Root Evidence vs Vulnerability Risk Intelligence (2026)