Deploy canary-gated Site Selection and RFP Studio v17.0

DEPLOYMENT_NOTES.md

@@ -1,16 +1,25 @@
 # Deployment notes
 
-Deployment package: v16.1-space-metadata-hotfix (2026-08-19)
+Deployment package: v17.0-guided-four-step-incentive-workflow (2026-08-20)
 
-Protected runtime: v16-prerequisite-auto-analysis-runtime-verification (2026-08-19)
+Protected runtime: v17-guided-four-step-incentive-workflow
 
-- Single launch owner: root encrypted `app.py`.
-- Protected source exports `build_demo()` and does not define or call `main()`.
-- Generate RFP Template automatically refreshes missing or stale demographic/operational-fit analysis.
-- Runtime logs print `v16-prerequisite-auto-analysis-runtime-verification` loader, source, and ready markers.
-- Plotly mapping uses `Scattermap` / MapLibre rather than deprecated `Scattermapbox`.
-- Turso documents, queries, model exchanges, analysis state, and generated templates remain encrypted.
+Validation controls:
 
-- Hugging Face `short_description` is 52 characters, below the 60-character limit.
-- The deployer validates this metadata length before saving secrets or uploading files.
-- Windows Anaconda paths use literal backslashes; no control characters remain in the batch launcher.
+- Uses minimal documented Hugging Face Space metadata.
+- Pins every direct runtime dependency, including `libsql==0.1.11`.
+- Requires a modern Hugging Face deployment helper; no legacy fallback is used.
+- Builds the exact five-file package in a disposable private canary Space first.
+- Requires the canary to reach `RUNNING` and expose the protected runtime markers.
+- Deletes the canary after validation.
+- Does not touch production unless the canary passes.
+- Always refreshes the release-specific application-source key in production.
+- Preserves the persistent RFP data-encryption key unless it is missing.
+- Verifies uploaded production README, requirements, and encrypted app hashes.
+- Uses a transition grace period before accepting a stale production terminal state.
+- Uses a clear four-step workflow: Site Selector, Demographic Information,
+  RFP Response Generator, and RFP Recommendations (Incentive Package).
+- Adds explicit site selection, responsive workflow navigation, simplified
+  evidence panels, and a downloadable performance-based incentive package.
+- Keeps automatic prerequisite analysis, the single launch owner, MapLibre map,
+  encrypted Turso capture, Word outputs, and Dearmon Analytics branding.

README.md

@@ -1,31 +1,33 @@
 ---
-title: RFP Template Generator
+title: Site Selection and RFP Studio
 colorFrom: blue
 colorTo: green
 sdk: gradio
-sdk_version: 6.24.0
-python_version: "3.12"
+sdk_version: 6.5.1
+python_version: "3.11"
 app_file: app.py
 pinned: false
-fullWidth: true
-header: mini
-disable_embedding: true
-startup_duration_timeout: 1h
-short_description: Site selection, operational fit, and RFP generation.
-tags:
-  - consulting
-  - site-selection
-  - economic-development
-  - gradio
+short_description: Site selection, RFP responses, and incentives.
 ---
 
-# Dearmon Analytics RFP Template Generator
+# Dearmon Analytics Site Selection & RFP Response Studio
 
-Encrypted private Gradio application. Runtime release `v16-prerequisite-auto-analysis-runtime-verification (2026-08-19)`; deployment metadata hotfix `v16.1-space-metadata-hotfix`.
+Encrypted private Gradio application.
 
-Version 16 automatically runs demographic and operational-fit analysis when the user generates a template and the prerequisite state is missing or stale. The protected source never launches itself; the root encrypted loader owns the only server launch. Plotly maps use the MapLibre `Scattermap` API.
+Protected runtime: `v17-guided-four-step-incentive-workflow`. Deployment package: `v17.0-guided-four-step-incentive-workflow (2026-08-20)`.
 
-Required Space secrets:
+The updater first proves this exact five-file package in a temporary private
+canary Space. Production is not modified unless the canary reaches `RUNNING`,
+the protected runtime markers are present, and the runtime remains stable.
+
+Guided workflow:
+
+1. Site Selector
+2. Demographic Information
+3. RFP Response Generator
+4. RFP Recommendations (Incentive Package)
+
+Required production Space secrets:
 
 - `APP_SOURCE_FERNET_KEY_V1`
 - `OPENAI_API_KEY`

requirements.txt

@@ -1,19 +1,10 @@
-gradio==6.24.0
-gradio-client==2.6.0
-huggingface-hub==1.27.0
-fastapi==0.141.1
-starlette==1.6.0
-jinja2==3.1.6
-uvicorn==0.41.0
-numpy==2.5.2
-pandas==3.0.5
+gradio==6.5.1
+pandas==2.2.3
 PyMuPDF==1.26.7
 python-docx==1.2.0
-requests==2.34.2
+requests==2.32.5
 plotly==6.5.2
 shapely==2.1.2
 pyproj==3.7.2
-pillow==12.1.1
-cryptography==46.0.7
+cryptography==46.0.4
 libsql==0.1.11
-openai==2.54.0