This story makes the feature about "accepted risks" alive.

If a cluster admin sets up accepts risks for a cluster, an update is accepted if its exposed risks are all accepted. Otherwise, the update is rejected.

DoD:

If a cluster admin accepts RiskA and RiskB and requests an update to a new version:

• The update is accepted if the update is recommended.
• The update is accepted if the cluster thought it was only exposed to RiskA.
• The update is accepted if the cluster thought it was only exposed to RiskA and RiskB.
• The update is rejected if the cluster thought it was only exposed to RiskC.
• The update is rejected if the cluster thought it was only exposed to RiskA and RiskC.