SysAdmin
Turn filesystem, inode, and directory-size evidence into a read-only-first diagnosis.
DevOps
Compare client resolver, authoritative answers, delegation, and transport evidence.
DevOps
Correlate exit code, OOM state, health checks, logs, and restart policy.
DevOps
Combine pod status, previous logs, events, probes, and resource limits.
SysAdmin
Build a timestamped evidence chain without merging unrelated errors.
Documentation
Convert mixed observations into an auditable UTC timeline with gaps and confidence.
Documentation
Create entry criteria, evidence steps, decisions, stop conditions, verification, and rollback.