Handover craft · 4 min read
The 2am test
There is one simple question that separates a runbook people trust from one they ignore: would it help someone half-asleep, a little stressed, and new to the system actually fix the problem? Meet the 2am test.
Most quality bars for documentation are fuzzy. "Is it complete?" "Is it accurate?" These sound reasonable and help almost nobody, because a runbook can be complete, accurate, and still useless when it matters. There is a sharper test, and it takes one sentence.
Would this runbook help someone half-asleep, a little stressed, and new to the system actually fix the problem?
That is the 2am test. If the answer is yes, you have written something genuinely good. If the answer is "well, they'd figure it out," you have written a reference document wearing a runbook's clothes. The beauty of the test is that it gives you a specific reader to write for — and writing for the hardest reader makes the runbook work for everyone.
Why 2am is the right reader
Picture the real situation. An alert has fired. The person responding is competent but tired, running on a little adrenaline, and may have never touched this particular system before. They do not want to learn the service right now; they want it to be okay again so they can go back to bed.
That reader has no patience for backstory, no tolerance for "just restart it," and no energy to interpret an approximate command. They need to scan, find the relevant situation, and follow clear steps. Every runbook you write for that person will also serve the rested expert doing a routine deploy — but it does not work the other way around. Write for the calm afternoon and you will strand the tense night.
What passes the test
A runbook that passes is short, ordered, and literal. Concretely, it:
- Names the exact symptom so a responder can match "this alert" to "this section" in seconds.
- Gives exact commands, copy-and-run, with real flags — not "run the migration" but `./bin/migrate --service payments --confirm`.
- Leads with rollback. The tired reader usually wants to make things safe first and understand later. Put "how to undo" near the top and make it the clearest thing on the page.
- Explains what "fixed" looks like — the metric that should recover, the log line that should stop — so they know when they can stand down.
- Points to help. Who to escalate to, and how, if the steps do not work.
The runbook writing guide goes deep on each of these. The test is just the lens you hold them up to.
What fails the test
The failures are predictable once you are looking for them:
- Jargon with no definition. A term everyone on the team knows is still a wall to a newcomer at 2am.
- The word "just." "Just failover to the replica" hides the exact step. If it were that simple, there would be no alert.
- A secrets hunt. If a step needs a token and the runbook does not say where it lives, you have sent a groggy person on a scavenger hunt. Name the location in your secrets store — never paste the secret, but always point to it. A runbook is a runbook, not a secrets vault, precisely so it stays safe to read on a shared screen at 2am.
- Missing "how do I know it worked?" Steps without a success signal leave the responder guessing whether they are done.
Run the real thing
The test is even better as a rehearsal than a thought experiment. In calm daylight, hand a runbook to a teammate who does not know the system and ask them to follow it for a routine task while you stay quiet. You will watch them stumble at exactly the lines a tired responder would — and each stumble is a fix. This is the same "have someone else use it" habit at the heart of the handover checklist, and it is the fastest way to turn a plausible runbook into a proven one.
You do not need a real incident to find the gaps. You just need one honest read-through by someone unfamiliar. Do that, keep the reader at 2am in mind while you write, and your runbooks will earn the only rating that counts: someone reaches for them under stress and is quietly relieved they exist. If you want a structure that passes the test out of the box, the free Handover Quick-Start hands you the skeleton, and the complete system adds the incident playbook for the tense nights.
The skeleton that helps you write runbooks that pass the 2am test the first time.
The 2am Test: A Calm Quality Bar for Runbooks: FAQ
Isn't writing for 2am overkill for routine docs?
No — it is the efficient choice. A runbook that works for the hardest reader automatically works for the easy ones, so you only write it once. Writing for the calm case and patching it later for incidents is the slower, more error-prone path.
How do I test a runbook without an actual incident?
Rehearse it. Ask a teammate unfamiliar with the system to run a routine task from the runbook alone while you watch silently. Their hesitations reveal the same gaps a real 2am responder would hit, minus the stress. Twenty minutes of this beats hours of solo editing.
What is the single most important thing to get right?
Rollback, written clearly and placed near the top. Under stress, people want to make the system safe first and understand it afterward. A calm, exact "how to undo" is the line a tired responder will thank you for most.
Keep reading
- How to Write a Runbook People Actually Read
- The Engineering Handover Checklist (A Calm, Complete System)
Disclaimer: The Handover Folder is a documentation tool, not a secrets manager. Never paste credentials, tokens, or private keys into a runbook — reference them from your real secrets store.