After the manual pilot, design and implement allowlisted QLab control from HydraKiosk for load, cue, play, pause/stop, status, and operator recovery. Prefer a bounded adapter and avoid generic remote shell execution. Treat this as post-MVP and validate against the catalog asset manifest.
Acceptance: kiosk can control only the selected catalog movie/cue set, reports actual playback state, and manual QLab operation remains available as fallback.