Global kill-switch. A plain string key ("1" or absent) rather than a field in
STATE_KEY, because the per-service hash is keyed by serviceId and a
sentinel field would collide with a service literally named that.
Read on every gate check regardless of whether the process registered, so a
service nobody has ever seen — no registry entry, no MAINTENANCE_SERVICE_ID
— still boots straight into maintenance. Per-service flags can't cover that:
the admin panel lists only what already announced itself.
Global kill-switch. A plain string key ("1" or absent) rather than a field in STATE_KEY, because the per-service hash is keyed by serviceId and a sentinel field would collide with a service literally named that.
Read on every gate check regardless of whether the process registered, so a service nobody has ever seen — no registry entry, no
MAINTENANCE_SERVICE_ID— still boots straight into maintenance. Per-service flags can't cover that: the admin panel lists only what already announced itself.