# Review checklist (before the first public build)

## Privacy
- [ ] A written list of everything that goes online, and when (each one justified).
- [ ] User files are only read, never moved, changed or uploaded without an explicit action.
- [ ] No analytics or tracking you haven't told people about.
- [ ] Public material (screenshots, demos, tests) uses only synthetic or your own content: no real people, no private names or paths.

## Security
- [ ] Local servers listen on 127.0.0.1 only, check the Host header, and require a per-launch token from the app.
- [ ] No file path from the UI is used without checking it's inside allowed folders; files are revealed, not executed.
- [ ] No user text reaches a shell command unescaped (use argument lists).
- [ ] The UI has a strict Content-Security-Policy; the desktop shell has context isolation and no Node in the page.
- [ ] Dependencies pinned; downloads checked against a checksum.

## Licences
- [ ] A THIRD_PARTY list: every bundled component, version, source, licence.
- [ ] GPL components: source offered next to every release.
- [ ] Fonts and assets: licences allow bundling.
- [ ] Your own LICENSE file.

## Accessibility
- [ ] Everything reachable by keyboard, with a visible focus ring.
- [ ] Contrast WCAG AA for text and controls.
- [ ] Labels for icon buttons and inputs; one h1 per page; the page language set.
- [ ] Motion respects "reduce motion".

## First run
- [ ] Try it as a stranger on a clean profile: empty states explain what to do.
- [ ] Long first-time steps (downloads) show real progress and survive being offline.
- [ ] Every error says what to do next and where the logs are.

## Packaging
- [ ] The installed app is tested end to end, not only the dev build.
- [ ] Install without admin rights; uninstall keeps or asks about user data.
- [ ] One version number everywhere; an About screen with it.