Suspend engineering-agent?
engineering-agent (autonomous, production), owned by platform@example.com.
Suspended agents are refused at authentication, before any policy runs. This is recorded in the audit log, and the agent can be resumed from the Agents page.
Submits POST /agents/arc_ag_c92e58dc46afacd2726b9a4dad1e3fdd/suspend (unchanged contract)
Inert in this capture. In the live console this stops the agent at authentication, before any policy is consulted.