CONCORDANCE LABS · INCIDENT INDEX · v0.1

Every major software outage shipped a post-mortem.
The same handful of practices failed every time.

A public, CC BY 4.0 licensed index of major publicly-documented software incidents. Each one mapped to the Concordance engineering protocols that the company's own published root-cause analysis cites as having failed.

Methodology →·JSON API·CC BY 4.0·Run a free scan →

Pattern across 2 incidents

Filtered view

The same 5 engineering practices failed in the majority of these incidents. Click any to see every incident where it failed.

3.5Approval Rigor
1 of 2
3.6Code OwnershipSENTINEL
1 of 2
4.2CI Gating
1 of 2
4.7Dependency Scanning
1 of 2
4.8Build Reproducibility
1 of 2
2 of 2 incidents in this view failed at least one Sentinel-10 protocol — Concordance's set of engineering practices most degraded under AI-accelerated development. Velocity Governance thesis →
FilterCivilizational onlyEnterprise onlyAI-related only20242023202120202014× clear filters
CrowdStrikeJul 2024Civilizational
Falcon sensor channel-file update crashes 8.5M Windows hosts
$10B · 9M affected · 24h downtime

A defective rapid-response content update to the Falcon endpoint sensor was deployed simultaneously to all production hosts, causing kernel-level crashes on ~8.5 million Windows machines worldwide.

4.2 CI Gating5.7 Rollback Capability5.8 Feature Flagging5.4 Release Approval
xz utils (Tukaani Project)Mar 2024Civilizational
CVE-2024-3094 — multi-year social-engineering attack inserts backdoor into xz/liblzma

A threat actor operating under the pseudonym "Jia Tan" gained maintainer access to the xz utils project over a 2-year campaign and inserted a backdoor into liblzma that targeted OpenSSH on systemd-linked Linux distributions. Caught accidentally by a Microsoft engineer noticing 500ms latency in SSH connections.

3.6 Code Ownership3.5 Approval Rigor4.7 Dependency Scanning4.8 Build Reproducibility
Concordance Incident Index v0.1 · CC BY 4.0 · Roadmap: 250 entries at v1.0, scaling to 5,000 with NSF SBIR Phase I.
Errata: hello@concordancelabs.com