One change set, one apply button. Set active mode and block behavior together, then run emergency actions only when needed.
Theme: system (light)
Operator Authentication
Authenticated: No
No control state loaded yet.
Unified Change Set
Draft mode and block updates, then apply once.
Active mode
Sandbox status
Current sandbox state: unblocked
Live status
Current live state: unblocked
Generated reason preview: no-op change set @ 2026-04-20 01:48:31 UTC
If blank, reason auto-fills on submit with concise change summary and timestamp.
Pending changes
No draft changes yet.
Login required
Emergency Actions
Break-glass immediately snaps the system back to sandbox, and can optionally leave live blocked so the fallback path stays isolated. Restore replays the most recent control snapshot and returns the console to its previous operating state.