Use this skill when a user is done with the work that needed an override and wants to tear it down explicitly rather than waiting for it to expire.
Required argument: override_id (typically obtained from list-overrides or returned by create-override).
Call the delete_override MCP tool. The platform records an override_revoked audit event so the revocation is part of the compliance trail.
After revocation:
- The next policy evaluation will not consult the revoked override
- The override remains visible via
list-overridesonly wheninclude_revoked=true - An attempt to revoke an already-revoked or non-existent override returns 404; surface this as "override not found or already revoked" rather than a hard error
Confirm to the user: "Override <id> revoked. The previously-blocked tool will now require a fresh override or policy change before it succeeds."