An incident containment playbook revokes the VM role, but the host's metadata proxy cache keeps serving old credentials for several minutes

The control plane moved fast, yet runtime revocation lag created a dangerous grace period.