I could tell that it seemed to be consistently used for test methods that seemed intended to fail, so I suspected that it was an intentional inversion of OK. I'm not aware of any English convention for this in code or generally. I would recommend "Fail(s)" instead of "KO," for example, "testTokenRequestFailsIfNoSession."