Emergency-disable a resource

When something is compromised or misbehaving, emergency‑disable cuts it off immediately. Because authority lives in the control plane, the disable propagates through the projection and takes effect on the next request everywhere.

Requires break_glass_admin

Emergency controls are gated behind the break‑glass role and are themselves audited.

1. Preview the blast radius — what sessions, agents, and routes are affected.
2. Disable the target. In‑flight authority is withdrawn on the next request.
3. Review the audit trail — the action and its fan‑out are recorded.

Preview the blast radius

Preview what a disable would affect

UIAPICLI

1. Open Investigate → Emergency disable and choose the target.
2. Review the impact preview — affected sessions and dependents — before confirming.

POST/v1/revocations/preview

Copy

curl -X POST "$GATEWAY/v1/revocations/preview" \
-H "authorization: Bearer $TOKEN" \
-H "content-type: application/json" \
--data '{"target_type": "agent", "target_id": "sales-contract-agent"}'

View previewRevocation in the API reference →

Copy

gatewayctl emergency-disable --target agent --id sales-contract-agent --preview --format json

Every gatewayctl verb accepts --format text|json.

Disable now

Emergency-disable the target

UIAPICLI

1. Confirm the disable. The target is cut off and active sessions are torn down.

POST/v1/emergency-disable

Copy

curl -X POST "$GATEWAY/v1/emergency-disable" \
-H "authorization: Bearer $TOKEN" \
-H "content-type: application/json" \
--data '{"target_type": "agent", "target_id": "sales-contract-agent", "reason_code": "compromised_agent"}'

View emergencyDisable in the API reference →

Copy

gatewayctl emergency-disable --target agent --id sales-contract-agent --reason compromised_agent

Every gatewayctl verb accepts --format text|json.

It's immediate and audited

Emergency‑disable is a fail‑closed governance action, not a graceful drain. Use drain for planned upgrades. Every emergency action is recorded in the audit trail with its reason.