Thanks @bjoernek I appreciate the quick response!
I’m still confused what happens in this case if there are no mitigations approved. Would the triggered event result in no action being taken until an approved mitigation is implemented?
I’m going to be “that guy” for a second and ask what DF considers to be “truly decentralized”. I think that is very subjective. Would it be better to say that a canister can request an exemption that is subject to NNS approval? This way, we just leave it up to stakeholders to use their best judgement.
Edit: Thinking about this a bit more; I do like the idea of having this exemption be something that can be granted and revoked by the NNS on a case by case basis. We really don’t know how the IC is going to evolve and specifying a DAO seems way too restrictive.