# Suspension

> Pausing an agent, stopping everything, and what suspension of a tenant means.

How to stop an agent, stop everything, or cut Atlantic off from your deployment, and what a suspended tenant means.

## Pausing an agent

A handler pauses an agent in LightHouse (`agent.pause`, with a reason); `agent.resume` brings it back. In the deployment it is the gateway’s kill switch on that agent’s scope: its model calls are refused until a person revives it. The agent shows `paused`. See [Handlers](/concepts/handlers/).

## Kill switches

Three switches, each below the last:

1. **The gateway’s kill switch**, in your deployment, on any scope: everything (`*`), the tenant, a pack, a task, a run, an agent or a person.

   ```bash
   python -m aal_engine.gateway --store var/gateway.sqlite kill   "*" --by ops@example.com --reason "incident 42"
   python -m aal_engine.gateway --store var/gateway.sqlite revive "*" --by ops@example.com --reason "incident 42 closed"
   ```

   It holds until a named person revives it. Every kill and revival names who did it and is reported to LightHouse (`GET /api/v1/kills`).

2. **No models at all**: set `models_enabled = false` in your stack and apply. The gateway’s identity loses its permission to call any model (on AWS, an explicit deny; on Azure and Google Cloud, the role is removed). See your [cloud’s page](/clouds/).

3. **Cut Atlantic off**: to stop LightHouse reading your content in place, turn the content reader off (`tier_b_enabled = false`) or empty its copy of Atlantic’s reader key; to stop commands, turn the command channel off (`commands_enabled = false`) or empty its command key. Your agents keep running; LightHouse keeps receiving operational telemetry until you also stop the relay.

## Tenant suspension and resumption

Atlantic can suspend a tenant. While it is suspended:

- nobody can sign in, and the API and MCP refuse every read;
- your deployments’ telemetry still arrives, so nothing is lost;
- your deployments keep running in your account.

Resuming restores sign-in and reads. A tenant that is leaving is suspended while its data is exported and deleted. See [Leaving](/data-sovereignty/leaving/).

Where you pay Atlantic for managed model access, it is suspended when an invoice is overdue past your terms’ suspension day, or unpaid invoices pass your credit limit; your own models are not affected.

Source: https://docs.atlanticagenticlabs.com/operations/suspension/