Order Risk REST API to GraphQL migration

[EmmyMatt]

Hey Shopify team,

During our migration from the Order Risk REST API to the OrderRiskAssessment GraphQL API, we are encountering the following challenges.

• The recommended field that replaces message field in Order Risk REST API is RiskFact.description. However, it seems that this field only provides descriptions of the indicators used in the fraud analysis, rather than an overall message related to the risk like the message field. Could you provide some insight on how we can use the  RiskFact.description to get an equivalent of the message field? 
• Is there any official reference for what score (from Order Risk REST API) should be mapped to each riskLevel?
• Since there is no recommended replacement for merchant_message in the Order Risk REST API, can we assume it will always be equivalent to the message field?

[EmmyMatt]

Following up on this!

[EmmyMatt]

I have one more query,
My understanding is that the OrderRiskSummary.recommendation is determined by the OrderRiskAssessment with the highest riskLevel, as follows:
ACCEPT: LOW
INVESTIGATE: MEDIUM
CANCEL: HIGH
NONE: NONE
Is this accurate? If we score based on the highest riskLevel from the assessment, will it match if we base the score on recommendation?