Your own caller
Every call of your tasks leaves from one address that belongs to you alone. Grant roles or allowances to it, never to the forge.
Decide what may run.
The forge checks your guard at the moment of every run, not only when the task was made. Remove a pair and every task that calls it stops before the next run.
Allowlist of pairs
A run happens only while its (contract, function) pair is on your list. Remove a pair and every task using it stops at once.
Approvals and halts
Needs-approval tasks wait for runs you approve. Any task halts after the failures in a row you allowed.
Connect the wallet that owns your tasks to see its guard, approvals and credits.