v1.0-prod release notes — Pharmacovigilance Review and Reporting Hub

Hardening pass complete (2026-06-02)

Promoted from v0.1-shipped (MVP) to v1.0-prod after the squad-discipline pass:

What's verified

• CI green on Node 20 + Node 22 matrix (npm run ci = lint + test)
• 15 structure + data-integrity tests passing — assert 4 tabs, 4 stat tiles match data, 6 anomaly cards, 8 audit events, security headers, AGPL-3.0 license, favicon CSP-safe, CNAME, no telemetry, no external scripts
• HTML5 validation clean (html-validate, zero warnings/errors)
• Security headers verified at .htaccess (CSP / HSTS / XFO / XCTO / Referrer-Policy / COEP / CORP / COOP / Permissions-Policy)
• CSP forbids frame-ancestors + object-src (clickjack + Flash defense)
• Exactly 1 inline script (tab switcher) and zero external scripts — browser-only doctrine enforced

What's in scope for this release

• Single-page static HTML operator surface — no backend, no telemetry, no login
• Synthetic data baked in (modeled on the canonical-example buyer per repo)
• 4-tab dashboard (overview · anomalies · external sync · audit chain)
• 6 anomaly detection patterns surfaced with specific regulatory anchors
• 8-event hash-chained audit-stream — ed25519-signable per event
• Apex-aligned visual language (onyx + cream + emerald, KG SVG mark)
• AGPL-3.0 license
• Hostinger FTP deploy via SamKirkland/FTP-Deploy-Action

What's NOT in scope (deferred)

• Screenshot fixtures (screenshots/ dir) — needs headless browser runtime
• Live data ingestion (this is buyer-facing demo surface, not a production-ingest tool)
• Multi-language / multi-locale rendering
• Per-buyer customization beyond the canonical example

Cross-portfolio surfacing

• Live at https://pv.kineticgain.com/
• Indexed in apex /constellation/ "Buyer-facing operator surfaces — 4 net-new (2026-06-02)" lane
• Surfaced on mizcausevic-dev profile README under "Buyer-facing operator surfaces lane"
• Included in AI Procurement Pulse universe (2,010-domain quarterly crawl)
• Repo topics: kinetic-gain · operator-surface · static-html · audit-stream · v1.0-prod