{
  "title": "AI agent credential revocation: blank evaluation worksheet",
  "status": "UNRUN proposed engineering aid",
  "scope": "Owned or explicitly authorized isolated environment; synthetic data; no secrets or production retries of revoked tokens",
  "definitions": {
    "authorityChangedAt": null,
    "firstObservedResourceRejectionAt": null,
    "lastObservedTargetEffectAt": null,
    "observationWindow": null,
    "clockOffsets": null
  },
  "cases": [
    {
      "case": "Permitted control",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    },
    {
      "case": "Refresh-token revocation",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    },
    {
      "case": "Access-token revocation",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    },
    {
      "case": "Cached authorization",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    },
    {
      "case": "Accepted job",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    },
    {
      "case": "Separate child identity",
      "status": "UNRUN",
      "requestId": null,
      "credentialReferenceNoSecret": null,
      "affectedTokenPolicy": null,
      "pathAndVersions": null,
      "policyReference": null,
      "expectedOutcome": null,
      "decisionRecord": null,
      "jobId": null,
      "independentTargetOutcome": null,
      "permittedControlOutcome": null,
      "uncertainty": null
    }
  ],
  "limits": [
    "No completed test result",
    "No universal time-to-containment threshold",
    "No prevention, cancellation, rollback or conformance guarantee"
  ]
}
