MADADH halts a protected runtime when authority or integrity fails. The halt latches persistently and survives reboot. Restart requires two physical hardware tokens and cryptographically signed clearance bound to the specific halt event. No cloud dependency. Chaos and soak tested.
