fleetai-safetyoperationshuman-in-the-loop
Fleet kill switch: pause every autonomous agent in one operator action
When incident response matters, org-wide kill switch returns BLOCKED on every verify until you resume — agents, robots, and workflows stop side effects immediately.
May 13, 20266 min read
Incident response for autonomous fleets needs a big red button that works in seconds — not a ticket to disable API keys one service at a time. Sanctum’s org-wide kill switch returns BLOCKED on every verifyAction until an operator resumes.
When to use it
- Suspected prompt injection across multiple agents
- Bad model deploy or policy misconfiguration
- Security exercise or regulated maintenance window
What still works
Audit logging continues. Operators review the queue in the console or mobile PWA. Resume restores normal policy evaluation — no redeploy required.
More: all posts · runtime trust layer · open Sanctum Console
