RiskRisk

A RAID Risk: a potential adverse event with probability, impact, and a mitigation plan. Risks are linked to Decisions, Capabilities, or Milestones via edges. Risks have a status enum but no formal state machine.

RACI requirements

decision_maker

required

approver

optional

reviewer

optional

contributor

optional

informed

optional

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://gcc.bootminds.com/ontology/node-types/risk.json",
  "title": "Risk",
  "description": "A RAID Risk: a potential adverse event with probability, impact, and a mitigation plan. Risks are linked to Decisions, Capabilities, or Milestones via edges. Risks have a status enum but no formal state machine.",
  "type": "object",
  "x-node-type": "Risk",
  "x-lifecycle-state-machine": null,
  "x-raci-requirements": {
    "decision_maker": "required",
    "approver": "optional",
    "reviewer": "optional",
    "contributor": "optional",
    "informed": "optional"
  },
  "x-retention-class": "operational",
  "required": [
    "node_id",
    "node_type",
    "tenant_id",
    "attributes",
    "state",
    "created_at",
    "created_by"
  ],
  "properties": {
    "node_id": {
      "type": "string",
      "format": "uuid"
    },
    "node_type": {
      "const": "Risk"
    },
    "tenant_id": {
      "type": "string",
      "format": "uuid"
    },
    "state": {
      "type": "string",
      "enum": [
        "Open",
        "Mitigated",
        "Accepted",
        "Closed"
      ],
      "description": "Risk status. No formal state machine; transitions are free with audit-trail enforcement on the events log."
    },
    "attributes": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "title",
        "description",
        "probability",
        "impact",
        "severity",
        "mitigation",
        "owner_id_ref",
        "review_date"
      ],
      "properties": {
        "title": {
          "type": "string",
          "minLength": 1,
          "description": "Short risk title."
        },
        "description": {
          "type": "string",
          "minLength": 1,
          "description": "Risk description."
        },
        "probability": {
          "type": "integer",
          "minimum": 1,
          "maximum": 5,
          "description": "Probability rating on 1-5 scale (1 = rare, 5 = almost certain)."
        },
        "impact": {
          "type": "integer",
          "minimum": 1,
          "maximum": 5,
          "description": "Impact rating on 1-5 scale (1 = negligible, 5 = catastrophic)."
        },
        "severity": {
          "type": "integer",
          "minimum": 1,
          "maximum": 25,
          "description": "Computed severity = probability * impact, persisted for indexing and heatmap rendering."
        },
        "mitigation": {
          "type": "string",
          "minLength": 1,
          "description": "Mitigation plan."
        },
        "owner_id_ref": {
          "type": "string",
          "format": "uuid",
          "description": "Stakeholder UUID accountable for this risk."
        },
        "review_date": {
          "type": "string",
          "format": "date",
          "description": "Next scheduled review date."
        },
        "linked_object_refs": {
          "type": "array",
          "description": "Convenience denormalisation of objects this risk is linked to (Decisions, Capabilities, Milestones). Authoritative links live on edges.",
          "items": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "object_type",
              "object_id"
            ],
            "properties": {
              "object_type": {
                "type": "string",
                "enum": [
                  "Decision",
                  "Capability",
                  "Milestone",
                  "Gate",
                  "TransitionWave"
                ]
              },
              "object_id": {
                "type": "string",
                "format": "uuid"
              }
            }
          }
        }
      }
    },
    "created_at": {
      "type": "string",
      "format": "date-time"
    },
    "created_by": {
      "type": "string",
      "format": "uuid"
    },
    "updated_at": {
      "type": "string",
      "format": "date-time"
    }
  }
}