Suspend finance-agent?
finance-agent (autonomous, production), owned by finance-ops@example.com.
Suspended agents are refused at authentication, before any policy runs. This is recorded in the audit log, and the agent can be resumed from the Agents page.
Submits POST /agents/arc_ag_c73111f98579055423626c6e4a1f2c86/suspend (unchanged contract)
Inert in this capture. In the live console this stops the agent at authentication, before any policy is consulted.