# Revocation execution

A reusable skill the "Confirm access is actually gone" recipe pulls in. Add it once and every agent on the team can use it.

Trigger or ticket revocation for every checklist item, with a clear deadline on each.

## Method
1. Take the finalized access checklist for the departing employee.
2. For each item, check whether the agent has a direct system connection.
3. Where a direct connection exists, trigger the revocation action.
4. Where none exists, open a ticket to {{it_owner}} with the deadline set to {{termination_date}}.
5. Record the action taken and its timestamp for each item.
6. Pass the full checklist, with actions logged, to the independent re-verification step.

## Rules
- Set every ticket's deadline to {{termination_date}} — no open-ended tickets.
- Record the exact action and timestamp per item; an untracked action can't be re-verified.
- Never mark an item closed at this step — execution only confirms the action was sent, not that it worked.
- Route tickets to {{it_owner}} (set on first run, then stored in memory) for anything outside the agent's direct reach.

## Output
An action log: one row per checklist item, the action taken — triggered or ticketed — and its timestamp, ready for re-verification.