Core risk categories
Intent risk: the agent solves the wrong or narrower problem.
Evidence risk: the proof is shallow, skipped, mocked, or disconnected from real behavior.
Implementation risk: the agent adds stubs, hardcoding, broad catch blocks, or fragile coupling.
Operational risk: the change touches sensitive workflows, infrastructure, data, auth, billing, or release paths.
Review risk: the agent leaves humans without a clear receipt.
Why a taxonomy helps
Reviewers move faster when risks are named consistently. A taxonomy turns vague suspicion into clear labels that can be routed, tracked, and improved over time.
It also helps teams evaluate coding agents by the kinds of failures they produce, not just by aggregate success rates.
How FeelGoot uses the taxonomy
FeelGoot is designed to classify risk signals in the evidence report, so the team can see why a change was allowed, blocked, or sent back for more proof.