Controls

The kill-switch snapshot: global, per application, per provider and per model alias. Read-only in Phase 0 — changes are made through the admin API directly.