{"name":"CapitalGuard Blank AI Agent Offboarding Register","version":"1.0.0","updatedAt":"2026-07-29","canonical":"https://capitalguard.io/guides/ai-agent-offboarding-checklist-for-small-businesses","purpose":"A blank template for documenting identity, repository, application, token, connector, transfer, and verification actions during human or AI-agent offboarding.","limitations":["This register does not itself revoke access or prove that every access path was removed.","It cannot prove deletion of local copies, cached data, or data held by a third party.","Completed records can contain sensitive architecture and personnel metadata and should remain in an authorized private system."],"workflow":[{"id":"map","label":"Map","title":"List every identity and access path","action":"Record the departing person or retired agent, every AI tool and service account it used, repositories, identity groups, installed apps, connectors, devices, tokens, keys, and shared secrets. Assign an owner and cutoff time to each path."},{"id":"block","label":"Block","title":"Disable sign-in and end active sessions","action":"Disable the primary identity first, revoke identity-provider sessions and refresh tokens, and suspend managed devices where appropriate. Then close sessions inside third-party applications because an identity provider may not control tokens issued by the application itself."},{"id":"revoke","label":"Revoke","title":"Remove repository and tool access","action":"Remove organization, team, repository, AI workspace, MCP server, connector, GitHub App, OAuth app, personal access token, SSH key, deploy key, and API access that belongs to the subject. Check indirect access through other teams, groups, forks, and organizations."},{"id":"transfer","label":"Transfer","title":"Transfer ownership and rotate shared credentials","action":"Move owned automations, scheduled jobs, repositories, files, calendars, and recovery duties to a named owner before deletion. Rotate any credential the subject knew or shared when it cannot be individually revoked, then test the replacement automation."},{"id":"verify","label":"Verify","title":"Test closure and record exceptions","action":"Attempt a controlled sign-in, repository fetch, agent run, and connector call using the retired path. Review available audit events, record the evidence, and assign an owner and deadline to any local copy, offline device, unsupported integration, or other residual access."}],"fields":[{"key":"offboarding_id","label":"Offboarding ID","purpose":"A non-sensitive reference for the complete offboarding event."},{"key":"subject_type","label":"Subject type","purpose":"Person, contractor, agent, bot, or service account being removed."},{"key":"subject_reference","label":"Subject reference","purpose":"A private internal identifier instead of personal details in exported evidence."},{"key":"effective_at","label":"Effective time","purpose":"The approved time at which access should stop."},{"key":"coordinator","label":"Coordinator","purpose":"The person accountable for completing and verifying the workflow."},{"key":"ai_tools_and_agents","label":"AI tools and agents","purpose":"Editors, coding agents, assistants, bots, and managed AI workspaces in scope."},{"key":"identity_accounts","label":"Identity accounts","purpose":"Identity-provider, email, source-control, cloud, and local accounts to disable."},{"key":"repositories_and_orgs","label":"Repositories and organizations","purpose":"Source-control organizations, repositories, forks, and outside-collaborator access."},{"key":"teams_and_groups","label":"Teams and groups","purpose":"Direct and inherited access granted through teams, groups, roles, or SCIM."},{"key":"apps_and_connectors","label":"Apps and connectors","purpose":"GitHub Apps, OAuth apps, MCP servers, browser integrations, and SaaS connectors."},{"key":"sessions_and_devices","label":"Sessions and devices","purpose":"Identity-provider sessions, application sessions, browsers, and managed devices."},{"key":"tokens_and_keys","label":"Tokens and keys","purpose":"Personal access tokens, API keys, SSH keys, deploy keys, and app passwords."},{"key":"shared_secrets_to_rotate","label":"Shared secrets to rotate","purpose":"Credentials known to the subject that cannot be individually revoked."},{"key":"owned_assets_to_transfer","label":"Owned assets to transfer","purpose":"Automations, scheduled jobs, repositories, files, calendars, and recovery duties."},{"key":"new_owner","label":"New owner","purpose":"The accountable owner accepting transferred assets and automations."},{"key":"local_or_offline_copies","label":"Local or offline copies","purpose":"Clones, downloads, caches, exports, and offline devices requiring separate handling."