Self-hosted package checks completed on 4 October 2026. Passed: installer rejects wrong code, salted password hash, one-time setup lock. Passed: product edits, additions, archive/restore, photo upload, stock validation. Passed: authoritative catalogue prices, iPhone 11+ eligibility, HP remaining balance x1.5. Passed: separate layby totals and details, customer tracking privacy, payment idempotency. Passed: concurrent payment writes, private filesystem storage and restart persistence. Passed: shop and online receipts, PDF response and reuse of an existing payment. Passed: customer page DOM rendering, admin login, receipt form and email settings controls. Passed with simulated provider: encrypted email settings, PDF attachment, acceptance, delivery checks, duplicate protection and provider failures. Not verified: installation on your particular Namecheap account, domain/DNS/SSL configuration, real email inbox delivery. These need the account setup and sender credentials described in START-HERE.html.