Cross-Project Risk Register

Use this as a lightweight index. Detailed mitigations belong in project-level risks.md.

| Date | Project | Risk | Severity | Link | Owner | |---|---|---|---|---| | 2026-05-29 | OpenEvidence API / Hermes Integration | PHI/compliance exposure if used without BAA/security review. | High | ../projects/open-evidence-api/risks.md | Jeremy/security | | 2026-05-29 | Medplum AWS Dev Environment | Accidental PHI/patient data in dev. | High | ../projects/medplum-aws-dev/risks.md | Jeremy/security |