An incident is contained and service restored. What should the review produce?

1. Broader permanent administrator rights for all users.
2. A declaration that containment guarantees the issue can never recur.
3. Deleted evidence to protect the team's success metrics.
4. A documented timeline, contributing causes, verified remediation, and assigned improvements.