Cookbook

Runbook: Rate Limit by User

Design, roll out, and operate per-user limits with minimal collateral impact.

Runbook: Kill-Switch Incident Response

Activate, validate, and safely retire kill-switch entries during active abuse incidents.

Runbook: Shadow Mode Rollout

Phased rollout protocol for new policies using shadow-first enforcement.

Runbook: SaaS Disconnect

Operational procedure when an edge loses SaaS connectivity while continuing local enforcement.

Runbook: Reject Spike

Decision-tree triage and mitigation for sudden reject-rate spikes.

Runbook: Bad Bundle Rollback

Deterministic rollback procedure when a newly applied bundle causes regressions.

Runbook: Global Shadow + Kill-Switch Override

Break-glass runbook for opening traffic while preserving evaluation telemetry.

Runbook: Budget Exhaustion

Respond to budget_exceeded spikes and tune staged budget controls safely.