Record real-core delay-gate tests and actual gateway rollback evidence; require unsubscribe rather than an unsafe ID-only re-key. Keep the external native installation gate explicit pending read-only inspection. Card: SAU-384