Risk assessment tool methodology. Gen 3 (November 2026)