Simulation Surface

War Room Replay

Replay real incidents as guided war-room simulations with full timeline reconstruction, evidence graphs, investigation branches, and debrief analysis.

War Room Replay Flow

Incident Timeline
Operator Decisions
Escalation
Mitigation
Validation
Outcome Replay

Timeline Reconstruction

Reconstruct the full incident timeline from ingested evidence — log events, alerts, ticket updates, deployment timestamps, and operator actions — in a unified, scrollable chronological view.

Evidence Graph

Visualize causal relationships between system events. Evidence nodes are linked by temporal and logical connections, showing how a config change triggered a cascade through dependent services.

Investigation Branches

Replay the exact investigation branches operators chose during the simulation. See which evidence was inspected, which hypotheses were formed, and where wrong assumptions were made.

Escalation Flow

Review escalation decisions: who was notified, when severity was raised, how stakeholder communication was handled, and whether escalation timing was appropriate for the incident severity.

Alternate Outcomes

Compare the operator's actual path against optimal resolution paths. See what would have happened with earlier detection, different mitigation strategies, or faster escalation.

Replay Controls

Step forward and backward through the simulation timeline. Pause at any decision point, inspect available evidence at that moment, and understand the operator's context at each step.

Debrief Timeline

Generate a structured debrief timeline that highlights key decision moments, missed signals, communication gaps, and recovery quality for team review sessions.

Replay Interface

The War Room Replay surface provides a multi-panel interface that mirrors a real war room environment. Operators see the same evidence, pressure, and constraints they would face during a live P1 incident.

war-room-session://inc-2026-0510
TIMELINE
02:11 — Alert fired
02:14 — Triage begun
02:18 — Evidence inspected
02:25 — Hypothesis formed
02:31 — Mitigation applied
EVIDENCE
DB connection pool logs
Deployment manifest diff
Misleading network alert
Hidden: config change log
ACTORS
IC: "What's the blast radius?"
SRE: "Checking DB metrics..."
VP: "Customer is escalating."
DBA: "Pool exhausted at 02:09."