Recognises rejected access still active
Rejected access still active after the campaign.
Can AI do this?
Not settled yet The benchmark tested this, but the models' answers do not settle yet whether they master it. 0 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 83% | Not shown |
| gemini-3.5-flash-lite | Low cost | 83% | Not shown |
| gpt-6-luna | Low cost | 84% | Not shown |
| claude-haiku-5-5 | Low cost | 83% | Not shown |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: The grants and their revocation
How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: RC-001 rejected 4 TELLER grants in July; 3 still active in October Acceptable: Revoked within 5 working days, with evidence
Also known as: Recertification results not acted on
Related knobits
Builds on
Usually followed by
All 16 knobits of Monitor and audit access.
Source: Review checklist 05-monitoring-audit, row 10 (27002 5.18; DMBOK)