{
  "policyVersion": "sha256:policy-demo",
  "items": [
    {
      "findingId": "finding-1",
      "status": "affected",
      "severityBand": "High",
      "severityScore": 7.5,
      "exceptions": [
        {
          "schemaVersion": "1.0",
          "exceptionId": "exc-001",
          "tenantId": "tenant-default",
          "name": "temporary-risk-acceptance",
          "displayName": "Temporary Risk Acceptance",
          "description": "Deterministic stub exception used for policy/effective and policy/simulate demos.",
          "status": "approved",
          "severity": "high",
          "scope": {
            "type": "component",
            "componentPurls": ["pkg:npm/example@1.2.3"],
            "vulnIds": ["CVE-2024-12345"]
          },
          "justification": {
            "template": "risk-accepted",
            "text": "Approved for demo tenant while remediation is planned."
          },
          "timebox": {
            "startDate": "2025-12-01T00:00:00Z",
            "endDate": "2025-12-31T23:59:59Z"
          },
          "createdBy": "user:demo",
          "createdAt": "2025-12-01T00:00:00Z",
          "updatedBy": "user:demo",
          "updatedAt": "2025-12-10T00:00:00Z"
        }
      ]
    }
  ],
  "continuationToken": null,
  "traceId": "trace-sample-4"
}