Passive Shodan searches reveal Rockwell EtherNet/IP and Modbus TCP devices at movable bridge and navigation lock infrastructure sites answering on the public internet. The gap between high-assurance design and observed reality is the real story.