SYSE.35:4.4 - Qualify the stopping action

Determine what reducing exposure actually does. It may stop new task assignments, drain current tasks, change routing or disable a qualified feature. Observe the resulting state; a sent command is not proof that the candidate is no longer affecting users.

Use SYSE.34 for retained data and interface conditions. Returning traffic to an old executable is allowed only while that executable remains compatible with the actual state. Identify effects that persist after routing changes and who can resolve them.

Make the response available to the actual authorized person or mechanism. If the proposed stop requires unavailable access, an unsupported old runtime or a data restoration that has not been qualified, repair that premise before relying on bounded recovery.