get '/risks.json' do
  content_type('application/json')
  JSON.pretty_generate(
    risks.fetch(query: params[:query] || '').map do |r|
      {