PUBLIC mission data and operator-authorized rover integrations only. No takeover of third-party rovers. Command writes stay off until an owner-authorized connector, allowlist, human approval gate, failsafe, and audit path are configured.