# Agent stop-evidence worksheet

**Version:** 1.0
**Last updated:** 2026-10-26
**Source:** KLA Digital (kla.digital/blog/ai-agent-stop-evidence)

---

## About this worksheet

Use this worksheet when an AI agent's authority is withdrawn and an incident owner must state what
has stopped. It records the authority withdrawn, the routes that enforce the withdrawal, open and
committed work, and the evidence that is missing.

It is an editorial template informed by published research and protocol specifications: Liu, Yu and
Zhang, *Revocation Is Not Complete at Receipt* (arXiv 2610.15991); Zhu and Wang (arXiv 2609.21284);
RFC 7009 and RFC 7662; OpenID CAEP 1.0 and Shared Signals Framework 1.0; and MCP cancellation
(specification 2025-06-18). It is a proposed operational record. It is not a certification or a
standardised closure protocol.

## Worksheet

| Field | Record |
| --- | --- |
| Incident owner and reviewer | |
| Workflow, tenant and environment | |
| Authority withdrawn; root and delegation identifiers | |
| Revocation request and committed change identifiers | |
| Clock sources, uncertainty, and observation start and end | |
| Actions and effect destinations included | |
| Explicitly excluded routes and the reason for each | |
| Enforcement routes; last observed authorization version per route | |
| Queue entries, retries, delegated work and pending commitments | |
| Disposition per item: prevented, completed earlier, transferred, pending or unknown | |
| Independent successor authority and accepting owner | |
| Attempts and committed effects after the declared cut | |
| Late receipts and reconciliation actions | |
| Missing collectors, stale views or contradictory evidence | |
| Evidence references and integrity checks actually performed | |
| Remaining actions, owners and next review time | |

## Stop statement

"For [authority] and [declared routes], observations from [start] to [end] show [result]. [Items]
remain unresolved because [specific evidence gap]. [Owner] owns reconciliation."

Keep the time and scope qualifiers when this statement is reused in an incident summary. A blank
field is an unanswered question.