A kill switch is a flag that overrides every other rule and turns a feature off for everyone. Because it needs no deploy, it is a fast first response when a new path misbehaves in production.