10. Exceptions and Constraints
DACS permits constrained-use exceptions, but exceptions must be explicit and evidenced. An exception does not make a failed control pass. It allows bounded use under recorded authority and conditions.
Each exception record shall include:
- control ID or Gate condition affected;
- reason for exception;
- decision scope and usage boundary;
- risk or constraint statement;
- approving authority or approved exception rule reference;
- readiness state;
- expiration or review condition;
- remediation owner and next action where applicable.
An approved constrained-use exception that permits material use shall produce Caution, not Proceed, and every failed control remains Fail. If use is prohibited, the Gate readiness state shall be Stop. Candidate or unresolved evidence that is not permitted for material reliance shall remain Quarantined until the applicable rules establish another state.