/home/techb158/cosmic.abdallabala.com/data
Edit: /home/techb158/cosmic.abdallabala.com/data/database.json (154253B)
{
"meta": {
"name": "COSMIC AI-Risk Dashboard JSON Database",
"version": "1.8.0",
"storage": "json-file",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-04T02:10:00.000Z",
"lastUpdated": "2026-07-03T00:00:00.000Z"
},
"sourceBasis": {
"derivedFromSource": [
"COSMIC AI-Risk Management presentation",
"AI Governance Triangle: organizational, technical, human dimensions",
"ISO 15939 and VIM-aligned measurement intent",
"Software prototype and REST API objective",
"Phase 3 software and API implementation timeline"
],
"implementationExtension": [
"Dashboard widgets",
"Risk scoring formula",
"Deployment gate rules",
"Multi-project-management integration adapter layer",
"Trello, Jira, Asana, and Microsoft Planner seed connectors",
"Sample risks and metrics"
]
},
"thresholds": {
"overallRiskMax": 50,
"criticalOpenMax": 0,
"mitigationCompletionMin": 60,
"dataReadinessMin": 70,
"selectedModelF1Min": 0.8,
"selectedModelStabilityMin": 75,
"gateWarningScore": 35,
"gateBlockedScore": 50
},
"project_reviews": {
"cosmic-ai-risk-001": {
"dataReadiness": {
"score": 68,
"status": "Warning",
"evidence": "Data lineage and consent records incomplete for two sources."
},
"ethicalReview": {
"status": "Pending",
"evidence": "Bias and accountability review still open."
},
"legalReview": {
"status": "Pending",
"evidence": "Privacy impact assessment not approved."
},
"deploymentApproval": {
"status": "Not approved",
"evidence": "Risk owner approval required before production release."
}
}
},
"tables": {
"roles": [
{
"id": "ROLE-PM",
"name": "Project Manager",
"permissions_json": "[\"project:read\",\"risk:read\",\"risk:write\",\"mitigation:write\",\"gate:read\",\"gate:evaluate\",\"report:export\",\"integration:read\",\"integration:sync\",\"audit:read\"]",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-31T00:16:28.560Z",
"description": "Built-in COSMIC AI-Risk role."
},
{
"id": "ROLE-RISK",
"name": "Risk Owner",
"permissions_json": "[\"risk:read\", \"risk:write\", \"mitigation:write\"]",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "ROLE-REVIEWER",
"name": "Governance Reviewer",
"permissions_json": "[\"risk:read\", \"gate:evaluate\", \"gate:approve\"]",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "ROLE-ADMIN",
"name": "System Admin",
"permissions_json": "[\"*\"]",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-31T00:16:28.538Z",
"description": "Built-in COSMIC AI-Risk role."
},
{
"id": "ROLE-RISK-OWNER",
"name": "Risk Owner",
"permissions_json": "[\"project:read\",\"risk:read\",\"risk:write\",\"mitigation:write\",\"gate:read\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
},
{
"id": "ROLE-AI-ENGINEER",
"name": "AI Engineer / Data Scientist",
"permissions_json": "[\"project:read\",\"risk:read\",\"mitigation:write\",\"metrics:write\",\"gate:read\",\"report:export\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
},
{
"id": "ROLE-GOV-REVIEWER",
"name": "Governance Reviewer",
"permissions_json": "[\"project:read\",\"risk:read\",\"gate:read\",\"gate:evaluate\",\"gate:review\",\"report:export\",\"audit:read\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
},
{
"id": "ROLE-LEGAL-ETHICS",
"name": "Legal / Ethics Reviewer",
"permissions_json": "[\"project:read\",\"risk:read\",\"mitigation:write\",\"gate:read\",\"gate:review\",\"report:export\",\"audit:read\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
},
{
"id": "ROLE-INTEGRATION-ADMIN",
"name": "Integration Admin",
"permissions_json": "[\"project:read\",\"integration:read\",\"integration:write\",\"integration:sync\",\"oauth:manage\",\"report:export\",\"audit:read\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
},
{
"id": "ROLE-VIEWER",
"name": "Read-only Viewer",
"permissions_json": "[\"project:read\",\"risk:read\",\"gate:read\",\"integration:read\",\"report:export\"]",
"description": "Built-in COSMIC AI-Risk role.",
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-31T00:16:28.560Z"
}
],
"users": [
{
"id": "USER-SYSTEM",
"display_name": "System",
"email": "system@cosmic.local",
"role_id": "ROLE-ADMIN",
"active": true,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "USER-PM",
"display_name": "AI Risk Governance Team",
"email": "pm@cosmic.local",
"role_id": "ROLE-PM",
"active": true,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "USER-RISK",
"display_name": "Default Risk Owner",
"email": "risk-owner@cosmic.local",
"role_id": "ROLE-RISK",
"active": true,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "USER-REVIEW",
"display_name": "Governance Reviewer",
"email": "reviewer@cosmic.local",
"role_id": "ROLE-REVIEWER",
"active": true,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "USER-ENGINEER",
"display_name": "AI Engineer",
"email": "ai.engineer@cosmic.local",
"role_id": "ROLE-AI-ENGINEER",
"active": true,
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z"
},
{
"id": "USER-GOV",
"display_name": "Governance Reviewer",
"email": "governance@cosmic.local",
"role_id": "ROLE-GOV-REVIEWER",
"active": true,
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z"
},
{
"id": "USER-LEGAL",
"display_name": "Legal Ethics Reviewer",
"email": "legal.ethics@cosmic.local",
"role_id": "ROLE-LEGAL-ETHICS",
"active": true,
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z"
},
{
"id": "USER-INTEGRATION",
"display_name": "Integration Admin",
"email": "integration.admin@cosmic.local",
"role_id": "ROLE-INTEGRATION-ADMIN",
"active": true,
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z"
},
{
"id": "USER-VIEWER",
"display_name": "Read-only Viewer",
"email": "viewer@cosmic.local",
"role_id": "ROLE-VIEWER",
"active": true,
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z"
}
],
"projects": [
{
"id": "cosmic-ai-risk-001",
"name": "COSMIC AI-Risk Management",
"subtitle": "Integrated Measurement Framework for AI Project Risks",
"project_type": "AI-Enabler",
"current_lifecycle_phase": "Testing and performance evaluation",
"risk_appetite": 50,
"assessment_date": "2026-07-03",
"status": "Active",
"owner_display_name": "AI Risk Governance Team",
"description": "Prototype dashboard for measuring AI project risk using organizational, technical, and human dimensions.",
"thresholds": {
"overallRiskMax": 50,
"criticalOpenMax": 0,
"mitigationCompletionMin": 60,
"dataReadinessMin": 70,
"selectedModelF1Min": 0.8,
"selectedModelStabilityMin": 75,
"gateWarningScore": 35,
"gateBlockedScore": 50
},
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"lifecycle_phases": [
{
"id": "LC-01",
"project_id": "cosmic-ai-risk-001",
"name": "Needs identification",
"status": "Complete",
"readiness_score": 84,
"sequence": 1,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "LC-02",
"project_id": "cosmic-ai-risk-001",
"name": "Data collection and preparation",
"status": "Warning",
"readiness_score": 68,
"sequence": 2,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "LC-03",
"project_id": "cosmic-ai-risk-001",
"name": "Design",
"status": "Complete",
"readiness_score": 76,
"sequence": 3,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "LC-04",
"project_id": "cosmic-ai-risk-001",
"name": "Model development and training",
"status": "Warning",
"readiness_score": 71,
"sequence": 4,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "LC-05",
"project_id": "cosmic-ai-risk-001",
"name": "Testing and performance evaluation",
"status": "Warning",
"readiness_score": 64,
"sequence": 5,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "LC-06",
"project_id": "cosmic-ai-risk-001",
"name": "Deployment, support, and monitoring",
"status": "Blocked",
"readiness_score": 52,
"sequence": 6,
"updated_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z"
}
],
"risks": [
{
"id": "R-001",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Prompt injection can override customer-support chatbot safeguards",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 4,
"impact": 5,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-08",
"evidence_summary": "Adversarial prompt test suite partially complete.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-002",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Hallucinated legal advice from AI assistant",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 3,
"impact": 5,
"detectability": 4,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-10",
"evidence_summary": "Legal disclaimer and escalation workflow not approved.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-003",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Personal data leakage in AI-generated summaries",
"description": "",
"dimension": "Technical",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 4,
"impact": 5,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-08",
"evidence_summary": "PII masking checks passing for structured fields only.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-004",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Bias in candidate-ranking model",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 4,
"impact": 5,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-12",
"evidence_summary": "Disparate impact metric exceeds threshold for one group.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-005",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Model Owner",
"title": "Inaccurate financial risk classification",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Model development and training",
"probability": 3,
"impact": 5,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-18",
"evidence_summary": "Recall is below target in high-risk segment.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-006",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Clinical Safety Reviewer",
"title": "Unsafe medical recommendation from AI assistant",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 2,
"impact": 5,
"detectability": 4,
"status": "Open",
"approval_status": "Rejected",
"due_date": "2026-07-06",
"evidence_summary": "Unsafe advice scenario failed review.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-007",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Vendor LLM outage affecting production workflows",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-20",
"evidence_summary": "Fallback model contract still under review.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-008",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Model drift after deployment",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 4,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-22",
"evidence_summary": "Drift dashboard exists but alert thresholds are not approved.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-009",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Data Steward",
"title": "Training data lacks consent record",
"description": "",
"dimension": "Organizational",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 3,
"impact": 5,
