overhead</li>
<li>Leveraging existing SPIRE mechanisms for system-level access control</li>
</ul>
<h2 id="considered-options">Considered Options</h2>
<ol>
<li>Implement a lock/unlock mechanism in SPIKE Nexus (<em>persisted in the backing
store, enforced at API level</em>)</li>
<li>Use SPIRE registration entry management (delete/disable Nexus entries to “lock” the system)</li>
<li>Rely on infrastructure-level controls (e.g., scaling down Nexus, process management)</li>
<li>Do nothing (status quo)</li>
</