Baseline APP ready, file hash/session verified, Gateway reopened. TRACE remains deferred.