ReviewRemediationRoute
How prov-svc would EXECUTE a revoke, derived from the resource's fulfiller type (pinned to
prov-svc loadFulfillmentExecutor): CONNECTOR → connector, USER/GROUP → manual_ticket,
VIRTUAL → virtual, FUNCTION → function. Independent of the remediation MODE — a manual-mode
grant on a CONNECTOR resource still routes connector (operator-triggered connector revoke).
disabled is the disabled-mode bucket: no remediation runs at all.
enum ReviewRemediationRoute {
connector
disabled
function
manual_ticket
virtual
}