---
id: SCR-PFM-SEC-015
title: Sign out
route: /logout
surface: console
product_area: platform
module: security
revision: 1
status: draft
design_intent: proposed
implementation_evidence: observed
inference: []
source_sha:
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
purpose: Clear the local console session and attempt provider refresh-token revocation.
supports:
- CAP-PFM-SEC-006
permission: 'none: public'
entry_from:
- The account menu
exits_to:
- /login
displays:
- field: Sign-out progress before navigation back to sign-in.
  source: Console session routes
  provenance: observed
actions:
- label: Sign out
  operation_id: Console logout route (revokes the refresh token)
  permission: none
  confirm: false
  provenance: observed
  source: react-console:components/auth/screens/session-screens.tsx
states:
- loading
validation:
- BR-CAP-PFM-SEC-006-05
patterns:
- Authentication layout
- LogoutScreen session effect
component: components/auth/screens/session-screens.tsx (LogoutScreen)
evidence:
- 'react-console at baf6dae: components/auth/screens/session-screens.tsx; the page route file; lib/security/api.ts,
  lib/hq/platform-ops.ts, lib/hq/platform.ts, lib/auth/*'
examined_at: '2026-10-23'
examiner: codex
controls: [TC-AVL-001, TC-AVL-005, TC-AZ-001, TC-AZ-002, TC-AZ-003, TC-AZ-004, TC-AZ-006, TC-CRY-001, TC-CRY-002, TC-CRY-003, TC-CRY-004, TC-DAT-001, TC-DAT-002, TC-DAT-003, TC-IAM-001, TC-IAM-002, TC-IAM-004, TC-IAM-005, TC-LOG-001, TC-LOG-002, TC-LOG-003, TC-LOG-004, TC-LOG-005, TC-MON-003, TC-PI-001, TC-PI-003, TC-PI-005, TC-SEC-001, TC-SEC-002, TC-SEC-003, TC-SEC-004, TC-TEN-001, TC-TEN-002, TC-TEN-003, TC-VEN-001, TC-VEN-002, TC-VEN-003]
---

# Sign out

## What the Screen Is For

Clear the local console session and attempt provider refresh-token revocation.

## What It Shows and Lets People Do

The page starts session logout and returns to sign-in. Session routes clear cookies even if provider revocation fails, and browser state changes are broadcast to other tabs.

## States and Errors

An already issued access token retains its own expiry. The screen closes local session navigation without promising immediate invalidation of every token.

The state rows describe observed loading, empty, refusal or inactive handling where present. Linked validation rules belong to the planning layer; client feedback and authoritative service checks have distinct responsibilities.

## Patterns It Must Respect

The pattern list names the built shared components and interaction patterns checked for this screen. This contract describes the existing screen; it supplies no replacement visual design.