# Deployment QA

Review `README.md` section 7 and execute all ten acceptance checks against a configured **staging** MySQL database and web server. The package was not runtime-tested against a live CI4/MySQL installation at generation time, so do not skip these checks. PHP files were linted with PHP 8.4 and a standalone form-schema test was executed successfully.

Check security behavior with three separate browser sessions (Employee A, Employee B, Manager), including direct URL requests to protected endpoints. Check data visibility before and after approval, reapproval after edits, rejected reason visibility, report totals, exports, file MIME restrictions and file download authorization.

Ensure PHP limits support 10 MB file uploads: `upload_max_filesize=12M` or more and `post_max_size=14M` or more.