docs consolidation and others

docs/modules/risk-engine/samples/factors/README.md

@@ -0,0 +1,3 @@
+Use the root `INGEST_CHECKLIST.md`.
+Drop factor payloads by source (epss/, kev/, reachability/, runtime/), normalize with `jq -S .`, update `SHA256SUMS`, verify with `sha256sum -c`.
+Keep UTC timestamps and no live data.

docs/modules/risk-engine/samples/factors/SHA256SUMS

@@ -0,0 +1,2 @@
+fe460af2699ce335199f6e26597bab4530c6f3f476d4b1f93526175597565d10  README.md
+13cf45be5a287a38d000aff4db266616e765fc1acdc1df9f37b2e03eb729d1d2  factors-normalized.json

docs/modules/risk-engine/samples/factors/factors-normalized.json

@@ -0,0 +1,44 @@
+{
+  "profile_id": "default-profile",
+  "context_id": "ctx-001",
+  "factors": [
+    {
+      "name": "cvss",
+      "source": "nvd",
+      "type": "numeric",
+      "path": "/cvss/base_score",
+      "raw_value": 7.5,
+      "normalized_value": 0.75,
+      "weight": 0.4,
+      "contribution": 0.4,
+      "timestamp_utc": "2025-12-05T00:00:00Z",
+      "provenance": "sha256:cvsshash"
+    },
+    {
+      "name": "kev",
+      "source": "cisa",
+      "type": "boolean",
+      "path": "/kev/in_catalog",
+      "raw_value": true,
+      "normalized_value": 1.0,
+      "weight": 0.3,
+      "contribution": 0.3,
+      "timestamp_utc": "2025-12-05T00:00:00Z",
+      "provenance": "sha256:kevhash"
+    },
+    {
+      "name": "reachability",
+      "source": "scanner",
+      "type": "numeric",
+      "path": "/reachability/score",
+      "raw_value": 0.9,
+      "normalized_value": 0.9,
+      "weight": 0.3,
+      "contribution": 0.3,
+      "timestamp_utc": "2025-12-05T00:00:01Z",
+      "provenance": "sha256:reachhash"
+    }
+  ],
+  "ordering": "factor_type->source->timestamp_utc",
+  "precision": 4
+}