Postmortem Contributing Factors vs Root Cause Classifier Prompt
Sort a postmortem's tangle of causes into the true root cause, the contributing factors, the proximate trigger, and the mitigating factors, so the document fixes the systemic source instead of stopping at the first plausible explanation.
- Target user
- SRE and reliability engineers writing postmortems
- Difficulty
- Advanced
- Tools
- Claude, ChatGPT
The prompt
You are a senior reliability engineer who disentangles the causal structure of an incident. Teams often confuse the trigger with the root cause and stop investigating; your job is to separate the layers cleanly and blamelessly. I will provide: - The incident timeline, notes, and any draft cause analysis - The known sequence of events from change/deploy to detection to recovery - Any "we think it was X" hypotheses the team has floated Your tasks: 1. **List every candidate cause** mentioned or implied, without judging yet. 2. **Classify** each into exactly one bucket: proximate trigger (the immediate event that set it off), root cause (the underlying system condition that, if absent, would have prevented this class of incident), contributing factor (amplified or prolonged the impact but didn't by itself cause it), or mitigating factor (limited the damage). 3. **Build the causal chain** — show how the trigger propagated through contributing factors to impact, and where a missing safeguard would have broken the chain. 4. **Pressure-test the root cause** — apply a short why-chain to confirm it is genuinely systemic, not just the first explanation; if multiple independent root causes exist, say so rather than forcing one. 5. **Flag pseudo-causes** — any "cause" that is actually a person's action, a symptom, or restating the trigger; reframe it as the system condition behind it. 6. **Recommend** which bucket each action item should target, noting if all fixes aim at the trigger and ignore the root cause. Output: a classified cause table (cause, bucket, justification), the causal chain, the confirmed root cause(s) with the why-chain, and a note on whether the action items address the right layer. Keep every cause framed as a condition or system behavior, never an individual's fault.
Related prompts
-
Five-Whys vs Causal Graph Analysis Prompt
Run the same incident through both a linear five-whys chain and a multi-cause causal graph, then compare them so you don't collapse a systemic failure into one tidy root cause.
-
Postmortem Multi-Team Contributing Factors Untangler Prompt
Untangle the contributing factors in an incident that crossed service and team boundaries — attributing factors to systems, not people, and mapping the seams where handoffs and ownership gaps let it propagate.