},{"key":"revocation_evidence","label":"Revocation evidence","purpose":"Privacy-reduced references to completed administrative actions and audit events."},{"key":"verification_test","label":"Verification test","purpose":"The controlled negative-access and replacement-automation checks performed."},{"key":"residual_access_or_exception","label":"Residual access or exception","purpose":"Any unresolved path, its risk owner, and the deadline for closure."},{"key":"completed_at","label":"Completed time","purpose":"When the coordinator completed the workflow."},{"key":"approver","label":"Approver","purpose":"The person who reviewed the evidence and accepted any documented exception."}],"blankRecord":{"offboarding_id":"","subject_type":"","subject_reference":"","effective_at":"","coordinator":"","ai_tools_and_agents":"","identity_accounts":"","repositories_and_orgs":"","teams_and_groups":"","apps_and_connectors":"","sessions_and_devices":"","tokens_and_keys":"","shared_secrets_to_rotate":"","owned_assets_to_transfer":"","new_owner":"","local_or_offline_copies":"","revocation_evidence":"","verification_test":"","residual_access_or_exception":"","completed_at":"","approver":""},"primarySources":[{"publisher":"NIST","control":"SP 800-53 account management and personnel termination","documentedBoundary":"AC-2 and PS-4 establish account-lifecycle and personnel-termination controls, including defined notification and access-termination timing. CapitalGuard applies those control ideas to human and agent-linked identities; NIST does not certify this checklist.","url":"https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final","checkedAt":"2026-07-29"},{"publisher":"GitHub","control":"Remove an organization member","documentedBoundary":"Removing a member ends organization access, but GitHub warns that local copies can remain, indirect enterprise access may persist, and forks controlled by other organizations can retain separate access.","url":"https://docs.github.com/en/organizations/managing-membership-in-your-organization/removing-a-member-from-your-organization","checkedAt":"2026-07-29"},{"publisher":"GitHub","control":"Review and revoke organization token access","documentedBoundary":"Organization owners can review and revoke fine-grained personal access tokens that reach organization resources. GitHub notes that this interface does not revoke classic personal access tokens and that SSH keys created by a revoked token continue to work.","url":"https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","checkedAt":"2026-07-29"},{"publisher":"GitHub","control":"Revoke SAML sessions and authorized credentials","documentedBoundary":"Enterprise owners can revoke linked identities, active SAML sessions, and SSO authorization for tokens or SSH keys. GitHub states that revoking SSO authorization does not delete the underlying token or SSH key.","url":"https://docs.github.com/en/enterprise-cloud@latest/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/viewing-and-managing-a-users-saml-access-to-your-enterprise","checkedAt":"2026-07-29"},{"publisher":"GitHub","control":"Review and revoke GitHub App authorization","documentedBoundary":"A user can revoke a GitHub App authorization granted through their account. GitHub says organization owners cannot revoke a member's personal authorization, but can uninstall the app from the organization to stop its access to organization resources.","url":"https://docs.github.com/en/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps","checkedAt":"2026-07-29"},{"publisher":"Microsoft","control":"Revoke Microsoft Entra user access","documentedBoundary":"Microsoft documents disabling the user, revoking refresh tokens, and disabling registered devices. It also warns that applications can issue their own session tokens, which must be revoked under each application's authorization policy.","url":"https://learn.microsoft.com/en-us/entra/identity/users/users-revoke-access","checkedAt":"2026-07-29"},{"publisher":"Google Workspace","control":"Delete or remove a managed user","documentedBoundary":"Google documents transferring important business data before deleting a managed user. Deletion blocks access to organizational Workspace services, while data that is not transferred can be deleted and cannot later be recovered.","url":"https://support.google.com/a/answer/33314?hl=en","checkedAt":"2026-07-29"},{"publisher":"Google Workspace","control":"Suspend access and revoke active credentials","documentedBoundary":"Google documents suspension, password reset, sign-in-cookie reset, OAuth-token revocation, and app-password removal as distinct controls. Suspending a user resets sign-in cookies and OAuth tokens.","url":"https://support.google.com/a/answer/2984349?hl=en","checkedAt":"2026-07-29"}]}