Review risky Shopify orders before they ship

**Objective:** Find orders flagged as risky in the last `{lookback-days}` days (default 7) and rank the ones that still need a decision before they ship. Minimum risk level to include: `{risk-level}` (default high).

**Step 1: Pull the risk assessments**

Call `shopify-get-order-risk` filtered by `risk-level` (use the value the tool's schema lists for the requested level; if the level is empty, use high). Then call it again filtered by `recommendation` set to the cancel recommendation, and again for the investigate recommendation, and merge the results by order-id. Keep provider-title, risk-level, recommendation, sentiment and description for each.

**Step 2: Check each flagged order**

For each distinct order-id, call `shopify-get-order` filtered by `order-id`. Drop orders created before the lookback window. For the rest note total-price, financial-status, fulfillment-status, cancelled-at, email and customer-id.

* Already cancelled: note and exclude from the action list.
* Already fulfilled: the goods have left; list separately as exposure, not as something to stop.
* Unfulfilled or partially fulfilled: this is the action list.

For orders on the action list, call `shopify-get-transaction` filtered by `order-id` to see whether payment was captured or only authorized, and `shopify-get-customer` filtered by `customer-id` to see orders-count and total-spent. A first-time customer with a high-value order is higher risk than a repeat customer.

**Step 3: Report**

A table ranked by priority (cancel recommendation first, then high risk level, then order value):

| Order | Created | Total | Payment | Fulfillment | Risk level | Recommendation | Provider reason | Customer orders to date |

Then a short list of the already-fulfilled flagged orders with their totals, and a one-line count of how many flagged orders were already cancelled.

**Rules & Guidelines:**

* This prompt is read-only. Do not call `shopify-update-order` or any other add or update tool. Cancelling, refunding and holding orders are decisions for a person.
* Quote the provider's description as given; do not invent a fraud reason.
* A risk flag is a signal, not proof. Word the recommendation as review, not as fraud.

**Validation:**

* If no risk assessments match, say that no orders were flagged at that level and stop.
* If an order-id from the risk tool cannot be found with `shopify-get-order`, list it as unresolved rather than dropping it.