risk-based traversal