Change attribution

process

Establishing which deployment, configuration change, infrastructure-as-code apply, feature flag or cloud-provider event is implicated in an incident, with the diff and its approval record. Change attribution is a statement of what changed, held distinct from who approved it. It is the single most useful step in most investigations because most outages follow a change.