Deploy SAT & ACT Learning Lab 1.4.2

DEPLOYMENT_NOTES.md

@@ -1,4 +1,4 @@
-# Deployment notes — SAT & ACT Learning Lab 1.3.8
+# Deployment notes — SAT & ACT Learning Lab 1.4.2
 
 Target private Space: `DearmonAnalytics/SAT_ACT_Learning_Lab`
 
@@ -6,7 +6,7 @@ Turso database: `dearmon-sat-act-learning-lab`
 
 Schema namespace: `sat_act_learning_lab_v1`
 
-Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`
+Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_4_2_DEA36E04D801_0690259EE725`
 
 ## Runtime contract
 
@@ -56,6 +56,17 @@ Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`
   quantity/unit/operation, claim/evidence, or data/variable attributes feed up
   through the answer dependency path. These attributes are explanatory only
   and do not create separate mastery or retention records.
+- Each graded practice explanation may expose one attempt-bound OpenAI follow-up
+  for the owning signed-in learner. It is unavailable before grading and is
+  retained with that attempt; stale or cross-learner question tokens fail closed.
+- The retained Learning Diagnostic uses distinct-topic coverage and remains
+  locked until the same signed-in learner exceeds 50% in both Reading and Math
+  for SAT or ACT. OpenAI receives only allowlisted aggregate counts and
+  foundational-skill evidence—never identity, raw item text, selected responses,
+  or answer keys—and its structured output must match server-known findings and
+  remediation ladders. Guided Examples and Targeted Practice unlock only after
+  a validated report is retained; remediation is deterministic and cannot count
+  toward its own coverage gate.
 - The embedded Business Calculus avatar defaults to the male professor and
   offers Oliver (`cedar`, speed `1.02`). Speech and live Simli video are opt-in;
   audio retention is disabled by default. Oliver is presented as an AI teaching
@@ -69,7 +80,7 @@ Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`
 
 Core secrets are `OPENAI_API_KEY`, `TURSO_DATABASE_URL`, `TURSO_AUTH_TOKEN`,
 `LEARNER_ID_HMAC_SECRET`, `INSTRUCTOR_EXPORT_SECRET`, and
-`SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`. Live avatar video additionally uses optional
+`SAT_ACT_APP_FERNET_V1_4_2_DEA36E04D801_0690259EE725`. Live avatar video additionally uses optional
 `SIMLI_API_KEY`.
 
 Email recovery uses `AUTH_RECOVERY_EMAIL_ENABLED`, `AUTH_SMTP_HOST`,
@@ -85,38 +96,62 @@ Release runtime defaults include `ACCOUNT_AUTH_ENABLED=1`,
 `ASK_PROFESSOR_COMPONENT_DEFAULT=1`, `ASK_PROFESSOR_TTS_DEFAULT=0`, and
 `ASK_PROFESSOR_SIMLI_DEFAULT=0`. Printable supplemental generation defaults to
 `OPENAI_OVERFLOW_MODEL=gpt-5-mini` and
-`OPENAI_OVERFLOW_REVIEW_MODEL=gpt-5-mini`. Face IDs and the pinned Simli client module are
+`OPENAI_OVERFLOW_REVIEW_MODEL=gpt-5-mini`; Learning Diagnostic synthesis
+defaults to `OPENAI_DIAGNOSTIC_MODEL=gpt-5-mini`. Face IDs and the pinned Simli client module are
 listed in `environment.example` used to prepare this deployment.
 
-## v1.3.8 upgrade gate
+## v1.4.2 upgrade gate
 
 Finish or explicitly abandon every active timed simulation from an earlier
-release before installing v1.3.8. Checkpoints are intentionally bound to
+release before installing v1.4.2. Checkpoints are intentionally bound to
 app/source/form versions and cannot be resumed across this release. Back up
 Turso, preserve `LEARNER_ID_HMAC_SECRET`, and retain prior Fernet secrets and
 rollback commits needed through acceptance testing.
 
