incident-response: declared

An incident exists once its severity and impact are on record.

Declare early and cheap — severity can be corrected later, and the correction (like everything) is part of the record.