Risk Register
:::info Source
Sourced from services/search-service/SERVICE_RISK_REGISTER.md in the documentation repo.
:::
| ID | Risk | Sev | Impact | Mitigation | Owner |
|---|---|---|---|---|---|
| R-SR-01 | Cross-tenant search leak | S1 | Data leak | Tenant filter on every query; alias-per-tenant for large; iso tests | Search + Security |
| R-SR-02 | Embeddings cross-tenant | S1 | Semantic leak | Partitioned vector index per tenant; deletion on tenant close | Search + AI |
| R-SR-03 | Index drift from source | S2 | Stale results | Event-driven reindex; nightly consistency job | Search |
| R-SR-04 | Query injection via filter DSL | S2 | DB exposure | Typed parser; no string queries | Search + Security |
| R-SR-05 | Full reindex downtime | S3 | Temporary degraded results | Zero-downtime via alias swap | Search + SRE |
| R-SR-06 | AI reranking bias | S3 | Unfair exposure | Quarterly bias eval; diversity checks | Search + AI + Compliance |
| R-SR-07 | GDPR erasure — embeddings retained | S1 | Regulator | Delete embeddings + documents on erasure; replay test | Search + Compliance |
| R-SR-08 | High-cardinality facets slow | S3 | UX | Facet limits; approximate counts | Search |
| R-SR-09 | Rate-limit bypass via scripting | S3 | DoS | Per-token + per-IP rate limit | Search + Security |
| R-SR-10 | Stemming/locale errors | S3 | Poor multilingual results | Per-locale analyzers; test corpus | Search |