Deactivating a Super Agent pauses it against future triggers. From the documentation, there is no way to stop a run that is already executing. AI Hub even surfaces a "Runs in Progress" count, so the platform knows what is in flight, but there is no action attached to that number. For teams running agents with write access across a workspace, that is the difference between a safety control and a suggestion. If the only thing that ends a run is the run finishing, the stop condition belongs to the agent rather than to the admin. Today an admin assembles the picture by hand across five read-only surfaces: AI Hub for a live-run count, Activity for what ran and where, Workspace audit logs for configuration change, each agent's profile for its tools and permissions, and the App Center for MCP and credential reach. None of them has a button. The ask: one admin console, with two stop controls. Live roster of every agent: online state, runs in progress, trigger source Where each live run's output is landing right now — which task, doc, channel or DM Tools, locations, MCP connections and credentials per agent, side by side Halt one agent — end its runs now, leave everything else working Freeze the workspace — one action, all agents, all runs Both logged, and both notifying the users whose work was interrupted rather than leaving them to discover a silent stop Per-agent baselines, so an abnormal run rate, cost spike or tool-call burst raises a flag instead of waiting for someone to read a log Related, same root problem (happy to split these into separate posts if that is easier to triage): Re-evaluate permissions and tool grants at each tool call rather than once at dispatch, so revoking access lands inside a live run. Where boundary state is ambiguous, block and escalate rather than proceed. Deny-write by default on agent instructions and persistent memory, with an origin marker showing whether an instruction block was human- or agent-authored. Express agent network reach as an admin-held domain allowlist instead of a yes/no on web access. Skill provenance: pin a content hash at approval and re-verify on load for any external URL a Skill resolves at runtime, plus an inventory and a revocation path tied to offboarding. Enforced cross-agent boundaries: no agent editing another agent's instructions or memory, and inter-agent trigger rights as a narrow explicit grant rather than a default. Full evidence base, with sourcing and an interactive mock of the console: https://2229230.clickup.ai/a/h/240ze-107651/8f1dd54830010ba Happy to walk through any of this with the Super Agents team. There’s sourcing from an IBM security conference discussion along with primary sourcing that really shows this is a serious need for enterprise level deployments.