Transform a rough idea into a comprehensive implementation plan. Two-stage process: improve the prompt via codebase reconnaissance, then generate a detailed phased plan with atomic checkboxes, file paths, and signatures.

Structured incident response workflow following NIST SP 800-61. Guides teams through six phases — Detection, Triage, Containment, Investigation, Remediation, and Post-Mortem — each with checklists, prompts, and evidence-collection guidance.