From 1912fe889632e854c3851b9b58508af85e39a75e Mon Sep 17 00:00:00 2001
From: Public Source Publisher <public-source@itworx.tech>
Date: Thu, 1 Oct 2026 17:16:07 +0000
Subject: [PATCH] Publish curated MobilityOps source from
 e2471af5a51feeebcbc1c2732525d8bb7030bc70

---
 PUBLIC_SOURCE_EXPORT.md     |  2 +-
 PUBLIC_SOURCE_MANIFEST.json | 10 +++++-----
 README.md                   |  6 ++++++
 frontend/package-lock.json  | 12 ++++++------
 4 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/PUBLIC_SOURCE_EXPORT.md b/PUBLIC_SOURCE_EXPORT.md
index 7202771..b15ed8d 100644
--- a/PUBLIC_SOURCE_EXPORT.md
+++ b/PUBLIC_SOURCE_EXPORT.md
@@ -1,3 +1,3 @@
 # Public source export
 
-This source snapshot was generated from the private canonical repository at revision `64b0a721955f10dfd1570b6b5933c0a0462ff442`. It contains no private Git history or operational evidence. Changes are published from the canonical repository.
+This source snapshot was generated from the private canonical repository at revision `e2471af5a51feeebcbc1c2732525d8bb7030bc70`. It contains no private Git history or operational evidence. Changes are published from the canonical repository.
diff --git a/PUBLIC_SOURCE_MANIFEST.json b/PUBLIC_SOURCE_MANIFEST.json
index d5bca50..985b4ea 100644
--- a/PUBLIC_SOURCE_MANIFEST.json
+++ b/PUBLIC_SOURCE_MANIFEST.json
@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "sourceRevision": "64b0a721955f10dfd1570b6b5933c0a0462ff442",
+  "sourceRevision": "e2471af5a51feeebcbc1c2732525d8bb7030bc70",
   "files": [
     {
       "path": ".dockerignore",
@@ -39,8 +39,8 @@
     },
     {
       "path": "README.md",
-      "sha256": "890585d90df05d0f2eeea563103fe6634a8352e5f28aec1007b413eb7225655f",
-      "bytes": 3624
+      "sha256": "0cc2e08c8406f38018b32463ddf35cff24d85b032bcac99d1013bb24c30f252c",
+      "bytes": 4247
     },
     {
       "path": "SECURITY.md",
@@ -789,8 +789,8 @@
     },
     {
       "path": "frontend/package-lock.json",
-      "sha256": "2294303dcf1cdae97e5bf60d9d46621c477ef5de154d5d8c596a9e0e472e536f",
-      "bytes": 169491
+      "sha256": "3e8151766a623b50a6763491e7c170964afa1ddd0962b9dcf8554df128e4fbd0",
+      "bytes": 169493
     },
     {
       "path": "frontend/package.json",
diff --git a/README.md b/README.md
index 3b1439f..48fa75c 100644
--- a/README.md
+++ b/README.md
@@ -49,6 +49,12 @@ flowchart LR
 
 The API owns operational state. Return processing is transactional; external automation receives an outbox event after the database commit. The demo can use bundled n8n, while a production installation can connect to an existing instance. The frontend is responsive and supports keyboard navigation.
 
+## Demo boundaries
+
+The local demo is intended for fictional data on a trusted development machine. Its password-free guided entry and deterministic knowledge provider make evaluation reproducible; they are not production authentication or a live RAGcore connection. Start a separate, configured installation before introducing real customer or vehicle data.
+
+For a useful first check, complete a return and inspect its audit correlation and outbox status. A committed business transaction can succeed while an external workflow is pending or unavailable; verify delivery separately rather than repeating the transaction.
+
 ## Deployment notes
 
 The Compose stack includes the web app, API, database and a local automation fallback. Copy `.env.example`, set unique credentials and an appropriate `N8N_WEBHOOK_URL`, then mount persistent PostgreSQL storage. Put the web endpoint behind HTTPS, verify `/health/ready`, and test backup and restore before use. The public source intentionally contains no private deployment configuration.
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index e26d00e..fa449b2 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1067,9 +1067,9 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1436,9 +1436,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.18",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
-      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {