@windyroad/risk-scorer 0.11.1 → 0.11.2-preview.463
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -81,7 +81,7 @@ Ask the user (one AskUserQuestion call with grouped questions):
|
|
|
81
81
|
4. **Existing controls?** Each control names what it does and where it is implemented (file path or `ADR-NNN`). If none, leave empty.
|
|
82
82
|
5. **Residual impact and likelihood** (after controls). If controls are minimal, residual = inherent — do not fabricate reductions. Per ADR-026, quantitative reduction claims must cite evidence (test, hook gate, pipeline report). If no evidence, state "Residual same as inherent pending control evidence" in the Treatment section and set residual = inherent.
|
|
83
83
|
6. **Treatment choice?** Accept · Mitigate · Transfer · Avoid. Include brief justification.
|
|
84
|
-
7. **Owner?** Persona or role (e.g. `
|
|
84
|
+
7. **Owner?** Persona or role (e.g. `developer`, `plugin-maintainer`, `tech-lead`).
|
|
85
85
|
|
|
86
86
|
If the user has already provided this context in the conversation (e.g. as arguments, or as part of a pipeline-finding hand-off), use what they have given and only ask about what is missing.
|
|
87
87
|
|