Put the Decision Beside the Defect

Record who accepted, downgraded or deferred the defect directly on the ticket.

“The project accepted the risk” is useless because projects cannot join incident calls and explain themselves.