A risk: an uncertain event with a likelihood and an impact. Inherent values describe the untreated risk; residual values describe what remains after mitigations. Category is free-form here; the ai-governance extension provides a typed AI risk taxonomy.