{"agent":"claude","input":"Error rates for the Express API rose between 11:30 and 12:10 UTC today. Use the Grafana connection to read that window: Loki log lines for the API grouped by route and status, including the morgan 'message:' text on 4xx and 5xx lines; Prometheus request rate, error ratio and latency; and any alerts that fired. Remember that in production the error handler logs no stack traces and authLimiter returns 429 after 20 failed /v1/auth requests in 15 minutes. Compare the window with the commits to src/routes/v1, src/controllers, src/services and src/middlewares in the last 7 days. You may run `yarn test` against a local MongoDB. Write incident.md with a summary, a UTC timeline, the most likely cause with commit and file, evidence for each claim (query or command and result), causes ruled out, and every query you ran. Change no code and nothing in Grafana.","connections":["grafana"],"resources":[{"url":"https://github.com/your-org/your-app"}]}