We query the Digital Advisor GraphQL API (risks(), and separately riskInstances()) and consistently get far fewer risks back than a NetApp-generated SAM report shows for the same fleet on the same day (~25 vs. 41). We've ruled out the usual suspects: overrode all three coverage defaults (excludeContractExpiredSystems, systemStates, productTypes), tried 8 filter variants (isHealthDiagnostic, isRiskAcknowledged, origin, empty/omitted), checked every customer ID individually/summed/unscoped, and confirmed full cursor pagination on both endpoints — all land on the exact same ~25 risks.
Every missing risk falls under what NetApp's own support-offering matrix calls "Health Check (Recommended SW/FW, Recommended Configuration, Best Practices)" — gated off Support Edge Warranty/Standard, only enabled from Basic/Premium/Secure/Advisor up. Is this gate intentional and tier-based regardless of query arguments, and if so, is there an API-visible entitlement field we should be checking instead of just noticing the count mismatch?
