# Original desktop v3 — acceptance

This delivery extends the original CRT drawing with 32 moods/performances, additive connected hands and facial gestures, explicit censored-gesture controls, and a useful conversation leading to the existing demo request. It also retains the five expanded mobile characters and the 11-page website. The direct-email backend, canonical truth source integration and dependency lock remain outside the addon scope.

This document is the v3 evidence entry point. Earlier `ACCEPTANCE.md`, `UPGRADE-ACCEPTANCE.md` and their v1/v2 observations do not certify modified v3 files. The review is another AI task worker sharing the workspace, not an external or human audit.

| Requirement scope | V3 acceptance condition |
| --- | --- |
| `CONTENT`, `HTML` | Clear buyer choices and real demo links remain usable without optional motion; fixed computer quips make no client, diagnosis or conversion claims. |
| `ANIMATION`, `MEDIA` | The original rigid case, lettering, fan and cable remain; 32 state IDs agree across the runtime/types/UI; additive hands stay connected and censored; completion, replay, permission withdrawal and full pose resets are checked. |
| `A11Y` | Explicit pause/reduced motion, still expressions, disclosure/keyboard/focus behavior and usable form errors remain supported; browser and screen-reader certification require actual runs. |
| `PRIVACY`, `EVENTS` | Only finite query choices cross to an untouched form; all visitor edits survive; consent-aware events exclude raw URLs/text/PII and do not count demo clicks as accepted leads. |
| `RELEASE`, `SECURITY` | Every source and target hash is checked against authentic v1/v2 baselines; unknown edits conflict; rollback restores the actual prior bytes; protected backend/truth/settings/deployment paths cannot be installed. |
| `EVIDENCE`, `SCOPE` | Fresh results bind to the exact implementation. All 135 supplied standards documents, 26 roles and 40 graph cards retain their reasoned application decisions. Structural coverage alone does not establish behavior. |

## Current evidence

| Check | Actual status |
| --- | --- |
| Whole v3 website | **PASS:** final `npm run verify:local` on Node 24.19.0, 2026-09-13 11:23:20–11:23:29 UTC. All six gates passed: strict TypeScript, **272 tests with zero failures/skips**, build, 62 asset checks, standards inventory, and 20 built-site HTTP checks over 107 public files. |
| Guarded installer | **PASS:** the final suite includes 21 pure Node tests: the original 13 filesystem checks plus 8 v3 multi-baseline/generator checks. Source hashes, traversal/symlinks, all-target preflight, conflicts, actual-baseline rollback and idempotency are covered. |
| Conversation, demo and measurement | **PASS within the final suite:** seven director tests, four finite-intent/preservation tests, four actual-entry-server SSR checks and six new finite-event tests. Source review confirms one-time post-hydration preselection, every-field edit protection, real native links and no raw text projection or lead event on a mere click. These counts are subsets of 272. |
| Desktop geometry/controller | **PASS within the final suite:** 32 metadata states, the original 12 states' numeric poses at 120 samples, all 20 finite completions, strict gesture permission/revocation, paused/reduced still poses, replay/seek, callback reentrancy, connected geometry and actual SVG rasterization. Original geometry bytes match after removing only the additive imports/components. |
| Offline visual proof | **PASS, scoped:** all 32 actual-controller state captures, five contact sheets and a 30-second reel (720 frames at 24 fps). Separate review verified the current hashes of all 10 bound source files and 84 recorded artifacts. No website/browser recording is implied. |
| Addon rehearsals | **PASS:** v1 received 263 changes and passed 251 tests; v2 received 148 changes and passed 264 tests. Both passed all six gates, including 62 asset and 20 HTTP checks, with zero failures/skips. Repeat application made zero changes. The v2 copy retains its original 13 installer tests; the v1 copy has none, while full v3 includes the 21-test installer suite. |
| Browser/device/field checks | **BLOCKED / NOT OBSERVED:** the session explicitly forbids the local browser target and alternate browser workarounds. No browser, WebGL, touch, keyboard/screen-reader, layout or field-performance pass is inferred. |

The separate review read all six final gate records, compared each actual log digest to its recorded digest, and checked test totals. Evidence bindings:

| Record | SHA-256 |
| --- | --- |
| `docs/standards/local-verification.json` | `12f1fa17508aa30f9add91c38763de6f8ec5122ddbad0b2195ab78aa595bde4f` |
| `docs/desktop-preview/desktop-proof.json` | `85bc29082891b38fb5e3609791ce12c790a9627ade55d086cb653b9b7962526e` |
| `docs/standards/desktop-rehearsal.json` | `166a18f85f02770356209c5c4d32c49469cf130ad0e97c34f084d56270636afe` |
| `scripts/apply-animation-upgrade.mjs` | `08ce96a9a7e6336877790dcbba088db5512e5e19b46e51a121c4167ba41c57df` |
| `scripts/make-desktop-upgrade-manifest.mjs` | `05b336cc9060fd22fb40f9896a3d13e5c2bef08f4b58204cfa6e209feec5fc96` |

Two concrete review findings were corrected and covered by the final tests. The desktop gate now rejects inherited keys such as `constructor` and requires the boolean `true` for attitude. Paused construction and selection now retain an authored still pose through intensity changes, with pause passed into both wrappers. Completion callbacks cannot overwrite a newer requested state or revive a destroyed controller.

A separate byte comparison found all seven API source files, truth/search/import/generation modules, package manifest/lock and all five mobile `.riv` files unchanged from v2 (18 files). The original `ComputerGeometry.tsx` baseline is identical in v1 and v2: `cbc0bd3c93c984c4282fab74522d167fcff18c9dd5118e24ab00a6d45811ef08`. These preservation checks do not certify a live SMTP server, canonical identity or browser runtime.

The separate reviewer also checked both rehearsal result sets and their retained manifests, application transcripts and six gate-log hashes under `docs/standards/desktop-rehearsal/`. Both original ZIPs still match the hashes recorded for their immutable baselines. The rehearsals precede these final documentation bindings; executable source is frozen, and the release manifest is regenerated to include the final document bytes.

`docs/DESKTOP-VISUAL-PROOF.md` describes the offline renderer. It uses the actual React SVG geometry and actual desktop controller, an external test clock, XML attribute composition and local SVG rasterization. The accompanying reel is an offline presentation, not a recording of website interaction or a submitted inquiry. Desktop SVG evidence does not create a native Rive or browser certification. The existing mobile Rive assets and empty browser-promotion registry retain their separately stated scope.

No new live SMTP, mailbox, GA4/search-account, DNS/TLS, public deployment, indexing or conversion result is claimed. Production still requires the real approved canonical export and exact pins. Follow `DESKTOP-INTEGRATION.md` for guarded installation and the existing deployment guide for the operator's actual release.