Reference · Glossary

Risk register

A **risk register** lists AI failure modes — hallucination, PII leak, tool abuse — with owners and mitigations.

#When to use

PRD appendix for any customer-facing AI; update after incidents.

Empty template filed once and forgotten.

Risk: prompt injection exfil → mitigation: tool allowlist + output filter + red-team suite.