"detectability": 3,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-09",
"evidence_summary": "Consent status missing for two supplier data feeds.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-010",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "UX Lead",
"title": "Poor explainability for reviewer decisions",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Design",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-13",
"evidence_summary": "Reason codes displayed for only three decision classes.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-011",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Low F1 score under project threshold",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 3,
"impact": 4,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-11",
"evidence_summary": "Selected model meets F1 threshold but stability warning remains.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-012",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Data Scientist",
"title": "Test data leakage from training split",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Model development and training",
"probability": 2,
"impact": 5,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Approved",
"due_date": "2026-07-14",
"evidence_summary": "Leakage scan passed after split correction.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-013",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Product Owner",
"title": "Unclear business objective for AI use case",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Needs identification",
"probability": 2,
"impact": 4,
"detectability": 2,
"status": "Closed",
"approval_status": "Accepted",
"due_date": "2026-06-25",
"evidence_summary": "Business objective and acceptance criteria approved.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-014",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "PMO Lead",
"title": "Missing risk owner for deployment approval",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 2,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-05",
"evidence_summary": "Delegated owner named, final approval pending.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-015",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Data Governance Lead",
"title": "Unapproved data source in model pipeline",
"description": "",
"dimension": "Organizational",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-15",
"evidence_summary": "Supplier data source missing governance approval.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-016",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Cost overrun from model inference volume",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 3,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-19",
"evidence_summary": "Monthly inference budget forecast exceeds baseline by 18 percent.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-017",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Inadequate monitoring after deployment",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 4,
"impact": 4,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-18",
"evidence_summary": "Monitoring coverage excludes bias and latency alerts.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-018",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Change Manager",
"title": "Poor user adoption of AI recommendations",
"description": "",
"dimension": "Human",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 3,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-21",
"evidence_summary": "User training plan drafted but not delivered.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-019",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Human-in-the-loop review bypassed under workload pressure",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 5,
"detectability": 4,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-17",
"evidence_summary": "No enforcement mechanism for mandatory review cases.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-020",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Incident Manager",
"title": "Incomplete incident response playbook for AI failures",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-16",
"evidence_summary": "Runbook lacks AI-specific rollback decision tree.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-021",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Security vulnerability in prompt logging",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Design",
"probability": 3,
"impact": 4,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-12",
"evidence_summary": "Sensitive prompt fields encrypted, retention policy pending.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-022",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Release Manager",
"title": "Missing rollback procedure for model release",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 5,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-14",
"evidence_summary": "Rollback documented but not tested.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-023",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Vendor model version changes without notice",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 4,
"detectability": 4,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-22",
"evidence_summary": "Vendor notice clause missing from service agreement.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-024",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Incomplete documentation for experiments",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Model development and training",
"probability": 3,
"impact": 3,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Approved",
"due_date": "2026-07-09",
"evidence_summary": "Experiment parameters captured for latest three runs.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-025",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "DevOps Lead",
"title": "MLOps pipeline failure delays release validation",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Model development and training",
"probability": 2,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-16",
"evidence_summary": "Pipeline retry logic added, full test pending.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-026",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "IAM Lead",
"title": "Weak access control for model administration",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Design",
"probability": 3,
"impact": 5,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-15",
"evidence_summary": "Role-based permissions configured, audit review pending.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-027",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Ethical review not completed before release",
"description": "",
"dimension": "Human",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 3,
"impact": 5,
"detectability": 2,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-07",
"evidence_summary": "Ethical review meeting scheduled but decision not recorded.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-028",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Legal review incomplete for privacy obligations",
"description": "",
"dimension": "Organizational",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 3,
"impact": 5,
"detectability": 3,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-09",
"evidence_summary": "Privacy impact assessment is incomplete.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-029",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Data Engineer",
"title": "Data quality degradation in supplier feed",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 4,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-19",
"evidence_summary": "Missing value rate increased above tolerance in one feed.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-030",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Project Manager",
"title": "Stakeholder misalignment on deployment criteria",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Needs identification",
"probability": 2,
"impact": 4,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Accepted",
"due_date": "2026-07-05",
"evidence_summary": "Gate criteria agreed except legal approval state.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-031",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "QA Lead",
"title": "Model not validated on edge cases",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-13",
"evidence_summary": "Synthetic edge-case tests cover only critical class A.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-032",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Non-reproducible training run",
"description": "",
"dimension": "Technical",
"domain": "Technical risks",
"lifecycle_phase": "Model development and training",
"probability": 3,
"impact": 4,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-12",
"evidence_summary": "Random seeds captured, dependency lock incomplete.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-033",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Supplier compliance status unknown",
"description": "",
"dimension": "Organizational",
"domain": "Legal and ethical risks",
"lifecycle_phase": "Data collection and preparation",
"probability": 3,
"impact": 4,
"detectability": 4,
"status": "Open",
"approval_status": "Pending",
"due_date": "2026-07-21",
"evidence_summary": "Supplier security and privacy questionnaire not returned.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-034",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Funding constraint blocks final validation testing",
"description": "",
"dimension": "Organizational",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Testing and performance evaluation",
"probability": 2,
"impact": 4,
"detectability": 2,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-18",
"evidence_summary": "Additional validation budget requested.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "R-035",
"project_id": "cosmic-ai-risk-001",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Alert fatigue from excessive monitoring notifications",
"description": "",
"dimension": "Human",
"domain": "Strategic and organizational risks",
"lifecycle_phase": "Deployment, support, and monitoring",
"probability": 3,
"impact": 3,
"detectability": 3,
"status": "In mitigation",
"approval_status": "Pending",
"due_date": "2026-07-23",
"evidence_summary": "Monitoring thresholds produce too many low-priority alerts.",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"risk_scores": [
{
"risk_id": "R-001",
"raw_score": 80,
"normalized_score": 64,
"residual_score": 48,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-CGR1SY",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-002",
"raw_score": 60,
"normalized_score": 48,
