An analyst calculates risk_level from risk_score: 80 or higher is critical, 50-79 is elevated, otherwise normal. Which eval expression is best? The search will be copied into a scheduled report, so the reviewer rejects solutions that rely on visual table formatting alone. The operations team will reuse the object in dashboards and alerts, so the chosen approach must be stable across searches.
