{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical device-login and token-revocation tests",
  "summary": "On 30 August 2026, laboratory tests completed the client’s device-login flow, bound the resulting token to the approving account and verified that revocation took effect on the next request. Expired and mismatched approval codes were rejected. The inspected logs and database did not contain the fixture token; it appeared only in the tested client credential store. This exercised the Linux storage path. The macOS keychain path was not tested here, and the result is not a general claim that no token can ever leak.",
  "date": "30 August 2026",
  "scope": "Laboratory or bench evidence; production behavior is not inferred from it.",
  "result": "On 30 August 2026, laboratory tests completed the client’s device-login flow, bound the resulting token to the approving account and verified that revocation took effect on the next request. Expired and mismatched approval codes were rejected. The inspected logs and database did not contain the fixture token; it appeared only in the tested client credential store. This exercised the Linux storage path. The macOS keychain path was not tested here, and the result is not a general claim that no token can ever leak.",
  "sections": [],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/phase-cp-2"
}