Record production release verification

docs/verification.md

@@ -3,6 +3,39 @@
 Observed through 2026-08-09 in the local workspace. This report separates observed
 results from product limits and unknown production properties.
 
+## Production application release on 2026-08-09
+
+- The reviewed application-only release advanced the detached production
+  checkout from `8ab30ce7f5bd0a28e1423b8da2846fe0e224f50c` to
+  `ff50a80e48181c9a650d9ec22c927567770686c6`. The release used the immutable
+  `who-need-help:production-ff50a80e4818` image and did not change the shared
+  edge/Caddy deployment or push Git.
+- The release created and catalog-verified the external PostgreSQL 18.4 backup
+  `/srv/who_need_help-production/output/backups/production/pre-20260809T061259Z-ff50a80e4818.dump`,
+  copied it outside the production host, and independently verified the copied
+  checksum. Its mode-`0600` rollback evidence is retained at
+  `/srv/who_need_help-production/output/releases/20260809T061321141091841Z-ff50a80e4818/rollback-manifest.txt`.
+- Environment validation reported all twelve configured readiness groups ready,
+  migrations were already current, and the database check observed PostgreSQL
+  18.4 with PostGIS 3.6. The release unit
+  `codex-heavy-wnh-prod-release-ff50a80-r2-20260809-091249-2537784.service`
+  completed successfully in 58.598 seconds with a 93.9 MiB local memory peak.
+- Independent post-release inspection found a clean production checkout, one
+  running healthy application container with zero restarts and no OOM event,
+  no residual migration container, and the exact ready response. Public HTTPS
+  returned HTTP 200 for the home page, liveness, readiness, PWA manifest,
+  `robots.txt`, `sitemap.xml`, and `/.well-known/assetlinks.json`. The sitemap
+  contained twelve absolute entries, the manifest named Who Need Help, and the
+  Android association named `org.whoneedhelp.mobile`.
+- The frozen hackathon-test checkout remained at
+  `cf7bacdf61ffb171ebac85e32dfcf12bc6972d59c`. Its application, PostGIS, and
+  Mailpit containers retained their existing lifetimes and remained healthy;
+  neither that checkout nor its data was recreated or changed.
+
+These observations prove deployment and public-health/search metadata for this
+revision. They do not by themselves prove external authentication-email receipt,
+browser Web Push delivery, or production support/legal queue routing.
+
 ## Local support/legal and complete browser E2E on 2026-08-09
 
 - The focused isolated Chromium run exercised an authenticated support case,