-Acceptance testing for v1.3.8 must verify the live Dearmon Analytics palette,
-type, DA mark, compact masthead/disclaimer, bright amber test chooser, and three
-compressed horizontal Practice rails over translucent ink. Selecting a lesson
+Acceptance testing for v1.4.2 must verify the exact Dearmon Analytics paper,
+ink, blue, teal, and coral palette; compact 1,240-pixel workspace; bundled
+same-origin Inter, Source Serif 4, and Geist Mono; and one crisp DA gradient rule
+across the compact chooser and three shadow-free horizontal Practice rails.
+Practice variation must be collapsed beneath Test Tools. Selecting a lesson
 must open Question & Your Work, and the answer row must expose grade,
-same-lesson, and next-lesson actions. Grading must freeze elapsed and target
-time, show the exact reduced fraction and pace comparison, and flatten the same
-fields into learner/account and instructor attempt CSVs while legacy rows stay
-blank. Inline lesson Math and printable exam/key PDFs must use the shared
-renderer without visible LaTeX commands or dollar delimiters. The collapsed,
-question-specific Concept swim lane, full analogous worked example, separate
-active-item hint, and deterministic confused-word surfaces must remain.
+same-lesson, and next-lesson actions. Repeated next-lesson actions must advance
+from the active item even when browser selector values are stale. Linear-
+equation solution-count explanations must distribute and cancel the actual
+terms, explain a true identity, and contrast a false-statement no-solution case.
+Grading must freeze elapsed and target time, show the exact reduced fraction and
+pace comparison, and flatten the same fields into learner/account and instructor
+attempt CSVs while legacy rows stay blank. Inline lesson Math and printable
+exam/key PDFs must use the shared renderer without visible LaTeX commands or
+dollar delimiters. The collapsed, question-specific Concept swim lane, full
+analogous worked example, separate active-item hint, and deterministic confused-
+word surfaces must remain.
 Near-white mastered topic tiles intentionally retain dark text for WCAG
 contrast.
 
+Acceptance must also verify that post-explanation follow-ups are hidden before
+grading and limited to the owning attempt; both diagnostic coverage bars use
+distinct topics; the report gate requires strict majority coverage in Reading
+and Math for one exam; OpenAI report requests contain only aggregate allowlisted
+signals; invalid/provider-failed reports do not unlock anything; and completed
+reports can be pulled and used to open graduated Guided Examples and separate
+Targeted Practice.
+
+Progress & Reports must render exactly two mastery wheels for SAT and ACT,
+retain every curriculum topic including unassessed topics, and keep attempt
+depth independent from accuracy color. Verify that one correct attempt has a
+shallower evidence ring than four correct attempts, untouched topics never show
+0%, ACT Reading/Language combines English and Reading, exact-data tables remain
+usable without color or hover, and signed-out/revoked sessions expose no learner
+aggregates. Practice and completed-simulation evidence may count; diagnostic
+and review attempts must not inflate the dashboard.
+
 The release builder continues to generate the versioned Fernet key
 automatically, store it under `release/private/`, validate it, and reuse it for
 safe retries without prompting the deployer operator.
 
 ## Key lifecycle and rollback
 
-The current loader reads only `SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`. A later release must generate a
+The current loader reads only `SAT_ACT_APP_FERNET_V1_4_2_DEA36E04D801_0690259EE725`. A later release must generate a
 new versioned, fingerprinted secret name. The deployer adds that secret before
 the repository commit and retains earlier keys. Roll back by reverting the
 Space repository to the prior commit recorded in `deployment_receipt.json`.

README.md

@@ -14,7 +14,7 @@ short_description: Dynamic SAT/ACT practice, mastery, and reasoning graphs
 
 # Dearmon Analytics SAT & ACT Learning Lab
 
-Release `1.3.8` provides original dynamic practice for current SAT and
+Release `1.4.2` provides original dynamic practice for current SAT and
 ACT skill blueprints, a four-level topic graph, individual mastery tracking,
 targeted practice, and test-like diagnostic sessions. It adds username/password
 accounts, secure recovery, an isolated one-click demo, and the embedded teaching
@@ -24,12 +24,17 @@ Signed-in students can also download their complete personalized Topic Graph as
 a branded PNG, printable PDF, accessible hierarchy-and-concepts CSV, and
 verification manifest; demo sessions remain nonexportable.
 
-Release 1.3.8 matches the live Dearmon Analytics palette, typography, DA mark,
-and compact paper masthead, with the independent-practice disclaimer inside the
-banner. Its brighter amber-outlined test chooser and Section → Domain → Narrow
-Topic rails are compressed and closely stacked over translucent ink surfaces
-with accessible light type. Fresh lessons automatically open Question & Your
-Work; grading is joined by separate same-lesson and next-lesson actions.
+Release 1.4.2 uses the exact Dearmon Analytics paper, ink, blue, teal, and coral
+system in a compact 1,240-pixel workspace. Bundled Inter, Source Serif 4, and
+Geist Mono fonts are served from same-origin routes. The compact test chooser
+and closely stacked Section → Domain → Narrow Topic rails use one restrained DA
+gradient rule, flat accessible controls, and shadow-free surfaces. Practice
+variation settings are collapsed under Test Tools.
+
+Next-lesson routing advances from the authoritative active-question path, so
+stale browser selector state cannot regenerate the same lesson. Solution-count
+feedback works the actual linear equation, including the cancellation that
+produces a true identity and why that identity means every real value works.
 
