Flash Crowd Playbook¶

Pre-authored response playbook (an artifact) — instantiates Intermittent Burst Absorption

A pre-authored script for sudden surges of traffic, attention, or demand that names the likely triggers and pre-grants the authority to switch into burst mode, so response starts before improvisation turns to chaos.

A Flash Crowd Playbook is a document written before the burst that turns a chaotic scramble into a rehearsed opening move. It does two things no live improvisation can: it characterizes the surge in advance — the plausible triggers, the shape and speed to expect, the tells that one is starting — and it settles the authority questions ahead of time, naming who may flip which switches (put up a waiting room, throttle signups, call in the pool, change the public message) without waiting for a meeting. What makes it this mechanism rather than a queue, a scaler, or a team is that its whole value is anticipatory coordination: the thinking and the permissions are banked while everyone is calm, so when the spike lands the first minutes are spent executing rather than debating.

Example¶

A city museum announces a blockbuster exhibition, and tickets go on sale at 10:00 on a Monday. Everyone expects a rush, but "everyone expects a rush" is not a plan. So the operations lead writes a flash-crowd playbook for the on-sale. It profiles the surge: expect 40–50× normal traffic in the first ten minutes, concentrated on the checkout page, tapering over the hour; watch the queue-page depth and payment-gateway error rate as the tells. And it pre-authorizes the moves: the duty engineer may enable the virtual waiting room the moment checkout latency crosses the line, the comms lead may post the pre-written "high demand" banner without sign-off, and support may switch to the canned on-sale macros. When 10:00 arrives and traffic explodes, no one asks "are we allowed to turn on the waiting room?" — the playbook already answered it, and the response is underway in the first minute instead of the fifteenth.

How it works¶

The playbook's substance is what it decides in advance, not steps executed live:

Profile the burst before it happens — enumerate the triggers (a launch, a viral post, a broadcast mention), the expected shape and magnitude, and the observable signs that one has begun.
Pre-decide the response moves and bind each to a trigger, so the action is looked up, not invented.
Pre-grant the authority to make each move, with the guardrails on it, so no one is blocked waiting for permission that could have been settled weeks earlier.
Keep it rehearsed and current — a playbook written once and never drilled is a document; one exercised against realistic scenarios is a capability.

Tuning parameters¶

Scenario coverage — how many distinct surge types the playbook anticipates. Broad coverage prepares more cases but dilutes rehearsal; narrow coverage is sharp but brittle to the surprise it didn't imagine.
Trigger specificity — how precisely the "this is a flash crowd" signs are defined. Tight triggers fire cleanly but miss novel onsets; loose ones catch more but cry wolf.
Pre-authorization breadth — how much the playbook lets responders do without escalation. More breadth means faster action and more trust placed in the guardrails; less means safer but slower.
Rehearsal cadence — how often the playbook is drilled. Frequent drilling keeps it live and keeps people current; rare drilling lets it drift out of date.

When it helps, and when it misleads¶

Its strength is speed at the moment it matters most: because the analysis and the permissions were done in calm, the response to a genuine surge begins in the first minutes rather than after a panicked huddle — and it distributes decision-making so no single approver becomes the bottleneck.

The failure mode is fighting the last war. A playbook encodes the surges its authors could imagine, and a flash crowd is precisely the event that arrives in an unexpected shape — a channel nobody listed, a magnitude nobody sized.^[1] Followed too literally, it can march a team confidently through the wrong response while the real burst goes unaddressed. The related misuse is the unrehearsed playbook: a binder that looks like preparedness but has never been drilled, so the pre-granted authorities are unfamiliar and the steps are stale. The discipline is to treat the playbook as a starting move that must be checked against the actual burst, to drill it, and to update it after every real event through the after-action loop.

How it implements the components¶

burst_pattern_profile — the playbook's front half is the profile: the triggers, expected shape, magnitude, and tells that mark the surge as an intermittent spike rather than steady growth.
burst_mode_authority — its back half pre-grants, within guardrails, the permission to switch into burst mode faster than ordinary governance would allow.

It does not itself add capacity, hold, order, or shed load — those are executed by mechanisms such as Elastic Capacity Scaling, Surge Queue, and Triage Protocol; the playbook says when and by whose authority to reach for them.

Instantiates: Intermittent Burst Absorption — it supplies the anticipation and the pre-cleared authority that let every other mechanism fire in time.
Consumes: the after-action loop — each real burst refines the profile and the authorities; see Post-Burst After-Action Review.
Sibling mechanisms: Incident Surge Team · Post-Burst After-Action Review · Elastic Capacity Scaling · Surge Queue · Triage Protocol · Rate Limit with Burst Allowance · Overflow Channel · Burst Buffer · Peak Response Reserve · Backup Staffing Pool · On-Call Response Rotation

References¶

[1] The flash crowd (popularized online as the "Slashdot effect" or "hug of death") names the sudden, often unpredictable rush of visitors that follows a mention on a high-traffic channel. Its defining trait — that the trigger and magnitude are hard to foresee — is exactly why a playbook must be treated as a rehearsed starting move rather than a guaranteed script. ↩