# Receipt Review — fictional browser trial

This is an account-free, browser-local trial using exactly two author-generated
fictional receipts. Resolve the constructed conflicting OCR totals, enter a
category, check/save each decision, and build a real CSV / merged PDF / page-map
ZIP. No purchases took place. This is separate from the local Python program
that imports an authorised Paperless snapshot; there is no archive connection,
image OCR, customer installation, financial classification or submission here.

## Run the source ZIP

From its root folder, run `python3 -m http.server 8806 --bind 127.0.0.1 --directory public`
and open http://127.0.0.1:8806/apps/receipt-review/. No npm install or account.
The bundle retains the paths used by the team website; its back link opens the
public product page. If Node is available, `node --test tests/receipt-review-trial.test.mjs`
checks real PDF/ZIP generation, guarded decisions, exact decimal amounts,
source hashes, page references and spreadsheet formula neutralisation.

Decisions are saved only in the current browser profile/origin. Reload preserves
them; regenerate the download after reload. A reset removes only this demo's
own saved decisions. Do not enter real financial details. The local Python tool
keeps a real snapshot on your machine and has its own setup/verification scope:
https://github.com/brodyga45/monthly-receipt-pack-20261022-shtops/tree/001ea1fe86944ec9bde5ae23e493c2b99422dce4/review

## Rights and dependencies

Own code and fictional sources: MIT, see LICENSE. This trial adapts the author's
Receipt Review UI/viewer and supplies a separate browser storage/packaging mode.
PDF.js6.4.299 is Apache2, embedded core-js MIT, and its font/CMap notices are
retained in vendor. PDF-Lib1.17.1 is MIT; retained dependency notices cover
standard-fonts, upng, pako MIT/Zlib and tslib0BSD. Official npm package SHA512
integrities were verified; no install scripts ran. Exact embedded transitive
versions in the upstream UMD are not asserted from dependency ranges.

All JavaScript, PDFs, fonts and worker assets are served alongside this page;
no runtime CDN or external AI is used. PROVENANCE-DEMO.json hashes the files;
vendor provenance records the upstream packages and notices. The source ZIP
excludes itself, private workspaces, tokens and the rest of the team website.

Version2 navigation delta: the product back link uses the actual /work/ route.
The supported-setup link opens the public working-repository scope form; no demo
entries are sent in that link. Keep private receipts/tokens out of public issues.

Version3 packaging correction: the footer opens source.html, a self-contained guide
linking the actual bundled source files and retained licence notices. It works
when the source folder is served on its own, without a nested source ZIP.