P24 prerequisite: publish intentional Router-Ops-to-DDN firewall rule installed 2026-08-11; no runtime change