You know the feeling. Pager goes off at 2 a.m., production locks up, and someone scrambles for root access. Everyone promises to “just read the log,” not touch the data. Then, five minutes later? A slip of the keyboard, an unredacted record, and an incident report. This is where