ACCESS-BLOCK COMPARISON NOTE
Purpose: compare observations, not approve a change.

Attempt time + time zone:
App/client used and target resource, if known:
Expected result / observed error (redacted):

DEVICE ASSESSMENT
Where the compliance status was observed:
Observation time / available assessment time:
Reported state:
Same intended device confirmed by authorized reviewer? Yes / No / Unknown

MATCHED SIGN-IN (authorized support fills this section)
Event located? Yes / No / Unknown
Identity / client / resource / time / device match confirmed? [record each or Unknown]
Approved internal evidence reference (no token or secret):
Device information reported for that event:
Conditional Access outcome and relevant policy result:
Failure detail / unresolved difference:

NEXT HANDOFF
Known facts:
Unknowns:
Next read-only evidence check and authorized owner:
Approved channel for any sensitive details:
No policy, account or device change is authorized by this note.