Issue and first report: [concern, URL, time and time zone]

Impact and urgency: [affected people/services; credible risk; classification]

Incident lead and backup: [roles and approved contact route]

Confirmed facts: [fact, evidence owner, checked time]

Unknowns: [question, investigator, next check]

Operational action: [what is happening, owner, confirmed status]

Scheduled content review: [accounts, affected posts, authorized action, verified status]

Public update: [what happened, what people should do, where updates appear]

Review and release: [fact checker, decision maker, approved version and time]

Next update: [time, time zone and destination; even if investigation continues]

Follow-up: [corrections, resolution criteria, customer support and retrospective]