---
title: "Operations playbook · Agent Wranglers"
url: https://agentwranglers.se/playbook/operations
updated: 2026-10-20
licence: "All rights reserved"
---

# Operations and observability playbook

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

An operations playbook for any service in production, from one small server to many. It covers how to know the service works, how to hear when it breaks, and how to recover. A chapter on containers covers the images many services now run in.

The [engineering playbook](https://agentwranglers.se/playbook/engineering/running-in-production) has the short version for every project. This playbook goes deeper for teams that run a service other people depend on.

Start with [Service levels](https://agentwranglers.se/playbook/operations/service-levels). They decide what to measure, when to alert and how much risk a release may take.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers operations playbook: https://agentwranglers.se/playbook/operations`.

## Chapters

1. [Service levels](https://agentwranglers.se/playbook/operations/service-levels): Decide what good service means for users, measure it, and set a target. The target then sets alerts, release pace and how much risk you may take. (2 required, 2 recommended, 1 optional)
2. [Logs](https://agentwranglers.se/playbook/operations/logs): Write one structured line per event, tie it to the request that caused it, and keep personal data out. Then logs answer questions instead of hiding them. (4 required, 1 recommended)
3. [Metrics and traces](https://agentwranglers.se/playbook/operations/metrics-and-traces): Count requests, errors and time for every service, follow each request across services, and show it on one dashboard per service that anyone can read. (2 required, 4 recommended)
4. [Alerts and on-call](https://agentwranglers.se/playbook/operations/alerts-and-on-call): Wake a person only for problems users feel and a person can fix. Give every alert a runbook, a clear owner and a path to escalate. (6 required, 1 recommended)
5. [Incidents](https://agentwranglers.se/playbook/operations/incidents): When users are hurt, declare an incident, give people clear roles, keep users informed, and learn from it without blame. (4 required, 3 recommended)
6. [Running the service](https://agentwranglers.se/playbook/operations/running-the-service): Run each service as its own locked-down user, with limits, a clean shutdown and honest health checks, so one fault stays contained. (3 required, 3 recommended)
7. [Capacity and cost](https://agentwranglers.se/playbook/operations/capacity-and-cost): Know how much load the service can carry, keep headroom, and warn before disks, memory or budgets run out instead of after. (3 required, 2 recommended)
8. [Disaster recovery](https://agentwranglers.se/playbook/operations/disaster-recovery): Plan for losing a server, a database or a whole provider. Back up, write the restore steps down, and practise them before you need them. (6 required, 1 recommended)
9. [Containers](https://agentwranglers.se/playbook/operations/containers): Build small, pinned images that hold only what runs. Run them without root, read-only, with a health check, and scan every image before it ships. (8 required, 4 recommended)

See all 60 rules on one page in the [checklist](https://agentwranglers.se/playbook/operations/checklist).