Deterministic retrieval with provenance. If confidence is low you get
INSUFFICIENT — never a guess.
INSUFFICIENT — the corpus doesn't support a confident answer to that.
Try registry vocabulary: tiers (HIGH/LOW), axes (auth, egress, exploit), sources (github/npm).