🔴 Emergency Freeze

One-click emergency change freeze. Sets sd_change_freeze with reason=Emergency, 24h duration.

🔴 EMERGENCY FREEZE ACTIVE

⏱ — remaining

ReasonEmergency

Set at—

Expires—

Declare Emergency Freeze

Immediately locks all change surfaces for 24 hours. All operator pages will show a freeze banner. Use only in genuine emergencies.

Impacted Surface Checklist

Verify impacted surfaces before/after freeze declaration.

Lambda — All function aliases locked, no promotions or rollbacks

DynamoDB — Table schema and capacity changes blocked

CloudFront — Frontend deploys and invalidations blocked

SES — Email configuration changes blocked

Lift Emergency Freeze

Type CONFIRM to lift the freeze.

T-JOSH Governance

🔐 T-JOSH Required

Emergency Freeze Governance Policy All emergency freezes are automatically logged to sd_gov_actions with risk level P0.

T-JOSH approval is required before any production surface changes during an active freeze.

Emergency freeze overrides the normal change-freeze manager and takes precedence over all scheduled maintenance windows.