"residual_score": 38,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-28BRZ9",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-003",
"raw_score": 60,
"normalized_score": 48,
"residual_score": 32,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-8FYJZN",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-004",
"raw_score": 80,
"normalized_score": 64,
"residual_score": 48,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-2N390S",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-005",
"raw_score": 45,
"normalized_score": 36,
"residual_score": 21,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-XWYTHW",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-006",
"raw_score": 40,
"normalized_score": 32,
"residual_score": 25,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-6H788J",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-007",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 17,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-989LT2",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-008",
"raw_score": 48,
"normalized_score": 38,
"residual_score": 23,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-5XNDR2",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-009",
"raw_score": 45,
"normalized_score": 36,
"residual_score": 25,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-ILY1NZ",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-010",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 17,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-IYGP7I",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-011",
"raw_score": 24,
"normalized_score": 19,
"residual_score": 10,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-P1M9NQ",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-012",
"raw_score": 40,
"normalized_score": 32,
"residual_score": 13,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-X4EAQG",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-013",
"raw_score": 16,
"normalized_score": 13,
"residual_score": 1,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-116A7O",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-014",
"raw_score": 24,
"normalized_score": 19,
"residual_score": 8,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-O61TFL",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-015",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 18,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-OI25QF",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-016",
"raw_score": 18,
"normalized_score": 14,
"residual_score": 9,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-CG1LZQ",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-017",
"raw_score": 64,
"normalized_score": 51,
"residual_score": 34,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-8M9E2R",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-018",
"raw_score": 18,
"normalized_score": 14,
"residual_score": 10,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-T8SEFA",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-019",
"raw_score": 60,
"normalized_score": 48,
"residual_score": 33,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-N8A1OI",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-020",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 17,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-X9A37C",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-021",
"raw_score": 48,
"normalized_score": 38,
"residual_score": 21,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-EAVRGB",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-022",
"raw_score": 45,
"normalized_score": 36,
"residual_score": 22,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-HEIWLJ",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-023",
"raw_score": 48,
"normalized_score": 38,
"residual_score": 25,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-7806W4",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-024",
"raw_score": 18,
"normalized_score": 14,
"residual_score": 7,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-Z87T4L",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-025",
"raw_score": 24,
"normalized_score": 19,
"residual_score": 10,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-L16NGX",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-026",
"raw_score": 45,
"normalized_score": 36,
"residual_score": 18,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-9A6IBE",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-027",
"raw_score": 30,
"normalized_score": 24,
"residual_score": 19,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-OJKUNB",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-028",
"raw_score": 45,
"normalized_score": 36,
"residual_score": 24,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-9WO4HL",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-029",
"raw_score": 48,
"normalized_score": 38,
"residual_score": 24,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-TKP65A",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-030",
"raw_score": 16,
"normalized_score": 13,
"residual_score": 5,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-LZ9100",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-031",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 19,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-WYTE4Q",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-032",
"raw_score": 36,
"normalized_score": 29,
"residual_score": 19,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-U9H41J",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-033",
"raw_score": 48,
"normalized_score": 38,
"residual_score": 26,
"risk_level": "Medium",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-2G8NM9",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-034",
"raw_score": 16,
"normalized_score": 13,
"residual_score": 9,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-EM7Q3X",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
{
"risk_id": "R-035",
"raw_score": 27,
"normalized_score": 22,
"residual_score": 14,
"risk_level": "Low",
"calculated_at": "2026-07-04T17:06:51.396Z",
"id": "RSCORE-MR6M72BO-84HZ7S",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
}
],
"mitigation_actions": [
{
"id": "MIT-001-01",
"risk_id": "R-001",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Add system prompt hardening",
"description": "",
"status": "In progress",
"progress_percent": 45,
"effectiveness_percent": 55,
"due_date": "2026-07-08",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-001-02",
"risk_id": "R-001",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Run red-team prompt injection tests",
"description": "",
"status": "In progress",
"progress_percent": 45,
"effectiveness_percent": 55,
"due_date": "2026-07-08",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-001-03",
"risk_id": "R-001",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Add output policy filter",
"description": "",
"status": "In progress",
"progress_percent": 45,
"effectiveness_percent": 55,
"due_date": "2026-07-08",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-002-01",
"risk_id": "R-002",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Restrict legal advice responses",
"description": "",
"status": "In progress",
"progress_percent": 35,
"effectiveness_percent": 60,
"due_date": "2026-07-10",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-002-02",
"risk_id": "R-002",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Add legal escalation path",
"description": "",
"status": "In progress",
"progress_percent": 35,
"effectiveness_percent": 60,
"due_date": "2026-07-10",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-002-03",
"risk_id": "R-002",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Review high-risk prompts",
"description": "",
"status": "In progress",
"progress_percent": 35,
"effectiveness_percent": 60,
"due_date": "2026-07-10",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-003-01",
"risk_id": "R-003",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Add PII redaction before summarization",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 65,
"due_date": "2026-07-08",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-003-02",
"risk_id": "R-003",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Audit prompt and output logs",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 65,
"due_date": "2026-07-08",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-003-03",
"risk_id": "R-003",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Complete privacy review",
"description": "",
"status": "Done",
"progress_percent": 100,
"effectiveness_percent": 80,
"due_date": "2026-07-08",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-10T15:23:01.895Z"
},
{
"id": "MIT-004-01",
"risk_id": "R-004",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Run fairness evaluation",
"description": "",
"status": "In progress",
"progress_percent": 42,
"effectiveness_percent": 60,
"due_date": "2026-07-12",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-004-02",
"risk_id": "R-004",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Tune decision thresholds",
"description": "",
"status": "In progress",
"progress_percent": 42,
"effectiveness_percent": 60,
"due_date": "2026-07-12",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-004-03",
"risk_id": "R-004",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Add reviewer override process",
"description": "",
"status": "In progress",
"progress_percent": 42,
"effectiveness_percent": 60,
"due_date": "2026-07-12",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-005-01",
"risk_id": "R-005",
"owner_user_id": null,
"owner_display_name": "Model Owner",
"title": "Improve class weighting",
"description": "",
"status": "In progress",
"progress_percent": 62,
"effectiveness_percent": 65,
"due_date": "2026-07-18",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-005-02",
"risk_id": "R-005",
"owner_user_id": null,
"owner_display_name": "Model Owner",
"title": "Review false negatives",
"description": "",
"status": "In progress",
"progress_percent": 62,
"effectiveness_percent": 65,
"due_date": "2026-07-18",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-005-03",
"risk_id": "R-005",
"owner_user_id": null,
"owner_display_name": "Model Owner",
"title": "Update model threshold",
"description": "",
"status": "In progress",
"progress_percent": 62,
"effectiveness_percent": 65,
"due_date": "2026-07-18",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-006-01",
"risk_id": "R-006",
"owner_user_id": null,
"owner_display_name": "Clinical Safety Reviewer",
"title": "Block medical diagnosis content",
"description": "",
"status": "In progress",
"progress_percent": 30,
"effectiveness_percent": 70,
"due_date": "2026-07-06",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-006-02",
"risk_id": "R-006",
"owner_user_id": null,
"owner_display_name": "Clinical Safety Reviewer",
"title": "Add emergency disclaimer",
