# Incidents → evals

1. Restore service (revert / slot swap). Flip `GATEKEEP_MERGE_ENABLED=false` if needed.
2. File **gatekeep-incident** issue (template in `templates/gatekeep-incident.yml`).
3. Add `incidents/seed/<id>.json` + `evals/cases/<id>.json` with `expect_min_tier`.
4. Tighten `defaults/policy.json` (or consumer override) / security checklist; never delete a failing case to go green.
5. `bash scripts/eval-floor.sh evals/cases defaults/policy.json`