Controls
Registry-wide switches for the curator. None of them moves anyone's money: users can always refund and sponsors can always withdraw.
Only the curator wallet can send these. Anyone can prepare a call for a Safe with “Use a Safe multisig instead”.