# Outstanding risks — eng-coulomb-railiance01-ho-001

| Risk | Severity | Mitigation / owner | Status |
|------|----------|--------------------|--------|
| RAM still 3.8G; swap heavily used (~1.9G/4G) | High | Provider RAM upgrade | open |
| Load still elevated (~6 on 2 cores) | Medium | Reduce concurrent workloads; capacity | open |
| Stale user sessions after apt upgrade | Low | Re-login SSH | open |
| UFW 6443 allowlist may miss new admin IPs | Medium | Add `ufw allow from <ip> to any port 6443 proto tcp` | open |
| 8472 closed externally | Low | Re-open if multi-node flannel peers appear | accepted (single-node) |
| fwupd.service failed restart during upgrade | Low | Investigate if firmware tooling needed | open |