Which of the following statements is assigned correctly as a project or product risk?

The software does not perform its intended functions according to the specification: this is a project risk.

The gradual expansion of the project scope result in significant rework: this is a product risk.

The system architecture does not adequately support some of the non-functional requirements: this is a product risk.

User experience feedback does not meet product expectations: this is a project risk.