# Release Signoff - SaaS Security Review Portal 1.0.0

## Release Scope

This release is the public free-use Windows desktop release of SaaS Security Review Portal.

Distributed artifact:

- SaaS-Security-Review-Portal-1.0.0-Public-Release.zip

The public ZIP should be the only release package shared externally.

## Verified Locally

- Version is set to 1.0.0 in package metadata and in-app display.
- Installer metadata shows RequestPath Security.
- Installer SHA256 hash was generated after final build.
- Installer is configured for per-user installation without elevation by default.
- Packaged app archive contains only expected Portal files.
- No internal tooling, activation IPC, sensitive local paths, or personal user paths are present in the packaged Portal.
- JavaScript syntax checks passed for main process, preload, app renderer, and website script.
- `pnpm audit` reports no known vulnerabilities.
- Production dependency audit reports no known vulnerabilities.
- Public release ZIP contains only the installer, hash file, release checklist, release README, and this signoff.

## Manual Smoke Test Required Before Public Posting

- Install from the public ZIP on a clean Windows profile or test machine.
- Launch from Start Menu or desktop shortcut.
- Create and save a new review.
- Edit a saved review and confirm fields reload.
- Export a blank questionnaire.
- Import a completed questionnaire.
- Add an evidence document and open it.
- Export Approval Record PDF.
- Export Review Register PDF.
- Change Admin Settings and confirm they persist after restart.
- Use Clear Review Data and confirm new reviews can still be created afterward.
- Confirm app uninstall works from Windows Apps / Programs.

## Known Release Caveats

- The installer is not code signed yet.
- Windows SmartScreen or browser reputation warnings may appear.
- This is a local desktop app, not a hosted secure database.
- The local audit log is useful for accountability but is not tamper-proof.
- Public release materials do not include source code, old build folders, backup zips, or internal tooling.

