HTTPS callback gateway ready; real validation pending.