v2.6.4

Intake risk scoring, review routing and oversight

Intake submissions now arrive with a risk score and a list of suggested risks. Each form can route submissions to senior or standard reviewers by score, send a share of approvals for a second review and track reviews on a new Oversight tab. This release also adds test, performance and monitoring tooling, and merges the risk catalog pickers into one.

Upgrade notes

• Migrations (#5077, #5089): three migrations run on startup. They add columns for intake scoring, suggested risks and routing, plus one index. Routing stays off for existing forms until an Admin turns it on.
• One-time scoring of existing submissions (#5077): when the worker first starts, it scores each existing intake submission that has no assessment yet, once, with that form's AI provider. That is about 6 model calls per submission. Forms with no AI provider keep their rule score. Existing submissions are marked as already notified, so they get no new emails.
• New forms (#5077): the EU AI Act risk step is on by default for new intake forms. Existing forms keep their setting.

Highlights

• Intake scoring: each submission gets a 0-100 score from 5 model runs. The score never falls below the floor set by its EU AI Act classification and maps to a Low, Medium, High or Critical band. Reviewers see the score, its rationale and suggested risks with drafted mitigations. They can accept, edit or dismiss each suggestion, and accepted risks go into the risk register on approval.
• Review routing: an Admin can split a form's reviewers into senior and standard lanes. A score threshold and a close-call margin decide the lane. Prohibited, unscored, close-call and high-scoring submissions go to senior reviewers. Only that lane's reviewers and Admins can decide. The lane's reviewers get the new submission email along with the form's recipients.
• Second reviews: a set share of approvals goes to a different senior reviewer, who agrees or records a miss. The email links to the submission, and the list has a "Second review" filter.
• Oversight: a new tab shows lane mix, close calls, decision times, second review outcomes and how often reviewers kept the suggested band over 4, 8 or 12 weeks. It also lists items that need attention.
• Risks: the IBM and MIT risk catalog pickers are now one picker. An unused vendor risk form with a hardcoded risk level is gone.
• Fixes: dropdown and multi-select options no longer overflow the form builder's settings panel. The remove option button now works with a keyboard or a screen reader.
• Testing and operations: new end-to-end, contract, flake, load (k6) and restore tests, plus Prometheus alert rules (#5045). Setup guides cover Alertmanager, Uptime Kuma and GlitchTip. None of this changes how the app behaves.
• Design tokens: colors now come from one shared token set. ESLint warns when a screen adds a new hardcoded color (#5054).

---

What's Changed

• feat(intake): risk scoring and suggested risks for intake submissions by @gorkem-bwl in #5077
• chore: one-fix-to-all — Debora lane: 18 open issues + 5 Dependabot alerts (#4152 #4502 #4503 #4505 #4617 #4646 #4676-4687 #4820) by @MuhammadKhalilzadeh in #5045
• Fix/restore color primitives by @Innagl in #5054
• Refactor: Unify Risk Form Variants by @Br0wnHammer in #5057
• feat(intake): risk-based review routing, second reviews and oversight by @gorkem-bwl in #5089
• Fix: Form Builder Field Settings Overflow by @Br0wnHammer in #5090
• Merge develop into master (Oct 23) by @HarshP4585 in #5091

Full Changelog: v2.6.3...v2.6.4