Inferred operation type.
Method name used for keyword-based risk escalation.
Inferred risk class.
The sensitive-keyword check runs before the operation-type branches, not
after: a create/update/export on a secret, credential, or
service-account is at least as sensitive as reading one, but until this
ordering was fixed the operation-type branches returned first and the
keyword check never ran, silently capping methods like
cloud.secret.createSecret and cloud.serviceAccount.createServiceAccount
at 'medium' no matter what they were named.
Infers a baseline risk class from the operation and method name.