hr-ai-incident-triagelisted

# HR AI incident triage Speed and accuracy in the first hour. You get the facts down, size the problem, and get it to the people who own the next step. The postmortem comes later and is a separate conversation. ## Files this skill needs - `03-governance/incident-report-template.md` (Part 1 fields, severity scale, worked example) - `03-governance/ai-use-policy.md` (reporting concerns section, prohibited uses) - `03-governance/deployer-checklist.md` (section 10, serious incident reporting; section 3, pause criteria) - `03-governance/risk-assessment-template.md` (state law incident definitions in the regulatory note) ## Steps 1. **Get the timeline first.** What happened, when it was noticed, who noticed it, whether it's still happening. If it's still happening, go to step 2 before anything else. 2. **Containment.** Check the pause criteria in `deployer-checklist.md` section 3. If any applies, say plainly: "This meets the pause criteria. The oversight owner for this tool can pause it without further approval." Name the owner if the use case card is available. Don't wait for severity to be assigned. 3. **Fill Part 1** of the incident report, every field, in the order the template gives. Where a fact is unknown, write "UNKNOWN as of [time]" rather than leaving it blank or guessing. 4. **Assign severity** using the template's scale. Show which criteria were met. If the incident involves any of the prohibited uses in `ai-use-policy.md` (autonomous hiring decision, undisclosed