docs: record verified private publication and showcase deployment readiness

docs/releases/2026-10-19-private-release.md

@@ -36,3 +36,26 @@ All 58 staged tarballs passed an isolated installation: all 57 non-CLI package
 roots import successfully, UI and viewer browser/runtime probes pass, and the
 installed CLI starts successfully. The all-package consumer includes React and
 React DOM only to exercise the optional adapter, matching its declared peers.
+
+## Publication and site result
+
+All 58 packages were published with restricted access to the WorkRoot registry.
+Every registry SHA-512 integrity value matches the exact built tarball; the full
+record is `2026-10-19-publication.json`, with complete=true and source commit
+3943b946d61914169c73acd0dff35c437a6d0e8e.
+
+Git push was rejected by the server's configured HTTPS credentials. The user
+then explicitly requested continuing with local commits and the next work, so
+publication proceeded and both repository pushes remain deferred. No Git
+credentials or permissions were changed.
+
+The standalone site at D:/Company/component-showcase uses the published versions.
+Its generation, TypeScript check, 20 tests, production build (144 pages), and
+frozen Bun install pass. Browser verification through a local reverse proxy
+confirmed the site link opens /design-studio/, live component previews render,
+three alternatives generate, and the draft name, brief and alternatives recover
+after reload. The home page, button and select pages and Studio assets return 200. Evidence: output/private-release/hosted-studio.jpg.
+
+VM deployment has not been executed. The site README and nginx snippet describe
+the remaining deployment steps. The hosted Studio is export-only and uses local
+rules; configured provider generation and server-file apply remain local tools.