Read-only is a system property.
Unknown, malformed, write-like, or unsupported requests are blocked before they can reach the adapter.
What BoxerView cannot do
- Flash firmware or calibration data.
- Write ECU memory or run control routines.
- Operate vehicle actuators.
- Clear diagnostic codes or learned values.
- Accept arbitrary CAN, OBD, or SSM commands.
Closed command types
Features invoke typed, reviewed monitoring queries. The production app has no raw command path, console, or developer-mode bypass.
Deny by default
Only allowlisted requests may be encoded. Unknown ECU identities, missing definitions, unknown services, and malformed frames fail closed.
Definition gating
ECU-specific channels are enabled only after the live ECU identifier and calibration match a reviewed definition.
Driver responsibility
Secure the phone before moving, use a passenger to operate it, obey traffic laws, and stop safely before changing settings. BoxerView is not a substitute for a qualified technician.