{
  "verdict": "stop",
  "summary": "Do not proceed yet. 1 critical issue(s) found.",
  "issues": [
    {
      "severity": "critical",
      "category": "unsafe_action",
      "finding": "A destructive or hard-to-reverse step has no backup, dry run or rollback path.",
      "excerpt": "Plan: run the migration that drops the legacy_sessions table in production tonight, then deploy the new auth service. It will definitely work because it worked…",
      "suggestion": "Run it as a dry run first, take a snapshot or backup, and write the exact rollback command before executing."
    },
    {
      "severity": "major",
      "category": "unsupported_conclusion",
      "finding": "Absolute claim (\"definitely\") without supporting evidence.",
      "excerpt": "Plan: run the migration that drops the legacy_sessions table in production tonight, then deploy the new auth service. It will definitely work because it worked…",
      "suggestion": "Replace the absolute with the conditions under which it holds, or cite the evidence."
    },
    {
      "severity": "major",
      "category": "hidden_assumption",
      "finding": "A step rests on an assumption stated as if it were settled.",
      "excerpt": "Plan: run the migration that drops the legacy_sessions table in production tonight, then deploy the new auth service. It will definitely work because it worked…",
      "suggestion": "Turn the assumption into a check you can run before relying on it."
    },
    {
      "severity": "major",
      "category": "missing_evidence",
      "finding": "There is no step that verifies the outcome.",
      "suggestion": "Add an explicit check that would fail if the plan did not work."
    },
    {
      "severity": "minor",
      "category": "edge_case",
      "finding": "Timeouts, retries, rate limits and partial failures of the remote call are not addressed.",
      "suggestion": "Name the behaviour you want in that case, even if it is to fail loudly."
    },
    {
      "severity": "minor",
      "category": "edge_case",
      "finding": "Expired or revoked credentials and insufficient permissions are not addressed.",
      "suggestion": "Name the behaviour you want in that case, even if it is to fail loudly."
    },
    {
      "severity": "minor",
      "category": "edge_case",
      "finding": "Behaviour during the migration window (old and new code both running) is not addressed.",
      "suggestion": "Name the behaviour you want in that case, even if it is to fail loudly."
    }
  ],
  "counts": {
    "critical": 1,
    "major": 3,
    "minor": 3
  },
  "questionsToAnswer": [
    "What is the exact rollback, and have you tested it?",
    "Which of your assumptions would be cheapest to check right now?",
    "What would you expect to observe if this were wrong?"
  ]
}