Turns raw incident material - alerts, chat, terminal history, tickets - into a blameless postmortem with a sourced timeline, contributing factors, and action items an owner can start on Monday. Refuses to invent a timestamp or a metric, and surfaces contradictions instead of choosing between them.