docs: record connected sandbox dues and native proof

GITHUB_ISSUES.md

@@ -1,6 +1,6 @@
 # GitHub Issue Backlog: Secure Commerce Program
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

IMPLEMENTATION_PLAN.md

@@ -1,6 +1,6 @@
 # MPRC Secure Commerce Implementation Plan
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OFFICER_START_HERE.md

@@ -1,6 +1,6 @@
 # MPRC Website: Officer Start Here
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target packaging, restricted sandbox keys and backend-first publication checks are prepared for review. Club sign-in, private provider setup and hosted checkout proof remain pending. [Specialist handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OPERATIONS_RUNBOOK.md

@@ -1,6 +1,6 @@
 # MPRC Platform Operations Runbook
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

SECURITY.md

@@ -1,6 +1,6 @@
 # MPRC Security, Privacy, and Risk Plan
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

STRIPE_COMMERCE_DESIGN.md

@@ -1,6 +1,6 @@
 # Stripe, Race Registration, and Merchandise Design
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **#731 fictional native acceptance — 2026-10-14:** actual signup, full fictional credit return, same-bib recipient transfer, revoke and original credit ownership passed in staging. Native committed/lost-response retry preserved one seat/receipt/audit, did not resurrect cancellation and could not bypass current authority. [Proof and supervised gate](./docs/officers/STAGING_COMMUNITY.md#fictional-race-member-screen--731-source-prepared). These integer-credit simulations are not provider-backed payment/refund evidence; no real policy, finance authorization, Stripe object or production launch changed. Complete acceptance/cleanup receipt and fresh fake fixtures remain prerequisites; earlier #731/#732 source-only notes below are historical.
 

SYSTEM_DESIGN.md

@@ -1,6 +1,6 @@
 # MPRC Platform System Design
 
-**Test annual dues — #742, source preparation only:** a separate, default-disabled test checkout now saves one server-priced purchase per fictional account and activates the payer from verified Stripe test state. No manual membership approval follows satisfied checks. No sandbox connection, dues Function/webhook deployment or dues Hosting publication is supplied; real payments and family invitation enrollment remain unavailable. [Officer review](./docs/officers/TEST_DUES.md), [engineering boundary](./docs/TEST_DUES_ENGINEERING.md). **October 17 release preparation:** fixed-target source packaging, pinned test-secret/runtime checks and backend-first Hosting guards are prepared for review. Restricted sandbox keys are supported. Club sign-in/provider setup and actual hosted checkout verification remain pending; no cloud/provider mutation is supplied. [Specialist release handoff](./docs/TEST_DUES_RELEASE.md).
+**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).