diff --git a/ROUND_7_PREP.md b/ROUND_7_PREP.md
index 76b223b..fe71c07 100644
--- a/ROUND_7_PREP.md
+++ b/ROUND_7_PREP.md
@@ -1,7 +1,14 @@
 # Round 7 Testing - Preparation and Safety Guidelines
 
 ## Mission Context
-Test AI-Homelab deployment scripts with focus on **safe cleanup and recovery** procedures. Round 6 revealed that aggressive cleanup operations caused system crashes requiring hard reboots and BIOS recovery.
+Test AI-Homelab deployment scripts with focus on **safe cleanup and recovery** procedures. 
+
+**Round 7 Status**: ✅ COMPLETE - All objectives met, no system crashes occurred
+
+### Issues Found and Fixed:
+1. **Password hash corruption** - Heredoc variable expansion was mangling `$` characters in argon2 hashes
+   - **Fixed**: Use quoted heredoc ('EOF') with placeholders, then sed replacement
+   - **Committed**: ee8a359
 
 ## Critical Safety Requirements - NEW for Round 7
 
diff --git a/ROUND_8_PREP.md b/ROUND_8_PREP.md
new file mode 100644
index 0000000..415cf5f
--- /dev/null
+++ b/ROUND_8_PREP.md
@@ -0,0 +1,360 @@
+# Round 8 Testing - Full Integration and Edge Cases
+
+## Mission Context
+Comprehensive end-to-end testing of the complete AI-Homelab deployment workflow. Round 7 validated safe cleanup procedures and fixed credential handling. Round 8 focuses on **production readiness** and **edge case handling**.
+
+## Status
+- **Round 7 Results**: ✅ All objectives met
+  - Safe reset script prevents system crashes
+  - Password hash corruption fixed
+  - Full deployment successful without issues
+- **Round 8 Focus**: Production readiness, edge cases, user experience polish
+
+## Round 8 Objectives
+
+### Primary Goals
+1. ✅ Test complete workflow on fresh system (clean slate validation)
+2. ✅ Verify all services are accessible and functional
+3. ✅ Test SSL certificate generation (Let's Encrypt)
+4. ✅ Validate SSO protection on all services
+5. ✅ Test edge cases and error conditions
+6. ✅ Verify documentation accuracy
+
+### Testing Scenarios
+
+#### Scenario 1: Fresh Installation (Happy Path)
+```bash
+# On fresh Debian 12 system
+cd ~/AI-Homelab
+cp .env.example .env
+# Edit .env with actual values
+sudo ./scripts/setup-homelab.sh
+sudo ./scripts/deploy-homelab.sh
+```
+
+**Validation Checklist:**
+- [ ] All 10 setup steps complete successfully
+- [ ] Credentials created and displayed correctly
+- [ ] All containers start and remain healthy
+- [ ] Authelia login works immediately
+- [ ] Traefik routes all services correctly
+- [ ] SSL certificates generate within 5 minutes
+- [ ] DuckDNS updates IP correctly
+
+#### Scenario 2: Re-run Detection (Idempotency)
+```bash
+# Run setup again without changes
+sudo ./scripts/setup-homelab.sh  # Should detect existing setup
+sudo ./scripts/deploy-homelab.sh  # Should handle existing deployment
+```
+
+**Validation Checklist:**
+- [ ] Setup script detects existing packages
+- [ ] No duplicate networks or volumes created
+- [ ] Secrets not regenerated unless requested
+- [ ] Containers restart gracefully
+- [ ] No data loss on re-deployment
+
+#### Scenario 3: Password Reset Flow
+```bash
+# User forgets password and needs to reset
+# Manual process through Authelia tools
+docker run --rm authelia/authelia:4.37 authelia crypto hash generate argon2
+# Update users_database.yml
+# Restart Authelia
+```
+
+**Validation Checklist:**
+- [ ] Hash generation command documented
+- [ ] File location clearly documented
+- [ ] Restart procedure works
+- [ ] New password takes effect immediately
+
+#### Scenario 4: Clean Slate Between Tests
+```bash
+sudo ./scripts/reset-test-environment.sh
+# Verify system is clean
+# Re-deploy
+sudo ./scripts/setup-homelab.sh
+sudo ./scripts/deploy-homelab.sh
+```
+
+**Validation Checklist:**
+- [ ] Reset completes without errors
+- [ ] No orphaned containers or volumes
