- 21 new TrafficClass constants (IMAP, POP3, SMTP-sub, FTP, SMB, TFTP, RDP, Telnet, VNC, MySQL, PostgreSQL, Redis, MongoDB, mDNS, SSDP, SNMP, SIP, QUIC, LDAP, Kerberos, Syslog) - 30 new port-matching rules in DefaultRules (42 total, catch-alls last) - AllClasses() returns 32 classes (LDAP/Kerberos/Syslog deferred to Phase 11) - PROTO-01 through PROTO-08 requirements marked complete