After incident mitigation, which activity best improves operational reliability?

1. Assume restored service means the underlying cause can never recur.
2. Record the timeline, contributing causes, and actionable follow-ups with owners and verification.
3. Delete the evidence once the dashboard turns green.
4. Add alerts for every raw metric without reviewing usefulness.