Question: kill switch
What should an AI agent kill switch actually do?
In a Mandiant case study, an accounting agent made more than 15,000 high-cost API calls in under an hour, about $50,000 in cloud charges (Mandiant AI Risk and Resilience report, as reported by Help Net Security on 2026-09-16 (helpnetsecurity.com/2026/09/16/google-mandiant-enterprise-ai-security-risks-report)). At that rate, the minutes it takes to find the off switch are the cost.
Request a Pre-Flight Review See the six guardrails
Last updated 2026-09-26 · Agent Guardrail Desk, Denver, Colorado
Short answer
It should stop every run in flight, block new runs, cancel work already queued on the server, and be held by a named person who can use it from a runbook in minutes. Closing the laptop or killing the client process often does not stop server-side work.
The four things it must stop
- Runs in flight: the current step finishes or aborts, and no next step starts.
- New runs: triggers, schedules and webhooks are refused while the switch is on.
- Queued work: jobs already handed to a queue, a worker or a hosted agent service.
- Retries: automatic retry logic, which can restart a run you just stopped.
Who holds it
One named person per shift, written into the runbook, with a second named person as backup. The switch should not need the engineer who built the agent.
How to test it
Pull the switch during a live run on a staging copy and time it. Pass: the run in flight stops, no new run starts, queued work is cancelled, and the time to stop is written down. This is the Kill Switch acceptance test in the Six-Guardrail Pre-Flight.
Want it tested for you?
This test is one of six in the Six-Guardrail Pre-Flight. $1,500 per agent or automation, once. Delivered in 5 business days after read-only access to a staging copy.
Questions
Questions about this
- Is a feature flag a kill switch?
- It can be, if every trigger, worker and retry checks it before doing work, and if the review proves they do. A flag that only the web app reads is not a kill switch for a background worker.
- How fast should it be?
- Fast enough that the spend and damage during the stop are acceptable to you. Time it on staging and write the number down; that measured time is what the report records.
Related
Related pages
Every page links back to the Agent Guardrail Desk home page, where the price, the rulebook and the request form live.
The review, per situation
Buyer questions, answered
Price and sample
Next step
Request a Pre-Flight Review for one agent
$1,500 per agent or automation, once. Delivered in 5 business days after read-only access to a staging copy. If you book a Fix Sprint within 30 days, the $1,500 is credited in full against it.