Production architecture
Rule-based scoring, model-assisted drafting.
The risk-scoring engine is rule-based by design — governance scores should be inspectable and reproducible, not generated by a model. In production, a language model would sit at two points only: intake assistance (helping teams describe their use case completely) and report drafting (turning scored results into review-ready prose). Scoring itself would remain rule-based and auditable.