# HANDOFF — 2026-11-01 (exe renamed, depot builds, output rule enforced)

## State

- Branch `main`, level with `origin` through `8f79b20`; this unit is local.
- **The shipped exe is `LlamaCasty.exe`** (`AssemblyName` renamed; four pack URIs fixed — the docs
  said three, `KeepBroadcastDialog.xaml:5` was the fourth). Guarded by `AssemblyIdentityTests`.
- **`scripts/publish.sh`** stages `artifacts/steam-stage` and refuses to finish if `ffmpeg\`, the
  licence, privacy or notices file is missing, or test assemblies leaked in. Output 257 MB.
- **The output-profile rule is built and enforced**: `Models/OutputProfile.cs` (921,600 px / 30 fps,
  fail closed) resolved once in `BuildEncoderOptions`, which feeds the one ffmpeg process writing
  both outputs. `MainViewModel.DeveloperMode` bypasses it in Debug only.
- **Distribution is Steam-exclusive** (2026-10-31): free app + paid edition as a Steam **DLC**; the
  **$10/month** plan sold off-Steam by Polar, *stated, never sold*, in-app.
- **Entitlement is `steamDlcOwned || polarKeyValid`**; `steam_api64.dll` ships beside the exe and
  the app must start without Steam, falling back to free.
- **Site live with Steam** (`a9d07ce`); `www.llamacasty.com` 301s to the apex.

## Next action

1. **Greyed tier entries + entitlement wiring** — the rule is in place and tested
   (`Models/OutputProfile.cs`); the dropdown still shows every tier as equally available, and
   `HasProOutput` is `IsPremium || DeveloperMode` with no Steam DLC path yet.
2. Then the **entitlement seam** (`IEntitlement`: Steam DLC via `steam_api64.dll`, Polar lease).
3. Steamworks: App ID waits on identity verification; then depot, store page and the DLC app.

## Landmines

- **⛔ `ExcludeFromSingleFile="true"` on the ffmpeg content** — without it the publisher bundles
  libav\*.dll into the exe and the app ships unable to find ffmpeg. Recipe in `MyMistakes.md`.
- **Dev affordances are compiled out, not hidden** — `DeveloperPanel` is removed from the Release
  build; `Helpers/DevBuild.cs` is the single source for the flag (never `const`).
- **Nothing may gate a feature.** The only paid delta is the output profile; `ShowBrandFlash` stays
  `false` and entitlement must never enable it.
- **No checkout inside a Steam build** — the Wallet rule. The monthly is named, never sold, in-app.
- **The org access token never ships.** `organization_id` is public; the token is not.
- **The site publishes the model, never the numbers**, and never takes payment or links a checkout.
- **No self-updater and no version banner**: Steam updates the app.
- Pre-existing: the **full test suite hangs** (WASAPI teardown) — per-class runs; `ytLive.Tests`
  carries 3 xUnit warnings the app-only gate does not see; a red settings control is still a bug.