# MPC v6.82.185 Staging-Ready Release

## Baseline

- Sole source baseline: `MPC_v6.82.184_MPC_KIDZ_PRODUCTION_READY.zip`
- Deployment target: `/home/marljsei/staging.marlothparkcentral.com`
- Public staging URL: `https://staging.marlothparkcentral.com`

## Included private commercial assets

1. `MPC Marloth & Kruger Route Atlas Flagship Edition`
   - Stored as `private/gated-bundles/mpc-marloth-kruger-route-atlas-flagship-edition-all-pdfs.zip`
   - Supplied source: `MPC_Route_Atlas_Flagship_Edition.zip`

2. `First-Time Marloth & Kruger Visitors Bundle`
   - Stored as `private/gated-bundles/mpc-marloth-kruger-visitor-guide-set.zip`
   - Supplied source: `MPC_Bundle.zip`

Both bundles remain absent from the default sitewide product catalogue. Public direct access is denied, and payment/automatic commercial fulfilment remains disabled.

## Staging hardening

- Staging-specific Passenger application root and Node virtual-environment path
- `APP_ENV=staging` deployment wrapper
- Staging-only persistent runtime root outside the application package
- Production/staging host separation retained
- Staging responses globally marked `noindex, nofollow, noarchive`
- Staging `robots.txt` blocks all crawling
- Production database label isolation retained
- cPanel Passenger configuration synchronised during deployment
- Dedicated staging live-verification script
- Protected private-bundle integrity and non-exposure audit

## Required deployment

Run:

```bash
cd /home/marljsei/staging.marlothparkcentral.com
bash scripts/deploy-cpanel-staging.sh
bash scripts/verify-live-staging.sh https://staging.marlothparkcentral.com 6.82.185
```

## Commercial status

The private files are deployment inventory only. This release does not activate PayPal, publish prices, expose paid downloads, or claim completed payment based on a return URL.


## Verification completed

- Locked dependency installation: passed
- TypeScript type check: passed
- Source lint: passed
- Production contract tests: passed
- Dependency audit: 0 vulnerabilities
- Complete source audit suite: passed
- Optimized Next.js staging build: passed
- cPanel prebuilt verification: passed
- Underwriter-readiness audit: 24 checks passed
- Private commercial bundle audit: 30 checks passed
- Recursive runtime crawl: 216 pages and 345 assets, 0 failures
- Sitewide header/footer crawl: 350 checks, 0 failures
- Deep route/link crawl: 270 checks, 0 failures
- Route Atlas live crawl: 10 routes, 32 route/asset checks and 7 controlled redirects, 0 failures
- Staging response contract: primary routes return 200; private bundle URL probes return controlled 410
- Staging indexing controls: `X-Robots-Tag: noindex, nofollow, noarchive`; `robots.txt` disallows all crawling

## Private bundle checksums

- `mpc-marloth-kruger-route-atlas-flagship-edition-all-pdfs.zip` — 14106256 bytes — SHA-256 `4aaab9d70e29da1310a702624ee5e0959838e84e04b932d1479428c6e24ece01` — 7 PDFs
- `mpc-marloth-kruger-visitor-guide-set.zip` — 2140410 bytes — SHA-256 `5f5c4b5af0379a52aacdd2ddf3e1e3443cf6fb412e1cf7fe637a537ac29f6716` — 13 PDFs


## Deployment decision

**Ready for deployment to the staging cPanel Node.js application folder.**

This is not an instruction to replace the live production application. The release is deliberately built for `staging.marlothparkcentral.com` and must remain noindexed until a later production promotion is separately approved and rebuilt.