-- SheListens — migration 003: client risk flag
-- Run via phpMyAdmin or: mysql -u USER -p DBNAME < migrations/003_risk_flag.sql
-- Safe to run on an existing database.

ALTER TABLE users
  ADD COLUMN IF NOT EXISTS risk_flag ENUM('low','watch','high') NOT NULL DEFAULT 'low' AFTER admin_password_hash;