Incidents are probabilistic events generated from the current debt and risk state. They always have:
- A cause (which debt category triggered it).
- Response options (disclose, mitigate, ignore, cover up, civic response).
- Visible consequences for each option — no hidden surprises.
- A "why did this happen?" trace panel.
Events are milestone or threshold events — an OSS viral moment, a misalignment scare, a power shortage. They prompt meaningful decisions, not just OK/Cancel dismissals.
Choosing to cover up a CVE reduces karma and increases future CVE risk. Choosing civic response costs time but builds brand and alignment. Every option has trade-offs.