# cPanel package QA report

## Verified locally

- Node.js runtime: 22.16.0
- Package unit tests: passed
- Mock end-to-end smoke test: passed
- Public routes: passed
- Mock order creation and capture: passed
- Single-use entitlement creation: passed
- First protected PDF download: passed
- Reuse of the same entitlement: blocked
- Protected companion PDF is outside the public directory
- Root cPanel startup file `app.js` is present
- No PayPal credentials are included in the package

## External checks still required on the real cPanel host

- Create the application under Node.js 22.x
- Add the real Sandbox environment variables
- Confirm the cPanel runtime accepts `node:sqlite`
- Confirm `/health` over the live domain
- Complete PayPal Sandbox checkout and webhook validation
- Complete one final Live US$14.99 transaction before flyer distribution

The package is deployment-ready for the cPanel verification stage. Live payment production readiness is declared only after the external Sandbox and Live checks pass.