# Stop / Revoke / Residual-Effects Matrix

**Author synthesis — reviewer aid, not provider-native status taxonomy.**

| Stop/revoke layer | What a bounded stop can mean | What may continue | Confirmation required | Residual checks |
|---|---|---|---|---|
| New-task admission | Reject new work at the admission gate | Already queued, running, child or dispatched work | Admission decision/log at current policy generation | inventory all work that predates stop |
| Queue / delayed scheduler | Remove or mark local jobs non-runnable before dispatch | Running workers; jobs already dequeued; downstream operations | queue state + dequeue/dispatch timestamps | check replay/dead-letter/restart behavior |
| Active local worker | Cooperative cancellation / local interruption | child calls; external requests already sent; non-cooperative code | worker acknowledgement + last operation timestamp | locate children/in-flight effects |
| Child agents / fan-out | Propagate stop request to known children | unknown/unregistered children; their already-dispatched effects | child inventory + per-child acknowledgement | reconcile every child and spawned job |
| Signer / credential authority | Prevent future signing/use after enforcement | already signed/pre-authorized artifacts; caches; sessions elsewhere | signer/token authoritative state + propagation evidence | find pre-signed/in-flight operations |
| Provider session/API | Close/revoke future session actions where documented | accepted/processing operations; other credentials/providers | provider state + effective time + coverage | query every accepted/unknown operation |
| OAuth token revocation (RFC 7009 comparator) | Invalidate token at authorization system | propagation window may exist; 503 means token assumed to still exist | HTTP result + downstream propagation evidence | verify caches/resource servers separately |
| MCP task cancellation 2025-11-25 comparator | Receiver should attempt stop and sets task `cancelled` | spec explicitly allows execution to continue | task response + independent work evidence | do not equate status with stopped effects |
| Rail/payment cancellation | Only what the relevant rail/provider specifically supports | committed/settled operations; refunds/reversals may be separate | provider/rail state, settlement/reconciliation record | distinguish cancel, reversal, refund, compensation |
| Reconciliation-only mode | Block new dispatch while preserving read-only observation | observation, status polling, evidence collection | observation access remains read-only | close unknown/committed/settled states before resume |