The idea that we assume on most plans now is "lockable disconnect [emergency shutdown meets this requirement in code], within x feet of utility main, requires manual reset after operation"
However, some have gotten by with the idea that the gas valve will shut it down, and it will require a manual reset since it sets a fault when this happens, and the generator case is lockable.
What we always do now is to run a low voltage loop from the generator e-stop circuit, to a Kohler red mushroom switch, which has a lockable guard/hasp thingy on it.
Meets the requirement for "disconnect" within x feet of main, plus prime mover shutdown, and anything else they can think of, and is using all the circuits and components as intended.