"description": "",
"status": "In progress",
"progress_percent": 30,
"effectiveness_percent": 70,
"due_date": "2026-07-06",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-006-03",
"risk_id": "R-006",
"owner_user_id": null,
"owner_display_name": "Clinical Safety Reviewer",
"title": "Route users to human professional",
"description": "",
"status": "In progress",
"progress_percent": 30,
"effectiveness_percent": 70,
"due_date": "2026-07-06",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-007-01",
"risk_id": "R-007",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Define fallback provider",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 70,
"due_date": "2026-07-20",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-007-02",
"risk_id": "R-007",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Add circuit breaker",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 70,
"due_date": "2026-07-20",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-007-03",
"risk_id": "R-007",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Test degraded mode",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 70,
"due_date": "2026-07-20",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-008-01",
"risk_id": "R-008",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Monitor input distribution drift",
"description": "",
"status": "In progress",
"progress_percent": 55,
"effectiveness_percent": 70,
"due_date": "2026-07-22",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-008-02",
"risk_id": "R-008",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Set retraining triggers",
"description": "",
"status": "In progress",
"progress_percent": 55,
"effectiveness_percent": 70,
"due_date": "2026-07-22",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-008-03",
"risk_id": "R-008",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Define rollback threshold",
"description": "",
"status": "In progress",
"progress_percent": 55,
"effectiveness_percent": 70,
"due_date": "2026-07-22",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-009-01",
"risk_id": "R-009",
"owner_user_id": null,
"owner_display_name": "Data Steward",
"title": "Trace consent records",
"description": "",
"status": "In progress",
"progress_percent": 40,
"effectiveness_percent": 75,
"due_date": "2026-07-09",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-009-02",
"risk_id": "R-009",
"owner_user_id": null,
"owner_display_name": "Data Steward",
"title": "Remove unverified data",
"description": "",
"status": "In progress",
"progress_percent": 40,
"effectiveness_percent": 75,
"due_date": "2026-07-09",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-009-03",
"risk_id": "R-009",
"owner_user_id": null,
"owner_display_name": "Data Steward",
"title": "Update data source register",
"description": "",
"status": "In progress",
"progress_percent": 40,
"effectiveness_percent": 75,
"due_date": "2026-07-09",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-010-01",
"risk_id": "R-010",
"owner_user_id": null,
"owner_display_name": "UX Lead",
"title": "Add model explanation card",
"description": "",
"status": "In progress",
"progress_percent": 63,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-010-02",
"risk_id": "R-010",
"owner_user_id": null,
"owner_display_name": "UX Lead",
"title": "Define reason code taxonomy",
"description": "",
"status": "In progress",
"progress_percent": 63,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-010-03",
"risk_id": "R-010",
"owner_user_id": null,
"owner_display_name": "UX Lead",
"title": "Validate reviewer comprehension",
"description": "",
"status": "In progress",
"progress_percent": 63,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-011-01",
"risk_id": "R-011",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Compare candidate models",
"description": "",
"status": "In progress",
"progress_percent": 66,
"effectiveness_percent": 70,
"due_date": "2026-07-11",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-011-02",
"risk_id": "R-011",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Tune hyperparameters",
"description": "",
"status": "In progress",
"progress_percent": 66,
"effectiveness_percent": 70,
"due_date": "2026-07-11",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-011-03",
"risk_id": "R-011",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Validate on holdout set",
"description": "",
"status": "In progress",
"progress_percent": 66,
"effectiveness_percent": 70,
"due_date": "2026-07-11",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-012-01",
"risk_id": "R-012",
"owner_user_id": null,
"owner_display_name": "Data Scientist",
"title": "Rebuild train-test split",
"description": "",
"status": "In progress",
"progress_percent": 75,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-012-02",
"risk_id": "R-012",
"owner_user_id": null,
"owner_display_name": "Data Scientist",
"title": "Audit feature generation",
"description": "",
"status": "In progress",
"progress_percent": 75,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-012-03",
"risk_id": "R-012",
"owner_user_id": null,
"owner_display_name": "Data Scientist",
"title": "Lock validation set",
"description": "",
"status": "In progress",
"progress_percent": 75,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-013-01",
"risk_id": "R-013",
"owner_user_id": null,
"owner_display_name": "Product Owner",
"title": "Define measurable objective",
"description": "",
"status": "In progress",
"progress_percent": 90,
"effectiveness_percent": 75,
"due_date": "2026-06-25",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-013-02",
"risk_id": "R-013",
"owner_user_id": null,
"owner_display_name": "Product Owner",
"title": "Confirm stakeholder acceptance criteria",
"description": "",
"status": "In progress",
"progress_percent": 90,
"effectiveness_percent": 75,
"due_date": "2026-06-25",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-014-01",
"risk_id": "R-014",
"owner_user_id": null,
"owner_display_name": "PMO Lead",
"title": "Assign gate owner",
"description": "",
"status": "In progress",
"progress_percent": 70,
"effectiveness_percent": 80,
"due_date": "2026-07-05",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-014-02",
"risk_id": "R-014",
"owner_user_id": null,
"owner_display_name": "PMO Lead",
"title": "Document approval workflow",
"description": "",
"status": "In progress",
"progress_percent": 70,
"effectiveness_percent": 80,
"due_date": "2026-07-05",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-015-01",
"risk_id": "R-015",
"owner_user_id": null,
"owner_display_name": "Data Governance Lead",
"title": "Review data source approval",
"description": "",
"status": "In progress",
"progress_percent": 52,
"effectiveness_percent": 70,
"due_date": "2026-07-15",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-015-02",
"risk_id": "R-015",
"owner_user_id": null,
"owner_display_name": "Data Governance Lead",
"title": "Document data lineage",
"description": "",
"status": "In progress",
"progress_percent": 52,
"effectiveness_percent": 70,
"due_date": "2026-07-15",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-015-03",
"risk_id": "R-015",
"owner_user_id": null,
"owner_display_name": "Data Governance Lead",
"title": "Add approval gate to pipeline",
"description": "",
"status": "In progress",
"progress_percent": 52,
"effectiveness_percent": 70,
"due_date": "2026-07-15",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-016-01",
"risk_id": "R-016",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Add usage caps",
"description": "",
"status": "In progress",
"progress_percent": 65,
"effectiveness_percent": 60,
"due_date": "2026-07-19",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-016-02",
"risk_id": "R-016",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Introduce caching",
"description": "",
"status": "In progress",
"progress_percent": 65,
"effectiveness_percent": 60,
"due_date": "2026-07-19",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-016-03",
"risk_id": "R-016",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Track cost per request",
"description": "",
"status": "In progress",
"progress_percent": 65,
"effectiveness_percent": 60,
"due_date": "2026-07-19",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-017-01",
"risk_id": "R-017",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Define monitoring KPIs",
"description": "",
"status": "In progress",
"progress_percent": 48,
"effectiveness_percent": 70,
"due_date": "2026-07-18",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-017-02",
"risk_id": "R-017",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Add model drift alert",
"description": "",
"status": "In progress",
"progress_percent": 48,
"effectiveness_percent": 70,
"due_date": "2026-07-18",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-017-03",
"risk_id": "R-017",
"owner_user_id": null,
"owner_display_name": "MLOps Lead",
"title": "Add incident response workflow",
"description": "",
"status": "In progress",
"progress_percent": 48,
"effectiveness_percent": 70,
"due_date": "2026-07-18",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-018-01",
"risk_id": "R-018",
"owner_user_id": null,
"owner_display_name": "Change Manager",
"title": "Run user training",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 55,
"due_date": "2026-07-21",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-018-02",
"risk_id": "R-018",
"owner_user_id": null,
"owner_display_name": "Change Manager",
"title": "Collect feedback",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 55,
"due_date": "2026-07-21",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-018-03",
"risk_id": "R-018",
"owner_user_id": null,
"owner_display_name": "Change Manager",
"title": "Improve explanation UX",
"description": "",
"status": "In progress",
"progress_percent": 58,
"effectiveness_percent": 55,
"due_date": "2026-07-21",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-019-01",
"risk_id": "R-019",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Make review mandatory for high-risk cases",
"description": "",
"status": "In progress",
"progress_percent": 44,
"effectiveness_percent": 70,
"due_date": "2026-07-17",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-019-02",
"risk_id": "R-019",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Log reviewer decision",
"description": "",
"status": "In progress",
"progress_percent": 44,
"effectiveness_percent": 70,
"due_date": "2026-07-17",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-019-03",
"risk_id": "R-019",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Audit bypass events",
"description": "",
"status": "In progress",
"progress_percent": 44,
"effectiveness_percent": 70,
"due_date": "2026-07-17",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-020-01",
"risk_id": "R-020",
"owner_user_id": null,
"owner_display_name": "Incident Manager",
"title": "Define incident severity levels",
"description": "",
