Adding 'route only these nets' exposed a bug. A net left out, like a GND that a plane joins later, still got copper, because its pads lacked plane joins and the post-route pass took them for walled-off pads. Routing only USB_D_P and USB_D_N on TokenBoard reported 37 connections; with the fix it routes 10, all USB.