Suspension

How to stop an agent, stop everything, or cut Atlantic off from your deployment, and what a suspended tenant means.

Pausing an agent

A handler pauses an agent in LightHouse (agent.pause, with a reason); agent.resume brings it back. In the deployment it is the gateway’s kill switch on that agent’s scope: its model calls are refused until a person revives it. The agent shows paused. See Handlers.

Kill switches

Three switches, each below the last:

1. The gateway’s kill switch, in your deployment, on any scope: everything (*), the tenant, a pack, a task, a run, an agent or a person.

   python -m aal_engine.gateway --store var/gateway.sqlite kill   "*" --by ops@example.com --reason "incident 42"
   python -m aal_engine.gateway --store var/gateway.sqlite revive "*" --by ops@example.com --reason "incident 42 closed"

   It holds until a named person revives it. Every kill and revival names who did it and is reported to LightHouse (GET /api/v1/kills).

2. No models at all: set models_enabled = false in your stack and apply. The gateway’s identity loses its permission to call any model (on AWS, an explicit deny; on Azure and Google Cloud, the role is removed). See your cloud’s page.

3. Cut Atlantic off: to stop LightHouse reading your content in place, turn the content reader off (tier_b_enabled = false) or empty its copy of Atlantic’s reader key; to stop commands, turn the command channel off (commands_enabled = false) or empty its command key. Your agents keep running; LightHouse keeps receiving operational telemetry until you also stop the relay.

Tenant suspension and resumption

Atlantic can suspend a tenant. While it is suspended:

• nobody can sign in, and the API and MCP refuse every read;
• your deployments’ telemetry still arrives, so nothing is lost;
• your deployments keep running in your account.

Resuming restores sign-in and reads. A tenant that is leaving is suspended while its data is exported and deleted. See Leaving.

Where you pay Atlantic for managed model access, it is suspended when an invoice is overdue past your terms’ suspension day, or unpaid invoices pass your credit limit; your own models are not affected.