I'm ambivalent about the anonymity question in the case of these rust issues (I think there are lots of both pros and cons and I'm not sure where I think it net

I'm ambivalent about the anonymity question in the case of these rust issues (I think there are lots of both pros and cons and I'm not sure where I think it nets out), but note: Blameless postmortems are not anonymous. They often include a link to whatever change broke whatever broke, with the author's and reviewers' names right there at the top. They usually also include a "X happened at Y time" listing with the names of the parties involved. The point is to infuse a culture with the certainty that the postmortem is laying no blame, despite naming names. It's pretty hard to maintain that culture even for purely technical issues, and I think just gets harder for interpersonal issues. But the transparency is definitely valuable.