@lssm/module.personal-learning

PersonalOS learning boundary for private, consent-aware catalog discovery, enrollment, goal linkage, progress, practice, assessment, and coaching.

What it guarantees

• Every mutation is bound to one PersonalOS subject, command revision, idempotency key, action classification, decision receipt, and active consent purpose. The runtime recomputes a domain-separated canonical payload digest and requires the authority receipt to bind the complete mutable command tuple. New state checkpoints retain a canonical full-command digest, so a replay with a changed command id, actor, envelope field, or payload fails closed; legacy checkpoints without that binding cannot be replayed as current proof.
• Learning-engine transitions bind the exact operation, subject, idempotency key, and monotonic journey revision. A transition cannot silently remove a previously known journey.
• Progress projections cover lessons, onboarding, quizzes, flashcard schedules, SRS explanations, mastery evidence, XP, and streaks without storing raw provider payloads.
• A PersonalOS goal link is accepted only after the host verifies that the goal is active and owned by the same subject.
• A coach may create an evidence-linked proposal. It cannot grant authority, infer protected or clinical traits, auto-apply settings, accept its own proposal, or undo anything except the latest active adaptation.
• Catalog, progress, and due-card reads fail closed on cross-subject access and return sanitized recovery results when the learning host is unavailable.

Composition boundary

Modules cannot depend on peer modules. This package therefore exposes PersonalLearningJourneyPortV1, a structural port shaped for the catalog, journey runtime, SRS, XP, and streak outputs PersonalOS needs. bundle.personal-os owns the adapter that imports both this package and @lssm/module.learning-journey. The adapter must preserve the subject, consent, idempotency, revision, and evidence fields defined here.

Host responsibilities

This pure module does not claim an authoritative catalog, content entitlement, offline merge, native/web UI, accessibility certification, export delivery, deletion propagation, managed backup restore, or production canaries. The server-only PersonalOS bundle provides the encrypted atomic state/event/outbox host path; deployed hosts must still bind its KMS, PostgreSQL, authority, catalog, restore, and worker ports and qualify the remaining gates before the corresponding portfolio rows can become live_verified.

Entrypoints

• @lssm/module.personal-learning
• @lssm/module.personal-learning/contracts
• @lssm/module.personal-learning/ports
• @lssm/module.personal-learning/runtime
• @lssm/module.personal-learning/queries
• @lssm/module.personal-learning/portability
• @lssm/module.personal-learning/coaching

Test fixtures are source-internal and are not published as package subpaths or included in production artifacts.