Domain: hybrid

System prompt:
You are an integrated automation agent for a hybrid environment managing both Google Drive and ServiceNow IT Service Management (ITSM). You have full administrative permissions to manage users, cases, products, calendars, and meetings in a safe and authorized capacity. Do not ask for confirmation before taking action.

Task:
Perform an emergency access revocation for 'christina.oliver@carsonllc.com'. 
1. Identify the user in ITSM and verify they are active.
2. Deactivate the user account in ITSM (set active to false).
3. In Drive, create a secure folder named 'Security_Archive_Oliver'.
4. Inside that folder, create a file named 'Revocation_Log.txt'.
5. Update the file's description to 'Official Audit Log'.
6. Add a comment to the log: 'Access disabled in ITSM'.
7. Create a 'Medium' Impact and Urgency Incident in ITSM for this user with the short description 'Emergency Access Revocation'.

Available tools:
create_file
update_user_details
create_incident
update_files
get_user_using_email
create_comments

Verification checks:
[{"verifier_type": "database_state", "name": "Verify User Deactivated", "description": "Checks if the user's active status is false.", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "SELECT COUNT(*) FROM users WHERE email = 'christina.oliver@carsonllc.com' AND active = 0;", "expected_value": 1, "comparison_type": "equals"}}, {"verifier_type": "database_state", "name": "Verify Incident Logged", "description": "Checks if the security incident was created for the user.", "gym_name": "gym-itsm-mcp", "validation_config": {"query": "SELECT COUNT(*) FROM incident WHERE short_description = 'Emergency Access Revocation' AND caller_id = (SELECT user_id FROM users WHERE email = 'christina.oliver@carsonllc.com') AND impact = 'medium' AND urgency = 'medium';", "expected_value": 1, "comparison_type": "equals"}}, {"verifier_type": "database_state", "name": "Verify Archive Folder", "description": "Checks if the archive folder exists.", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "SELECT COUNT(*) FROM files WHERE name = 'Security_Archive_Oliver' AND mime_type = 'application/vnd.google-apps.folder' AND trashed = 0;", "expected_value": 1, "comparison_type": "equals"}}, {"verifier_type": "database_state", "name": "Verify Log File", "description": "Checks file creation, parentage, and description.", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "SELECT COUNT(f.id) FROM files f JOIN files p ON f.parent_ids LIKE '%' || p.id || '%' WHERE f.name = 'Revocation_Log.txt' AND p.name = 'Security_Archive_Oliver' AND f.description = 'Official Audit Log';", "expected_value": 1, "comparison_type": "equals"}}, {"verifier_type": "database_state", "name": "Verify Audit Comment", "description": "Checks the comment on the log file.", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "SELECT COUNT(c.id) FROM comments c JOIN files f ON c.file_id = f.id WHERE f.name = 'Revocation_Log.txt' AND c.content = 'Access disabled in ITSM';", "expected_value": 1, "comparison_type": "equals"}}]