Demo: Rehearsal as a pre-publish / pre-revoke control (CVE-2026-35435)
Two-beat sales demo of Rehearsal on contoso, anchored to a real Azure AI Foundry CVE: enumerate live agents + rehearse revocation (Beat 1), then project a proposed agent's day-one blast radius before approval (Beat 2).