high    hazard sits on a documented hot path (request handler with latency budget, real-time consumer)
medium  hazard sits on a cold path (scheduled job, admin tool) but data volume is unbounded
low     hazard sits on a cold path AND data volume is bounded and small