Authority and observation are different

A provider result is evidence of what happened, not the source of Qevra authority.

Qevra Access is a separate, in-progress phase for administering existing human memberships in external providers. It does not use Gateway Entitlements or Access Leases for Provider Assignments.

An administrator selects a verified connection, exact target, ordinary role, and fixed deadline. Qevra records the accepted authority. A dedicated worker then acts on that command and records what the provider reported.

Revocation ends Qevra authority immediately. Remote provider access may remain until removal is observed, and provider sessions or other access paths can outlive that observation. The product keeps those facts distinct rather than claiming a stronger guarantee.