The Anatomy of Technical Triage ยท Part 01

The Confidence Gate

Why I ask one question before I touch a single log line

Most triage advice focuses on speed. Read the logs faster. Recognize patterns faster. Route the ticket faster. Almost none of it asks the question that actually determines whether any of that speed is pointed in the right direction: do you actually understand what you're looking at, or are you filling gaps with assumptions and calling it understanding.

That question is the filter I run every bug through before I do anything else. I call it the Confidence Gate, and it has exactly one job. It stops me from acting on a theory before I've earned the right to trust it.

The instinct everyone has

A critical bug lands, and the pull is immediate. Open the logs. Search for the error string. Match it against something you've seen before. It feels like progress because you're doing something visibly technical within the first sixty seconds.

The problem is that this instinct treats speed of action as a proxy for quality of understanding. It isn't one. A fast wrong theory costs more time than a slower correct one, because a wrong theory doesn't just fail, it actively misdirects everyone downstream who trusts it.

What the Gate actually checks

Before I read a log line, I ask myself whether I actually know what's happening, or whether I'm filling in the gaps with something that feels plausible. If the bug report is missing information, I go find it. If I'm not confident the report matches what's actually happening on the device, I don't trust it yet.

In practice, this means pulling up the physical device and reproducing the issue myself, sometimes two or three times, before I read anything the reporter or an earlier log capture already told me. It sounds like an extra step. It's actually the step that prevents every other step from being wasted.

Why this is slower and faster at the same time

The honest tradeoff is that the Confidence Gate costs time up front. Reproducing an issue takes longer than skimming a log for something that looks like the answer.

What it buys back is much larger. A theory built on direct observation doesn't collapse three steps later when a detail doesn't line up. It doesn't get routed to the wrong team based on a symptom that looked like a cause. It doesn't have to be redone once someone downstream points out what the first pass missed.

Calm is a byproduct, not a personality trait

People sometimes describe composure under pressure as if it's a fixed trait some engineers have and others don't. I think that's backwards. Composure is what happens when you trust a process more than your first instinct. The calm isn't the cause of good triage. It's the result of it.

Where this goes next

The Confidence Gate is the entry point to everything else in this series. Reproduction is where it gets tested rather than just claimed. Hypothesis forming is what it looks like once you've earned enough understanding to know exactly what to check. Root cause thinking, severity and priority, and following up after handoff are all the same discipline, applied to a different question at a different stage of the same bug's life.

None of it works if the first question gets skipped.

โ† Back to all posts NextLogs Confirm, They Don't Explain โ†’