skills/exception-waiver-factory/SKILL.md

---
name: exception-waiver-factory
description: Draft governed exception and waiver packets with scope, expiry, residual-risk owner and compensating controls. Use when the user needs exception waiver factory for CIO decision support.
---

# Exception Waiver Factory

## Mission

Turn unavoidable exceptions into governed, time-boxed, owner-backed waiver drafts.

## Inputs

Accept control gaps, delivery exceptions, architecture waivers, risk acceptances, audit gaps and decision packets.

## Workflow

1. Identify candidate exception or waiver.
2. Define scope, risk, owner and expiry.
3. Draft compensating controls.
4. Identify approval path and evidence gaps.
5. Produce a waiver packet for human approval.

## Output Format

- Executive Summary
- Candidate Exceptions
- Waiver Scope
- Residual Risk Owner
- Expiry / Review Date
- Compensating Controls
- Approval Path
- Evidence & Assumptions

## Guardrails

Waivers are drafts only. Human approval and specialist review remain required.