fixed issues w/ accessing website on other computers

docs/final_report.md

@@ -172,7 +172,8 @@ The public boundary is intentionally narrow:
 private read-only source
         -> private local extraction and model pipeline
         -> suppression-reviewed aggregate JSON
-        -> dashboard-only static Bolt project
+        -> allowlisted local static server
+        -> same-network demo browser
 ```
 
 The public dashboard and presentation materials contain no VIN, plate, ZIP,
@@ -180,10 +181,9 @@ station, technician identifier, private vehicle token, raw JSON, credential,
 operational record, or row-level prediction. The browser never connects to the
 source database.
 
-Bolt publication must use a separate project or repository containing only the
-contents of `dashboard/`, with `index.html` at its root. The full source
-repository must not be imported into Bolt. The reviewed procedure is in
-[bolt_deployment.md](bolt_deployment.md).
+The presentation uses `node dashboard/server.mjs --lan` only for the live demo.
+The server has an explicit dashboard-file allowlist and is stopped afterward;
+the prototype is not published to a public host.
 
 ## Limitations
 
@@ -222,4 +222,4 @@ ranking, production model, diagnosis, or individual decision tool.
 - [Private-to-public architecture](architecture.mmd)
 - [10-minute presentation outline](presentation_outline.md)
 - [Dashboard demo script](demo_script.md)
-- [Dashboard-only Bolt deployment](bolt_deployment.md)
+- [Optional public-hosting notes](bolt_deployment.md)