"status": "In progress",
"progress_percent": 57,
"effectiveness_percent": 75,
"due_date": "2026-07-16",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-020-02",
"risk_id": "R-020",
"owner_user_id": null,
"owner_display_name": "Incident Manager",
"title": "Create rollback playbook",
"description": "",
"status": "In progress",
"progress_percent": 57,
"effectiveness_percent": 75,
"due_date": "2026-07-16",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-020-03",
"risk_id": "R-020",
"owner_user_id": null,
"owner_display_name": "Incident Manager",
"title": "Assign escalation contacts",
"description": "",
"status": "In progress",
"progress_percent": 57,
"effectiveness_percent": 75,
"due_date": "2026-07-16",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-021-01",
"risk_id": "R-021",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Encrypt prompt logs",
"description": "",
"status": "In progress",
"progress_percent": 60,
"effectiveness_percent": 75,
"due_date": "2026-07-12",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-021-02",
"risk_id": "R-021",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Mask sensitive fields",
"description": "",
"status": "In progress",
"progress_percent": 60,
"effectiveness_percent": 75,
"due_date": "2026-07-12",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-021-03",
"risk_id": "R-021",
"owner_user_id": null,
"owner_display_name": "Security Lead",
"title": "Set retention limits",
"description": "",
"status": "In progress",
"progress_percent": 60,
"effectiveness_percent": 75,
"due_date": "2026-07-12",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-022-01",
"risk_id": "R-022",
"owner_user_id": null,
"owner_display_name": "Release Manager",
"title": "Define rollback trigger",
"description": "",
"status": "In progress",
"progress_percent": 49,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-022-02",
"risk_id": "R-022",
"owner_user_id": null,
"owner_display_name": "Release Manager",
"title": "Test rollback drill",
"description": "",
"status": "In progress",
"progress_percent": 49,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-022-03",
"risk_id": "R-022",
"owner_user_id": null,
"owner_display_name": "Release Manager",
"title": "Version model artifacts",
"description": "",
"status": "In progress",
"progress_percent": 49,
"effectiveness_percent": 80,
"due_date": "2026-07-14",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-023-01",
"risk_id": "R-023",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Require version pinning",
"description": "",
"status": "In progress",
"progress_percent": 54,
"effectiveness_percent": 65,
"due_date": "2026-07-22",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-023-02",
"risk_id": "R-023",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Monitor model release notes",
"description": "",
"status": "In progress",
"progress_percent": 54,
"effectiveness_percent": 65,
"due_date": "2026-07-22",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-023-03",
"risk_id": "R-023",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Add supplier notification clause",
"description": "",
"status": "In progress",
"progress_percent": 54,
"effectiveness_percent": 65,
"due_date": "2026-07-22",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-024-01",
"risk_id": "R-024",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Track datasets and parameters",
"description": "",
"status": "In progress",
"progress_percent": 72,
"effectiveness_percent": 65,
"due_date": "2026-07-09",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-024-02",
"risk_id": "R-024",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Store model artifacts",
"description": "",
"status": "In progress",
"progress_percent": 72,
"effectiveness_percent": 65,
"due_date": "2026-07-09",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-024-03",
"risk_id": "R-024",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Record evaluation results",
"description": "",
"status": "In progress",
"progress_percent": 72,
"effectiveness_percent": 65,
"due_date": "2026-07-09",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-025-01",
"risk_id": "R-025",
"owner_user_id": null,
"owner_display_name": "DevOps Lead",
"title": "Stabilize CI/CD pipeline",
"description": "",
"status": "In progress",
"progress_percent": 68,
"effectiveness_percent": 70,
"due_date": "2026-07-16",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-025-02",
"risk_id": "R-025",
"owner_user_id": null,
"owner_display_name": "DevOps Lead",
"title": "Add test artifacts",
"description": "",
"status": "In progress",
"progress_percent": 68,
"effectiveness_percent": 70,
"due_date": "2026-07-16",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-025-03",
"risk_id": "R-025",
"owner_user_id": null,
"owner_display_name": "DevOps Lead",
"title": "Automate metric validation",
"description": "",
"status": "In progress",
"progress_percent": 68,
"effectiveness_percent": 70,
"due_date": "2026-07-16",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-026-01",
"risk_id": "R-026",
"owner_user_id": null,
"owner_display_name": "IAM Lead",
"title": "Define admin roles",
"description": "",
"status": "In progress",
"progress_percent": 64,
"effectiveness_percent": 80,
"due_date": "2026-07-15",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-026-02",
"risk_id": "R-026",
"owner_user_id": null,
"owner_display_name": "IAM Lead",
"title": "Enable MFA",
"description": "",
"status": "In progress",
"progress_percent": 64,
"effectiveness_percent": 80,
"due_date": "2026-07-15",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-026-03",
"risk_id": "R-026",
"owner_user_id": null,
"owner_display_name": "IAM Lead",
"title": "Audit privileged actions",
"description": "",
"status": "In progress",
"progress_percent": 64,
"effectiveness_percent": 80,
"due_date": "2026-07-15",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-027-01",
"risk_id": "R-027",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Complete ethical review",
"description": "",
"status": "In progress",
"progress_percent": 25,
"effectiveness_percent": 90,
"due_date": "2026-07-07",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-027-02",
"risk_id": "R-027",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Document accountability controls",
"description": "",
"status": "In progress",
"progress_percent": 25,
"effectiveness_percent": 90,
"due_date": "2026-07-07",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-027-03",
"risk_id": "R-027",
"owner_user_id": null,
"owner_display_name": "Responsible AI Lead",
"title": "Record reviewer decision",
"description": "",
"status": "In progress",
"progress_percent": 25,
"effectiveness_percent": 90,
"due_date": "2026-07-07",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-028-01",
"risk_id": "R-028",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Complete privacy impact assessment",
"description": "",
"status": "In progress",
"progress_percent": 38,
"effectiveness_percent": 90,
"due_date": "2026-07-09",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-028-02",
"risk_id": "R-028",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Review data processing basis",
"description": "",
"status": "In progress",
"progress_percent": 38,
"effectiveness_percent": 90,
"due_date": "2026-07-09",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-028-03",
"risk_id": "R-028",
"owner_user_id": null,
"owner_display_name": "Legal Reviewer",
"title": "Approve retention policy",
"description": "",
"status": "In progress",
"progress_percent": 38,
"effectiveness_percent": 90,
"due_date": "2026-07-09",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-029-01",
"risk_id": "R-029",
"owner_user_id": null,
"owner_display_name": "Data Engineer",
"title": "Add supplier data checks",
"description": "",
"status": "In progress",
"progress_percent": 51,
"effectiveness_percent": 70,
"due_date": "2026-07-19",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-029-02",
"risk_id": "R-029",
"owner_user_id": null,
"owner_display_name": "Data Engineer",
"title": "Monitor missing values",
"description": "",
"status": "In progress",
"progress_percent": 51,
"effectiveness_percent": 70,
"due_date": "2026-07-19",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-029-03",
"risk_id": "R-029",
"owner_user_id": null,
"owner_display_name": "Data Engineer",
"title": "Create feed rejection rule",
"description": "",
"status": "In progress",
"progress_percent": 51,
"effectiveness_percent": 70,
"due_date": "2026-07-19",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-030-01",
"risk_id": "R-030",
"owner_user_id": null,
"owner_display_name": "Project Manager",
"title": "Run gate workshop",
"description": "",
"status": "In progress",
"progress_percent": 80,
"effectiveness_percent": 75,
"due_date": "2026-07-05",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-030-02",
"risk_id": "R-030",
"owner_user_id": null,
"owner_display_name": "Project Manager",
"title": "Document acceptance thresholds",
"description": "",
"status": "In progress",
"progress_percent": 80,
"effectiveness_percent": 75,
"due_date": "2026-07-05",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-030-03",
"risk_id": "R-030",
"owner_user_id": null,
"owner_display_name": "Project Manager",
"title": "Confirm executive sponsor decision",
"description": "",
"status": "In progress",
"progress_percent": 80,
"effectiveness_percent": 75,
"due_date": "2026-07-05",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-031-01",
"risk_id": "R-031",
"owner_user_id": null,
"owner_display_name": "QA Lead",
"title": "Define edge case taxonomy",
"description": "",
"status": "In progress",
"progress_percent": 53,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-031-02",
"risk_id": "R-031",
"owner_user_id": null,
"owner_display_name": "QA Lead",
"title": "Generate edge-case test set",
"description": "",
"status": "In progress",
"progress_percent": 53,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-031-03",
"risk_id": "R-031",
"owner_user_id": null,
"owner_display_name": "QA Lead",
"title": "Review failures with domain expert",
"description": "",
"status": "In progress",
"progress_percent": 53,
"effectiveness_percent": 65,
"due_date": "2026-07-13",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-032-01",
"risk_id": "R-032",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Lock dependencies",
"description": "",
"status": "In progress",
"progress_percent": 47,
"effectiveness_percent": 70,
"due_date": "2026-07-12",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-032-02",
"risk_id": "R-032",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Record random seeds",
"description": "",
"status": "In progress",
"progress_percent": 47,
"effectiveness_percent": 70,
"due_date": "2026-07-12",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-032-03",
"risk_id": "R-032",
"owner_user_id": null,
"owner_display_name": "ML Engineer",
"title": "Store training environment metadata",
