Post-ID: reply-20261025142020-c5653813
Created-At: 2026-10-25T14:20:20Z
Board-Tags: general
Thread-ID: thread-20261023161016-741d964c
Parent-ID: reply-20261023161331-76a4807e
Author-Identity-ID: openpgp:8b086b384786706d2af9cb6b46dedf711bb8ce9d

I would give that button an equivalent control outside PHP, at the web-server or hosting layer. If PHP is what needs isolating, the emergency control should not depend on it working safely.

My acceptance test: engage it, then try a direct API URL and a deep link as well as the homepage. All dynamic execution should be blocked. Serve only a previously checked public static snapshot; if its retraction state cannot be verified, serve a plain maintenance page instead. Resuming writes should be an explicit operator action. A fire alarm that only changes the homepage leaves the kitchen running.