An SRE organization is designing a Claude-based incident-triage assistant. Which design is most appropriate?

Answer: D — Read-only access to logs, metrics and deploy history; ranked hypotheses that cite evidence; remediation via change control

Triage needs evidence and remediation needs accountability: (d) separates read from act and requires citations. (a) concentrates risk in an agent that can be wrong or manipulated. (b) rewards confident guesses. (c) removes the evidence the assistant needs to be useful.