# LifeBook Family 2026.08.30.1

Production-oriented installable build for `lifebook.family`.

## Core
- Online biography and life-story platform.
- Living stories, remembrance stories and family stories.
- Private-by-default story creation and public/private publishing.
- Administrator password login with backend settings for Email, R2 and Turnstile.

## Secure purchased QR activation
- Administrator can generate ready-made QR inventory before a customer exists.
- Each QR has a permanent public code and separate private activation code.
- Private activation codes are shown only at generation and stored only as keyed hashes.
- Unsold QR stock can later be bound to purchaser email and order reference.
- A purchaser-bound QR requires the matching purchaser email.
- Account creation/sign-in requires a six-digit OTP sent to that email.
- Optional Cloudflare Turnstile and built-in rate limits protect activation attempts.
- The public QR alone can never establish ownership.