A risk is accepted because further mitigation is disproportionate. A mandatory contractual control remains unmet. What should be clarified?

1. That low expected loss cancels every contract term
2. Whether the obligation can lawfully and contractually be changed; internal acceptance alone does not waive it
3. That all contractual duties are technical suggestions
4. That the control operator can waive the contract privately