operator record
Public-safe record shell. Private operator state, authoring controls, custody, and cockpit actions remain behind authenticated access.