Module playbook 

Incident response playbook definitions and execution engine.

Structs

Playbook

An incident response playbook.

PlaybookStep

A single step in an incident response playbook.

StepExecutionResult

Result of executing a single playbook step.

Enums

StepStatus

Status of a playbook step.

Functions

builtin_playbooks

Built-in playbook definitions for common incident types.

can_auto_approve

Check whether a step can be auto-approved given config constraints.

evaluate_step

Evaluate a playbook step. Returns the result with approval gating. Steps that require approval and cannot be auto-approved will return StepStatus::PendingApproval without executing.

load_playbooks

Load all playbook definitions from a directory of JSON files.

severity_level

Severity ordering for comparison: low < medium < high < critical.