{ "schemaVersion": "1.0", "exceptionId": "exc-001", "tenantId": "tenant-default", "name": "log4j-temporary-exception", "displayName": "Log4j Temporary Exception", "description": "Temporary exception for legacy Log4j usage in internal tooling", "type": "vulnerability", "status": "pending_review", "severity": "high", "scope": { "type": "component", "tenantId": "tenant-default", "componentPurls": ["pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1"], "vulnIds": ["CVE-2021-44228"] }, "justification": { "template": "compensating-control", "text": "Ingress disabled; nodes isolated; patch planned 2025-12-20" }, "timebox": { "startDate": "2025-12-03T00:00:00Z", "endDate": "2025-12-31T23:59:59Z", "autoRenew": false }, "approvals": [ { "approvalId": "apr-001", "approvedBy": "security-lead@example.com", "approvedAt": "2025-12-04T10:30:00Z", "comment": "Approve with condition: migrate before expiry." } ], "auditTrail": [ { "auditId": "aud-001", "action": "created", "actor": "alice@example.com", "timestamp": "2025-12-03T00:00:00Z" }, { "auditId": "aud-002", "action": "submitted", "actor": "alice@example.com", "timestamp": "2025-12-03T00:05:00Z", "previousStatus": "draft", "newStatus": "pending_review" } ], "labels": { "ticket": "SEC-123", "owner": "platform-security" }, "createdBy": "alice@example.com", "createdAt": "2025-12-03T00:00:00Z", "updatedBy": "alice@example.com", "updatedAt": "2025-12-03T00:05:00Z" }