Read Only mode occurring when not scheduled by admin

Have you checked the staff action logs at YOURSITE/admin/logs/staff_action_logs?