ISO T&L revision 1.3 verification, 18 October 2026
Based on the uploaded live source and database.
PASS: 84 automated tests / 591 assertions on PHP 8.3.6 with SQLite.
PASS: 84 automated tests / 591 assertions on PHP 8.3.6 with MariaDB 10.11.14.
PASS: uploaded live MySQL export restored locally; update SQL applied twice. All existing row values across ten tables retained, including users/password hashes, academic records, settings and relation tables. Both encrypted ISO records decrypt with the preserved live APP_KEY. Image storage becomes LONGTEXT; migration entry is added once.
PASS: 1 MB signature validation, PNG/JPG/BMP actual decoding, normalized PNG storage, corrupt and oversized image rejection. A random image larger than 64 KB survives encrypted round-trip storage on MariaDB, reproducing the old column-capacity boundary.
PASS: module date error returns field guidance; custom 14-date calendar remains unchanged when start date is unchanged.
PASS: stale draft save cannot overwrite newer content; integer casts handle database numeric strings; returned draft deletion retains row/history; signed-original revision starts an unsigned draft.
PASS: sample and current teaching-plan CSV downloads, new-draft and selected-draft imports, exact fourteen-week/date/weight validation, stale-preview and signed-target rejection, quoted commas/newline round-trip; DOCX paragraph/table extraction, external-entity rejection and UTF-8 TXT extraction; central imports and all template downloads; student CSV preview/commit with no attendance mutation; duplicate rejection; existing attendance master and Table 4 extraction tests retained.
PASS: all eighteen form editors, views and PDF paths, native template PDFs, PDF signatures, permissions, sequential approvals, source XLSX exports, private evidence, branding and mocked Ollama.
PASS: local Chromium desktop/mobile login and import centre; BMP profile upload; teaching-plan save and CSV preview/update round-trip; audit PDF download; repeatable rows; no JavaScript page errors. Wrong maintenance token rejected; correct token diagnostics/cache operations pass.
PASS: fresh production Composer vendor with no development runner. Framework stays exactly 13.31.0. Platform checks pass with PHP 8.3.6. Syntax check passed for 55 PHP source/configuration/migration/test/maintenance files.
PASS: six-page README PDF rendered and visually checked; embedded TimesNewRomanPS-BoldMT heading at exactly 12 points and centred within its heading area on all 33 native sample pages; audit first-page heading uses the same embedded font; mobile import-centre rendering inspected. ISO originals in the eleven new document archives were SHA-256 compared: 49 document occurrences match retained private originals.

Limits
Production host PHP handler, Oracle MySQL 8.0.37, cPanel web-server rules, real mobile/tablet hardware, institutional Table 4 variations and live Ollama are not independently executed here. Native PDF source capacity and normalized A3 ToS paper arrangement still require institutional acceptance. Existing signed records are retained rather than rewritten. No claim of 100% production or certified ISO conformity is made.
The SQL patch is intended for the uploaded existing schema, not a fresh database. Revision 1.3 itself requires no additional schema; the included 1.2 capacity patch may be safely reapplied. The default university heading is centred in its heading area, not over the document-control column; on Excel-derived forms it sits above the original control frame to keep the fixed 12-point text clear of borders. Preserve live .env and storage. No production database export, application secret, stored evidence or signature image is distributed in this upgrade package.
