A production pool often includes a pause switch for emergencies.
Implement can_swap.
can_swap
Active
true
Paused
false
This is simple, but it forces you to model state explicitly instead of assuming every instruction should always run.