Kill Switches and Safe States
A kill switch stops or constrains new activity and may attempt cancellation, but it cannot assume cancellation is instantaneous or successful.
Central questions
- What triggers manual or automatic intervention?
- Which actions remain permitted while stopping?
- How is residual live exposure discovered and handled?
Planned model
Trigger strategy, account, venue, and firm-level stops while orders are pending and filling. Display new-order blocking, cancel progress, uncertainty, and recovery authority.