# Access inventory by role

A reusable skill the "Confirm access is actually gone" recipe pulls in. Add it once and every agent on the team can use it.

Map every system and permission level a role type typically holds, so the checklist starts complete.

## Method
1. Look up the {{role_type}} access inventory stored in memory.
2. List every system the role type has access to, with its permission level.
3. Cross-check the inventory against the departing employee's actual account list where available.
4. Flag any system on the employee's account list that the standing inventory doesn't cover.
5. Add newly discovered systems to the standing inventory for future exits.
6. Hand the finalized per-employee checklist to the revocation-execution step.

## Rules
- Store and reuse role-type inventories in memory (set on first run, then stored in memory); update them as systems are added.
- Cross-check the standing inventory against the employee's actual accounts — do not rely on the template alone.
- Flag any system found on the employee's accounts but missing from the inventory before revocation starts.
- Never omit a system from the checklist because it wasn't in the original template.

## Output
A per-employee access checklist: one row per system and permission level, sourced from the role-type inventory plus any employee-specific additions.