I wonder if there is anything of interest on the other busses that OVMS doesn't (currently) talk to? I'm thinking about petergrub's post,
CAN buses & access, as we do have a "spare" CAN bus available for listening to such things on the V3 OVMS module. Decoding what it's saying, of course, would be needed, as well as (cautiously) poking at it to see how it reacts to external command. Not without risk.