Risk Appetite

GET /api/v1/governance/risk-appetite

{
  "data": [
    {
      "id": "ra-uuid-001",
      "risk_level": "Medium",
      "threshold_value": 9,
      "description": "Enterprise default risk appetite",
      "legal_entity_id": null,
      "business_unit_id": null,
      "created_at": "2025-01-01T00:00:00Z",
      "updated_at": "2025-12-15T00:00:00Z",
      "updated_by": "admin-uuid"
    },
    {
      "id": "ra-uuid-002",
      "risk_level": "Low",
      "threshold_value": 4,
      "description": "Lower appetite for compliance-sensitive entity",
      "legal_entity_id": "le-uuid-002",
      "business_unit_id": null,
      "created_at": "2025-06-01T00:00:00Z"
    }
  ]
}

POST /api/v1/governance/risk-appetite

{
  "risk_level": "Medium",
  "threshold_value": 9,
  "description": "Updated enterprise risk appetite per Board resolution",
  "legal_entity_id": null,
  "business_unit_id": null
}

{
  "data": {
    "id": "ra-uuid-001",
    "risk_level": "Medium",
    "threshold_value": 9,
    "description": "Updated enterprise risk appetite",
    "updated_at": "2026-01-16T10:00:00Z"
  },
  "message": "Risk appetite configured successfully"
}

DELETE /api/v1/governance/risk-appetite/{risk_appetite_id}

{
  "message": "Risk appetite override removed"
}

GET /api/v1/governance/risk-appetite/history

{
  "data": [
    {
      "id": "rah-uuid-001",
      "risk_appetite_id": "ra-uuid-001",
      "previous_level": "Low",
      "new_level": "Medium",
      "previous_threshold": 4,
      "new_threshold": 9,
      "changed_by": "admin-uuid",
      "changed_at": "2026-01-15T14:00:00Z",
      "reason": "Board decision to accept higher risk for growth"
    }
  ]
}