{
  "schemaVersion": "ga-authorization-revocation-supersession-preflight-v1.0",
  "sourceSchemas": {
    "authorizationValidity": "ga-authorization-validity-window-preflight-v1.0",
    "authorizationProvenance": "ga-authorization-provenance-preflight-v1.0",
    "authorityBoundaryLedger": "ga-authority-boundary-ledger-v1.0",
    "externalEffectDenial": "ga-external-effect-denial-matrix-v1.0"
  },
  "mode": "deterministic_authorization_revocation_supersession_preflight_only",
  "generatedAt": "2026-08-02T23:19:00-06:00",
  "status": "blocked_no_revocable_authorization_record",
  "targetRing": "controlled_ga",
  "prerequisiteSnapshot": {
    "activeAuthorizations": 0,
    "completedValidityFields": 0,
    "evaluatedValidityChecks": 0,
    "signedProvenanceLinks": 0,
    "authorizedAuthorityDomains": 0,
    "executedExternalEffects": 0
  },
  "triggers": [
    {
      "id": "revocation-manual",
      "order": 1,
      "type": "manual_revocation",
      "label": "Explicit manual revocation request",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    },
    {
      "id": "revocation-expiry",
      "order": 2,
      "type": "automatic_expiry",
      "label": "Authorization expiry",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    },
    {
      "id": "revocation-scope",
      "order": 3,
      "type": "scope_change",
      "label": "Authorized scope changed",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    },
    {
      "id": "revocation-audience",
      "order": 4,
      "type": "audience_change",
      "label": "Authorized audience changed",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    },
    {
      "id": "revocation-security",
      "order": 5,
      "type": "security_blocker",
      "label": "New security blocker",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    },
    {
      "id": "revocation-supersession",
      "order": 6,
      "type": "superseding_authorization",
      "label": "Separately signed superseding authorization",
      "required": true,
      "triggerRef": null,
      "requestedBy": null,
      "requestedAt": null,
      "evaluatedBy": null,
      "evaluatedAt": null,
      "evaluated": false,
      "activated": false
    }
  ],
  "fields": [
    {
      "id": "authorization_ref",
      "order": 1,
      "label": "Authorization being revoked",
      "required": true,
      "value": null
    },
    {
      "id": "revocation_reason",
      "order": 2,
      "label": "Human-readable revocation reason",
      "required": true,
      "value": null
    },
    {
      "id": "trigger_ref",
      "order": 3,
      "label": "Verified trigger reference",
      "required": true,
      "value": null
    },
    {
      "id": "requested_by",
      "order": 4,
      "label": "Revocation requester identity",
      "required": true,
      "value": null
    },
    {
      "id": "requested_at",
      "order": 5,
      "label": "Revocation request timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "approved_by",
      "order": 6,
      "label": "Independent revocation approver identity",
      "required": true,
      "value": null
    },
    {
      "id": "approved_at",
      "order": 7,
      "label": "Revocation approval timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "effective_at",
      "order": 8,
      "label": "Revocation effective timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "superseding_authorization_ref",
      "order": 9,
      "label": "Superseding authorization reference",
      "required": true,
      "value": null
    },
    {
      "id": "revocation_record_ref",
      "order": 10,
      "label": "Immutable revocation record reference",
      "required": true,
      "value": null
    }
  ],
  "checks": [
    {
      "id": "revocation-active-authorization",
      "order": 1,
      "type": "active_authorization_identified",
      "label": "An active authorization is identified",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-trigger-verified",
      "order": 2,
      "type": "trigger_verified",
      "label": "A real trigger is independently verified",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-separation",
      "order": 3,
      "type": "separation_verified",
      "label": "Requester, approver and executor separation is verified",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-approval",
      "order": 4,
      "type": "approval_recorded",
      "label": "Independent human approval is recorded",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-effective-time",
      "order": 5,
      "type": "effective_time_bound",
      "label": "Effective timestamp and timezone are bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-supersession",
      "order": 6,
      "type": "supersession_bound",
      "label": "Any replacement authorization is separately signed and bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-effects-denied",
      "order": 7,
      "type": "external_effects_denied",
      "label": "External effects remain denied through the transition",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "revocation-audit-chain",
      "order": 8,
      "type": "audit_chain_bound",
      "label": "Immutable revocation and provenance chain is bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    }
  ],
  "record": {
    "revocationRequested": false,
    "revocationApproved": false,
    "revocationEffective": false,
    "supersessionRecorded": false,
    "externalEffectsRemainDenied": true,
    "recordRef": null
  },
  "prohibitedClaims": [
    "missing_authorization_as_completed_revocation",
    "expired_window_as_recorded_revocation",
    "ci_success_as_revocation_approval",
    "draft_pr_as_superseding_authorization"
  ],
  "summary": {
    "triggerTypes": 6,
    "evaluatedTriggers": 0,
    "activatedTriggers": 0,
    "requiredFields": 10,
    "completedFields": 0,
    "checks": 8,
    "evaluatedChecks": 0,
    "satisfiedChecks": 0,
    "revocationRequests": 0,
    "approvedRevocations": 0,
    "effectiveRevocations": 0,
    "supersessions": 0
  },
  "nextHumanAction": {
    "action": "After a real active authorization exists, require a separately approved trigger, effective timestamp, immutable record and continued denial of external effects before recording revocation or supersession.",
    "executed": false
  },
  "recommendation": {
    "value": "do_not_record_revocation_or_supersession",
    "reasonCodes": [
      "active_authorization_absent",
      "revocation_trigger_absent",
      "revocation_fields_blank",
      "revocation_checks_not_evaluated",
      "superseding_authorization_absent"
    ],
    "canOverrideHumanDecision": false
  },
  "authority": {
    "triggerRecordingAllowed": false,
    "triggerEvaluationAllowed": false,
    "fieldMutationAllowed": false,
    "checkEvaluationAllowed": false,
    "evidenceLinkingAllowed": false,
    "revocationRequestAllowed": false,
    "revocationApprovalAllowed": false,
    "revocationEffectiveTimeSettingAllowed": false,
    "supersessionRecordingAllowed": false,
    "revocationRecordCreationAllowed": false,
    "authorizationActivationAllowed": false,
    "authorizationMutationAllowed": false,
    "decisionRecordingAllowed": false,
    "launchAuthorizationAllowed": false,
    "executorAssignmentAllowed": false,
    "executionEventRecordingAllowed": false,
    "transitionExecutionAllowed": false,
    "rollbackExecutionAllowed": false,
    "audienceOrCustomerActivationAllowed": false,
    "communicationDispatchAllowed": false,
    "billingConnectorOrCustomerDataMutationAllowed": false,
    "productionMutationAllowed": false,
    "readyForReviewAllowed": false,
    "mergeAllowed": false,
    "deploymentAllowed": false,
    "productionReleaseAllowed": false,
    "externalEffect": false,
    "humanRevocationApprovalRequired": true,
    "immutableAuditTrailRequired": true,
    "denyByDefaultAfterExpiryRequired": true
  }
}