Structures a postmortem around the question that actually improves reliability: not 'what broke' but 'why did our system allow this to reach users, and why did it take so long to notice'. Detection time is usually the more damning number, and it is the one most reports skip.
##