ol>
<h2 id="decision">Decision</h2>
<p><strong>SPIKE Nexus will NOT implement a lock/unlock API or CLI feature.</strong></p>
<p>Instead, operators are recommended to achieve system-level locking by either:</p>
<ol>
<li><strong>Managing SPIRE registration entries</strong>: Removing or disabling the relevant
SPIRE registration entries for SPIKE Nexus will immediately block all
authenticated API access, effectively freezing the system in a secure,
auditable, and SPIFFE-native way.</li>
<li><strong>Using infras