Removes the issuer from the effective trust set of every tenant at once,
effective on the very next request, and keeps everything else.

This is the fastest lever the deployment has. There is no cache to invalidate and no projection to re-drive: the enabled predicate is part of the query that composes a tenant's trust set, so a compromised issuer stops verifying anything immediately.

The declaration, its bindings and its history are retained, so the act is reversible by the operator who performed it. Use delete when the relationship is over rather than paused.

Never entitlement-gated. No Edition widens or narrows this plane. These are

the deployment operator's own declarations rather than a tenant's, so there is no
Edition to consult (FR-181.16).