Severity
Used consistently across UI, alerts, and APIs.
Values: low, medium, high, critical.

Finding
Must conform to contracts/finding.json.