@@ -36,3 +36,22 @@ The browser capture mechanism produced incorrectly scaled mobile screenshots, so
 3. Optional authentic captures remain: import success, supported SSL/vhost flows, phpMyAdmin, phpinfo, installer, meaningful terminal output, and a fresh GIF. No MP4 or invented founder photo is needed. See `LAUNCH-MEDIA.md`.
 
 No commit, push, or production deployment was performed. Local preview: http://localhost:3000.
+
+## v0.1.12 preparation - 18 October 2026
+
+- Audited current project details, installed-only website PHP selection, mkcert HTTPS, and upgrade lock handling against the app source and live UI.
+- Added the project/PHP/HTTPS workflow to the homepage, documentation navigation and footer. Documented terminal/global-INI limitations and future framework/Git/database scope.
+- Captured four real screenshots with private folders excluded. Internal v0.1.15 labels remain unaltered and explicitly explained; the next public version is v0.1.12.
+- Downloads continue to use published GitHub assets. No unpublished installer is advertised as downloadable.
+- Fixed null Git dates for newly added docs (previously broke production TypeScript builds).
+- Consolidated four app validation reports into docs/RELEASE-VALIDATION.md and removed the obsolete temporary build log. Useful regression tests, source assets, user projects and recovery backups are retained.
+
+Release gates still requiring final qualification: clean Windows and cross-account installs, managed browser trust, offline WebView2, uninstall trust cleanup, and final-artifact installation. Existing app bundle-size warnings remain. This is release preparation, not a claim that all production qualification is complete.
+
+Validation this turn: website production build passed (48 generated outputs); four website tests and ESLint passed; production HTTP smoke passed all 39 pages plus links/assets/search/sitemap/404. App frontend tests: 26 passed; documentation: 26 pages validated. Browser automation was disabled by Work settings, so desktop/mobile visual interaction review remains unverified.
+
+Cleanup also removed the superseded website production proposal and app HTTPS proposal; current implementation report, project roadmap, local HTTPS guide and consolidated validation document replace them.
+
+Removed the unreferenced old services screenshot after confirming no source references. Kept the PHP download capture still used in the gallery.
+
+Final app candidate: v0.1.12 NSIS built, updater signature verified, SHA-256 sidecar generated, and matching metadata staged. 29 Rust tests and independent PHP 8.3/8.5 HTTP/HTTPS integration passed. Candidate installation and publication were not performed. Windows Authenticode status is NotSigned. One dummy metadata-test fixture remains because automatic approval review blocked its recursive deletion.
@@ -1,33 +1,12 @@
-# Launch media review - 17 October 2026
+# Reviewed launch media - 18 October 2026
 
-Only explicitly reviewed assets are used in the website. Automatic GIF discovery has been removed.
+Fresh, unaltered captures from the installed internal v0.1.15 build:
 
-## Published assets
+- `public/screenshots/app/services-preview.jpg`: Apache running, MySQL 8.4.11 stopped, PHP 8.3.31 ready.
+- `public/screenshots/app/projects-preview.jpg`: filtered a.test project, PHP 8.5, trusted HTTPS; personal folders excluded by filtering.
+- `public/screenshots/app/project-details-preview.jpg`: actual HTTP 200, trusted HTTPS and document-root settings.
+- `public/screenshots/app/project-php-preview.jpg`: installed PHP selection in project details.
 
-- Services: public/screenshots/app/services-dark-1202x831.png - MySQL 8.4.11, Apache 2.4.65, PHP 8.3.31. Services are stopped; the caption does not claim they are running.
-- PHP: public/screenshots/app/php-85-download-1202x831.png - download progress with bundled PHP active; no personal path or obstructing toast.
-- Social preview: generated by app/opengraph-image.tsx, without old screenshots or version claims.
-- App README: docs/images/services-current.png replaces the unsuitable feature-tour GIF.
+Captions identify the internal build; these features form public v0.1.12. No version labels, health results, or status badges were edited into captures. Refresh from the final installed v0.1.12 artifact before removing preview labels.
 
-## Held assets
-
-Rejected screenshots and composites are preserved locally under media-review/held, outside public. They must not be republished without review. The website content sync only copies approved source images, so old GIFs cannot reappear on the next build.
-
-Reported defects: obsolete MySQL 8.0.35; personal user paths; notifications covering content; a stopped-unexpectedly error; duplicate XAMPP case variants; and dashboard overlay text.
-
-The prior launch-media generator is held outside scripts because it recreates rejected media.
-
-## Additional captures
-
-A clean recorded GIF is optional; static screenshots are the current launch presentation. No MP4 is required. Do not fabricate a workflow by editing version labels or success states into captures.
-
-Capture when the appropriate test environment is available:
-- XAMPP import success after testing the duplicate-path fix.
-- Virtual hosts and localhost SSL (do not imply per-vhost HTTPS is shipped).
-- phpMyAdmin connected to MySQL 8.4.11.
-- Local phpinfo with private paths/environment details excluded.
-- Installer screens without personal information.
-- Terminal with meaningful successful output.
-- An authentic 400 × 400 founder photo, only if the maintainer wants a personal profile.
-
-These additional captures are not represented as completed. Existing held GIFs are not approved.
+Old GIFs remain held outside public because of private paths, outdated versions, or obscuring overlays. Automatic GIF discovery remains disabled. No video or founder photo is fabricated. The older approved PHP-download capture remains available in the screenshot gallery.