what triggered the alert and what it means in plain language. **(2) Impact assessment** — who is affected, how severely, and what business impact is expected. **(3) Diagnostic steps** — step-by-step commands, queries, and dashboard links to identify the root cause. **(4) Mitigation options** — immed