2 commits

Author	SHA1	Message	Date
ScreenTinker	8dd6491288	fix(#146) P1.3: per-feature env kill switches + fallout doc section ... Every new subsystem is disable-able via env (flip + restart, no redeploy/bisect): - FLAP_LIMITER_ENABLED=false -> flap limiter always allows. - OTA_DOWNLOAD_GUARD_ENABLED=false -> download guard always admits. - MAINTENANCE_BAND_GATE_ENABLED=false -> interval maintenance ignores band. - CONNECT_RATE_QUARANTINE_TRIPS=0 -> quarantine off (already; confirmed). Startup prune is never band-gated regardless. Kill switches table added to the fallout doc. Tests assert each OFF behaviour. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-30 22:03:00 -05:00
ScreenTinker	e19a363750	docs(#146): hardening fallout summary + measured before/after blocking costs ... Deliverables 3 & 4: per-item blast radius + soak signals, and the before/after worst-case synchronous blocking for every hot path touched (prune, sweeps, OTA, register, telemetry). Ends with the A<->B interlock note (ship together). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-30 21:41:05 -05:00