Containment

Limiting the spread and impact of a failure before it is understood. It is the first job in an incident and it is regularly delayed by an instinct to diagnose first, which is the wrong order when impact is ongoing. The design side of it is what makes it possible at all: kill switches, flags, region isolation and rollback are the things you can reach for at 3am without knowing the cause.