b9b463f3bd
* feat(security): expose deterministic tool output risk * fix(security): emit output-risk events only for findings