This is an UNVERIFIED development preview, production_ready=false. Source/image publication is owner-authorized and does not approve production deployment.

Detailed independent mysqlnd packet-reader/prerequisite/error-propagation review remains unfinished after the earlier safety-filter interruption. This packaging task does not retry that work or claim new independent certification. Existing patches and protection settings remain unchanged.

PHP 7.4 is end of life. This variant omits the incompatible PHP OpenSSL extension: openssl_* functions and TLS/HTTPS stream wrappers are unavailable. cURL retains pinned native TLS. mysqlnd TLS and OpenSSL-dependent authentication are limited; no insecure fallback is recommended.

Preserve TLS verification, immediate OOM worker exits, disabled upload progress, strict HTTP/NUL checks, source hashes and raw scanner findings. Prebuilt third-party mysqlnd extensions require rebuilding/review because the internal C ABI changed.

The unchanged production gate requires VERIFIED status, complete required checks, an SBOM and no raw HIGH/CRITICAL findings. It must deny this preview. Native applicability assessments are not production waivers.

security-report.json records the prior local image and date, not approval of a newly published manifest. See docs/HISTORY.md. Fresh local/CI reports belong to their actual image identities; focused regressions do not replace a full upstream suite. Real database/application compatibility and production Kubernetes deployment remain unverified.