Design a risk management ticketing system where human users can create and modify tickets and an automated risk-scanner bot can also submit tickets. Requirements: ticket lifecycle and states, role-based access control, idempotent ticket creation to avoid duplicates from the bot, concurrency control on updates, search and filtering, notifications, and monthly reporting for users and managers. Cover storage schema, APIs, background jobs for report generation, audit trails, and how the system scales for high volume.