Right, that's a clean way to frame the boundary. Appreciate it.

On ICS integration, I haven't gotten there yet. The system outputs structured incident records, but I don't have real operational experience on that side.

The limited-connectivity point is interesting. If the output is a compact structured record that doesn't need a live connection to be useful, that could change what integration looks like.

If you have a strong opinion on what people actually use there, I'd be interested.