BITESIZE READING LIBRARY V4.5.7 — TEST REPORT

RESULT: PASS (static/package validation)

Validated
---------
- assets/app.js passes Node syntax validation.
- V4.5.7 version marker is present.
- Discover image container changed to 16:9 and real thumbnails use object-fit: contain so title-slide artwork is not cropped.
- Compact recommendation cards retain a cropped compact treatment to avoid oversized shelves.
- Resource-added celebration enlarged and set to approximately 6 seconds.
- Fifth-resource bonus celebration set to approximately 8 seconds.
- The bundled V4.5.6 HTML bonus asset is removed from V4.5.7.
- Bonus resource Product ID BE-RC-NF503PD5TC52 is excluded from the five-resource counter.
- The Mystery at Blackthorn Manor reward manifest carries bonus_reward=true and bonus_unlock_threshold=5.
- Bonus claiming uses HTTPS, a CORS-enabled PHP delivery endpoint and installs the downloaded ZIP through the existing Reading Library installer into IndexedDB.
- Bonus is not automatically downloaded; the teacher explicitly claims it after unlock because the full reward is a large package.
- Existing seasonal Timely resources logic is retained.
- Existing V4.5.5 Windows updater Font-constructor fix remains present.
- Full and update ZIP archives pass ZIP integrity tests.
- brl-bonus.php passes PHP syntax validation.

Practical security note
-----------------------
The bonus is absent from the customer application and normal local folders before unlock. The Fasthosts endpoint uses an opaque token/file name and only streams the package when requested by the application. This is suitable for hiding a surprise from ordinary users, but is not account-based DRM; a determined technical user could reverse-engineer a client-side unlock mechanism.
