𝗥𝗶𝘀𝗸-𝗯𝗮𝘀𝗲𝗱 𝗔𝗜 𝗽𝗼𝗹𝗶𝗰𝘆/𝗿𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 𝘀𝗼𝘂𝗻𝗱𝘀 𝗼𝗯𝘃𝗶𝗼𝘂𝘀. 𝗕𝘂𝘁 𝗶𝘁 𝗿𝗲𝘀𝘁𝘀 𝗮 𝗳𝗿𝗮𝗴𝗶𝗹𝗲 𝗮𝘀𝘀𝘂𝗺𝗽𝘁𝗶𝗼𝗻: 𝘁𝗵𝗮𝘁 𝘄𝗲 𝗰𝗮𝗻 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝗺𝗲𝗮𝘀𝘂𝗿𝗲 𝗿𝗶𝘀𝗸.Yet risk assessment is often put forward as the first thing to answer, as if it’s the easy part. Some frameworks push “use case–based” solutions with a pre-defined list of high-risk use cases, but then smuggle in the magic…