A few questions.. 1. Does the /verification/assess-risk endpoint capture what you'd actually need in a CI/CD gate? What's missing from the request/response sch

A few questions.. 1. Does the /verification/assess-risk endpoint capture what you'd actually need in a CI/CD gate? What's missing from the request/response schema? 2. The Knowledge Graph as the source of business rules, does this model make sense for your stack, or is there a simpler primitive we should define first? 3. MCP compatibility, are there gaps in how OQP maps to MCP's tool/resource model?