> Historical note from the supplied ZIP. Current findings: `142-REQUIREMENT-AUDIT.md` and `CONSOLIDATED-VERIFICATION.md`.

# Release readiness: 14 outstanding areas

This is a development overlay, not a production-ready certified release. No real MySQL server, complete CodeIgniter framework, browser test environment, production hosting or external credentials were available in this build environment.

| Area | Current assessment |
|---|---|
| 1 COD end-to-end | Checkout transactional code exists; live MySQL/browser test pending |
| 2 Variant inventory | Added variant inventory bucket migration and checkout/cancellation synchronization; receiving and all stock mutation paths still need audit |
| 3 Creator price checkout | Existing conditional override code; boundary and full checkout integration tests pending |
| 4 Creator commission lifecycle | Partial; end-to-end lifecycle not verified |
| 5 Manual payout/ledger | Partial; full reconciliation not verified |
| 6 Returns/RTO stock | Partial; all branches not verified |
| 7 Dispatch/COD reconciliation | Partial; real courier credentials not required for COD manual operation |
| 8 Visual builder | Partial; full WYSIWYG missing |
| 9 Pixel-exact design | Reference image not present in this package; visual match not verified |
| 10 Staff security | Partial; complete authorization audit pending |
| 11 Security audit | Not complete |
| 12 MySQL migrations | New migration added; actual execution pending |
| 13 Automated browser/integration tests | Not run |
| 14 Production deployment | Not run |

## Payment configuration
Only COD should be enabled for launch. Easypaisa/JazzCash and Leopards API remain configuration-only until credentials are provided. Do not mark an external API live without a real credentialed integration test.

## Required acceptance tests before launch
1. Install supported CI4 framework and MySQL; set environment and run migrations.
2. Test a guest COD order and a signed-in COD order, including duplicate submission.
3. Test single-SKU and variant orders, out-of-stock handling, coupon boundaries, stock movements and cancellation exactly once.
4. Test creator referral, price enforcement, commissions, reversals, payouts and returns.
5. Test warehouse receiving, picking, QC, packing, dispatch, RTO and refund reconciliation.
6. Test role isolation, CSRF, stored XSS, session security, upload validation and audit events.
7. Run full browser tests and reconcile all order/stock/finance totals.
