Product

Incident Timeline

Incidents with severity and impact, moved through triage, containment, resolution and review in order.

On this page
  1. What it does
  2. The fields
  3. The states
  4. Using it
  5. Data handling
  6. Limits
  7. Availability
  8. Evidence

What it does

Incident Timeline keeps a register of incident records for your account. Running an incident in order and leaving a record of how it went. Each incident has a title and the fields below, and its state moves only along the steps listed. The database refuses any other step and any value outside the field rules, and a record in a final state cannot be changed.

The fields

FieldHoldsEntry
Severityone of a fixed list; one of low, medium, high, criticalrequired
Detected ona daterequired
Summarytext (up to 2,000 characters)required
Impacttext (up to 2,000 characters)optional
Incident leadone line of text (up to 200 characters)optional

The states

A new incident starts as detected.

StateMay move to
detectedtriaged
triagedcontained
containedresolved
resolvedreviewed
reviewedfinal state

Using it

Signed-in accounts open the Incident Timeline, add records, and move them between states. The change is recorded in the account's audit chain; a state change names the revision it was made against and is refused if the record has moved on. The same operations are available as JSON on the same address.

Data handling

Records belong to the account that created them and are visible to that account only. They are stored in the platform's PostgreSQL database. Do not store special-category personal data in a register unless you have a lawful basis; the privacy notice states what the platform collects and keeps.

Limits

  • It is a register for one account; sharing a register between accounts and attaching files are not built.
  • The account cannot delete or edit a record, and a record in a final state is kept as it was. The automated erasure step does not remove register records: an erasure request that covers them is completed by the operator.
  • There are no reminders or recurring records: dates are stored and shown, nothing is sent when one passes.
  • It does not give legal, clinical or regulatory advice; the account holder remains responsible for what the records mean.

Availability

Incident Timeline is running on RJV's own platform. RJV does not sell a licence for it as a separate product today: the commercial terms state what is on sale. It can be part of the result of an engineering engagement, where the written proposal names it, its licence terms and what you would hold at the end. To discuss it, use Work with Us.

Evidence

The field rules, the permitted steps and the refusal of every other step are enforced by the database and exercised by the platform's own tests. The evidence register lists the graded claims.

Where it runs

Supported targetA customer-controlled Linux host on x86-64 with PostgreSQL 18 (linux-x86_64-customer-controlled).
Not yet supportedWindows, macOS, phones and tablets, and Linux on other architectures. Each needs its own installation, update and recovery evidence before it is supported.
Check a deviceRun rjv2 preflight on it. It reads the operating system, architecture, memory, disk, listen address, configuration, database, database role and schema, changes nothing, and exits non-zero if release 2.0.0-alpha.1 cannot run there.
Installed asOne application and a PostgreSQL database. Installing release 2.0.0-alpha.1 (schema 100) installs every system on this site, including Incident Timeline.
DataIt stays in the PostgreSQL database you run. The only outside service the release can use is an outbound mail relay that you configure.
UpdatingA release is a numbered build. The schema is applied by a separate owner step (rjv2 migrate), and the application refuses to serve a schema it was not built for.
Backup and restorerjv2 backup writes a checksummed dump. rjv2 restore restores it into an empty database and checks the checksum, the schema version and the audit chain of every account.
LeavingThe data is in your own database and can be dumped at any time. What you may do with the release is set by the terms on deployment and ownership.
Published
29 October 2026
Revision
2

Last reviewed 29 October 2026.