diff --git a/agent.py b/agent.py
index 87346e8..95aae92 100644
--- a/agent.py
+++ b/agent.py
@@ -342,7 +342,7 @@ class AgentComplianceAuditor(A2AAgent[AgentComplianceAuditorConfig, NoAuth]):
         return InventoryResult(audit_id=audit_id, target=request.target, status=status, output_dir=output_dir, generated_files=files, inventory=inventory, evidence=evidence, warnings=warnings)
 
     @a2a.tool(description="Audit static configuration and repository files against A2A security, privacy, and platform controls", timeout_seconds=180, idempotent=True, cost_class="read-only")
-    async def audit_configuration(self, ctx: RunContext[NoAuth], request: AuditConfigurationRequest) -> FindingResult:
+    async def audit_configuration(self, ctx: RunContext[NoAuth], request: AuditConfigurationRequest) -> Any:
         audit_id = _audit_id(request.target, request.options.audit_id)
         await _event(ctx, "audit_started", audit_id=audit_id, skill="audit_configuration", target=request.target.agent_name)
         inventory = request.inventory or (await _collect_inventory(self, ctx, request.target, request.options, audit_id))[0]
@@ -366,7 +366,7 @@ class AgentComplianceAuditor(A2AAgent[AgentComplianceAuditorConfig, NoAuth]):
         return {"audit_id": audit_id, "target": _dump(request.target), "status": "ok", "output_dir": output_dir, "generated_files": [_dump(f) for f in files], "findings": [_dump(f) for f in findings], "evidence": [_dump(e) for e in evidence], "warnings": warnings, "mutations_performed": False}
 
     @a2a.tool(description="Deduplicate findings, map evidence to controls, and score severity, confidence, and aggregate risk", timeout_seconds=120, idempotent=True, cost_class="read-only")
-    async def assess_risk(self, ctx: RunContext[NoAuth], request: AssessRiskRequest) -> Any:
+    async def assess_risk(self, ctx: RunContext[NoAuth], request: AssessRiskRequest) -> RiskSummaryResult:
         audit_id = _audit_id(request.target, request.options.audit_id)
         await _event(ctx, "audit_started", audit_id=audit_id, skill="assess_risk", target=request.target.agent_name)
         all_findings = _dedupe_findings([*request.configuration_findings, *request.runtime_findings])