What problem does it solve? When a deploy handoff fails or must be undone, teams need a safe, auditable way to reverse it without deleting history or double-rolling back. This Skill performs the SAGA compensating action for the S6 handoff step: it revokes the issued short-lived OIDC credentials, signals the release control plane to halt or roll back the promotion, and appends an idempotent revoke record to the audit trail. ## Core Features & Use Cases - SAGA compensation: Reverses the handoff mechanics (credentials and control-plane promotion) tied to a specific receipt_id, not the business outcome. - Named-human approval gate: A named confirmer must approve the revoke; withheld confirmation blocks the action and routes to delivery-handoff-failures. - Idempotent, append-only audit: Replays for an already-revoked receipt return the existing record, and the original receipt is never deleted or rewritten. - Use Case: A delivery pipeline's S6 SAGA compensation fires after a failed release-handoff. Provide the receipt_id, reason, and idempotency_key; a named human confirms, and the skill revokes credentials, halts the promotion, and emits a revoke record with an audit_id. ## Quick Start Ask the agent to revoke the deploy handoff for a given receipt ID with a reason and idempotency key, then have a named human confirm the reversal.
