OMIC V5 HARDENED RELEASE — REQUIRED ACCEPTANCE
================================================

This package is complete for a fresh installation. It includes all referenced
logos, marks and icons. It has not been executed on the target cPanel server.

FRESH INSTALL
  1. Back up public_html and the database.
  2. Upload the contents of this package into public_html.
  3. Complete install.php using app/INSTALL-TOKEN.txt.
  4. Delete install.php immediately after success.

EXISTING V5 DEPLOYMENT-CANDIDATE DATABASE
  1. Back up the database.
  2. Import app/migrations/001-v5-perfect-session-version.sql once.
  3. Upload the application files.

V3 OR UNKNOWN DATABASE
  Do not overwrite it blindly. Restore a staging copy and perform a reviewed
  data migration. CREATE TABLE IF NOT EXISTS does not upgrade existing tables.

MANDATORY TESTS BEFORE PUBLIC LAUNCH
  [ ] Run php -l against every PHP file using the cPanel PHP version.
  [ ] Import app/schema.sql into an empty staging database without errors.
  [ ] Confirm homepage, /admin/ and /portal/ return no HTTP 500.
  [ ] Confirm direct requests to /app/schema.sql and /app/config.php are denied.
  [ ] Confirm /uploads/private/ files are denied directly.
  [ ] Confirm admin, manager and agent controller permissions.
  [ ] Confirm password reset/disable immediately revokes an existing session.
  [ ] Confirm tenant A receives 404 for tenant B's document id and receipt ref.
  [ ] Confirm photo delete/cover and both logout actions reject GET.
  [ ] Confirm malformed/oversized uploads are rejected and uploaded PHP cannot run.
  [ ] Run overlapping send-queue.php processes; confirm one delivery per row.
  [ ] Verify SMTP without placing credentials or message bodies in error.log.
  [ ] Record and reverse-test an offline payment on staging.
  [ ] Confirm demo payments never change balance_outstanding.
  [ ] Configure SPF, DKIM and DMARC.
  [ ] Prove full file/database backup and restore.

DEFERRED BY DESIGN
  Live Paystack is disabled. Do not enable it until initialization, webhook
  signature verification, amount verification, idempotency and reconciliation
  are implemented and separately tested.

