Stopping an AI agent doesn't stop work already in flight. Here's how to design revocation boundaries, track outstanding actions, and restart safely.