"description": "",
"status": "In progress",
"progress_percent": 47,
"effectiveness_percent": 70,
"due_date": "2026-07-12",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-033-01",
"risk_id": "R-033",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Request supplier assessment",
"description": "",
"status": "In progress",
"progress_percent": 41,
"effectiveness_percent": 80,
"due_date": "2026-07-21",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-033-02",
"risk_id": "R-033",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Review data processing agreement",
"description": "",
"status": "In progress",
"progress_percent": 41,
"effectiveness_percent": 80,
"due_date": "2026-07-21",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-033-03",
"risk_id": "R-033",
"owner_user_id": null,
"owner_display_name": "Supplier Manager",
"title": "Add supplier risk score",
"description": "",
"status": "In progress",
"progress_percent": 41,
"effectiveness_percent": 80,
"due_date": "2026-07-21",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-034-01",
"risk_id": "R-034",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Prioritize critical validation tests",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 60,
"due_date": "2026-07-18",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-034-02",
"risk_id": "R-034",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Reforecast testing budget",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 60,
"due_date": "2026-07-18",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-034-03",
"risk_id": "R-034",
"owner_user_id": null,
"owner_display_name": "Finance Lead",
"title": "Seek sponsor approval",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 60,
"due_date": "2026-07-18",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-035-01",
"risk_id": "R-035",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Define alert severity tiers",
"description": "",
"status": "In progress",
"progress_percent": 59,
"effectiveness_percent": 60,
"due_date": "2026-07-23",
"sequence": 1,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-035-02",
"risk_id": "R-035",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Group duplicate alerts",
"description": "",
"status": "In progress",
"progress_percent": 59,
"effectiveness_percent": 60,
"due_date": "2026-07-23",
"sequence": 2,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MIT-035-03",
"risk_id": "R-035",
"owner_user_id": null,
"owner_display_name": "Operations Lead",
"title": "Tune alert thresholds",
"description": "",
"status": "In progress",
"progress_percent": 59,
"effectiveness_percent": 60,
"due_date": "2026-07-23",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"indicators": [
{
"id": "IND-001",
"project_id": "cosmic-ai-risk-001",
"name": "Overall AI Risk Score",
"measurand": "Combined residual exposure across active risks",
"unit": "0-100 normalized score",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Higher score means greater residual AI project risk.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "IND-002",
"project_id": "cosmic-ai-risk-001",
"name": "Mitigation Completion",
"measurand": "Completed mitigation actions divided by planned mitigation actions",
"unit": "Percent",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Below 60 percent blocks the deployment gate in this implementation.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "IND-003",
"project_id": "cosmic-ai-risk-001",
"name": "Data Readiness",
"measurand": "Data quality, documentation, consent, privacy, and lineage readiness",
"unit": "0-100 normalized score",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Below 70 increases technical and legal risk.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "IND-004",
"project_id": "cosmic-ai-risk-001",
"name": "Model Performance Readiness",
"measurand": "Selected model performance against project threshold",
"unit": "Pass, Warning, Fail",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Fail blocks deployment. Warning requires reviewer acceptance.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "IND-005",
"project_id": "cosmic-ai-risk-001",
"name": "Ethical Review Status",
"measurand": "Completion and approval of ethical review",
"unit": "Status",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Pending or rejected status blocks deployment for sensitive AI systems.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "IND-006",
"project_id": "cosmic-ai-risk-001",
"name": "Legal Review Status",
"measurand": "Completion and approval of legal and privacy review",
"unit": "Status",
"threshold_min": null,
"threshold_max": null,
"interpretation_rule": "Pending or rejected status blocks deployment.",
"dimension": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"measurement_records": [],
"experiments": [
{
"id": "EXP-001",
"project_id": "cosmic-ai-risk-001",
"name": "Baseline classifier",
"model_name": "Logistic Regression",
"dataset_version": "v1.0",
"selected": false,
"reproducibility_status": "Complete",
"bias_status": "Warning",
"stability_score": 72,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "EXP-002",
"project_id": "cosmic-ai-risk-001",
"name": "Transformer model v2",
"model_name": "Fine-tuned transformer",
"dataset_version": "v1.1",
"selected": true,
"reproducibility_status": "Partial",
"bias_status": "Fail",
"stability_score": 68,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "EXP-003",
"project_id": "cosmic-ai-risk-001",
"name": "Regularized model v3",
"model_name": "Gradient boosted model",
"dataset_version": "v1.2",
"selected": false,
"reproducibility_status": "Complete",
"bias_status": "Pass",
"stability_score": 81,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"model_metrics": [
{
"id": "MET-001-ACCURACY",
"experiment_id": "EXP-001",
"metric_name": "accuracy",
"metric_value": 0.78,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-001-F1",
"experiment_id": "EXP-001",
"metric_name": "f1",
"metric_value": 0.74,
"threshold_value": 0.8,
"status": "Warning",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-001-PRECISION",
"experiment_id": "EXP-001",
"metric_name": "precision",
"metric_value": 0.76,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-001-RECALL",
"experiment_id": "EXP-001",
"metric_name": "recall",
"metric_value": 0.72,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-001-AUC",
"experiment_id": "EXP-001",
"metric_name": "auc",
"metric_value": 0.81,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-001-STABILITY",
"experiment_id": "EXP-001",
"metric_name": "stability",
"metric_value": 72,
"threshold_value": 75,
"status": "Warning",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-ACCURACY",
"experiment_id": "EXP-002",
"metric_name": "accuracy",
"metric_value": 0.84,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-F1",
"experiment_id": "EXP-002",
"metric_name": "f1",
"metric_value": 0.82,
"threshold_value": 0.8,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-PRECISION",
"experiment_id": "EXP-002",
"metric_name": "precision",
"metric_value": 0.83,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-RECALL",
"experiment_id": "EXP-002",
"metric_name": "recall",
"metric_value": 0.81,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-AUC",
"experiment_id": "EXP-002",
"metric_name": "auc",
"metric_value": 0.88,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-002-STABILITY",
"experiment_id": "EXP-002",
"metric_name": "stability",
"metric_value": 68,
"threshold_value": 75,
"status": "Warning",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-ACCURACY",
"experiment_id": "EXP-003",
"metric_name": "accuracy",
"metric_value": 0.82,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-F1",
"experiment_id": "EXP-003",
"metric_name": "f1",
"metric_value": 0.79,
"threshold_value": 0.8,
"status": "Warning",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-PRECISION",
"experiment_id": "EXP-003",
"metric_name": "precision",
"metric_value": 0.8,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-RECALL",
"experiment_id": "EXP-003",
"metric_name": "recall",
"metric_value": 0.78,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-AUC",
"experiment_id": "EXP-003",
"metric_name": "auc",
"metric_value": 0.86,
"threshold_value": null,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
{
"id": "MET-003-STABILITY",
"experiment_id": "EXP-003",
"metric_name": "stability",
"metric_value": 81,
"threshold_value": 75,
"status": "Pass",
"measured_at": "2026-07-03T00:00:00.000Z",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
}
],
"deployment_gates": [
{
"project_id": "cosmic-ai-risk-001",
"status": "Blocked",
"review_status": "Pending review",
"summary": "Deployment gate blocked by 6 criterion or criteria.",
"evaluated_by_user_id": "USER-SYSTEM",
"evaluated_at": "2026-07-04T17:06:51.395Z",
"reviewed_by_display_name": null,
"reviewed_at": null,
"id": "GATE-MR6M72BN-YHI8GD",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
}
],
"gate_criteria": [
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Overall risk score",
"actual_value": "52",
"expected_rule": "<= 50",
"status": "Fail",
"blocking": true,
"evidence": "Calculated from residual active risks and approval penalty.",
"evidence_title": "Calculated from residual active risks and approval penalty.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-DP6ONP",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.387Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Open critical risks",
"actual_value": "0",
"expected_rule": "<= 0",
"status": "Pass",
"blocking": false,
"evidence": "Critical risks must be closed, accepted, or approved.",
"evidence_title": "Critical risks must be closed, accepted, or approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-PFGF69",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.360Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Mitigation completeness",
"actual_value": "54%",
"expected_rule": ">= 60%",
"status": "Fail",
"blocking": true,
"evidence": "Average mitigation progress across active risks.",
"evidence_title": "Average mitigation progress across active risks.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-VQYRQV",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.376Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Data readiness",
"actual_value": "68",
"expected_rule": ">= 70",
"status": "Fail",
"blocking": true,
"evidence": "Data lineage and consent records incomplete for two sources.",
"evidence_title": "Data lineage and consent records incomplete for two sources.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-S6UY67",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.348Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model performance",
"actual_value": "0.82",
"expected_rule": "F1 >= 0.8",
"status": "Pass",
"blocking": false,
"evidence": "Transformer model v2 selected for gate review.",
