Kill switch

Emergency controls. Every activation notifies the #bell-oncall channel.

Two-man rule enforced on high-risk actions.

Actions flagged as High risk require approval from a second super admin within 5 minutes.

Pause AI globally

High risk

Bell stops responding to all guests on all orgs. Staff must answer manually. Use only during critical bugs or content safety incidents.

Scope : All organizations

Pause AI for a specific org

Medium risk

Bell stops responding for that org only. Scoped to a single tenant.

Scope : Per organization

Freeze integrations

High risk

Stop consuming PMS webhooks and outbound sync. Cuts all external I/O while we investigate.

Scope : All providers · Global

Boost AI rate limits

Low risk

Temporarily double the per-org limits for a marketing push or VIP event.

Scope : Per organization · 24h auto-expire

Broadcast maintenance message

Low risk

Inject a banner at the top of the staff dashboard for all or selected orgs. Good for scheduled downtime warnings.

Scope : All orgs or selected

Per-org scope

0 / 6 organizations included in scoped switches.

Oceania Porte de Versailles

Paris · FR

Excluded

Le Belloy Saint-Germain

Paris · FR

Excluded

The Hoxton Amsterdam

Amsterdam · NL

Excluded

Villa sul Lago

Como · IT

Excluded

Riad Cuivré Marrakech

Marrakech · MA

Excluded

Domaine de Provence

Saint-Rémy-de-Provence · FR

Excluded