idea: Break-Glass Procedures Manual

[allaway]

Document what to do in various "oh shit" scenarios: data breach discovered, primary funder announces they're pulling funding, key team member quits suddenly with no transition, Synapse has a multi-day outage during a major conference, someone uploads HIPAA-protected data, ransomware attack. For each: immediate actions (hour 0-24), short-term response (week 1), and recovery (months 1-3). Test one scenario via tabletop exercise.

(brainstorming help from Claude)