Ukraine had the drones. Musk controlled where they could fly.

Elon Musk said SpaceX refused to activate Starlink coverage for a planned Ukrainian naval-drone attack near Sevastopol because he feared escalation. The complete operational outcome remains unclear.

The decision nevertheless placed a private communications provider inside a targeting chain. Ukraine could build the weapon and choose the mission; the network owner could determine whether the command link reached the battlespace.

This is the part the brochure is unlikely to discuss. A commercial service or connected system is treated like equipment that remains available once purchased. The actual control sits in remote access, coverage maps, accounts, subscriptions, cloud infrastructure, data feeds and private policy decisions. That is the control point hiding behind the headline fact: Ukraine had the drones.

The most dangerous failures are often deniable. A component is unavailable, an approval takes longer than expected or another customer becomes urgent. Each explanation can be reasonable. Together they can change the service boundary instantly and at scale without seizing any hardware. For Ukraine, the warning is captured by what followed: Musk controlled where they could fly.

Commercial providers can deliver capability faster than governments. That speed is valuable. It does not remove the need for contractual continuity, national fallbacks and an honest shutdown plan. That distinction matters here: Musk controlled where they could fly.

For Ukraine, if the capability arrives through an account, the account is military infrastructure. That exposure sits behind the claim that 'Ukraine had the drones'.

A serious review begins where the demonstration ends. Who can suspend the account or change the coverage map? Where are the servers, data and control staff located? Can the service operate through a national gateway?

This is where scenario planning has to become specific. Do not write 'seek alternate supplier' in the risk register and move on. Name the supplier. Confirm the legal route. Price the integration. Hold the stock. Train the people. Until those steps are complete, the alternative is a comforting noun rather than an operational capability. The exercise has a concrete starting point in this case: Ukraine had the drones.

A better contract should secure contractual continuity for the missions that matter, build a national or allied fallback before conflict begins and retain local copies of essential data wherever lawful and practical. The objective is not to eliminate every dependency. It is to prevent one invisible dependency from becoming a national emergency.

Price that exposure honestly. A cheaper bid with one unmanageable control point may be more expensive than a higher bid that preserves options. Acquisition teams are good at comparing purchase prices. They are less consistent at pricing the cost of a grounded fleet, an empty magazine or a capability that arrives after the political need has passed. The headline fact, 'Ukraine had the drones', should carry that exposure in its score.

The next three questions belong in the operational plan, not an annex. What functions survive if the provider disconnects you? Is there a binding wartime service obligation? How quickly can an alternative service be activated and integrated? If nobody owns the answer, nobody owns the risk.

The final test for Ukraine is simple: what operational function survives if the provider changes the account, coverage map or terms of service overnight? If the honest answer begins with 'provided that somebody else agrees', that condition belongs on the first page of the procurement decision, not in an annex nobody reads. The first half of this headline, 'Ukraine had the drones', is where that test begins.

A private decision taken thousands of kilometres away can alter the battlefield faster than a government procurement process can respond. A service you cannot command is a dependency you must plan to lose. The first half of this headline, 'Ukraine had the drones', is where that test begins.