The operational task
A controller can remain exposed when its management interface is directly reachable, even while a separate monitoring process is running.
What the implementation supports
IoT Shield inspects device/OT telemetry. The management-access API returns source/verified-operator decisions to a trusted gateway configured to enforce them.
Integration and limits
Remove bypass routes and test fail-closed forwarding. No automatic edge disconnection, controller safety envelope, or protection of every physical process is implied.
Check collector wiring, the current event schema, and the enforcing component before relying on a response. Preserve the original event and verify the result on your actual deployment. An emitted alert does not prove that the initiating operation was stopped.