+- [ ] Fresh deployment works identically
+- [ ] No configuration drift
+
+#### Scenario 5: Service Access Validation
+After deployment, test each service:
+
+**Core Services:**
+- [ ] DuckDNS: Check IP updates at duckdns.org
+- [ ] Traefik: Access dashboard at `https://traefik.DOMAIN`
+- [ ] Authelia: Login at `https://auth.DOMAIN`
+- [ ] Gluetun: Verify VPN connection
+
+**Infrastructure Services:**
+- [ ] Dockge: Access at `https://dockge.DOMAIN`
+- [ ] Pi-hole: Access at `https://pihole.DOMAIN`
+- [ ] Dozzle: View logs at `https://dozzle.DOMAIN`
+- [ ] Glances: System monitor at `https://glances.DOMAIN`
+
+**Dashboards:**
+- [ ] Homepage: Access at `https://home.DOMAIN`
+- [ ] Homarr: Access at `https://homarr.DOMAIN`
+
+#### Scenario 6: SSL Certificate Validation
+```bash
+# Wait 5 minutes after deployment
+curl -I https://dockge.DOMAIN
+# Should show valid Let's Encrypt certificate
+# Check certificate details
+openssl s_client -connect dockge.DOMAIN:443 -servername dockge.DOMAIN < /dev/null 2>/dev/null | openssl x509 -noout -issuer -dates
+```
+
+**Validation Checklist:**
+- [ ] Certificates issued by Let's Encrypt
+- [ ] No browser security warnings
+- [ ] Valid for 90 days
+- [ ] Auto-renewal configured
+
+### Edge Cases to Test
+
+#### Edge Case 1: Invalid .env Configuration
+- Missing required variables
+- Invalid domain format
+- Incorrect email format
+- Empty password fields
+
+**Expected**: Clear error messages, script exits gracefully
+
+#### Edge Case 2: Network Issues During Setup
+- Slow internet connection
+- Docker Hub rate limiting
+- DNS resolution failures
+
+**Expected**: Timeout handling, retry logic, clear error messages
+
+#### Edge Case 3: Insufficient Resources
+- Low disk space (< 5GB)
+- Limited memory
+- CPU constraints
+
+**Expected**: Pre-flight checks catch issues, clear warnings
+
+#### Edge Case 4: Port Conflicts
+- Ports 80/443 already in use
+- Other services conflicting
+
+**Expected**: Clear error about port conflicts, suggestion to stop conflicting services
+
+#### Edge Case 5: Docker Daemon Issues
+- Docker not running
+- User not in docker group
+- Docker version too old
+
+**Expected**: Clear instructions to fix, graceful failure
+
+### Documentation Validation
+
+Review and test all documentation:
+
+**README.md:**
+- [ ] Quick start instructions accurate
+- [ ] Prerequisites clearly listed
+- [ ] Feature list up to date
+
+**docs/getting-started.md:**
+- [ ] Step-by-step guide works
+- [ ] Screenshots/examples current
+- [ ] Troubleshooting section helpful
+
+**AGENT_INSTRUCTIONS.md:**
+- [ ] Reflects current patterns
+- [ ] Round 8 updates included
+- [ ] Testing guidelines current
+
+**Scripts README:**
+- [ ] Each script documented
+- [ ] Parameters explained
+- [ ] Examples provided
+
+### Performance Testing
+
+#### Deployment Speed
+- [ ] Setup script: < 10 minutes (excluding NVIDIA)
+- [ ] Deploy script: < 5 minutes
+- [ ] Reset script: < 2 minutes
+
+#### Resource Usage
+- [ ] Memory usage reasonable (< 4GB for core services)
+- [ ] CPU usage acceptable
+- [ ] Disk space usage documented
+
+#### Container Health
+```bash
+docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Health}}"
+```
+- [ ] All containers show "Up"
+- [ ] Health checks passing
+- [ ] No restart loops
+
+### Security Validation
+
+#### Authentication
+- [ ] SSO required for admin interfaces
+- [ ] Plex/Jellyfin bypass works
+- [ ] Password complexity enforced
+- [ ] Session management working
+
+#### Network Security
+- [ ] Firewall configured correctly
+- [ ] Only required ports open
+- [ ] Docker networks isolated
+- [ ] Traefik not exposing unnecessary endpoints
+
+#### Secrets Management
+- [ ] No secrets in git
+- [ ] .env file permissions correct (600)
+- [ ] Credentials files protected
+- [ ] Password files owned by user
