AI Agent Runbook Skill

Core Instructions

Step 1: Kill-switch operations

Document three switches with operator-only access:

• Global kill-switch — refuses every tool with kill_switch.global = refuse across every tenant. Two-person rule. Used for upstream provider compromise, mass irreversible-incident, or red-team-confirmed catastrophic vulnerability.
• Per-tenant kill-switch — refuses tools for one tenant. Used for tenant-scoped incident, contractual obligation, or customer request.
• Per-feature kill-switch — refuses tools for one agent feature globally. Used for feature-scoped regression or SEV1 from the SLO doc.

State the propagation SLA (default 5 s), the rehearsal cadence (monthly in staging), and the operator surface (ops console + API + on-call paging integration).

Step 2: Force-pause and force-resume

• Force-pause an agent run — orchestrator marks the run intervened; in-flight tool calls complete or time-out; no further steps.
• Force-pause all runs for a tenant — soft kill-switch; existing runs paused; new starts refused.
• Force-resume — orchestrator resumes from last durable state with reasoning logged; available only after a SEV closure review.