A model refresh fails immediately after a source password rotation. The gateway reports online and network connectivity is unchanged. What should be checked first?

1. The gateway's status alone without checking the credential
2. Stored data-source credentials used by refresh
3. Only the report's visual interactions
4. The calendar table's sort-by-column property