Goal: Incident control on-chain.
Why it matters: A flawed upgrade must not brick funds or state.
Proposed scope:
- Pause flag checked in mutable entry points, pause/unpause restricted to admin, events, and resume verification in integration tests.
Acceptance criteria:
- Mutations block when paused; reads remain available.
- Testnet drill demonstrates stop and resume.
Goal: Incident control on-chain.
Why it matters: A flawed upgrade must not brick funds or state.
Proposed scope:
Acceptance criteria: