# Test report — v0.1.0 (2026-10-09)

| Test | Result | Evidence |
|---|---|---|
| PHP syntax all `.php` files | PASS | `php -l` |
| JavaScript syntax | PASS | `node --check public/assets/app.js` |
| Graph validation and data-rule unit tests | PASS (16/16) | `php tests/run.php` |
| libsodium token encrypt/decrypt roundtrip | PASS | CLI evaluation with generated ephemeral key; no real tokens used |
| MySQL connection and migrations | NOT EXECUTED | `pdo_mysql` is not installed in build environment |
| Bale Bot API `getMe`, Webhook, messaging | NOT EXECUTED | No real token or server webhook endpoint provided |
| Cron on cPanel and VPS worker | NOT EXECUTED | Hosting credentials missing |
| Browser UI cross-device manual E2E | NOT EXECUTED | Real DB-backed app not launched |
| Encrypted mysqldump backup/restore | NOT EXECUTED | MySQL client unavailable; restore manual |
| Security/penetration/load tests | NOT EXECUTED | Must run before production for sensitive data |

**Shipping gate:** This is a development release, not a fully E2E-verified production release. See STATUS.md for incomplete scope.