Secrets scanner flags a revoked key and the team cannot tell if the exposure is still real

A pipeline finds a leaked credential pattern, but responders must determine whether the secret is active, historical, or already revoked before escalating incorrectly.