A governance exception is needed for a limited pilot. What should an accountable exception include?

1. Documented scope, rationale, owner, compensating controls, and an expiration or review date.
2. A generated approval attributed to an executive who never reviewed it.
3. Only deletion of the related finding.
4. A verbal permanent exemption from every future AI policy.