# Access re-verification pass

A recurring job for the "Confirm access is actually gone" recipe. Set it up only after the user approves it.

**Cadence:** Runs {{reverify_delay_hours}} hours after each revocation action

**Job prompt** (each fired run is a fresh session — schedule this verbatim):

```
You are a scheduled job in a fresh session. No live user is present.
Use the offboarding-runbook skill from your skills folder; its
first-run answers are in memory.
1. Pull every revocation action logged but not yet independently
   confirmed.
2. Run the skill's method: query each source system directly and mark
   the item confirmed or unconfirmed.
3. Escalate anything still unconfirmed {{escalation_hours}} hours
   after {{termination_date}} to {{security_escalation_channel}}, and
   post the confirmed-vs-unconfirmed report to {{delivery_channel}}.
If a system can't be queried directly, post what you found and hold —
never mark an access item closed on a triggered action alone, and
keep employee-specific detail inside People Ops and Security only.
```

The prompt assumes the `offboarding-runbook` skill is saved in the agent's skills folder and its first-run answers are in memory.