# v2.5 Candidate 12 — ORCID API Overlay on Certified Static Baseline

## Purpose
Candidate 12 starts from the confirmed-functional Candidate 11 static ORCID baseline and overlays only the ORCID server-side functions carried forward from Candidate 10.

## Provenance
- Static site authority: Candidate 11 Static ORCID Baseline.
- API overlay source: Candidate 10 `/functions` directory only.
- No Candidate 10 static pages, manifests, or other site assets were used to replace Candidate 11 content.

## ORCID Functions
- `/functions/orcid/connect.js`
- `/functions/orcid/callback.js`
- `/functions/orcid/status.js`

## Deployment Rule
Deploy through Wrangler/Cloudflare Pages so the `/functions` directory is compiled. Preserve Candidate 11 as the rollback baseline.

## Security
`ORCID_CLIENT_SECRET` must remain a Cloudflare Production environment secret and must not be embedded in this package.