Risk needs a reason. And a history.
A severity label cannot tell you why a weakness became more urgent today.
Risk changes with the environment.
Internet exposure, exploit availability, privilege expansion, business importance, control degradation, and new attack paths can change the urgency of an existing weakness. Deterministic risk calculations should make these contributing changes inspectable.
Hermes adds context and a concise explanation. Evidence IDs, confidence, previous assessments, and the conditions that could disprove the conclusion keep that explanation accountable. Unknown prior state stays unknown rather than becoming a fabricated improvement or decline.
Closure is an observed outcome.
A recommendation carries an owner and an expected response. A human can confirm an issue, explain expected behaviour, accept risk, plan remediation, or identify an incorrect assumption. The reason is retained as a learning signal.
Mitigation still depends on independent environmental evidence. Daily Genome Reports preserve what was known when generated; a fresh Pulse shows later change. Neither should manufacture resilience percentages or treat absent telemetry as proof of safety.