WSRR can be placed in read-only mode; the read-only protection applies to objects in WSRR, and their metadata. It does not apply to configuration items or profile actions.
WSRR is placed in read-only mode automatically if an upgrade, capture, or load operation is attempted. You must remove read-only mode manually after an upgrade has been successfully verified. Read-only mode does not prevent the load operation that occurs as part of the upgrade.