# SmartCut64 pre-launch engineering evidence — 2026-08-16

This record captures engineering checks completed before the first commercial
launch. It contains no licence key, entitlement private key, webhook secret,
signing credential, customer data, or Lemon API credential.

## Exact commercial release

- The Windows UCRT x64 release is configured with the dedicated production RSA
  public entitlement key and the production HTTPS activation-service URL.
- The clean commercial release gate executes 91/91 tests successfully,
  including paid-entitlement delivery through the exact built worker and CLI.
- The separate MSVC AddressSanitizer configuration executes 6/6 tests
  successfully.
- Application Verifier is the only skipped optional check because its Windows
  run requires an elevated interactive UAC session.
- Portable clean-launch and NSIS clean-install, shell-registration,
  isolated-launch, uninstall, and checksum checks pass.
- The exact signed artifacts pass 19/19 mid-GOP interoperability cases. Every
  case requires boundary-reencoded and interior-copied frames, complete FFmpeg
  decode, and visible advancement at three distinct capture points in MPC-BE.
- The three first-party executables and installer are signed by LINEKERPANDI
  LIMITED with Azure Artifact Signing and Microsoft public timestamps. The
  signatures are checked both in the build tree and inside the portable ZIP.

## Licensing-service behavior

- All 14 bridge tests pass, including strict validation, fail-closed behavior,
  revocation persistence, and stable customer-facing error contracts.
- A real Lemon test-mode order passed first and repeat activation, two distinct
  computer seats, third-seat rejection, deactivation and transfer, and
  purchase-email mismatch handling.
- A signed simulated Lemon refund event revoked every active installation; both
  subsequently received the stable `licence_revoked` response.
- A burst against the deployed endpoint reached the expected `429
  rate_limited` response.
- Test and production Worker shells are deployed separately. The production
  shell intentionally returns `service_not_configured` until live Lemon
  approval and production secrets are available.

## Evidence still requiring external action

- Lemon live-store approval, exact-file delivery links, and one controlled live
  purchase/refund cycle.
- Two independently stored and restored encrypted production-key backups.
- Independent GPL/LGPL, customer-terms, privacy/refund, trademark/copyright,
  and codec-patent review.
- Broader VLC/mpv, long-file, device-diverse GPU/media-corpus testing and the
  optional elevated Application Verifier run.

The generated store-staging manifest records the exact source commit, file
hashes, and Authenticode evidence. `live_upload_allowed` remains `false` until
the external launch gates are approved.
