Google Add-on
QA Audit Passed (14/14 Gates)
Official technical audit, permission scope verification, and 14-gate functional test matrix for TubeSchedule — Video & Shorts Scheduler.
This technical docket documents the architectural boundaries, permission scope audit, and functional QA test cases verified for TubeSchedule — Video & Shorts Scheduler.
Instant Google Drive video folder scan and YouTube API quota burn calculator
Automatic 6-video/day (9,600 / 10,000 unit) Quota-Drip Governor preventing quotaExceeded errors
Native YouTube status.publishAt ISO-8601 UTC private-to-public scheduling
100% In-Account Execution (Document & User Properties — Zero Cloud Relays). CASA Tier 2 Audit Exempt (Zero Restricted Scopes · FERPA Friendly).
Schedule YouTube Videos & Shorts straight from Google Calendar, Google Drive, and Google Sheets with an automatic 6-video/day Quota-Drip Governor. Zero third-party cloud relays, zero recurring subscriptions.
| Attribute | Specification | Verification Standard |
|---|---|---|
| Host Surface / OS | Google Workspace (Forms / Sheets / Docs / Drive) | Platform Manifest & Surface Gate |
| Runtime Execution | Apps Script (V8) + FHG HTML-Service Sidebar | Sovereign Execution Sandbox |
| Data Residency | 100% In-Account Execution (Document & User Properties — Zero Cloud Relays) | Zero Unintended Outbound Data Transit |
| Permissions / Scopes | spreadsheets.currentonly, calendar.events, drive.readonly, youtube.upload, script.container.ui, script.scriptapp, script.external_request |
Strict Least-Privilege Manifest Audit |
| Security Classification | CASA Tier 2 Audit Exempt (Zero Restricted Scopes · FERPA Friendly) | 864zeros Radical Transparency Standard |
| QA Test Pass Rate | 14 / 14 Gates Passed (100%) | Deterministic Pre-Release QA Checklist |
The following 14-gate verification suite was executed against the production artifact (tubeschedule/QA_CHECKLIST.md):
| Test ID | Assertion & Verification Objective | Verification Gate | Result |
|---|---|---|---|
| QA-0.1 | Scope Boundary Verification: Manifest declares strictly required workspace scopes: spreadsheets.currentonly, calendar.events, drive.readonly, youtube.upload, script.container.ui, script.scriptapp, script.external_request. Zero external cloud relay servers. |
§0 — Pre-Flight Package & Scope Gate | PASS |
| QA-0.2 | Zero Cloud Telemetry: Zero external analytics scripts or middleman media servers. 100% in-account execution inside the user's Google Workspace tenant. | §0 — Pre-Flight Package & Scope Gate | PASS |
| QA-0.3 | Rule 3 / Rule 17 Decoupled Pricing: Zero hardcoded dollar figures in Sidebar.html, Code.gs, store/web-copy.html, screenshots, or video voiceover. |
§0 — Pre-Flight Package & Scope Gate | PASS |
| QA-0.4 | Static Suite Catalog: 0ms client-side static catalog inlined in Sidebar.html (RULE-012) with zero external fetch overhead and 100% standalone product isolation. |
§0 — Pre-Flight Package & Scope Gate | PASS |
| QA-0.5 | FHG Design System Compliance: Warm Parchment (#FDFCF8), Crisp White Card (#FFFFFF), Warm Sand (#F6EFE4), Deep Charcoal (#2D2D2D), and Crafted Bronze (#8B6642 / #A67C52 / #6E4F32) tokens applied across Sidebar.html, overview.html, sandbox, and store assets. |
§0 — Pre-Flight Package & Scope Gate | PASS |
| QA-1.1 | Drive Folder Quota Burn Audit: Scans Drive folder for .mp4/.mov deliverables, auto-matches companion .png/.jpg thumbnails by stem, and calculates exact 1,600-unit/video YouTube API burn. |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-1.2 | Sheet Upsert Deduplication: Deduplicates rows by Drive File ID (addon-sheet-upsert-engine) so repeated folder scans never create duplicate rows. |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-1.3 | Concurrency Mutex: LockService.getDocumentLock() prevents overlapping manual and hourly background drip runs (addon-lockservice-mutex). |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-1.4 | 6-Video/Day Quota-Drip Governor: Enforces the 9,600 / 10,000 unit daily safety ceiling (6 uploads/day at 1,600 units each) with automatic Midnight PT (America/Los_Angeles) quota ledger reset (addon-youtube-publishat-drip). |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-1.5 | Native status.publishAt Scheduling: Uploads videos as privacyStatus: 'private' with future ISO-8601 UTC status.publishAt release timestamps and optional status.selfDeclaredMadeForKids / synthetic media metadata. |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-1.6 | Two-Way Google Calendar Sync: Creates linked Calendar events (⏳ [QUEUED] -> 🔒 [SCHEDULED]) and detects drag-to-reschedule shifts on Calendar to update Sheet and YouTube publishAt timestamps (addon-calendar-sync-engine). |
§1 — Core Functional & Quota-Drip Concurrency Gate | PASS |
| QA-2.1 | Marketplace Listing Docket: store/listing.md short description <= 80 characters (79 chars) and standardized 4-line FHG footer ([email protected]). |
§2 — Store Packaging & Web Catalog Gate | PASS |
| QA-2.2 | Interactive Zero-Iframe FHG Sandbox: store/assets/demo/tubeschedule-harness.html embeds production Sidebar.html natively without nested iframes (RULE-018). |
§2 — Store Packaging & Web Catalog Gate | PASS |
| QA-2.3 | 1080p Live-UI Walkthrough Video & Store Assets: 128x128/96x96/48x48/32x32 icons, 1280x800 screenshots (tubeschedule-1..3.png), promo banners, and tubeschedule-live-ui-demo.mp4 verified. |
§2 — Store Packaging & Web Catalog Gate | PASS |
To verify that TubeSchedule cannot exfiltrate user content or exceed its declared operational boundary, the production package is locked to the following manifest and runtime constraints:
// Verified Manifest & Runtime Boundary (tubeschedule v1.0.0)
{
"product": "TubeSchedule — Video & Shorts Scheduler",
"surface": "Google Workspace (Forms / Sheets / Docs / Drive)",
"runtime": "Apps Script (V8) + FHG HTML-Service Sidebar",
"dataResidency": "100% In-Account Execution (Document & User Properties — Zero Cloud Relays)",
"declaredPermissions": ["spreadsheets.currentonly","calendar.events","drive.readonly","youtube.upload","script.container.ui","script.scriptapp","script.external_request"],
"externalTelemetryEndpoints": 0,
"thirdPartyAnalyticsSdks": 0
}Our Market Gap Intelligence engine analyzed verified 1-star and 2-star reviews across Legacy Cloud-Bound & Subscription-Rented Alternatives and re-engineered TubeSchedule from first principles so your workflow never hits those walls again.
