FICTIONAL EXAMPLE | VENDOR POLICY v3
This is invented demonstration material, not an institutional policy.

SECTION 4.2 | EXCEPTIONS
The designated risk owner reviews an exception request. The request includes
a reason, compensating controls and an expiry date. Applying an exception
requires the institution's authorized decision process.

FICTIONAL PROCEDURE VERSION CONFLICT
Procedure v2 says the policy owner reviews the request.
Procedure v3 adds a second review before the exception is applied.
These versions deliberately disagree. The demonstration withholds a conclusion
until the owner identifies the controlling version.

DELIBERATE GAP | PERSONAL AI ACCOUNTS
This example has no approved-provider list or handling rule for personal AI
accounts. An answer must identify the gap and refer it to the policy owner.

REVIEW USE
Use the question sheet to discuss citations, version conflict and missing evidence.
Do not use this invented material to govern real vendors or confidential data.