Blog
fleetai-safetyoperationshuman-in-the-loop

Fleet kill switch: pause every autonomous agent in one operator action

When incident response matters, org-wide kill switch returns BLOCKED on every verify until you resume — agents, robots, and workflows stop side effects immediately.

May 13, 20266 min read

Incident response for autonomous fleets needs a big red button that works in seconds — not a ticket to disable API keys one service at a time. Sanctum’s org-wide kill switch returns BLOCKED on every verifyAction until an operator resumes.

When to use it

  • Suspected prompt injection across multiple agents
  • Bad model deploy or policy misconfiguration
  • Security exercise or regulated maintenance window

What still works

Audit logging continues. Operators review the queue in the console or mobile PWA. Resume restores normal policy evaluation — no redeploy required.

Compliance evidence · Enterprise

More: all posts · runtime trust layer · open Sanctum Console

Build AI humans can trust.

Open the cloud console to manage runtimes and policies, or self-host the open-source runtime from GitHub.