Ava HTTPS is active. Authenticated intake is configured; document processing, calling and CaseDB writes remain disabled.