Every agent chain needs a kill switch. Not at the protocol. At the norms.