Reconciled Agentforce package and security-review identity
Directed by Nicholas Lee · Produced with ChatGPT + Lovable read-only source inspection + Files Library evidence
Compared the current sandbox-install package metadata with preserved Salesforce security-review evidence and found that they refer to different package-version identities. Production installation remains fail-closed, and the current Salesforce review outcome remains unverified.
The current public site points sandbox evaluation at one unreleased package version, while preserved Salesforce security-review artifacts reference a later review package. The acceptance boundary is now explicit: keep sandbox pilot, review-submitted, and final released package identities separate; do not imply approval or production release without authoritative evidence.