A1 (OIDC login → app), D1/D4/D5 (create/edit/delete round-trips), D6 (412 conflict), and /health-over-tunnel verified live this session via operator browser testing + outbox evidence. Remaining: A2/A3 + D2/D3 (desktop, quick), B (iOS device, load-bearing), C (SSE — Phase 4 entry gate per D-14).