Viettel Academy B2B licensing — beta verification (real Chrome)

Walkthrough summary

# Beta browser verification — real Chrome (Skill Pixel profile, Google sign-in as skillpixeldeveloper@gmail.com), driven by Codex computer-use

- Pass: 9
- Warn: 0
- Fail: 0
- Total: 9

## Notes
- Steps 01 and 05 were first marked fail because header images were blank in the full-page captures; the DOM checks in the same run confirmed the images loaded and rendered, and the headless capture shows them. Treated as a capture artifact.
- Step 08: the free licensed course uses the cart's zero-cost checkout ('Thêm vào Giỏ hàng'), which is the designed enrolment path.
- sessionStorage.clear() was not available in the Chrome sandbox; hard refreshes were used instead.

Fixes applied during verification and final gates

Deployment: PR #311 (SP-629) squash-merged to main as 1268457e. Beta backend (Cloud Run lms-backend-beta) deployed by GitHub Actions run 32828877783 with migration c5d8a3e17f24; beta frontend DigitalOcean deployment 6082e743 ACTIVE.
Provisioning: tenants Viettel Academy (viettel.beta.skillpixel.vn, licensor, b2b_licensing on) and Mekong Energy Academy (mekong.beta.skillpixel.vn, partner); both ACTIVE with full entitlement sets; skillpixeldeveloper@gmail.com and skillpixelad@gmail.com hold TENANT_ADMIN + INSTRUCTOR + STUDENT on both. DNS: DNS-only CNAMEs in Cloudflare → DigitalOcean ALIAS domains with issued certificates.

API smoke (real product endpoints, minted Firebase sessions):
- course "An toàn thông tin cho người lao động" created on Viettel with 1 chapter / 2 reading lessons, published, enrollment OPEN
- contract HD-2026-MKE-001 (Mekong, 120.000.000 ₫, 50 seats), payment 60.000.000 ₫ UNC-2026-0412
- licence issued → copy materialised in Mekong (cost 0, PUBLISHED, chapters + lessons cloned, licensed_from = Viettel Academy)
- overview: 1 partner / 1 active contract / 1 licence / contracted 120M / collected 60M / outstanding 60M
- licensee view for skillpixelad: licensor + contract + licensed course
- content lock: PUT course and POST chapter on the copy as partner admin → 403 "This course is licensed content and cannot be edited"

Browser pass: headless Chromium (host-resolver rules to the DigitalOcean edge IP because this Mac's resolver still cached the pre-DNS NXDOMAIN), authenticated via a minted Firebase session for skillpixeldeveloper@gmail.com.

Steps

1. 01 Viettel Academy landing PASS
2. 02 Viettel B2B overview PASS
3. 03 Viettel B2B partners PASS
4. 04 Contract HD-2026-MKE-001 detail PASS
5. 05 Mekong Energy Academy landing PASS
6. 06 Mekong licensed content PASS
7. 07 Licensed course read-only instructor view PASS
8. 08 Mekong learner course page PASS
9. 09 Default SkillPixel admin sidebar PASS