EDEN 101.0.1 — Validation Report

Source baseline: EDEN 101.0.0 (lineage from 100.99.71)

Checks performed:
- PHP syntax validation: all 82 PHP files passed `php -l`; zero syntax failures.
- Domain helper tests: valid HTTPS host normalization passed; invalid HTTP, local/private IP, custom port, extra path, query, fragment, credentials and malformed hostname cases rejected.
- Wallet callback migration test: same-origin callback moved to new origin while retaining path, query and fragment.
- External callback safety test: callback on an unrelated provider domain remained unchanged.
- Release metadata: VERSION and update.json both report 101.0.1.
- Update manifest: 569 listed paths; every path exists in the release source tree.
- Required update paths: VERSION, update.json, manage.php, index.php, app/bootstrap.php and app/domain_management.php are included.

Not performed:
- No live cPanel/PHP-FPM test on the user's host.
- No live setWebhook/getWebhookInfo call to Telegram. The user's host had previously returned cURL 7 / Connection refused for api.telegram.org:443.
- No live DNS, SSL certificate, domain routing or incoming webhook test on the target domain.

Operational note:
The domain setting can be saved independently of Telegram API availability. If outbound access to api.telegram.org:443 is blocked, the panel reports webhook registration failure and provides a retry action after the host network issue is resolved. Keep the previous domain active until the new webhook is verified.
