pub fn risk(tool: &str, reason: &str) -> &'static str
The risk tier of a call that needs approval, from the policy’s reason.