What 'blast radius' should actually mean in an AI-generated plan

A plan that says 'risk: medium' is not enough information to approve a production change. Medium compared to what? Affecting how many systems?

Every Changefy plan states blast radius explicitly — the specific resources, service accounts, or dependent services the plan touches — alongside the risk classification and the environment it applies to.

For WRK-2041, the blast radius was one service account and one logging sink: small, bounded, and stated plainly enough that an approver could reason about it in seconds rather than trusting a label.