Domain,Environment,Check,Checked at and timezone,Expected evidence,Actual result,Evidence reference (no secrets),Owner,Follow-up and deadline ,,Web runtime,,Full PHP version from WordPress Site Health or host confirmation,,,, ,,Security patch,,Vendor evidence covering CVE-2026-109618 and CVE-2026-109619,,,, ,,Other runtimes,,"Staging, scheduled jobs and CLI binaries checked separately",,,, ,,Recovery,,Recent database and file backup plus recovery access confirmed,,,, ,,Compatibility,,"Required theme, plugins and PHP extensions checked",,,, ,,Deployment,,Host confirms patched build deployed and affected workers replaced,,,, ,,Administration,,Administrator login and existing page editor load,,,, ,,Dynamic public page,,Uncached representative page or search renders,,,, ,,Contact form if applicable,,Authorized labelled test reaches intended inbox,,,, ,,Test purchase if applicable,,"Order, test payment, receipt and entitlement agree",,,, ,,Learning access if applicable,,Ordinary learner allowed and denied access as intended,,,, ,,Scheduled task if applicable,,Relevant task completes under its actual runtime,,,, ,,Error review,,New failures recorded and investigated,,,, ,,Final verification,,Runtime or backport evidence recorded after deployment,,,,