Pause and control matrix

No single pause represents complete protocol state.

Control	Stops	Recovery boundary
AccountCore protocol pause	Normal custody movement, settlement, reserve increases, and claims	Selected release, cancellation, passive exit, funding, and liquidation paths remain subject to their own checks
Orderbook soft pause	Normal placement and matching	User cancellation remains; Perp partial liquidation remains available
Orderbook hard pause	Normal order actions	Forced cancellation remains, but ordinary FIFO partial liquidation is blocked
AccountCore Perp enablement	Normal market accounting paths	Cancellation and liquidation remain; route replacement requires disablement
Engine market status/flags	Engine admission or new risk	Must be restored independently from AccountCore and orderbook state
Liquidation lock	Target risk increase or movement	Clears only after the required health recovery path

Every emergency procedure must identify the active control layers, surviving unwind paths, and authorized restorer. Exploit-specific response steps remain outside this static site.