# Outstanding risks — eng-coulomb-railiance01-ho-001

Populated during operate; finalise at ramp-down (RD-03).

| Risk | Severity | Mitigation / owner | Status |
|------|----------|--------------------|--------|
| RAM undersized (3.8G, no swap) for k3s+platform density | Critical | Human capacity decision (RAM and/or swap); reduce concurrent load | open |
| k3s API ServiceUnavailable under pressure | Critical | Stabilize memory; re-check API; avoid heavy kubectl while degraded | open |
| Load average ≫ 2 cores | High | Same as capacity; schedule non-urgent work off-host | open |
| journald ~4.1G | Medium | Approved journal vacuum | open |
| Pending security package updates | Medium | Approved OS security pass | open |
| UFW allows 6443/8472 from Anywhere | Medium | Policy review + possible firewall_change | open |
| Reverse-forward port 18765 collisions | Low–Medium | Bridge/tunnel cleanup | open |