# Project state

## Current milestone

F01-F04, F06, and F07 are implemented and locally verified. F07 imports constrained well-formed HTML and local image snapshots, with an isolated stored-content preview; the campaign footer belongs to F08. F05 has a successful unauthenticated STARTTLS 1.3 handshake, protected password storage tests, and an inline-image MIME pickup test. The authenticated internal send and inbox rendering are pending local password setup. Campaign sending remains unavailable.

## Decisions

- Sending only while the HTA is open; reopening requires explicit resume.
- Access `.mdb`; this PC has working x86 Jet/ACE providers and no working x64 provider in the diagnostic probe.
- System settings in local INI; campaign and queue data in MDB; password protected with DPAPI CurrentUser when implemented.
- No live business-contact sends during development or automated tests.
- The owner supplied a private internal test inbox; it is stored only in ignored `config.ini`. The postal address remains blank until setup.

## Next dependencies

- Enter the SMTP password locally with the HTA setup action, then run its one-message internal test and inspect the received HTML/CID image.
- Enter the business postal address in local `config.ini` before campaign approval.
- Implement campaign approval and in-app dispatch (F08-F09), including a full message preview with the required footer.