HR & Payroll — v0.39.4-dev Consolidated
Pre-Final Review Static Verification Evidence
Project: HRPAY-BMD-20260911-01
Review date: 2026-09-16

SOURCE REVIEW BASELINE
- Developer-returned package: HR-Payroll-Consolidated-Master-v0.39.4-dev.zip
- Previous PF-001..PF-018 corrections rechecked as present in the developer return.
- Second-review corrections/hardening: R2-001..R2-008.
- Detailed register: PREFINAL-REVIEW-CORRECTION-LIST-v0.39.4.md / PREFINAL-REVIEW-CORRECTIONS-v0.39.4.csv

FINAL SOURCE-LEVEL VERIFICATION
- Python compileall: PASS
- P0 static verifier: 18/18 PASS
- P1 static verifier: 33/33 PASS
- P2/P3 static verifier: 18/18 PASS
- Pure payroll calculation tests: 4/4 PASS
- Pure loan calculation tests: 3/3 PASS
- Named Django URL references: 223 checked; 0 missing
- Template references: 122 checked; 0 missing
- Raw hard-coded absolute internal href/form-action links in runtime templates: 0
- OPEN-ME.html local links: 10 checked; 10 valid
- models.py schema files vs developer-returned v0.39.4-dev: 12/12 byte/hash comparison set; 0 changed by this R2 correction set
- Updated DOCX manuals: rendered and visually inspected; PDF copies regenerated from the reviewed DOCX files

RELEASE-ENGINEERING CONTRACT
- Package cache artifacts (__pycache__ / *.pyc) must be removed before delivery.
- PACKAGE-CONTENTS.txt and SHA256SUMS.txt must be regenerated after all source/document corrections.
- Delivered ZIP must pass ZIP CRC test, then be extracted to a new folder and rechecked against embedded SHA256SUMS.txt and tools/package_consistency_check.py.

RUNTIME BOUNDARY / OPEN GATES
- This evidence is SOURCE/STATIC verification only; it is NOT Django/PostgreSQL Runtime PASS.
- Django/psycopg are not available in the review execution environment, so browser/ORM/database transactions and full Django tests were not executed here.
- QA-011 remains OPEN: reviewed Django migration files must be generated/frozen from this exact source in a Django-capable environment, followed by drift/fresh-database proof.
- QA-094 remains OPEN until real PostgreSQL Backup -> Verify -> Restore -> Control Totals evidence exists.
- Physical ZKTeco FO-M1 and parallel manual-vs-software payroll reconciliation remain Local UAT gates.