diff --git a/gui/src/rpc/RpcClient.cpp b/gui/src/rpc/RpcClient.cpp
index 529950c..c1cdb95 100644
--- a/gui/src/rpc/RpcClient.cpp
+++ b/gui/src/rpc/RpcClient.cpp
@@ -56,6 +56,13 @@ void RpcClient::stop() {
     QMetaObject::invokeMethod(conn_, "stop", Qt::QueuedConnection);
     thread_.quit();
     thread_.wait();
+    // thread_.wait() does not return until thread_'s own finish() has already flushed the
+    // DeferredDelete this class's own connect(&thread_, &QThread::finished, conn_,
+    // &QObject::deleteLater) posted — conn_ is gone by now. Null it out so a later call
+    // (stop() is a public slot; a caller stopping and then destroying the client is normal
+    // use, and the destructor's own `delete conn_` for the never-started case must not
+    // run a second time against memory this path already freed).
+    conn_ = nullptr;
 }
 
 void RpcClient::call(const QString &methodName, const QJsonObject &params,
@@ -76,17 +83,44 @@ void RpcClient::onConnectionState(int state) {
 }
 
 void RpcClient::requestInitialList() {
-    call(QString::fromLatin1(method::kDownloadList), QJsonObject{{"limit", 1000}},
-         [this](const RpcReply &reply) {
+    fetchListPage(0, {});
+}
+
+// download.list.schema.json: "Filtering, sorting and paging all happen in the daemon so
+// the GUI never materializes 100k rows to show 40" — limit maxes out at 5000, so one call
+// cannot ever return everything for a table the DoD's own gate says can hold 10 000 rows.
+// A single fixed-limit call here silently truncated the table below that (caught by
+// gui/tests/dod's scroll-60fps gate refusing to run against a 1000-row table when mockd
+// seeded 10000). Page until `total` is satisfied, then reset the model exactly once.
+void RpcClient::fetchListPage(int offset, QJsonArray accumulated) {
+    constexpr int kPageSize = 5000;  // download.list's own maximum
+    constexpr int kMaxPages = 100;   // 500 000 rows — a safety cap, not an expected ceiling
+    call(QString::fromLatin1(method::kDownloadList),
+         QJsonObject{{"offset", offset}, {"limit", kPageSize}},
+         [this, offset, accumulated](const RpcReply &reply) mutable {
              if (!reply.ok()) {
                  qCWarning(lcRpc, "download.list failed: %d %s", reply.error.code,
                            qUtf8Printable(reply.error.message));
+                 if (!accumulated.isEmpty()) {
+                     emit taskListReset(accumulated);  // show what we got rather than nothing
+                 }
                  return;
              }
-             const QJsonArray items = reply.result.toObject().value("items").toArray();
-             qCInfo(lcRpc, "initial download.list: %lld row(s)",
-                    static_cast<long long>(items.size()));
-             emit taskListReset(items);
+             const QJsonObject result = reply.result.toObject();
+             const QJsonArray page = result.value("items").toArray();
+             const qint64 total = static_cast<qint64>(result.value("total").toDouble());
+             for (const QJsonValue &item : page) {
+                 accumulated.append(item);
+             }
+             const bool morePages =
+                 !page.isEmpty() && accumulated.size() < total && (offset / kPageSize) < kMaxPages;
+             if (morePages) {
+                 fetchListPage(offset + static_cast<int>(page.size()), accumulated);
+                 return;
+             }
+             qCInfo(lcRpc, "initial download.list: %lld of %lld row(s)",
+                    static_cast<long long>(accumulated.size()), static_cast<long long>(total));
+             emit taskListReset(accumulated);
          });
 }
 
diff --git a/gui/src/rpc/RpcClient.hpp b/gui/src/rpc/RpcClient.hpp
index 80dec01..ba1270f 100644
--- a/gui/src/rpc/RpcClient.hpp
+++ b/gui/src/rpc/RpcClient.hpp
@@ -67,6 +67,7 @@ class RpcClient : public QObject {
 
   private:
     void requestInitialList();
+    void fetchListPage(int offset, QJsonArray accumulated);
 
     QThread thread_;
     RpcConnection *conn_ = nullptr;  // owned by thread_ affinity, deleted on thread finish
diff --git a/gui/src/rpc/RpcConnection.cpp b/gui/src/rpc/RpcConnection.cpp
index ced660c..e27c69c 100644
--- a/gui/src/rpc/RpcConnection.cpp
+++ b/gui/src/rpc/RpcConnection.cpp
@@ -154,10 +154,12 @@ void RpcConnection::dispatchFrame(const QJsonObject &frame) {
                 socket_->abort();  // version mismatch or refused — bounce and retry
                 return;
             }
-            sendRaw(kSubscribeId, QString::fromLatin1(method::kSessionSubscribe),
-                    QJsonObject{{"events", QJsonArray{event::kTaskAdded, event::kTaskRemoved,
-                                                      event::kTaskState, event::kTaskProgress,
-                                                      event::kSpeedGlobal, event::kNotify}}});
+            sendRaw(
+                kSubscribeId, QString::fromLatin1(method::kSessionSubscribe),
+                QJsonObject{
+                    {"events", QJsonArray{event::kTaskAdded, event::kTaskRemoved, event::kTaskState,
+                                          event::kTaskProgress, event::kSpeedGlobal, event::kNotify,
+                                          event::kSettingsChanged, event::kGrabberProgress}}});
             return;
         }
         if (id == kSubscribeId) {