{
  "scope": "Original synthetic retirement inventory; no real account/key/credential value or cloud operation",
  "reviewDate": "2026-01-01",
  "asset": {
    "kind": "credential",
    "id": "K17",
    "label": "old-supplier-export",
    "lastObservedUse": "2025-01-15",
    "nextConfiguredConsumer": "annual-supplier-export",
    "nextConfiguredRun": "2026-01-15"
  },
  "columns": [
    "Evidence",
    "What it establishes",
    "What it does not establish",
    "Next decision"
  ],
  "evidence": [
    [
      "No observed use since15Jan2025",
      "No use in observed window",
      "No future/seasonal dependency",
      "Check calendar and coverage"
    ],
    [
      "Annual export referencesK17",
      "Known configured dependency",
      "Job still needed or correctly owned",
      "Confirm owner and replacement"
    ],
    [
      "Old recovery note referencesK17",
      "Possible fallback dependency",
      "Fallback still supported",
      "Review and update runbook"
    ],
    [
      "New credential test succeeds",
      "Replacement works for tested route",
      "All consumers migrated",
      "Inventory remaining consumers"
    ],
    [
      "Planned disable then observe",
      "Exposure reduced under a plan",
      "Universal safe deletion time",
      "Use meaningful coverage and rollback"
    ]
  ],
  "requiredDispositions": [
    "Confirm annual export is necessary or retire the workload",
    "Trace effective credential alias references",
    "Assign an accountable maintenance owner",
    "Migrate necessary consumers and verify relevant route",
    "Set finite disable/observe/delete plan under actual platform rules",
    "Update live configuration and recovery notes"
  ],
  "notEstablished": "No claim that a quiet observation period proves the absence of all consumers"
}
