Kill switch
Last verified
A kill switch revokes credentials on demand — one key, one provider, or everything — as a single deliberate action.
The distinction that matters is between _observing_ and _acting_. Most cost tools tell you something is wrong; the response is still a manual trip to a provider console, sign-in included. When the problem is discovered at the weekend, that gap is where the money goes.
Because it is destructive and irreversible, a kill switch should be hard to trigger by accident — a deliberate confirmation gesture, ideally with a biometric check.