KILL-SWITCH DRILL

LOCAL-ONLY / DRY-RUN FIRST

Rehearse the moment you cut an agent’s authority.

Declare the paths that actually stop one capability. Run a safe drill. Verify the control planes. Keep an incident card — without handing your production controls to a SaaS.

Run the safe drill Install the CLI

No telemetry. No agent runtime. Commands stay on your machine.

Halftone illustration of an emergency relay cutting three tool-authority threads.
Withdraw authority across the whole path, not just the process.

SAFE BROWSER REHEARSAL

A stop path in three checkpoints.

Nothing here reaches a provider. It mirrors the CLI’s default: actions are simulated; confirmations are explicit.

INCIDENT CARD / DRY RUN

READY

payments-write

Stage 01 is selected. Run the drill to record the staged confirmations.

  1. 01
    Deny proxy routeAction simulated · awaiting verification
  2. 02
    Revoke credentialAction simulated · awaiting verification
  3. 03
    Pause queueAction simulated · awaiting verification
Not yet run

WHY A DRILL

Observation is not authority withdrawal.

  1. 1

    Name the capability

    One profile per capability: not “turn off the agent,” but “stop payments write.”

  2. 2

    Declare each control plane

    Proxy, credential, deployment, queue: use command IDs held in a reviewed allowlist.

  3. 3

    Verify, don’t assume

    Run response checks after each step; the card makes weak links visible before an incident.

SINGLE RUST BINARY

From a config to a scrubbed card in under five minutes.

cargo install --path .
agent-kill-switch-drill init kill-switch.toml
agent-kill-switch-drill drill sample \
  --config kill-switch.toml --report incident-card.json

Default is dry-run. Actions are not executed.

Live requires friction. Use --live --confirm profile-name.

Reports are quiet. IDs and statuses only — no output or provider secrets.

ONE-TIME SUPPORT UNLOCK

Keep the core safety tool free.

The free CLI, dry-run, verification, and JSON export stay fully useful. A US$39 one-time support unlock funds updates and opens a printable tabletop worksheet pack. Sociobot/Dodo is merchant of record.

Optional unlock — no license stored.

Buy support unlock · US$39

Verification happens in your browser; cached valid licenses work on first paint when offline.