Outages are PvE, but breaches are PvP

## Spark

Single sharp line from Art Kondratiev's "Why Security Incidents Feel Different from Outages," highlighted 2026-05-16: "Outages are PvE, but breaches are PvP." The framing reframes incident review, runbook design, and on-call composition in one phrase.

## Why it could be interesting

A short signal-boost post — one paragraph of own commentary plus the quote — rather than a long essay. The claim: PvE (environment is the adversary; you outscale or outprep it) vs PvP (an adversary is reading your defenses and adapting in real time) explains why security incidents resist runbooks, why hero-trap dynamics differ between the two modes, and why the on-call rotation that handles a database degradation isn't the rotation that handles a credential-theft event.

## Open questions

- [ ] Has this framing already landed somewhere else worth citing alongside?
- [ ] Best venue — blog post (with permanence and citation) or amplification via Bluesky/syndication?
- [ ] Does the framing apply to AI-system incidents (prompt injection = PvP; model drift = PvE)? Worth one sentence or its own follow-up?

## Source material

- https://read.readwise.io/read/01krrs61wc1z9ta79pz6tphz5n — Art Kondratiev, "Why Security Incidents Feel Different from Outages" (the highlight)