# Source evidence and provenance

Prepared 5 November 2026 for PanelKind 1.7.2. The code listed below is available inside the included [installable plugin ZIP](../plugin/panelkind-1.7.2.zip), beneath `wp-adminer/`. These file hashes refer to the exact source examined, which matches that ZIP.

| Source file inside plugin | What it supports | SHA-256 |
| --- | --- | --- |
| `wp-adminer.php` | Version, requirements, public integration configuration | `0f82965286c6f7046f02fc8e6a38bee2abd2cc1dcc9935961ea92cf43b42740d` |
| `includes/class-entitlements.php` | Free caps, paid surface fields, published-baseline preservation | `7807171868bbabc6c6111a7fa2757a940a3efb8a831a1f159ae3d6c643f03f47` |
| `includes/class-schema.php` | Technical limits, sanitisation, references and section graph | `a8c67651e1c91aaf40473e70a0b6fa6094fb6ac1c59bde843ede384965d7aa2e` |
| `includes/class-license.php` | Installation-specific features, update entitlement, directory flag | `48c73fd5ce1337b9658275c9c513f687b060315fc01c68a5c1458e590bf6b00c` |
| `includes/class-defaults.php` | Free seed, default styling and neutral assignments | `136310d6964f24baa1cef2ea82b98190e5c035b3c4e989371640a4482a9c80ac` |
| `includes/class-themes.php` | Twelve palettes and thirteen colour tokens | `d742a391321fba00212f129f3ddb85161e72448ac0a2f1e31bbb57f901b113f0` |
| `includes/class-policy.php` | View assignment and access precedence | `16db02dbd2eb3e44bf789ad62e2c1142fc785abc4df8ed2c293fa2b2af32acb8` |
| `includes/class-roles.php` | Linked role capacity and lifecycle | `9c0dfad26ba0e8a98d87bbfffb68a1e7af59ef18101a280084d3c3e98dca1c00` |
| `includes/class-api.php` | Authorisation, portable stripping, import/restore handling | `fe3429e5d07498f508bae177c401ab36e9b6506ef5e5eaabac05d5ee1e07115c` |
| `includes/class-backup.php` | Same-site signatures | `7be3b74fa9d55c05f7c0416c958ab6f4705e451c593d0614d1c8b2367326bda7` |
| `includes/class-content.php` | Widget/page access, checklist and recent-content behaviour | `c1b82cf1b941e186a716185b9f43af4bb21ca9ee01ac53b8080a342befe9d24b` |
| `includes/class-preview.php` | Preview session and write guard | `255c602c12cc8d257d9d80928de936be505fa80bda1780ba9d1d095ed8056dc5` |
| `includes/class-store.php` | Draft, publication, locking, history and audit retention | `42b8c7f5aea7ccd4a64832e78ac2a1d31403528d6658fc4a01551132dd4edd4f` |
| `includes/class-appearance.php` | Styling scope and runtime rendering | `a326d61fd3d742f537c06e6141d8ce43dbe6f5befcaa376f305ae315ca20c6ee` |
| `includes/class-sections.php` | Nested navigation and contextual dashboards | `0a1bf1665da2e07f1d0d24f26f7ea0af1d0847110c90d163ba01d96e5ce71430` |
| `includes/class-uninstall.php` | Uninstall lifecycle and retained native roles | `da1b73499d2f381e1a635a43d4a0331cc0e55eb780055a29326a503743178981` |
| `assets/admin.js` | Editor actions, theme application/Undo and entitlement prompts | `1db5e54363b6a707b896a4adc4f4669babfb928c5e2af6430b3b54c5a015811e` |


## Other source material consulted

The local project README, current Free-versus-Pro guide, release readme and validation history were used alongside code. Entitlement and schema code took precedence where prose was old: the comparison's old 1.6.1 heading, historical paid-colour restrictions, old all-tiers-same-features wording and no-external-service language are not carried forward as current claims.

The repository includes entitlement, style-entitlement, license, preview, role, section, integration and theme-action tests. Test descriptions were inspected as supporting evidence; no full suite was rerun for this documentation-only task. Historical results are summarised in [release and verification](../docs/13-RELEASE-AND-VERIFICATION.md). Development tests/fixtures/runtime files are not included in the installable ZIP.

Brand assets came from the local `branding/panelkind/` and `assets/` directories. Type direction, colour tokens and logo-use guidance derive from the existing brand guide. Prompts are copied from the existing generation record. No external pricing, domain, trademark, marketplace or customer-license state was checked; those are not established by the source snapshot.

Screenshots came from the existing project screenshot folder. Versioned captures are labelled, and earlier captures are illustrative. The brand board is concept artwork, not evidence of runtime functionality.

## Package integrity

`MANIFEST.json` enumerates payload files, sizes and SHA-256 hashes, excluding the manifest and checksum file themselves. `CHECKSUMS.sha256` covers every payload file plus the manifest, excluding itself. The final outer ZIP has a SHA-256 sidecar alongside it. All paths are relative and no development caches, local configuration exports, test credentials or hidden files are included.

[Back to the package index](../README.md)