Pause all dispatch (break-glass)
Admin only. Immediately holds ALL outbound dispatch for every Domain in the calling organization by opening a global-scope pause record. This is the break-glass control — prefer the Domain, lane, or batch pause endpoints when anything narrower will do, because a global hold stops every Domain at once.
duration_seconds schedules an automatic resume; omit it for an open-ended hold that must be resumed explicitly. The record carries the full audit trail: who opened it, when, the machine-readable cause, and the optional reason. Nothing is deleted or cancelled — dispatch resumes exactly where it stopped.
Authorizations
Body
Open a hold on dispatch.
All fields are optional. duration_seconds schedules an automatic
resume; omit it for an open-ended hold that must be resumed explicitly.
reason is a free-text audit note. lane narrows a Domain-scoped pause
to one named dispatch lane and bucket narrows it to one provider rate
bucket — both are validated against the fixed allowed sets.
Response
Successful Response
One hold on dispatch — an admin hold or an automatic backoff.
Both kinds share this one shape, so a single listing shows everything
currently holding dispatch. scope says how much is held and the
matching target field (tenancy_id, lane, bucket, or batch_id)
says exactly what. cause is the machine-readable origin
(admin_request for a human hold, the provider fault tag for an
automatic backoff) and reason is the human note, if any. A released
pause keeps its record: released_at and released_by complete the
audit trail, and extensions lists every time a scheduled resume was
pushed out.