Kill-switch

Disable AI operations without redeploy — at system, risk-level, or tenant scope.

Activate kill-switch
No kill-switch rows — AI operations are enabled.