"Incumbent tools route sensitive documents and user inputs through external multi-tenant servers."
100% local-first / in-account execution inside TubeSchedule — Video & Shorts Scheduler—zero external databases or telemetry relays.
"Legacy scripts fail silently or corrupt state when multiple actions trigger simultaneously."
Deterministic state management protected by atomic locks and verified across all engineering QA gates.
"Competitors lock basic daily workflows behind recurring monthly per-seat subscriptions."
Sovereign software economics: generous free core and a one-time lifetime unlock with zero recurring rent.
Visual and content assets are powered by custom-trained LoRA models and on-device training pipelines, and founders can trigger full product builds via cli2voip voice or Telegram directly into cli2cli.
Architected the zero-cloud execution boundary for TubeSchedule, locking runtime permissions to spreadsheets.currentonly, calendar.events, drive.readonly, youtube.upload, script.container.ui, script.scriptapp, script.external_request with zero external CDNs or telemetry endpoints. Founders can trigger full product builds via cli2voip voice or Telegram directly into cli2cli.
Defined the single-purpose product wedge for TubeSchedule (FHG pillar) from Market Gap Intelligence and User Frustration Radar signals, stripping onboarding bloat so the primary workflow completes in under 3 clicks inside the FHG Warm Parchment surface.
Assembled TubeSchedule from battle-tested 864z-build-kit Feature Bricks (agent-indexeddb-store, addon-lockservice-mutex, agent-local-backup) and wired its deterministic interactive HTML sandbox, W3C WebMCP discovery tools, and cli2voip voice / Telegram into cli2cli build orchestration.
Executed adversarial packet-trace and permission-boundary stress tests against TubeSchedule v1.0.0, certifying 14/14 QA verification gates with 0 bytes of unintended outbound data transit.
Translated the 3 real user pain statements for TubeSchedule into RULE-017 zero-price walkthrough transcripts and accessible captions, with visual and content assets powered by custom-trained LoRA models and on-device training pipelines.
[Quick Overview Short 1 (00:00.0–00:08.9) · 0.0s–8.9s]: Tired of scheduling YouTube videos and Shorts from Google Drive and Sheets getting locked behind monthly subscriptions and external cloud portals?
[Quick Overview Short 2 (00:08.9–00:16.1) · 8.9s–16.1s]: With TubeSchedule, Automatic 6-Video/Day Quota-Drip Governor runs right where you already work.
[Quick Overview Short 3 (00:16.1–00:26.4) · 16.1s–26.4s]: Native 9:16 Shorts & 16:9 Long-Form Detection and Two-Way Google Calendar Release Visualization—100% under your own custody.
[Quick Overview Short 4 (00:26.4–00:36.2) · 26.4s–36.2s]: Software that lives where you do. No accounts, no tracking, and zero cloud rent—at 864zeros.com.
[Full Product Demo 1 (00:00.0–00:08.7) · 0.0s–8.7s]: Need a better way to handle scheduling YouTube videos and Shorts from Google Drive and Sheets, without handing your data to another monthly cloud landlord?
[Full Product Demo 2 (00:08.7–00:21.6) · 8.7s–21.6s]: Watch TubeSchedule in action: Respects YouTube Data API v3 daily upload limits automatically—publishing up to 6 scheduled videos per day and rolling the remaining queue to tomorrow without errors.
[Full Product Demo 3 (00:21.6–00:39.2) · 21.6s–39.2s]: Automatically configures titles, descriptions, tags, privacy states, `publishAt` timestamps, and custom thumbnails directly from your Sheet columns. Plus, see every queued Video and Short on your Google Calendar and drag calendar blocks to reschedule your YouTube release pipeline.
[Full Product Demo 4 (00:39.2–00:47.7) · 39.2s–47.7s]: Your unreleased MP4 masters stream directly from your Google Drive to your YouTube channel—zero third-party social-scheduler seat fees.
[Full Product Demo 5 (00:47.7–00:57.5) · 47.7s–57.5s]: Software that lives where you do. No accounts, no tracking, and zero cloud rent—at 864zeros.com.
Artifact Identification: tubeschedule (v1.0.0) · Pillar: FHG. All 14 verification gates passed and stamped by 864zeros LLC engineering board.