blast-radius

The call came in at 02:00. Production encrypted. By 02:10, recovery had been declared. By 02:15, the backup console was unreachable. By 02:20, the identity provider was down — same AD domain as production. By 02:30, the repository had been located. By 02:35, nobody could authenticate to it. By 02:40, the team understood what had…