Diagnostics

Maintenance Simulator

Tabletop simulation that plays through outages, maintenance windows, and handoffs to stress-test coverage.

Overview

When to use the Maintenance Simulator.

Best for operations leaders rehearsing outage response and escalation ownership.

  • Upcoming maintenance or outage scenario.
  • Named escalation owner and comms partner.
  • Known dependency or rollback risks.

Estimated time: 20–30 minutes

Scholarly metadata

Authorship

Contact: diagnostics@ethotechnics.org

Publication details

  • Published: Dec 3, 2025
  • Last updated: Jan 9, 2026
  • Version: v1.1.0
  • DOI: Pending Zenodo deposit

License: CC BY 4.0

Credit Ethotechnics Institute Diagnostics Lab, include tool name + version, and link to the canonical permalink.

Archive snapshot: Wayback capture

Changelog

  • v1.1.0 · 2026-01-09 — Published method cards, transparency notes, and replicability guidance for each diagnostic.
  • v1.0.0 · 2025-12-03 — Initial diagnostics suite release.

Copy citation (APA/BibTeX)

Cite this page Formats: APA, MLA, Chicago, BibTeX, RIS

Version

v1.1.0

Last updated

Jan 9, 2026

DOI

Pending Zenodo deposit

APA

Ethotechnics Institute Diagnostics Lab. (2026). Maintenance Simulator. Ethotechnics Institute. https://ethotechnics.org/diagnostics/maintenance-simulator

MLA

Ethotechnics Institute Diagnostics Lab. "Maintenance Simulator." Ethotechnics Institute, 2026, https://ethotechnics.org/diagnostics/maintenance-simulator.

Chicago

Ethotechnics Institute Diagnostics Lab. "Maintenance Simulator." Ethotechnics Institute. Jan 9, 2026. https://ethotechnics.org/diagnostics/maintenance-simulator.

BibTeX

@misc{diagnostic_maintenance-simulator,
  title={Maintenance Simulator},
  author={Ethotechnics Institute Diagnostics Lab},
  year={2026},
  howpublished={Ethotechnics Institute},
  url={https://ethotechnics.org/diagnostics/maintenance-simulator},
  version={v1.1.0}
}

RIS

TY  - WEB
TI  - Maintenance Simulator
AU  - Ethotechnics Institute Diagnostics Lab
PY  - 2026
UR  - https://ethotechnics.org/diagnostics/maintenance-simulator
ER  -

Methodology

Method, transparency, and replicability.

Inputs, scoring logic, validation notes, and failure modes used in the tabletop.

Inputs

  • Scenario description and stress level.
  • Escalation owners and comms partners.
  • Known dependencies and rollback paths.

Procedure

  1. Run tabletop branches for outage or maintenance.
  2. Log ownership, escalation, and timing decisions.
  3. Capture gaps and draft mitigation actions.

Outputs

  • Scenario walkthrough with ownership gaps.
  • Communication templates aligned to risk levels.
  • Coverage and escalation summary for follow-up.

Measures

  • Ownership clarity across outage and maintenance branches.
  • Time-to-halt readiness for escalations.
  • Communication cadence readiness by risk level.

Does not measure

  • Actual system uptime or performance metrics.
  • Incident response SLA compliance in production.
  • Staffing coverage outside the simulated scenario.

Assumptions

  • Scenario reflects likely outage or maintenance conditions.
  • Participants represent core escalation roles.
  • Communication templates align with current policy.

Instrument prompts

  • Scenario selection and risk level.
  • Escalation owner confirmation.
  • Rollback and communication template prompts.

Rubric

  • Ownership clarity score (1–5).
  • Escalation readiness score (1–5).
  • Communication readiness score (1–5).

Scoring logic

  • Average readiness score across the three rubric areas.
  • Flag any score ≤2 as a critical mitigation item.
  • Summarize follow-ups by escalation owner.

Validation notes

Piloted with operations and support partners to ensure coverage gaps surfaced in tabletop runs.

