# Delivery Checklist

## Content and privacy

- Every page has a source pointer.
- Titles, numbers, attribution, and caveats match supplied material.
- No sample copy, private person/organization/chat identifiers, internal IDs, or credentials remain.
- Cover is first; summary precedes the final Q&A; exercises have task, timebox, output.

## Visual and interaction

- Desktop, mobile, fullscreen-like, and print modes were rendered after the last change.
- Contact sheets were reviewed for rhythm and outliers.
- Failed pages were checked at full resolution.
- Keyboard, buttons, hash navigation, fullscreen, assistant open/close, and print all work.
- No runtime remote dependency exists unless explicitly accepted.

## Evidence

- `audit-static.json` passes.
- `audit-report.json` passes.
- Desktop, mobile, and fullscreen contact sheets are current.
- PDF page count equals manifest page count.
- Evidence timestamps are newer than the last source edit.

## Archive

- Package command succeeds without bypass.
- Cache, browser profile, screenshots scratch, environment files, logs, and keys are excluded.
- ZIP opens and contains the entry HTML, styles, scripts, local assets, manifest, and both reports.
- SHA-256 sidecar matches the ZIP.
- Delivery note names the entry file and any explicitly accepted limitation.
