{
  "risks": [
    "Adopted codebase with 0 security findings"
  ],
  "ambiguities": [],
  "questions": [],
  "assumptions": [
    "Existing code is the specification",
    "Contracts describe actual behavior"
  ],
  "acceptance_criteria": [],
  "user_answers": {},
  "approved": true,
  "audited_answers": [],
  "processing_register": ""
}