- _risk_detect(): explicity set return value