Arcane.firewall.disable()

This focused page is derived from the mechanically checked full member inventory.

Syntax

Arcane.firewall.disable(expectation)

Parameters

{expectedPolicyGeneration, expectedStateGeneration}

Return value

Promise<FirewallOperationResult>

Description

After confirmation, disables only Arcane-owned simulation state. Requires firewall.manage.

Overview

Arcane.firewall.disable(expectation) disables only Arcane-owned firewall state. It requires firewall.manage, app id firewall, elevated Core authority, exclusive mutation, fresh generations, and separate confirmation. It does not disable or rewrite firewall rules owned by another product. Current success affects only deterministic simulation state.

Result, side effects, and events

The exact result is {status, receipt, operation}. The receipt operation is "disable", the tracked operation type is "firewall.disable", and the fresh status reports enabled: false with an incremented state generation. Standard operation events are emitted. Request acceptance is not a live enforcement claim; check the returned labeled status.

Errors and recovery

FIREWALL_NOT_INSTALLED means there is no Arcane-owned installed generation to disable. Recovery-required, stale-generation, busy, and live-host-authentication errors fail without guessing ownership. Refresh status and confirm again; use Recovery only when the returned state explicitly requires reconciliation.

Example

async function disableFirewallAfterConfirmation(confirmDisable) {
    const status = await Arcane.firewall.status();
    if (!status.simulation || !status.supported || !status.state.enabled) {
        return null;
    }
    if (!confirmDisable(status)) {
        return null;
    }
    return Arcane.firewall.disable({
        expectedPolicyGeneration: status.policy.generation,
        expectedStateGeneration: status.state.generation
    });
}

Reference group

Platform, installation, users, and system