Facilitator notes are reconciled post-run; agreement improves with standardized templates.

  • Skipping escalation owners leads to incomplete coverage maps.
  • Outdated communication templates skew readiness scores.
  • Unrealistic scenarios understate actual risk.

Replicability

  • Select a scenario and risk level.
  • Confirm escalation owners and comms partners.
  • Run the tabletop and capture decisions in the log.
  • Export the summary and share with stakeholders.

Example outputs

  • Maintenance run log with ownership notes.
  • Communication template pack for a high-risk window.

Sample output

Preview a simulated run.

Use the sample output to see the summary format and comms templates.

View sample output

Run the tool

Start a maintenance scenario.

Run the tabletop and export the summary for your maintenance packet.

Maintenance simulator

Tabletop the outage, maintenance window, and handoff

Use this simulator to rehearse coverage, communication, and halt decisions before you schedule a live window. Pick a scenario, set the stress level, and close the gaps before you run.

Extra scrutiny on coverage—use when signals are noisy or timelines are tight.

Scenario

Scheduled maintenance window

Planned change with a clear window and limited customer impact when it goes well.

Time to halt expectation

20 minutes

Stress signals to watch

  • Overlapping releases or approvals are unclear.
  • Runbook drift means steps differ across teams.
  • Fallback owners cannot be reached during the window.

Coverage score

70% ready to run

Score drops when required owners, halt lanes, or communication templates are missing. Use the toggles to calibrate readiness before you schedule a simulation.

Gaps to close

  • Prepare templates for internal, customer, and leadership updates tied to severity.
  • Clarify refusal and appeal paths so teams can decline risky windows.
  • Stress level set to elevated. Reconfirm the 20 minutes time-to-halt expectation before running.

Coverage toggles

Readiness thresholds

Bands and recommended interventions

Default thresholds that balance readiness with momentum.

Balanced

Threshold bands

  • Run-ready

    85–100

    Coverage is strong. Maintain cadence and watch for drift.

  • Tighten coverage

    70–84

    Risk is rising. Close critical gaps before scheduling.

  • Act now

    0–69

    Coverage is too thin. Pause until baseline protections exist.

Recommended interventions

  • Assign missing owners and confirm the appeal path.
  • Rehearse rollback steps with time-to-halt checkpoints.
  • Delay the window until communication templates are ready.

Runbook

Play through the stages

Each stage lists the owner, actions, and blockers to close before you schedule the run. Severity shifts when stress increases or required coverage is missing.

Maintenance window

Pre-flight and announcements

Publish the window, freeze risky work, and stage rollback artifacts.

Maintenance lead

Actions

  • Publish the window and point to the appeal path.
  • Stage rollback assets and backup checkpoints.

Blockers

  • Communication templates are missing for this phase.
  • Appeal path is unclear if the window needs to be paused.

Maintenance window

Live window execution

Track live signals, pause risky steps, and keep comms on cadence.

On-call engineer

Actions

  • Watch saturation and rollback timers.
  • Hold back on high-risk changes when signals spike.

Blockers

  • Communication templates are missing for this phase.
  • Appeal path is unclear if the window needs to be paused.

Handoff

Handoff and verification

Confirm rollback readiness before closing and hand off logs to follow-up owners.

Handoff owner

Actions

  • Verify rollback path after the last step.
  • Schedule the care retrospective and log follow-ups.

Blockers

  • Communication templates are missing for this phase.

Communications

Keep communications on cadence

Pair each status update with the owner roster and how to appeal. Reuse these templates to keep teams aligned during the run.

AudienceTriggerMessageCopy
AudienceInternal teams
Trigger72h before window
MessageShare scope, freeze list, appeal path, and owner roster.
AudienceCustomers or partners
Trigger24h before window
MessageSurface expected impact, timings, and how to reach live support.
AudienceLeadership
TriggerAt start and mid-window
MessagePost status with risk color, deviations, and halt timer.