# Approved five — deployed and live verified

PR40 is merged and deployed. Only these five approved designs are complete in this rollout; the remaining fourteen are not claimed finished.

- PR: https://github.com/scheemunai/agent-artifacts/pull/40
- Reviewed head: `b661a1779e8835c528967ed54953a89223754eec`
- Merge and clean runtime checkout: `661501182a82bcdd25e478bf965aa24452fb6c8f`
- Live gallery: https://agentartifact.ai/templates
- Live evidence: https://anacreon.ai/downloads/aa-template-revamp-1788686289312/astra-integration/index.html
- Final implementation bundle: https://anacreon.ai/downloads/aa-template-revamp-1788686289312/approved-five/implementation-bundle.json

## Approval and source provenance

User selections remain Proposal A Decision Spine, **Project plan A Phase & gate map (not B)**, Checklist A Gate Ledger, Service health A Budget accounting board, Report B Briefing Broadsheet. No approved body or CSS was redesigned. Project plan and Service health are exact approved preview files; the other three differ only in their reader-facing title normalization. Original integration `5bae274b30b42f8a2f2569d8b7d1182a63abd4a2` and preview hashes remain in the bundle. Parent accepted the final gallery framing in `b661a1779e8835c528967ed54953a89223754eec`. Astra independently compared all bytes after title normalization.

| Slug | Selection | Live canonical source SHA-256 | Live PNG SHA-256 |
|---|---|---|---|
| proposal | Decision Spine (A) | `7279fefcd7c01dcca7f214d6d3267ea0d2ca894b59adab53a29a7e694ca1dfdb` | `da8c761e0d132e3eecddbc5ded6bcce1bfa9ef5dbc0781be7a88cc103c043158` |
| project-plan | Phase & gate map (A) | `731edb7f5e6c8d4fdce7b6b6ef9c37279affacd42a278f12caf312930775c143` | `36973c587b70cb6193493882114d5bc81e3a4db380339a8164681aca9e888283` |
| checklist | Gate Ledger (A) | `19a86a131daeab7e95e34f0d4da358effc9606362e85d03f32359f2e335150b1` | `bce862029d375e21a4f8d4353e317027100d3d3511f78f66f0c2071a3854d3e3` |
| service-health | Budget accounting board (A) | `994adadd14891263c23e61a0a8912b16608307abc4ccac1c31a3d4cb5d93f1a8` | `6b8842e10579d1f1c7ac50a412fe58e74e7bbbc72d09b7a6dac9d88d98efc3df` |
| report | Briefing Broadsheet (B) | `2d2222c8596c0560ebb816370b358ca262bde5e6431c52ca47e08f3ee943fa39` | `7ba7a89f375e4d9ca636a3f3ff8e84150a6d047bc084a47db86d459b98f09ee8` |

## Exact scope

Twelve PR files: five canonical HTML sources, five canonical PNG thumbnails, templates/manifest.ts and BUILD-NOTES.md. Accurate descriptions changed only for Proposal, Project plan and Report. Thumbnail viewports are Proposal 1280, Report 1280 and Project plan 1440; Checklist and Service health retain their existing viewports. Slugs, categories, types, slots, all other source/thumbnail files, runtime, schema, billing, CSP and dependencies are unchanged. The merge tree is identical to the reviewed head. The development-guidelines database document now records the user's standing Astra-only rule without rewriting other guidance.

## Verification and evidence

- Final head CI: five successful jobs, run https://github.com/scheemunai/agent-artifacts/actions/runs/34058382048. Its actual log confirms 1,123 tests passed/12 skipped; 219 e2e passed/12 skipped; check reports 22 existing warnings; production dependency audit has one moderate advisory but passes its high threshold.
- Merge CI also succeeded: https://github.com/scheemunai/agent-artifacts/actions/runs/34060275500.
- Fresh independent local check/build passed; four scoped suites passed 23/23 tests. Final local gallery at 1440/390 and ten frame checks passed.
- Fresh live browser: 20 primary frame captures (1440/768/390/320), 32 breakpoint-neighbor captures, 19 HTML +1 markdown regression checks, five no-JavaScript checks and ten ephemeral growth checks; **zero failures**. Every requested viewport was read back. Live desktop/phone pages and actual gallery cards were visually inspected. Proposal ask, all four plan phases and report finding/recommendation/evidence appear in the final gallery crops.
- Live HTTP and authenticated read-only template API: all 20 options remain (19 HTML, one markdown); all 19 HTML prefixes and 20 thumbnail byte strings match the checkout; each selected API content equals its canonical source. Five bodies/CSS still equal approved previews; all 360 Service health day states and Checklist proportions are preserved.
- Frame policy, appended height reporter and iframe sandbox remain unchanged. Sandbox policy probes and local/external health pass. Agent-browser independently confirmed 20 gallery cards, no overflow and the correct Proposal sandbox iframe.

## Deployment safety and honest limitations

A consistent SQLite backup was made through a read-only live connection and SQLite's backup API, stored securely outside the repo, then verified by integrity check and expected schema. Its location and contents remain private. The existing verified deploy.sh alone performed the guarded fast-forward/pinned-main install/build/reload/health cycle. Runtime is PM2 agentartifact-prod at the exact merge, online, PID 4165250, restart count 28→29. No rollback was needed.

Database comparison preserves all existing artifacts, versions, account entitlement, shares, financial event records and schema exactly. Only the five authorized built-in contents and three descriptions changed; startup refreshes built-in timestamps. An initially over-strict whole-table check flagged one bot last_used_at and one session last_seen_at update; column-level comparison confirms only normal activity timestamps changed, not credentials or customer data. We performed no financial mutation.

All 18 neighboring-host status codes match their predeployment baselines. Two pre-existing 502s and one 403 are not claimed healthy or repaired. Production's pre-existing 0.0.0.0:4700 listener is unchanged; external reachability remains unverified and outside this template scope. No launch-switch, Stripe, credential, tax, cleanup, registry, internal-site or Nginx changes were made. Tests demonstrate the stated sampled browser states, not every browser or arbitrary future rewrite. Historical height caps were not reintroduced; expressly approved source sizes were preserved rather than redesigned to old sample limits.