Google verification: scope justifications and demo video script

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/google-app.md

@@ -34,3 +34,32 @@ Two Google Cloud projects, both owned by dev@metatroncubesolutions.com:
 3. After deploy: **publish the app** (Audience → Publish app) and submit **verification** (sensitive YouTube scopes):
    Google asks for a demo video of the sign-in and how each scope is used.
 4. **YouTube API audit** (free form) to lift the 10,000 units/day quota and the private-only upload limit.
+
+## Verification submission (paste-ready)
+
+**App purpose (both projects):**
+> Quorla (https://quorlasocial.com) is a social media management tool for marketing agencies. An agency admin connects
+> a client's Google account on Quorla's Connections page. The team prepares posts in Quorla; an admin reviews and
+> approves the exact post, and Quorla publishes it at the scheduled time. Nothing is posted without that approval.
+> Tokens are encrypted at rest and deleted when the account is disconnected.
+
+**Quorla project, scope justifications:**
+- `youtube.upload`: Upload the video an agency admin approved in Quorla to the connected channel, with the title,
+  description, visibility and "made for kids" setting chosen on the post screen. Only approved posts are uploaded.
+- `youtube.readonly`: Show which channel is connected (name, handle, avatar, subscriber count) on the Connections
+  page, so the agency posts to the right channel, and link to the uploaded video afterwards.
+
+**GMB Audit project, scope justification:**
+- `business.manage`: List the business locations the connected account manages so the admin can pick the client's
+  location, and publish approved "updates" (local posts with text, photo and an optional button) to that location.
+
+**Demo video** (one recording, uploaded to YouTube as Unlisted; link it in both forms). Use English and show the
+browser's address bar so the project's OAuth client ID is visible in the consent URL:
+1. quorlasocial.com homepage → privacy policy link → Sign in at app.quorlasocial.com.
+2. Connections → pick a client → YouTube → Connect → Google account chooser → consent screen showing **Quorla** and
+   the YouTube scopes → Allow → back in Quorla, channel shown as connected.
+3. Publishing → New post → upload a vertical video → caption → tick YouTube → title, visibility → Save as draft →
+   Approve → post publishes → open the video on YouTube.
+4. Connections → Google Business Profile → Connect → consent screen (business.manage) → choose the location.
+5. New post with a photo → tick Google Business Profile → button "Learn more" → Approve → open the update on Google.
+6. Connections → Disconnect, to show tokens can be removed.