<!-- Generated by scripts/generate_ai_collab_docs.py. Edit metadata in that script. -->

# Backend Service: check_risk

This file adds local guidance for `src/api/flaskr/service/check_risk`. Read
the repository root and `src/api/AGENTS.md` first, then use this file for
module-specific ownership and risk points.

## Scope

- This service owns risk-control persistence and text moderation checks used
  to screen content before it proceeds through downstream flows.

- Primary checked-in entry files today:
  `src/api/flaskr/service/check_risk/funcs.py`,
  `src/api/flaskr/service/check_risk/models.py`

- Keep behavior in this module unless the concern is clearly cross-service and
  shared by multiple backend domains.

- Preferred pytest location: `src/api/tests/service/check_risk/` does not
  exist yet; create it when this service gains or changes behavior.

## Do

- Start from the local entry files and preserve how this service already
  structures helpers, models, routes, and DTO-like helpers.

- Keep moderation result persistence and provider interaction in the service
  helpers instead of scattering them across callers.

- Preserve business-key linkage between a risk decision and the content or
  request context that triggered it.

- Keep safe fallback behavior explicit when the upstream risk provider fails
  or times out.

## Avoid

- Do not let routes or unrelated services call providers directly and skip
  this normalization layer.

- Do not store partial moderation records without the context needed to audit
  the decision later.

- Do not silently downgrade failure behavior without documenting the new risk
  posture in tests and task notes.

- Avoid scattering service-specific rules upward into root docs when the
  behavior only matters inside this module.

## Commands

- `rg -n "check_risk" src/api/flaskr/service src/api/tests` to locate all
  backend call sites and tests before editing.

- `cd src/api && pytest -q` until `src/api/tests/service/check_risk/` exists;
  create that directory first when this service gains behavior that needs
  focused regression coverage.

- `cd src/api && FLASK_APP=app.py flask db migrate -m "message"` and review
  the generated revision if schema or indexed business-key changes are made.

- `cd src/api && pytest -q` when a change touches shared DTOs, auth, streaming
  contracts, or other services in addition to this module.

## Tests

- Add or update focused tests around `src/api/tests/service/check_risk/` for
  the happy path and the highest-risk validation, permission, or failure case.

- Expand coverage when payload shapes, error codes, or shared helper contracts
  used outside this module change.

- Review persistence-related changes manually for indexing, business-key
  semantics, and migration output whenever models move.

- Document any skipped provider, network, or credential-dependent checks in
  the final task summary.

## Related Skills

- `src/api/SKILL.md`

- `SKILL.md`

- Create a new backend skill under `src/api/skills/<topic>/SKILL.md` when this
  module grows a repeatable multi-step debugging workflow.