+
+### User Experience Improvements
+
+#### Messages and Prompts
+- [ ] All log messages clear and actionable
+- [ ] Error messages include solutions
+- [ ] Success messages confirm what happened
+- [ ] Progress indicators for long operations
+
+#### Help and Guidance
+- [ ] --help flag on all scripts
+- [ ] Examples in comments
+- [ ] Links to documentation
+- [ ] Troubleshooting hints
+
+#### Visual Presentation
+- [ ] Colors used effectively
+- [ ] Important info highlighted
+- [ ] Credentials displayed prominently
+- [ ] Boxes/separators for clarity
+
+### Known Issues to Verify Fixed
+
+1. ✅ **Round 6**: Password hash extraction format
+2. ✅ **Round 6**: Credential flow between scripts  
+3. ✅ **Round 6**: Directory vs file conflicts
+4. ✅ **Round 7**: System crashes from cleanup
+5. ✅ **Round 7**: Password hash corruption from heredoc
+
+### Potential Improvements for Future Rounds
+
+#### Script Enhancements
+- Add `--dry-run` mode to preview changes
+- Add `--verbose` flag for detailed logging
+- Add `--skip-prompts` for automation
+- Add backup/restore functionality
+
+#### Monitoring
+- Health check dashboard
+- Automated testing suite
+- Continuous integration
+- Deployment validation
+
+#### Documentation
+- Video walkthrough
+- Troubleshooting database
+- Common patterns guide
+- Architecture diagrams
+
+## Success Criteria for Round 8
+
+### Must Have ✅
+- [ ] Fresh installation works flawlessly
+- [ ] All services accessible via HTTPS
+- [ ] SSO working on all protected services
+- [ ] SSL certificates generate automatically
+- [ ] Documentation matches actual behavior
+- [ ] No critical bugs or crashes
+- [ ] Reset/redeploy works reliably
+
+### Should Have ⭐
+- [ ] All edge cases handled gracefully
+- [ ] Performance meets targets
+- [ ] Security best practices followed
+- [ ] User experience polished
+- [ ] Help/documentation easily found
+
+### Nice to Have 🎯
+- [ ] Automated testing framework
+- [ ] CI/CD pipeline
+- [ ] Health monitoring
+- [ ] Backup/restore tools
+- [ ] Migration guides
+
+## Testing Procedure
+
+### Day 1: Fresh Install Testing
+1. Provision fresh Debian 12 VM/server
+2. Clone repository
+3. Configure .env
+4. Run setup script
+5. Run deploy script
+6. Validate all services
+7. Document any issues
+
+### Day 2: Edge Case Testing
+1. Test invalid configurations
+2. Test network failure scenarios
+3. Test resource constraints
+4. Test port conflicts
+5. Test Docker issues
+6. Document findings
+
+### Day 3: Integration Testing
+1. Test SSL certificate generation
+2. Test SSO on all services
+3. Test service interactions
+4. Test external access
+5. Test mobile access
+6. Document results
+
+### Day 4: Reset and Re-deploy
+1. Reset environment
+2. Re-deploy from scratch
+3. Verify identical results
+4. Test multiple reset cycles
+5. Validate no degradation
+
+### Day 5: Documentation and Polish
+1. Update all documentation
+2. Fix any UX issues found
+3. Add missing error handling
+4. Improve help messages
+5. Final validation pass
+
+## Post-Round 8 Activities
+
+### If Successful
+- Tag release as v1.0.0-rc1
+- Create release notes
+- Prepare for beta testing
+- Plan Round 9 (production testing with real users)
+
+### If Issues Found
+- Document all issues
+- Prioritize fixes
+- Implement solutions
+- Plan Round 8.1 re-test
+
+## Notes for Round 8
+
+- Focus on **production readiness** - scripts should be reliable enough for public release
+- Document **everything** - assume users have no prior Docker knowledge
+- Test **realistically** - use actual domain names, real SSL certificates
+- Think **long-term** - consider maintenance, updates, migrations
+
+---
+
+**Remember**: Round 8 is about validating that the entire system is ready for real-world use by actual users, not just test environments.