My app was down for 6 hours last night.
Here’s a prompt to feed your agent from
@MomenBuilds to analyze what went wrong and fix any problems:
I want you to conduct a full forensic investigation into my application to determine exactly when, how, and why all user accounts and files were deleted. Inspect every API endpoint, Supabase database logs, Auth logs, Storage logs, PostHog events, server logs, and any available audit trails. Identify the exact timestamps of the deletions, which endpoints or SQL queries triggered them, which IP addresses the requests originated from, and any associated user IDs, API keys, service roles, or sessions. Cross-reference logs across all services to reconstruct a complete timeline and determine whether the deletions were caused by an admin action, compromised credentials, a script, an API request, or an automated process. Check for bulk DELETE operations, cascading deletions, database resets, and suspicious activity. Provide concrete evidence for every finding, including timestamps, request IDs, IP addresses, and relevant log entries. Clearly distinguish confirmed findings from assumptions, and explain any gaps caused by missing or expired logs. **This investigation must be strictly read-only. Do not modify, delete, restore, or reset anything.** Preserve all available evidence and give me a detailed incident report identifying the most likely root cause and how to prevent it from happening again.