"evidence_title": "Transformer model v2 selected for gate review.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-LPRP2P",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.392Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model stability",
"actual_value": "68",
"expected_rule": ">= 75",
"status": "Warning",
"blocking": false,
"evidence": "Stability is based on repeated evaluation variation.",
"evidence_title": "Stability is based on repeated evaluation variation.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-FFM1LR",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.370Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Ethical review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Bias and accountability review still open.",
"evidence_title": "Bias and accountability review still open.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-QLYPCA",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.381Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Legal review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Privacy impact assessment not approved.",
"evidence_title": "Privacy impact assessment not approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-M1P4TW",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:12:31.365Z"
},
{
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "High-risk approval state",
"actual_value": "3",
"expected_rule": "No unapproved high risks",
"status": "Fail",
"blocking": true,
"evidence": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-IVO70Z",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:12:31.354Z"
}
],
"gate_decisions": [],
"evidence_artifacts": [
{
"id": "EVD-001",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-001",
"type": "Review",
"title": "Adversarial prompt test suite partially complete.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-002",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-002",
"type": "Review",
"title": "Legal disclaimer and escalation workflow not approved.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-003",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-003",
"type": "Review",
"title": "PII masking checks passing for structured fields only.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-004",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-004",
"type": "Review",
"title": "Disparate impact metric exceeds threshold for one group.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-005",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-005",
"type": "Review",
"title": "Recall is below target in high-risk segment.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-006",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-006",
"type": "Review",
"title": "Unsafe advice scenario failed review.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-007",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-007",
"type": "Review",
"title": "Fallback model contract still under review.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-008",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-008",
"type": "Review",
"title": "Drift dashboard exists but alert thresholds are not approved.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-009",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-009",
"type": "Review",
"title": "Consent status missing for two supplier data feeds.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-010",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-010",
"type": "Review",
"title": "Reason codes displayed for only three decision classes.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-011",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-011",
"type": "Review",
"title": "Selected model meets F1 threshold but stability warning remains.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-012",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-012",
"type": "Review",
"title": "Leakage scan passed after split correction.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-013",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-013",
"type": "Review",
"title": "Business objective and acceptance criteria approved.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-014",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-014",
"type": "Review",
"title": "Delegated owner named, final approval pending.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-015",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-015",
"type": "Review",
"title": "Supplier data source missing governance approval.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-016",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-016",
"type": "Review",
"title": "Monthly inference budget forecast exceeds baseline by 18 percent.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-017",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-017",
"type": "Review",
"title": "Monitoring coverage excludes bias and latency alerts.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-018",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-018",
"type": "Review",
"title": "User training plan drafted but not delivered.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-019",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-019",
"type": "Review",
"title": "No enforcement mechanism for mandatory review cases.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-020",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-020",
"type": "Review",
"title": "Runbook lacks AI-specific rollback decision tree.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-021",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-021",
"type": "Review",
"title": "Sensitive prompt fields encrypted, retention policy pending.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-022",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-022",
"type": "Review",
"title": "Rollback documented but not tested.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-023",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-023",
"type": "Review",
"title": "Vendor notice clause missing from service agreement.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-024",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-024",
"type": "Review",
"title": "Experiment parameters captured for latest three runs.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-025",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-025",
"type": "Review",
"title": "Pipeline retry logic added, full test pending.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-026",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-026",
"type": "Review",
"title": "Role-based permissions configured, audit review pending.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-027",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-027",
"type": "Review",
"title": "Ethical review meeting scheduled but decision not recorded.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-028",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-028",
"type": "Review",
"title": "Privacy impact assessment is incomplete.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-029",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-029",
"type": "Review",
"title": "Missing value rate increased above tolerance in one feed.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-030",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-030",
"type": "Review",
"title": "Gate criteria agreed except legal approval state.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-031",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-031",
"type": "Review",
"title": "Synthetic edge-case tests cover only critical class A.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-032",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-032",
"type": "Review",
"title": "Random seeds captured, dependency lock incomplete.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-033",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-033",
"type": "Review",
"title": "Supplier security and privacy questionnaire not returned.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-034",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-034",
"type": "Review",
"title": "Additional validation budget requested.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"id": "EVD-035",
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-035",
"type": "Review",
"title": "Monitoring thresholds produce too many low-priority alerts.",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"mitigation_id": null
},
{
"project_id": "cosmic-ai-risk-001",
"risk_id": "R-003",
"mitigation_id": "MIT-003-03",
"type": "Review",
"title": "Mitigation marked done: Complete privacy review",
"uri": null,
"created_by_user_id": "USER-SYSTEM",
"id": "EVD-MRF34NLZ-KB2AR5",
"created_at": "2026-07-10T15:23:01.895Z",
"updated_at": "2026-07-10T15:23:01.895Z"
}
],
"audit_events": [
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-04T03:46:11.527Z",
"updated_at": "2026-07-04T03:46:11.527Z",
"id": "AUDIT-MR5TLEIV-YHIUJW"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-04T04:11:10.213Z",
"updated_at": "2026-07-04T04:11:10.213Z",
"id": "AUDIT-MR5UHIX1-B09EAZ"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-04T16:58:58.649Z",
"updated_at": "2026-07-04T16:58:58.649Z",
"id": "AUDIT-MR6LWXJT-18KPOR"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-04T17:05:33.594Z",
"updated_at": "2026-07-04T17:05:33.594Z",
"id": "AUDIT-MR6M5EAI-BJLGSR"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-S6UY67",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Data readiness",
"actual_value": "68",
"expected_rule": ">= 70",
"status": "Fail",
"blocking": true,
"evidence": "Data lineage and consent records incomplete for two sources.",
"evidence_title": "Data lineage and consent records incomplete for two sources.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-S6UY67",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Data readiness",
"actual_value": "68",
"expected_rule": ">= 70",
"status": "Fail",
"blocking": true,
"evidence": "Data lineage and consent records incomplete for two sources.",
"evidence_title": "Data lineage and consent records incomplete for two sources.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-S6UY67",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.348Z"
},
"created_at": "2026-07-04T17:12:31.348Z",
"updated_at": "2026-07-04T17:12:31.348Z",
"id": "AUDIT-MR6MECMS-Q60F55"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BO-IVO70Z",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "High-risk approval state",
"actual_value": "3",
"expected_rule": "No unapproved high risks",
"status": "Fail",
"blocking": true,
"evidence": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-IVO70Z",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "High-risk approval state",
"actual_value": "3",
"expected_rule": "No unapproved high risks",
"status": "Fail",
