Risk log

Risk log

Manages the team's risk log in Notion. Enforces schema so the log stays useful.

Actions

add — add a new risk

1. Ask (if not provided): title, owner, description, severity (Low/Medium/High/Critical), likelihood (Possible/Likely/Near-certain), mitigation plan.
2. Sanity check:
   • Is this actually a risk, or just "a hard problem"? A risk is a thing that could make us miss, with a describable trigger condition.
   • Does it overlap with an existing risk? Search before adding.
3. Draft the Notion page entry. Show it. Create on approval.

Schema:

Title: <short>
Owner: <person>
First seen: <today>
Last updated: <today>
Severity: Low | Medium | High | Critical
Likelihood: Possible | Likely | Near-certain
Mitigation status: Open | In progress | Mitigated | Accepted
Mitigation plan: <what we're doing>
Trigger: <what would tell us this has actually happened>

update <title> — update an existing risk

Find the matching risk in Notion. Show current state. Ask what's changing. Update "Last updated" to today. Confirm before writing.

Common updates:

• Severity or likelihood changed (why?)
• Mitigation status moved forward (what evidence?)
• Owner changed

review — review all open risks

Pull all risks with Mitigation status: Open or In progress. Report:

# Risk log review — <date>

**Open risks:** N  ·  **High+ severity:** N  ·  **Stale (>14 days without update):** N

## Stale — need attention
- <risk title> — owner <person> — last updated <N days ago>

## High / Critical
- <risk> — <severity>, <likelihood>, <mitigation status>

## Recently mitigated (last 7 days)
- <risk> — <how we knew it was mitigated>

## Flags
- <anything that looks wrong, e.g. a High risk with "Open" status and no mitigation plan>

list by severity|owner

Simple filtered listing. One line per risk with key attributes.

Guardrails

• Never mark a risk Mitigated unless the user points to evidence (a shipped fix, a decision, a measurement).
• Never raise severity without explaining why in the "mitigation plan" field as a dated note.
• Never delete a risk. Downgrade to Accepted with a rationale instead — the history matters.