Deploy Site Selection and RFP Studio v17.3 null-safe brand

DEPLOYMENT_NOTES.md

@@ -1,8 +1,8 @@
 # Deployment notes
 
-Deployment package: v17.1-variable-secret-collision-recovery (2026-08-20)
+Deployment package: v17.3-null-safe-brand-parity (2026-08-20)
 
-Protected runtime: v17-guided-four-step-incentive-workflow
+Protected runtime: v17-3-null-safe-brand-parity
 
 Validation controls:
 
@@ -10,7 +10,8 @@ Validation controls:
 - Pins every direct runtime dependency, including `libsql==0.1.11`.
 - Requires a modern Hugging Face deployment helper; no legacy fallback is used.
 - Builds the exact five-file package in a disposable private canary Space first.
-- Requires the canary to reach `RUNNING` and expose the protected runtime markers.
+- Requires the canary to reach `RUNNING` and expose the exact release/build/nonce attestation.
+- Fails closed when runtime logs or the one-time attestation are unavailable.
 - Deletes the canary after validation.
 - Does not touch production unless the canary passes.
 - Detects names present in both Variables and Secrets before confirmation.
@@ -18,6 +19,12 @@ Validation controls:
   the wrong category and refuses to guess about unrecognized collisions.
 - Never creates runtime Variables as Secrets and never deletes the five
   allowlisted application credential/encryption Secrets.
+- Refreshes validated managed runtime-variable values on every release.
+- Keeps Step 2 operational through a transient Turso failure by using encrypted
+  local fallback storage and surfacing a cloud-audit warning.
+- Returns a full in-page Step 2 diagnostic contract for unexpected failures,
+  preventing an uninformative generic Gradio error toast.
+- Normalizes nullable UI/API text and contains malformed optional competitive-analysis responses.
 - Always refreshes the release-specific application-source key in production.
 - Preserves the persistent RFP data-encryption key unless it is missing.
 - Verifies uploaded production README, requirements, and encrypted app hashes.
@@ -27,4 +34,4 @@ Validation controls:
 - Adds explicit site selection, responsive workflow navigation, simplified
   evidence panels, and a downloadable performance-based incentive package.
 - Keeps automatic prerequisite analysis, the single launch owner, MapLibre map,
-  encrypted Turso capture, Word outputs, and Dearmon Analytics branding.
+  encrypted Turso capture, Word outputs, and four-color Dearmon Analytics branding.

README.md

@@ -14,14 +14,21 @@ short_description: Site selection, RFP responses, and incentives.
 
 Encrypted private Gradio application.
 
-Protected runtime: `v17-guided-four-step-incentive-workflow`. Deployment package: `v17.1-variable-secret-collision-recovery (2026-08-20)`.
+Protected runtime: `v17-3-null-safe-brand-parity`. Deployment package: `v17.3-null-safe-brand-parity (2026-08-20)`.
 
 The updater first proves this exact five-file package in a temporary private
 canary Space. Production is not modified unless the canary reaches `RUNNING`,
-the protected runtime markers are present, and the runtime remains stable.
+the exact release/build/nonce attestation is present, and the runtime remains stable.
 Before production upload, it also resolves known Variable/Secret name collisions
 by deleting only the duplicate copy in the wrong category.
 
+Step 2 is isolated from audit-backend availability: a transient Turso failure
+uses encrypted local fallback storage and produces a visible warning rather
+than terminating the Demographic Information callback.
+
+Blank optional fields are normalized safely, and the four-color Dearmon header
+uses the navy, teal, orange, and purple reference palette.
+
 Guided workflow:
 
 1. Site Selector