Hello
Thank you for working on this!
> Where this becomes a serious problem is if you have many standbys and you do a failover.
+1
Several times my team would like to pause recovery instead of panic after change settings on primary. (same thing for create_tablespace_directories replay errors too...)
We documented somewhere (excluding code) shutting down the standby immediately upon receipt of the parameter change? doc/src/sgml/high-availability.sgml says only about "refuse to start".
regards, Sergei