Useful for visual review. Unsuitable for several higher-stakes jobs.

It is not a hosted collaboration service

• No real-time comments, presence, or concurrent editing.
• No share link, access revocation, automatic reminder, routing, role enforcement, or cloud history.
• No automatic email, upload, download receipt, or delivery confirmation.
• No cross-device synchronization or recovery from another device.

It is not access control or proof of identity

• Packages can be copied, forwarded, extracted, or screenshotted.
• Watermarks are visual deterrents only.
• Names and timestamps are unverified.
• A manifest digest checks package matching, not authenticity.
• There is no digital signature, trusted timestamp, encrypted storage, secure deletion, anonymity, or tamper-proof evidence.

It is not a legal approval system

“Approved for next step” is an informal workflow decision. The product does not establish authority, consent, identity, contract formation, authorship, copyright ownership, chain of custody, or evidentiary reliability.

It is not authoritative proofing

• Browser-rendered previews are not claimed to be color accurate, lossless, archival, press-ready, or pixel-identical to source applications.
• PDF rasterization may differ in fonts, transparency, overprint, spot colors, layers, scale, forms, or technical detail.
• The product is not intended for construction documents, permit sets, engineering measurements, regulated approvals, medical images, or legal exhibits.
• It does not inspect translation quality, accessibility, malware, rights ownership, or content accuracy.

Local persistence varies

IndexedDB and installed-site storage are convenience. Local HTML storage behavior varies by browser and may be cleared. Service workers require HTTPS or localhost. A .reviewpack is not standalone and needs the separate Reader page; offline reopening depends on Reader and its bundled assets already being cached. Save explicit project and response files.

A .reviewproject archive is a portable, checksum-verified backup file, not a claim of archival storage. Restore requires an intact archive and a compatible application release.

Validation ceilings are enforced

The product rejects unsupported types and refuses work beyond published size, page, decoded-pixel, response, and package bounds. Those numbers are hard rejection ceilings, not guaranteed working capacities. Package and archive generation currently assemble data in browser memory, so a device may run out of memory substantially below a published ceiling. Cancellation and atomic commits prevent a failed operation from pretending it succeeded.

Version 1 non-goals

No video, audio, RAW, HEIC, TIFF, PSD, SVG, CAD, ecommerce delivery, print sales, source-original delivery, automatic OCR, translation review, remote AI, or third-party integration is included.