IAM: the report time is not last used

The report is a snapshot

The credential report is a file the account produced at a generated time. Every last-used cell in it is as of that file. Activity after the file was generated is not in it.

If the generated time is missing, write “report time not in the file.” Do not treat the download time on your laptop as the generated time.

Last used is one cell

A last-used value, including a marker that no use was recorded, belongs to that key row. It is not a statement about a different key, and it is not a statement that the key is incapable of being used later.

N/A or an empty use cell means the report did not record a use. It does not name a person, and it does not prove the key was never created.

What to write down

File the account, the report generated time, the key id as printed, and the last-used cell. If you say “unused since,” name the report time as the end of what you know.

Lab: a March date read as a lifetime

A lab report generated 2026-11-03 shows key lab-key-1 last used 2026-03-01. A draft says the key has been unused ever since March, including through the November generation, and also says it can never be used again.

The note quotes last used 2026-03-01 and generated 2026-11-03. The gap is only inside this file. Use after 2026-11-03 is not in the report. The key is not described as permanently dead.

Snippet

account: 111122223333
report generated: 2026-11-03
key: lab-key-1
last used cell: 2026-03-01
write: those two clocks
not: unused forever after March

Diagram

The file clock and the key cell

Last used stops at the report.

Generated time

Is. When this report was produced

Bounds. What the cells can know

Is not. The laptop download time unless you say so

Last-used cell

Is. The use this file recorded for that key

N/A. No use recorded in the file

Does not. Cover calls after the file was generated

Check yourself

1. A report generated on 3 November shows a key last used on 1 March. What does 1 March mean?

2. The last-used cell is N/A. What do you write?

3. You need use after the report was generated. Where does that come from?