Every organisation has one.

It doesn't appear on the architecture diagram. It isn't documented in the governance framework. Nobody introduced it deliberately. It grew in the space between the mandate and the moment someone needed to move faster than the mandate permitted.

The exemption door is the gap between what governance says must happen and what actually happens when delivery pressure arrives.

Here is how it works.

The governance framework is established. Mandatory architecture review. Mandatory design authority sign-off. Mandatory baseline alignment. The language is unambiguous. The intent is clear. Someone writes it down and calls it policy.

Then a programme gets a deadline. Or a minister makes a commitment. Or a vendor contract is already signed. And the people who could route the work through the governance process make a different calculation. The cost of compliance is delay. The cost of the exemption door is theoretical.

They go through the door.

The first time it happens, someone notices. The second time, someone documents it as a precedent. By the fifth time, the exemption has a process. There is a form. There is a person who approves it. The exemption door is now part of the governance framework.

Negotiable governance is not governance. It is the appearance of governance. It produces the audit trail of governance. It does not produce what governance exists to produce.

The architecture review that can be exempted cannot catch the failure the review was designed to prevent. Because the programmes that need the review most are precisely the programmes under the pressure that qualifies them for exemption.

Nobody broke the governance framework. They used it exactly as it evolved.

The door was always open. The mandate just didn't know that yet.