# Release Notes — Phase 1 Foundation

**Release:** 1.0.0-foundation  
**Prepared:** 2 August 2026  
**Target:** private cPanel staging

## Outcome

This release establishes the secure Laravel application boundary, preserves the approved public presentation in Blade, and provides the first protected ZumaX Office experience. The office includes identity, mandatory TOTP, roles, permissions, and activity traceability. The public enquiry preview is intentionally inert.

## Production hold

This release is not the public-form cutover. Keep the current host-ready homepage and verified email-enquiry workflow operating until Phase 2 implements database-backed verification states, idempotent forwarding, retention, and message administration and then passes its own acceptance gate.

## Validation performed in this build workspace

- Parsed all PHP source files with an independent PHP AST parser.
- Parsed both CSS bundles and syntax-checked all JavaScript bundles.
- Checked Blade control-directive balance and route-name references.
- Browser-rendered desktop and mobile previews of the public homepage, office sign-in, and office dashboard.
- Confirmed no horizontal overflow at 375 px and 1440 px.
- Confirmed the public theme toggle is visible at 375 px and the foundation form fieldset is disabled.
- Scanned the package for embedded application, database, SMTP, and private-key secrets.

PHP and Composer are not installed in the packaging workspace, so the Laravel runtime suite could not be executed here. `php artisan test` is a mandatory staging gate and is included in the deployment and acceptance instructions.