What we recorded ourselves: an incident opens when a service stops passing our checks or its vendor reports a problem, and closes when it recovers.