Kill switch
Emergency stop for agents—scopes, audit, and interaction with Deploy.
Purpose
With the kill switch you pause or terminate an agent; from then on, Rends refuses every action the agent checks. Activation is audited and visible in the audit trail.
Behavior
While an agent is paused or terminated, Deploy refuses to start a new execution for it, and Rends refuses every action the agent checks. A paused agent is resumed through Deploy; a terminated one is not.
APIs
Use the Govern kill-switch endpoints (see API reference) to pause or terminate one agent, or, where your plan allows, terminate every agent in the organization at once. A paused agent is resumed through Deploy.
When a stop takes effect: the pause or terminate call returns once the stop is recorded. From that moment, every action the agent checks through Rends is refused. An agent running on its own infrastructure is refused at its next check through Rends; an action that already passed its check before the stop is not interrupted.
Always test runbooks in a sandbox org before production incidents.