<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Exception Management Process — API Reference

## Exception Request Schema

```json
{
  "exception_id": "EXC-2026-0001",
  "policy": "Encryption Standard §4.2",
  "justification": "Legacy system cannot support TLS 1.2",
  "scope": "Internal API between systems A and B",
  "compensating_controls": ["network_segmentation", "ip_restriction", "enhanced_logging"],
  "duration_months": 6,
  "risk_score": 9,
  "status": "active",
  "approver": "CISO",
  "expiration": "2026-07-15"
}
```

## Agent Commands

```bash
# Create exception request
node agent.js --action request --policy "Encryption Standard" --scope "Legacy API"

# Review and route exception
node agent.js --action review --input exception.json --risk-score 9

# Generate exception report
node agent.js --action report --input register.json --output report.json
```

## Approval Authority Matrix

| Risk Score | Level | Approver | Max Duration |
|-----------|-------|----------|--------------|
| 1-4 | Low | Security Manager | 12 months |
| 5-9 | Medium | CISO | 6 months |
| 10-16 | High | Risk Committee | 3 months |
| 17-25 | Critical | CRO/Board | 1 month |
