A team clones or customizes security recipes. What should its governance process preserve?

1. Permanent exemption of all production compartments.
2. Approved policy intent, documented exceptions, testing, and ongoing review.
3. A guarantee that a recipe name alone establishes compliance.
4. A rule to disable every failing policy without review.