1 files changed, 17 insertions, 0 deletions

diff --git a/docs/TESTING.md b/docs/TESTING.md
index 613cd08..c32ac22 100644
--- a/docs/TESTING.md
+++ b/docs/TESTING.md
@@ -266,3 +266,20 @@ terminal client; a saved login from one signs in the other.
   the row is upgraded to bcrypt.
 - Spin several times and confirm `plays` grows by one row per spin while
   `users.balance` changes by `winnings - bet`.
+
+## Packaging checklist
+
+1. Set the version in `Cargo.toml` and `gui/Cargo.toml` (same MAJOR.MINOR),
+   run `cargo test --workspace`, and commit. `publish.sh` refuses a dirty tree
+   because the site links the committed git history as the GPL source.
+2. `./scripts/publish.sh` (add `DEST=` and `URL_BASE=` to stage elsewhere). It
+   builds the GUI with `gui-release`, the terminal clients and servers, and
+   renders the bash/PowerShell installers with each app's SHA-256.
+3. `php -S 127.0.0.1:8899 -t <staging>` and
+   `./scripts/deploy.sh <staging> http://127.0.0.1:8899/` to upload and verify
+   every app, installer, client and server against the page's checksums.
+4. On a clean user account: download an app with its installer, run the
+   installer, and launch the new menu entry. The installer must refuse a
+   corrupted download.
+5. Repeat on Windows for the `.ps1` installer and the Start-menu shortcut.
+