# Running Exemptions Document

Authority: Germaine Brown is the sole authorizer of any departure from the
Policy & Procedure document (P&P section 8). No exemption is assumed; it is requested,
justified, approved, and recorded here.

## Schema

| Field | Meaning |
|---|---|
| ID | EX-### |
| Date | When requested/approved (ET) |
| Requester | Who raised it |
| Provision departed from | Which P&P section/policy |
| Request + justification | The business reason |
| Authorization | Germaine's decision |
| One-time / ongoing | Duration |
| Follow-up date | For ongoing exemptions |
| Status | open / closed |

---

## Entries

### EX-001: Public-repo credential exposure (D3) deferred

| Field | Value |
|---|---|
| ID | EX-001 |
| Date | 2026-08-13 (raised in Phase One, re-surfaced at Phase Two start) |
| Requester | Germaine Brown |
| Provision departed from | P&P section 1 (no live credentials in any repo): the public repo `itpp-infrastructure` re-leaks live admin credentials |
| Request + justification | Defer the repo lockdown ("leave the repo alone for now") while Phase One was read-only |
| Authorization | Deferred by Germaine in Phase One |
| One-time / ongoing | One-time, with a Phase Two follow-up |
| Follow-up date | Phase Two start (now): this is Workstream 1 item 10 (D3/EX-001) |
| Status | OPEN: pending Germaine's updated decision now that Phase Two is starting |