Can AI modules be disabled?

Yes, completely.

Possible operating modes:

• Suricata + visualization (no AI);
• Suricata + AI-based analysis;
• analytics without active AI detection.

AI modules:

• do not affect the operation of the core system;
• are not mandatory;
• are not involved in traffic blocking.

This is a deliberate design choice: AI is an assistant to the analyst, not a “black box.”