Sample walkthrough — kill receipt is the product
Hold a signed sample
Control-plane revoked is not data-plane proof. LingerCut probes are least-harm: we never replay actions that create business side effects. GitHub PATs are proved by absence re-list, not by using the token to clone or push. A visitor can mint a sample kill receipt on LingerCut-controlled demo leftover access. VALID only if the least-harm replay of the old grant fails. This is a real signed receipt on lab fixtures — not a screenshot and not a production cut of your tenant. One-click VALID vs WITHHELD lives on /demo.
Why identity providers cannot prove residual access is gone →
Create → verify → download
Demo leftover lc_gt_01 (Google OAuth / Slack SSO) — illustration / synthetic. LingerCut cuts, then replays the old grant. VALID only because that replay bounced. Vendor revoked=true is recorded and not trusted. A signature later is receipt integrity, not the liveness check. Sample walkthrough — not a production kill of your tenant.