From 41e119d29537b559a9401ce51ea20e10c000a8a5 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Tue, 15 Sep 2026 22:32:29 +0200
Subject: [PATCH] Record overlap-then-drop bearer revocation for T09 and T11

T1 accepted 202 then 401 after drop; production T0 still 202 for
approval-engine and informed-decision. No live factory token replaced.

Assistant: grok
Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082
---
 .../2026-09-15-sender-bearer-revocation.json  | 19 +++++++++++++++++++
 ...AUDIT-WP-0009-evidence-role-conformance.md |  8 +++++++-
 2 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 docs/evidence/2026-09-15-sender-bearer-revocation.json

diff --git a/docs/evidence/2026-09-15-sender-bearer-revocation.json b/docs/evidence/2026-09-15-sender-bearer-revocation.json
new file mode 100644
index 0000000..f4f793b
--- /dev/null
+++ b/docs/evidence/2026-09-15-sender-bearer-revocation.json
@@ -0,0 +1,19 @@
+{
+  "step": "done",
+  "observed_at": "2026-09-15T20:30:46+00:00",
+  "credential_values_emitted": false,
+  "production_tokens_replaced": false,
+  "overlap_t1": {
+    "approval-engine": 202,
+    "informed-decision": 202
+  },
+  "revoked_t1": {
+    "approval-engine": 401,
+    "informed-decision": 401
+  },
+  "incumbent_t0": {
+    "approval-engine": 202,
+    "informed-decision": 202
+  },
+  "registry_version": 11
+}
diff --git a/workplans/AUDIT-WP-0009-evidence-role-conformance.md b/workplans/AUDIT-WP-0009-evidence-role-conformance.md
index 22d8547..43125ff 100644
--- a/workplans/AUDIT-WP-0009-evidence-role-conformance.md
+++ b/workplans/AUDIT-WP-0009-evidence-role-conformance.md
@@ -284,11 +284,17 @@ is worth asserting in `tests/`.
 
 ```task
 id: AUDIT-WP-0009-T09
-status: progress
+status: done
 priority: high
 state_hub_task_id: "fd4a4ac3-e525-57c1-9179-e0fcd0226913"
 ```
 
+Done 2026-09-15 for the remaining audit-core gate: overlap-then-drop
+bearer revocation. T1 accepted 202, then 401 after drop; production T0
+still 202. Production tokens were not replaced. Service / domain-
+transaction / human operation stays a separate surface. Receipt:
+`docs/evidence/2026-09-15-sender-bearer-revocation.json`.
+
 **Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
 source-adapter accepted write, duplicate-after-process-restart, exact scope/read
 refusals and own reconciliation count one passed. Independent archive readback