How many accounts (reporter included) marked themselves affected.
Null when the reporter did not classify the report — both are optional at create time, and "unspecified" is a real answer. A client renders its own neutral copy; it must never be shown as a category the reporter chose.
Monotonic per-deployment issue number — the ONLY rendered identifier.
Opaque addressing handle (iss_…). data-* attributes and follow-up calls
ONLY — never rendered; number is the identity users see.
The reporter's Community chat handle, or null when they have none — clients render "anonymous" for null. Never an account id or email.
Null when the reporter declared no impact. Never defaulted to a level:
showing an operator medium for an unspecified severity fabricates a
reporter claim they never made.
The PUBLIC issue projection — every field here is readable by every caller, including a signed-out reader, and this list is exhaustive. There is deliberately no reporter account id, tenant id, project id, email, or evidence content: those live in private columns the cloud API never serializes onto this shape.