# Milestone 5 results

Status: machine scope complete; user-only submission actions pending

Completed: 2026-07-20 HKT

## Outcome

Chartsmith is now packaged as a public, reproducible, judge-facing product:

- public repository setting: <https://github.com/sseo0817/chartsmith>
  (`PUBLIC`, but currently hidden from anonymous visitors by an account-level
  GitHub 404 condition);
- downloadable source fallback:
  <https://chartsmith-build-week.sseo.chatgpt.site/downloads/chartsmith-source-snapshot.zip>;
- public media release commit:
  `21f68e551ba3ea1e674fa32401893a759deb641b`;
- public showcase: <https://chartsmith-build-week.sseo.chatgpt.site>;
- exact deployed application source: `cc38b0caa4c8fa998d40b57e7d56543bfec7163d`;
- internal source package commit: `b6b6b43ddf8d071749e22aa259b5d0e1a589a934`;
- MIT license with third-party rights separated;
- ten complete accepted journeys;
- upload-ready Devpost image package;
- 2:49 English AI-narrated, captioned demo;
- verified public video: <https://youtu.be/5CUBe7hqI8o>;
- paste-ready Devpost story, tags, links, disclosures, and upload copy.

The public deployment is intentionally an evidence-rich showcase. Its Local
edition section contains no fake upload while the genuine engine is
unavailable, directs judges to the ten complete journeys, and provides a
complete download with a one-command setup. Genuine new-image generation
remains a local workflow and is never simulated in the hosted product;
starting the local engine activates the real uploader automatically.

The local handoff is now tested as a product path rather than inferred from the
repository. A fresh archive installation reported zero known npm
vulnerabilities and all six readiness checks true. Its uploader launched a
genuine image-only workflow run that reached acceptance after six inspections
and five targeted repairs, with every hard gate true. This directly verifies
that the public download contains the executable workflow, reference catalogue,
validation images, example assets, dependency locks, and local web runtime it
claims to contain.

GitHub's authenticated API and UI both report the repository as Public, but
logged-out profile, repository, raw-file, and REST API requests currently return
404 for every repository under `sseo0817`. The primary email is verified and a
control public repository returns 200, so this is recorded as an account-level
GitHub visibility issue in
`docs/current/github_public_visibility_issue.md`. The showcase source snapshot
prevents that external issue from making the submission code inaccessible.
Anonymous download verification returned HTTP 200 and an exact SHA-256 match
for the 9,524,929-byte, 191-entry deterministic source archive at internal
source commit `61e69107bb370ef9f5a29311a56675f837261b07`.

## Validation

The final machine scope passed:

- repository-state validation;
- portfolio validation: 10/10 accepted;
- Python tests: 24/24;
- web rendered-HTML tests: 2/2;
- web production build;
- public-release audit: 332 files, 39,162,124 bytes, ten examples, 158
  reference records;
- production browser QA on desktop and 390-pixel mobile;
- zero hosted upload inputs while the engine is offline and a verified HTTP 200
  local-source download;
- zero known npm vulnerabilities after dependency hardening;
- fresh-extract setup, deep readiness, genuine upload, intermediate stage, five
  repair, and accepted-release verification;
- zero broken production images and zero console errors;
- video full decode, technical probe, loudness scan, long-silence scan, caption
  safe-area review, and twelve-scene visual contact-sheet review.

## Submission assets

- thumbnail:
  `docs/current/assets/chartsmith-devpost-thumbnail.png`;
- project media:
  `output/milestone5_media/project_media/`;
- video:
  `docs/current/assets/milestone5/video/chartsmith-build-week-demo.mp4`;
- captions:
  `docs/current/assets/milestone5/video/chartsmith-build-week-demo.srt`;
- video QA:
  `docs/current/assets/milestone5/video/chartsmith-build-week-demo-qa.json`;
- Devpost package:
  `docs/current/devpost_submission_package.md`.
- YouTube channel profile and branding:
  `docs/current/youtube_channel_profile.md`.

## Completion boundary

The repository, deployment, media, video, and copy are complete. Milestone 5
remains open only for actions that require the user's accounts or personal
attestation:

1. `/feedback` Session ID;
2. Devpost media upload and final story review;
3. rules and attestation review;
4. final Devpost submission.

After those values are supplied, update `PROJECT_STATE.yaml` and
`manifests/milestone5_completion.json` with the public video URL, feedback
Session ID, and submitted state.
