<!-- Derived Markdown alternate of log.md; canonical repository sources and registered evidence retain authority. -->


# Research log

## 2026-10-20

- Accepted the supplied technical draft as a seed, with explicit instructions to keep the subject organisation-neutral.
- Verified current NHS configuration, card-generation, middleware, network and WES guidance; cross-checked device and driver boundaries with Magicard and HID.
- Registered 18 sources with retrieval dates and limits. Retained links and original synthesis; did not mirror external source bodies or downloads.
- Corrected virtual desktop support and the modern Credential Management dependency. Preserved unresolved interface, runtime and end-to-end network questions.
- Completed RA-10 as a labelled local recommendation and added a proposed acceptance plan.
- Selected NHS blue (#005EB8), Standard Production, an independent repository and a managed loopback preview. The user later authorised a private GitHub repository and public Cloudflare Pages publication.
- Research verification is distinct from operational acceptance: every physical test remains not run.

The [source register](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md) records provenance. The [scope](https://nhs-smartcard-printing-wiki.pages.dev/scope/index.md) explains corrections. The [project status](https://nhs-smartcard-printing-wiki.pages.dev/project/status/index.md) records implementation state.

## Publication authorisation

The owner authorised a private GitHub repository and public Cloudflare Pages publication. The publication contains neutral synthesis and source links. It excludes the original supplied draft, private operational data and credentials.

## Publication verification — 20 October 2026

The original synthesis was committed to a private GitHub repository and published through Cloudflare Pages Direct Upload. Complete local verification passed with 99 contract tests and desktop/mobile browser checks. The 2D and 3D graphs, source-row navigation, diagrams, search and theme controls were exercised. Visual review covered desktop light mode and mobile dark mode. All 29 checked production routes returned HTTP 200.

The public site excludes the original supplied draft and implementation test fixtures. Its graph is regenerated from canonical Markdown before publication. Physical card issuance, renewal and printing remain untested. See [project status](https://nhs-smartcard-printing-wiki.pages.dev/project/status/index.md) and the [validation queue](https://nhs-smartcard-printing-wiki.pages.dev/validation-queue/index.md).

## Security and layout maintenance — 20 October 2026

A targeted KaTeX update resolves the two npm audit findings, and the audit gate now includes low-severity issues. The browser bundle retains the qualified Mermaid and DOMPurify versions. Wide becomes the default desktop layout while an explicit Standard-width preference remains persistent. These are consumer adaptations; the Standard pin and clinical research evidence are unchanged.

The verification contract now covers the patched maths dependency, the initial Wide state and persistence of both width choices. Physical card operations remain outside this software verification.