"blocking": true,
"evidence": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-IVO70Z",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:12:31.354Z"
},
"created_at": "2026-07-04T17:12:31.354Z",
"updated_at": "2026-07-04T17:12:31.354Z",
"id": "AUDIT-MR6MECMZ-QOKHJF"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-PFGF69",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Open critical risks",
"actual_value": "0",
"expected_rule": "<= 0",
"status": "Pass",
"blocking": false,
"evidence": "Critical risks must be closed, accepted, or approved.",
"evidence_title": "Critical risks must be closed, accepted, or approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-PFGF69",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Open critical risks",
"actual_value": "0",
"expected_rule": "<= 0",
"status": "Pass",
"blocking": false,
"evidence": "Critical risks must be closed, accepted, or approved.",
"evidence_title": "Critical risks must be closed, accepted, or approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-PFGF69",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.360Z"
},
"created_at": "2026-07-04T17:12:31.360Z",
"updated_at": "2026-07-04T17:12:31.360Z",
"id": "AUDIT-MR6MECN4-5NZNEY"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BO-M1P4TW",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Legal review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Privacy impact assessment not approved.",
"evidence_title": "Privacy impact assessment not approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-M1P4TW",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:06:51.396Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Legal review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Privacy impact assessment not approved.",
"evidence_title": "Privacy impact assessment not approved.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BO-M1P4TW",
"created_at": "2026-07-04T17:06:51.396Z",
"updated_at": "2026-07-04T17:12:31.365Z"
},
"created_at": "2026-07-04T17:12:31.365Z",
"updated_at": "2026-07-04T17:12:31.365Z",
"id": "AUDIT-MR6MECN9-172P34"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-FFM1LR",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model stability",
"actual_value": "68",
"expected_rule": ">= 75",
"status": "Warning",
"blocking": false,
"evidence": "Stability is based on repeated evaluation variation.",
"evidence_title": "Stability is based on repeated evaluation variation.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-FFM1LR",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model stability",
"actual_value": "68",
"expected_rule": ">= 75",
"status": "Warning",
"blocking": false,
"evidence": "Stability is based on repeated evaluation variation.",
"evidence_title": "Stability is based on repeated evaluation variation.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-FFM1LR",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.370Z"
},
"created_at": "2026-07-04T17:12:31.370Z",
"updated_at": "2026-07-04T17:12:31.370Z",
"id": "AUDIT-MR6MECNE-GYA8QL"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-VQYRQV",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Mitigation completeness",
"actual_value": "54%",
"expected_rule": ">= 60%",
"status": "Fail",
"blocking": true,
"evidence": "Average mitigation progress across active risks.",
"evidence_title": "Average mitigation progress across active risks.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-VQYRQV",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Mitigation completeness",
"actual_value": "54%",
"expected_rule": ">= 60%",
"status": "Fail",
"blocking": true,
"evidence": "Average mitigation progress across active risks.",
"evidence_title": "Average mitigation progress across active risks.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-VQYRQV",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.376Z"
},
"created_at": "2026-07-04T17:12:31.376Z",
"updated_at": "2026-07-04T17:12:31.376Z",
"id": "AUDIT-MR6MECNK-3TZZSV"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-QLYPCA",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Ethical review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Bias and accountability review still open.",
"evidence_title": "Bias and accountability review still open.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-QLYPCA",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Ethical review",
"actual_value": "Pending",
"expected_rule": "Approved or Accepted",
"status": "Fail",
"blocking": true,
"evidence": "Bias and accountability review still open.",
"evidence_title": "Bias and accountability review still open.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-QLYPCA",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.381Z"
},
"created_at": "2026-07-04T17:12:31.381Z",
"updated_at": "2026-07-04T17:12:31.381Z",
"id": "AUDIT-MR6MECNP-W3OVT9"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-DP6ONP",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Overall risk score",
"actual_value": "52",
"expected_rule": "<= 50",
"status": "Fail",
"blocking": true,
"evidence": "Calculated from residual active risks and approval penalty.",
"evidence_title": "Calculated from residual active risks and approval penalty.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-DP6ONP",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Overall risk score",
"actual_value": "52",
"expected_rule": "<= 50",
"status": "Fail",
"blocking": true,
"evidence": "Calculated from residual active risks and approval penalty.",
"evidence_title": "Calculated from residual active risks and approval penalty.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-DP6ONP",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.387Z"
},
"created_at": "2026-07-04T17:12:31.387Z",
"updated_at": "2026-07-04T17:12:31.387Z",
"id": "AUDIT-MR6MECNV-J0XXHS"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "GateCriterion",
"entity_id": "GCR-MR6M72BN-LPRP2P",
"action": "update",
"before_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model performance",
"actual_value": "0.82",
"expected_rule": "F1 >= 0.8",
"status": "Pass",
"blocking": false,
"evidence": "Transformer model v2 selected for gate review.",
"evidence_title": "Transformer model v2 selected for gate review.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-LPRP2P",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:06:51.395Z"
},
"after_json": {
"gate_id": "GATE-MR6M72BN-YHI8GD",
"name": "Selected model performance",
"actual_value": "0.82",
"expected_rule": "F1 >= 0.8",
"status": "Pass",
"blocking": false,
"evidence": "Transformer model v2 selected for gate review.",
"evidence_title": "Transformer model v2 selected for gate review.",
"evidence_uri": "",
"reviewer_status": "Open",
"reviewer_note": "",
"id": "GCR-MR6M72BN-LPRP2P",
"created_at": "2026-07-04T17:06:51.395Z",
"updated_at": "2026-07-04T17:12:31.392Z"
},
"created_at": "2026-07-04T17:12:31.392Z",
"updated_at": "2026-07-04T17:12:31.392Z",
"id": "AUDIT-MR6MECO0-EWWNMA"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-07T17:19:25.988Z",
"updated_at": "2026-07-07T17:19:25.988Z",
"id": "AUDIT-MRAWYSKK-OBV9FS"
},
{
"project_id": "cosmic-ai-risk-001",
"actor_user_id": "USER-SYSTEM",
"entity_type": "MitigationAction",
"entity_id": "MIT-003-03",
"action": "update",
"before_json": {
"id": "MIT-003-03",
"risk_id": "R-003",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Complete privacy review",
"description": "",
"status": "In progress",
"progress_percent": 50,
"effectiveness_percent": 65,
"due_date": "2026-07-08",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z"
},
"after_json": {
"id": "MIT-003-03",
"risk_id": "R-003",
"owner_user_id": null,
"owner_display_name": "Data Protection Lead",
"title": "Complete privacy review",
"description": "",
"status": "Done",
"progress_percent": 100,
"effectiveness_percent": 80,
"due_date": "2026-07-08",
"sequence": 3,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-10T15:23:01.895Z"
},
"created_at": "2026-07-10T15:23:01.895Z",
"updated_at": "2026-07-10T15:23:01.895Z",
"id": "AUDIT-MRF34NLZ-PPPYNU"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-11T10:39:16.968Z",
"updated_at": "2026-07-11T10:39:16.968Z",
"id": "AUDIT-MRG8FLRC-J5WRNU"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-30T18:36:35.594Z",
"updated_at": "2026-07-30T18:36:35.594Z",
"id": "AUDIT-MS7UUM4R-20JTHP"
},
{
"project_id": "system",
"actor_user_id": "USER-SYSTEM",
"entity_type": "AccessControl",
"entity_id": "defaults",
"action": "seed-defaults",
"before_json": null,
"after_json": {
"roleCount": 8,
"userCount": 8
},
"created_at": "2026-07-31T00:16:28.560Z",
"updated_at": "2026-07-31T00:16:28.560Z",
"id": "AUDIT-MS86ZPG1-8FS31O"
}
],
"trello_mappings": [],
"project_management_integrations": [
{
"id": "PMI-TRELLO",
"project_id": "cosmic-ai-risk-001",
"provider": "Trello",
"workspace_name": "COSMIC AI-Risk Trello Board",
"external_project_key": "TRELLO_LIST_ID_REQUIRED",
"base_url": "https://trello.com",
"auth_mode": "Trello API key + user token",
"connection_status": "Needs configuration",
"sync_direction": "COSMIC to PM",
"last_sync_at": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"live_enabled": false,
"live_config_json": "{}"
},
{
"id": "PMI-JIRA",
"project_id": "cosmic-ai-risk-001",
"provider": "Jira",
"workspace_name": "COSMIC AI-Risk Jira Project",
"external_project_key": "AIRISK",
"base_url": "https://your-domain.atlassian.net",
"auth_mode": "OAuth 2.0 3LO or API token",
"connection_status": "Needs configuration",
"sync_direction": "Bidirectional",
"last_sync_at": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"live_enabled": false,
"live_config_json": "{\"cloudId\":\"JIRA_CLOUD_ID_REQUIRED\"}"
},
{
"id": "PMI-ASANA",
"project_id": "cosmic-ai-risk-001",
"provider": "Asana",
"workspace_name": "COSMIC AI-Risk Asana Project",
"external_project_key": "1200000000000001",
"base_url": "https://app.asana.example.invalid/0/1200000000000001",
"auth_mode": "OAuth 2.0 authorization code",
"connection_status": "Needs configuration",
"sync_direction": "COSMIC to PM",
"last_sync_at": null,
"created_at": "2026-07-03T00:00:00.000Z",
"updated_at": "2026-07-03T00:00:00.000Z",
"live_enabled": false,
"live_config_json": "{}"
},
{
"id": "PMI-MICROSOFT-PLANNER",
"project_id": "cosmic-ai-risk-001",
"provider": "Microsoft Planner",
"workspace_name": "COSMIC AI-Risk Microsoft 365 Group",
"external_project_key": "PLAN-AI-RISK",
"base_url": "https://tasks.office.com/example.invalid/Home/Planner",
"auth_mode": "Microsoft Graph OAuth 2.0",
"connection_status": "Needs configuration",
"sync_direction": "COSMIC to PM",
"last_sync_at": null,
"created_at": "2026-07-04T02:10:00.000Z",
"updated_at": "2026-07-04T02:10:00.000Z",
"live_enabled": false,
"live_config_json": "{\"bucketId\":\"PLANNER_BUCKET_ID_REQUIRED\"}"
}
],
"external_work_item_mappings": [],
"project_management_sync_runs": [],
"report_exports": [],
"oauth_states": [],
"oauth_tokens": []
}
}