INTERCEDE A1 controller hardware with protected power rails, dual Ethernet/PoE domains, isolated machine interfaces, secure storage/timekeeping, and three strictly separated GND domains. Schematic audit/build only; PCB layout intentionally deferred.