Generate Risk with Context

name: Risk Assessment

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  assess-risk:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Get changed files
        id: files
        run: |
          echo "files=$(git diff --name-only origin/main HEAD | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT
      
      - name: Assess risk
        run: |
          for file in $(echo '${{ steps.files.outputs.files }}' | jq -r '.[]'); do
            response=$(curl -X POST 'https://api.orcho.ai/risk/api/v1/generate-risk-with-context' \
              -H 'Authorization: Bearer ${{ secrets.ORCHO_API_KEY }}' \
              -H 'Content-Type: application/json' \
              -d "{
                \"prompt\": \"PR changes to $file\",
                \"context\": {
                  \"repo_full_name\": \"${{ github.repository }}\",
                  \"current_file\": \"$file\"
                }
              }")
            
            score=$(echo $response | jq '.overall_score')
            if (( $(echo "$score > 0.5" | bc -l) )); then
              echo "::warning file=$file::High risk score: $score"
            fi
          done

import requests

def gate_deployment(environment, changes):
    """Gate deployment based on risk assessment"""
    
    # Higher thresholds for production
    threshold = 0.75 if environment == 'production' else 0.5
    
    for change in changes:
        result = requests.post(
            'https://api.orcho.ai/risk/api/v1/generate-risk-with-context',
            headers={
                'Authorization': f'Bearer {API_KEY}',
                'Content-Type': 'application/json'
            },
            json={
                'prompt': f'Deploy changes to {environment}',
                'context': {
                    'repo_full_name': 'mycompany/myapp',
                    'current_file': change['file'],
                    'other_files': change.get('related_files', [])
                },
                'weights': {
                    'blast_radius': 0.5,
                    'data_sensitivity': 0.3,
                    'input_clarity': 0.2
                }
            }
        ).json()
        
        if result['overall_score'] > threshold:
            return {
                'approved': False,
                'reason': f'Risk score {result["overall_score"]:.2f} exceeds threshold {threshold}',
                'recommendations': result['recommendations']
            }
    
    return {'approved': True}

# Use in deployment pipeline
deployment_gate = gate_deployment('production', changed_files)
if not deployment_gate['approved']:
    raise Exception(f'Deployment blocked: {deployment_gate["reason"]}')