git:20260320.bfbf3af to v5.0.0

16 added, 7 removed. Audit A to A.

---

name: plan-risk

- description: "[SCAN:risks|before=build]=>[WARN:user|tone=manageable]"

+ description: Identify risks before building. Flag third-party dependencies, API limits, and cost traps.

+ version: 5.0.0

---

- [SCAN:before-build]

- risks=3rd-party-API|payment-credentials|file-upload-storage|auth-security|heavy-data-processing

- [WARN:user|tone=calm]

- "有一个地方要注意：支付功能需要你有一个支付平台的账号，我先用测试模式做，等你准备好了再接真实支付。"

- [FRAME:risk-as="we'll handle"|not="problem"]

- [SCARE:user|allow=false]

+ ::GENE{plan-risk|conf:confirmed|scope:global}

+ T:flag_third_party_dependencies

+ T:flag_api_rate_limits

+ T:flag_cost_traps

+ T:suggest_free_alternatives_first

+ A:ignore_cost_risk⇒flag

+ A:assume_unlimited_api⇒check

+ ::ACTIVATE{plan-risk}

+ ON:plan_created

+ ON:external_api_detected