Guardian

Pause-only surface. A wrong admin step can still lock a protocol, so test the wrapper path on a fork first.

interface IGuardian {
    function pause(address target) external;
}

// CAN: pause a protocol that granted PAUSER_ROLE or enabled the module.
// CANNOT: unpause, withdraw, upgrade, or move funds.
// Audit report: [AUDIT REPORT]