# IARPG Hosting Smoke Test

**Release:** IARPG-OPS-2 2.0.4-wip  
**Updated:** 2026-07-20T12:04:07Z

## Purpose

`/hosting-check.php` performs a safe, read-only or narrowly scoped diagnostic on the actual Apache or LiteSpeed account. It does not reveal environment variables, absolute paths, session data, secrets, or private configuration.

## Procedure

1. Deploy the complete flat ZIP to the document root.
2. Open `/hosting-check.php?format=html` over HTTPS.
3. Review PHP version, required file readability, `app/data` writability, clean-route rewriting, security headers, protected hidden paths, JSON content type, local static assets, compression indication, and UTC clock handling.
4. Save the JSON result from `/hosting-check.php?format=json` as release evidence.
5. After the smoke test, remove `hosting-check.php` or set `IARPG_ENABLE_HOSTING_CHECK=0` in the file. Do not leave a diagnostic endpoint enabled indefinitely.

## Stable promotion rule

Local build success is not a substitute for target-host evidence. A stable `2.1.0` promotion remains blocked until the actual hosting result is attached to the machine-readable promotion record.