is the honest version of a marketing comparison: no sponsored placements, no unverifiable claims.
| Resource | Type | Difficulty | Verification | Score |
|---|---|---|---|---|
| Incident Postmortem Writer | Skill | beginner | community flags | 38.9 |
| Spark job is slow | Runbook | advanced | community flags | 36.75 |
| Spark job suddenly costs 4x | Runbook | advanced | community flags | 36.75 |
| Respond to a failing quality expectation | Tutorial | beginner | community | 34.15 |
| Capstone — the reliability checklist for a pipeline you can page on | Tutorial | intermediate | community | 34.15 |
| Incident — the dashboard query that went slow | Tutorial | intermediate | community | 34.15 |
| Incident — the job that quadrupled in cost overnight | Tutorial | intermediate | community | 34.15 |
| Incident — the numbers doubled and no alarm fired | Tutorial | intermediate | community | 34.15 |
| Respond when a data contract breaks | Tutorial | intermediate | community | 34.15 |
| The 3am batch incident path | Tutorial | advanced | community | 34.15 |
| When an agent does the wrong thing — contain, audit, postmortem | Tutorial | advanced | community | 34.15 |
| Incident drill: a broken upstream caught by freshness and lineage | Tutorial | intermediate | community flags | 31.15 |
4 more in the full list below.
How scores are computed: source quality score.
Where to start
Highest composite score first:
- Incident Postmortem Writer score 38.9 — beginner
- Spark job is slow score 36.75 — advanced
- Spark job suddenly costs 4x score 36.75 — advanced
Scores rank provenance, completeness and trust — read how verification works before adopting anything.
Good fits
Start here if you're new: Incident Postmortem Writer, Respond to a failing quality expectation, Pipeline failed.
Reach for these with production experience: Spark job is slow, Spark job suddenly costs 4x, The 3am batch incident path.
Cautions and limitations
Security-flagged entries: Incident Postmortem Writer (1 flag), Spark job is slow (1 flag), Spark job suddenly costs 4x (1 flag), Incident drill: a broken upstream caught by freshness and lineage (2 flags), Kafka consumer lagging (3 flags), Incident Assistant (3 flags), CDC stopped (3 flags), Pipeline failed (4 flags). Flags mean the record declares capabilities like credential use or write access — read the security posture on each page before connecting.
Production use cases
- Incident Postmortem Writer — Structures incident notes into a blameless postmortem: timeline, impact, detection gap, contributing factors, and action items with owners and dates. details
- Spark job is slow — A batch Spark job's runtime has jumped — find whether it is skew, partition count, spill or over-scan. details
- Spark job suddenly costs 4x — One job's compute cost quadrupled without an obvious functional change — attribute it and reverse the regression. details
- Respond to a failing quality expectation — A quality expectation failed in production and bad data may be reaching consumers. Follow the data-quality-failure runbook: read the failure precisely, quantify it, then make the o… details
Install and inspect
Real install commands from the registry — read the source before running any of them:
npx de-agent-platform add incident-postmortem-writerIncident Postmortem Writer — review first
Further study
Adjacent topics: tutorial (9 shared), runbook (3 shared), postmortem (3 shared), cost (2 shared), performance (2 shared), lineage (2 shared).
Study path: the roadmap places this topic in a progression · the scoring model explains the numbers · the trust rule catalog shows every security check these entries passed through.
Full resource list
| Resource | Type | Score |
|---|---|---|
| Incident Postmortem Writer | Skill | 38.9 |
| Spark job is slow | Runbook | 36.75 |
| Spark job suddenly costs 4x | Runbook | 36.75 |
| Respond to a failing quality expectation | Tutorial | 34.15 |
| Capstone — the reliability checklist for a pipeline you can page on | Tutorial | 34.15 |
| Incident — the dashboard query that went slow | Tutorial | 34.15 |
| Incident — the job that quadrupled in cost overnight | Tutorial | 34.15 |
| Incident — the numbers doubled and no alarm fired | Tutorial | 34.15 |
| Respond when a data contract breaks | Tutorial | 34.15 |
| The 3am batch incident path | Tutorial | 34.15 |
| When an agent does the wrong thing — contain, audit, postmortem | Tutorial | 34.15 |
| Incident drill: a broken upstream caught by freshness and lineage | Tutorial | 31.15 |