# v1.4 reset feature verification

- PASS: `php -l public/index.php`
- PASS: `php tests/checks.php` (PHP syntax, 587 taxonomy rows, scoring arithmetic)
- PASS: unmodified SHA-256 hash for `app/config.php` against v1.3 archive
- CODE REVIEW: admin-only action and page, CSRF validation via existing application middleware, independent admin password verification, `ALLOW_TEST_RESET` explicit opt-in, typed confirmation, backup attestation, transaction-based deletion in foreign-key dependency order, documented post-commit evidence cleanup.
- NOT RUN: real MySQL transaction and foreign-key test, evidence filesystem deletion on Afrihost, live UI and authorisation test. Require controlled staging test with dummy data before relying on this feature.