---

name: prd-v05-risk-discovery-interview description: Surface risks through guided questioning, helping users consider pivots, constraints, and prioritization during PRD v0.5 Red Team Review. Triggers on requests to identify risks, stress-test the idea, perform red team review, or when user asks "what could go wrong?", "identify risks", "red team", "risk assessment", "challenge assumptions", "stress test the idea". Consumes all prior IDs (CFD-, BR-, FEA-, PER-, UJ-, SCR-) as interview context. Outputs RISK- entries with owner decisions and mitigations. Feeds v0.5 Technical Stack Selection.

Risk Discovery Interview

Position in workflow: v0.4 Screen Flow Definition → v0.5 Risk Discovery Interview → v0.5 Technical Stack Selection

This is an interactive interview skill. The AI asks questions, the user reflects and decides. The goal is to surface risks so the user can mitigate or accept them—not to kill ideas.

Design Principles

1. Interview, not inquisition — Facilitate discovery, don't interrogate
2. Inform, not kill — Surface risks so user can mitigate, not abandon
3. User owns decisions — AI facilitates, user assigns severity and response
4. Actionable outputs — Every risk has a mitigation path or explicit "accept"

Risk Categories

Interview Flow

Phase 1: Context Review

Before asking questions, AI reviews:

• CFD- evidence from v0.1-v0.2
• FEA- features and their priorities
• UJ- journeys and their complexity
• BR- business rules and constraints

Phase 2: Guided Questions

Ask questions from each category, adapting based on product context:

Market Risks:

• "What happens if [competitor] launches something similar in 60 days?"
• "What market assumption are you least confident about?"
• "What would cause users to choose a competitor instead?"

Technical Risks:

• "Which feature has the most technical uncertainty?"
• "What technology choice are you least confident about?"
• "Is there anything you've never built before?"

Adoption Risks:

• "What's the biggest friction point in [UJ-001 onboarding journey]?"
• "What behavior change are you asking users to make?"
• "What would cause a user to churn in the first week?"

Resource Risks:

• "If you had only 2 developers, what would you cut?"
• "What skill does the team lack?"
• "What's your runway for validation?"

Dependency Risks:

• "What external API or service could break your product?"
• "What partner relationship is critical?"
• "What regulatory requirement could block launch?"

Timing Risks:

• "Is there a hard deadline? What happens if you miss it?"
• "Is there a market window closing?"
• "What seasonal factor affects launch timing?"

Phase 3: Risk Documentation

For each identified risk, create RISK- entry with user input on severity and response.

Phase 4: Priority & Review

• Force-rank risks by Impact × Likelihood
• Identify top 3-5 that require active mitigation
• Document "accept" decisions explicitly

Interview Techniques

RISK- Output Template

CopyRISK-XXX: [Risk Title]
Category: [Market | Technical | Adoption | Resource | Dependency | Timing]
Description: [What could go wrong]
Trigger: [What would cause this to happen]
Impact: [High | Medium | Low] — User assessed
Likelihood: [High | Medium | Low] — User assessed
Priority: [Impact × Likelihood ranking]

Early Signal: [How we'd know this is happening]
Response: [Mitigate | Accept | Avoid | Transfer]
Mitigation: [Specific action if Response = Mitigate]
Owner: [Who is responsible for monitoring]

Linked IDs: [FEA-XXX, UJ-XXX, BR-XXX affected]
Review Date: [When to reassess this risk]

Example RISK- entry:

CopyRISK-001: Primary API Dependency (Stripe) Outage
Category: Dependency
Description: Stripe API outage would block all payment processing
Trigger: Stripe infrastructure failure or rate limiting
Impact: High — All revenue blocked during outage
Likelihood: Low — Stripe has 99.99% uptime SLA
Priority: 3 (High × Low)

Early Signal: Stripe status page, payment failure rate spike
Response: Mitigate
Mitigation:
  - Implement graceful degradation (queue payments for retry)
  - Add status page monitoring alert
  - Document manual billing fallback process
Owner: Tech Lead

Linked IDs: FEA-020 (payments), UJ-005 (checkout), BR-030 (pricing)
Review Date: Before launch, quarterly thereafter

Risk Response Types

Severity Matrix

Anti-Patterns to Avoid

Quality Gates

Before proceeding to Technical Stack Selection:

• All 6 risk categories explored
• Maximum 10-15 RISK- entries (focused, not exhaustive)
• Force-ranked by priority (Impact × Likelihood)
• Top 5 risks have specific mitigation plans
• "Accept" decisions are explicit, not accidental
• Every RISK- has an owner

Downstream Connections

RISK- entries feed into:

Detailed References

• Interview question bank: See references/question-bank.md
• RISK- entry template: See assets/risk.md
• Example risk register: See references/examples.md