[RensTillmann]

Summary

Prepare the merged LTS fixes for Super Forms 6.3.323. This PR does not publish the release.

 super-forms.php
-  Version: 6.3.322; public $version = '6.3.322'
+  Version: 6.3.323; public $version = '6.3.323'
 docs/changelog.md
-  Unreleased
+  Oct 20, 2026 - Version 6.3.323

Base branch: lts/6.3.x. All nine approved fix/compatibility PRs are already merged. The changelog retains every entry, explicitly covers read-only Enter controls, and records WordPress 7.1.3 compatibility. Minimum WordPress 4.9 and PHP 7.1 requirements are unchanged.

The branch also removes two implementation-only client assertions that inspected source layout/caller spelling. Behavioral client and real browser regressions remain.

Evidence

• Before: the combined shipping code matched the cand3 build, but source metadata still said 6.3.322 and Unreleased.
• After: both version values are 6.3.323, the complete 15-entry release section is versioned, and the main PHP file passes syntax checking on PHP 7.1.
• Final qualification: ACCEPTED, run 20261020-181917-a680cc, merged source 4aa328c39760509695fbfb06b78f17526e0ddf26, clean runner 7b44a5cd73565055e6b7adff382c838bfa036d63, normal canonical release-builder path with no development ZIP override.
• Final candidate: 739 PHPUnit tests / 11,291 assertions / zero failures or errors; 54/54 client regressions; gate 11/11 with all catalogue cases enabled; security 15/15; full browser 37 passed / five LTS-not-applicable skips; CVE passed. Six CLI-only skips have passing real-HTTP coverage in the same run; skip report green with no blocked rows.
• Legacy 6.3.316 upgrade passed. All four actual-published-6.3.322 upgrade cells passed: PHP 7.4.33 and 8.3.35 × WordPress 7.1.3 and 7.0.7, with unchanged before/after form-and-entry hashes, successful submission and PayPal sandbox/IPN. Stripe is not applicable to LTS.
• Frozen publication artifact: super-forms-6.3.323.zip, SHA-256 3b96bd43194bd230f97caa47344c8a6a3801e0edcd3ffca84483b2c37abd1d08. All four installed candidate inventories matched its 906 payload files. Canonical PHP 7.1 lint and secret/exclusion gates passed.
• Separate real-browser smoke on WordPress 7.1.3 / PHP 8.3.35: builder preview rendered; changed form title saved with HTTP 200 and survived reload; anonymous public submission returned error:false, displayed the thank-you message and stored the exact entered value once.
• The combined report intentionally retains old 6.3.322 baseline failures: 11 browser regressions, plus one security snapshot differing only by _super_upload_receipt_cleanup_cursor. The corresponding final-candidate checks passed; the baseline failures were not retried or hidden.
• GitBook preparation is separate draft PR docs: prepare 6.3.323 LTS release notes and element guidance #293 and remains unmerged pending publication approval.

Merge Danger

Door: Two-way.

Blast Radius: Release metadata and non-shipping tests.

No tag, GitHub Release asset, updater-channel change, deployment or customer notification is authorized by this PR.