Emergency stop

Halt sending immediately. Platform-wide freezes require a second operator to confirm (two-person rule).