# Commitments

No timed or externally delegated commitment is currently active.

## Open Product Work (not a promise in this task)

- Login credentials, port-8766 activation, authenticated history and logout are complete. One controlled no-PII upload
  filename check and one released 5/5 company-report job under processor 1.2.0 remain open product acceptance work.
- The Booking extraction/review program is source-complete, migrated and transaction-tested against live PostgreSQL with
  an outer rollback. One operator-authorized real upload/edit/delete/activate flow remains open product acceptance work;
  this record is not authorization to change the current Booking source.
- The 2026-07-31 Keychain-only credential rotation and controlled restart/login/logout check are complete, but the new
  password still matches the username. Rotate it again to a distinct high-entropy value when the operator chooses one.
- Package Node/artifact-tool and a shared output volume into the eventual production worker runtime.
- Run one controlled no-PII XML vertical slice on the eventual ARR2.0 server deployment.