INSTITUTIONAL ACCEPTANCE RECORD
Status: OPEN. Do not mark the release fully accepted until the applicable items below pass.

Record tester, hosting environment, date, sample record IDs, expected result, actual result and evidence for each item.

1. Confirm exact production domain (.com.my selected; .edu.my requires separate domain configuration), SSL and root login redirect.
2. Confirm PHP 8.3 handler/extensions, writable folders and all system_check.php results on the actual host.
3. Import isotnt_db.sql into an empty database and verify the three requested accounts using username and email.
4. Verify all four roles using separate people/accounts and cross-programme access denials.
5. Verify all 18 form types using realistic records and attachments, including full class sizes and multiline text.
6. Compare every filled PDF with the controlled original: dimensions, headers, revision, effective date, tables, pagination and signature coordinates. CURRENT STATUS: ORIGINAL-TEMPLATE OUTPUT IMPLEMENTED; INSTITUTIONAL ACCEPTANCE OPEN. Review the normalized A3 ToS print areas and overflow/capacity behavior described in README section 15.
7. Confirm the native attendance, cancellation and ToS Excel exports against the original workbooks and formulas after recalculation. Include original capacity limits and alternative exam-set treatment.
8. Supply QP 8.7 and confirm approved attendance rules, monthly dates, symbols and reporting requirements.
9. Test actual Table 4 PDFs and Excel variants; verify CLOs, weekly coverage, assessment weights and references. Scanned inputs need external OCR preprocessing.
10. Test a real fourteen-week UTF-8 roster with multiple programmes, repeated import, duplicate IDs and date changes. Confirm blanks are not counted as present.
11. Confirm external VC approval, Counsellor handover and Examination Unit receipt using actual signed evidence. Internal logging is not external signature impersonation.
12. Confirm the application's electronic-signature method and version retention meet institutional policy. Qualified certificate signatures are not implemented.
13. Review privacy/access rules for counselling, student identifiers, marks, uploaded files and backups.
14. Test all applicable CRUD, approval, override, return, PDF/print and file download functions on actual Android, iOS, Windows and tablet browsers.
15. Verify wrong/missing maintenance tokens are denied, allowed commands work and sensitive paths (.env, vendor, SQL, resources) are denied by Apache/LiteSpeed.
16. Test a real Ollama service if enabled; no paid service is required and no student/counselling data should be submitted.
17. Verify external OneDrive/e-Learning/CIMS activities manually. This application records links and evidence and does not automate those platforms.
18. Back up and restore database, APP_KEY and private files into an isolated environment; approve recovery procedure.

Acceptance owner:
Decision:
Date:
Outstanding issues:
