Function risk_refresh_reference 

pub async fn risk_refresh_reference(
    configuration: &Configuration,
    refresh_reference_in: RefreshReferenceIn,
) -> Result<RefreshReferenceOut, Error<RiskRefreshReferenceError>>

Takes a new version of one set. SuperAdmin only. It is platform work, not tenant work: it writes the shared baseline every organisation reads, so it is gated to the platform’s own identity. Nothing here can write an organisation’s overrides, and nothing an organisation sends can reach this route. Idempotent. A version is the content digest of what was taken, so refreshing an unchanged publisher writes no rows and reports unchanged. Resumable: a run that died half-way is continued from where it stopped rather than restarted. A set whose source needs a licence we do not hold is refused with the reason, rather than being quietly skipped.