Escalation path
If a checklist step fails twice, the operator escalates to the team lead the same day. The team lead decides between a rollback and a scheduled fix, and records the decision in the runbook. Unresolved after 48 hours: escalate to the vendor's support with the incident notes attached.