Error post-mortem protocol

run a five-why analysis documenting what happened, expected, deviation point, enabling condition, and structural prevention