# Ordinal risk scales shared by every envelope (canon B1, A3 step 8).
# Lower index = less risk. A value not listed here cannot be classified
# and therefore counts as exceeding any ceiling.
apiVersion: emergent-security/v0.8
kind: RiskScales
scales:
  blast_radius: [none, task, repository, domain, tenant, platform]
  tenant_reach: [none, own, cross]
  data_sensitivity: [none, internal, personal, regulated]
  irreversible: [false, true]
  external_exposure: [none, published_endpoints_only, public]