domain      coding | content | security
stack       slug from detection-report.json or "unknown"
workflow    project-question | feature-development | bug-fix | refactor | migration | investigation
scope       single-module | multi-module | system-wide
risk        low | medium | high
ui_impact   yes | no
api_impact  yes | no | additive | breaking
db_impact   yes | no | schema | data