 The answer record freezes elapsed time and its blueprint target at grading,
 then reports their exact reduced fraction and pace comparison. Learner/account
@@ -39,6 +44,24 @@ printable exam/answer-key PDFs so raw LaTeX is never the learner-facing
 fallback. The collapsed item-specific Concepts Needed swim lane, complete
 analogous worked examples, separate hints, and mastery whitening remain.
 
+Release 1.4.2 retains one OpenAI-assisted follow-up beneath each graded
+explanation and a signed-in cross-question Learning Diagnostic. The diagnostic
+unlocks only after strict majority coverage of both Reading and Math for the
+same exam. It sends OpenAI only allowlisted aggregate performance evidence—not
+learner identity, raw questions, selected responses, or answer keys—and rejects
+output outside the server-approved finding/remediation schema. A successfully
+retained report unlocks deterministic Guided Examples from basic to complex and
+specific Targeted Practice; those workspaces remain disabled before the gate
+and report are complete.
+
+Progress & Reports includes two responsive hierarchical mastery wheels. SAT
+shows Reading and Writing plus Math; ACT combines English and Reading as
+Reading/Language and shows Math separately. Domain and narrow-topic angles stay
+fixed to the curriculum, radial depth shows scored attempts toward four, and
+color independently shows raw accuracy. Untouched topics say Unassessed rather
+than 0%. Exact native tables provide the same aggregate data for keyboard,
+touch, print, and assistive-technology access.
+
 The Printable Exam Builder requires an active demo or signed-in learner so
 every generated file has a cleanup owner. It creates a clean Dearmon
 Analytics-branded student PDF and a separate answer-key PDF from selected or
@@ -65,7 +88,7 @@ attribute-level mastery or retention records.
 This private Space uses the separate Turso database
 `dearmon-sat-act-learning-lab` and schema namespace
 `sat_act_learning_lab_v1`. Its encrypted application uses the versioned Space
-secret `SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7`.
+secret `SAT_ACT_APP_FERNET_V1_4_2_DEA36E04D801_0690259EE725`.
 
 Required Space secrets are `OPENAI_API_KEY`, `TURSO_DATABASE_URL`,
 `TURSO_AUTH_TOKEN`, `LEARNER_ID_HMAC_SECRET`, `INSTRUCTOR_EXPORT_SECRET`, and
@@ -107,9 +130,9 @@ controls, and retention policies.
 
 ## Upgrade note
 
-Before replacing any earlier release with v1.3.8, every active timed simulation
+Before replacing any earlier release with v1.4.2, every active timed simulation
 must be finished or explicitly abandoned. Saved forms are bound to the app
-version and encrypted-source fingerprint, so v1.3.8 intentionally rejects older
+version and encrypted-source fingerprint, so v1.4.2 intentionally rejects older
 checkpoints. Preserve `LEARNER_ID_HMAC_SECRET` and retain every prior versioned
 Fernet secret and rollback commit needed through acceptance testing. The build
 still generates its new Fernet key automatically, stores it under

release_manifest.json

@@ -1,18 +1,18 @@
 {
-  "built_utc": "2026-08-30T13:04:16+00:00",
+  "built_utc": "2026-08-30T18:20:27+00:00",
   "database_name": "dearmon-sat-act-learning-lab",
-  "encrypted_payload_sha256": "98b38862bb0bae2fa92db264f2e8bb64136fbbc8205577c78089bf12e362e5d0",
+  "encrypted_payload_sha256": "adc070c86dbe93ba12cff7b924de4f2616f827718a05a6b4f0175e111443b436",
   "entry_module": "sat_act_lab.app_main",
-  "fernet_secret_name": "SAT_ACT_APP_FERNET_V1_3_8_361A7215EF3D_B4E784D7CBC7",
-  "key_fingerprint_sha256_prefix": "B4E784D7CBC7",
-  "plaintext_archive_sha256": "361a7215ef3df14fecc19eff46274d95af18cc0e4c9d2ec7fb075e574351f47f",
-  "release_version": "1.3.8",
+  "fernet_secret_name": "SAT_ACT_APP_FERNET_V1_4_2_DEA36E04D801_0690259EE725",
+  "key_fingerprint_sha256_prefix": "0690259EE725",
+  "plaintext_archive_sha256": "dea36e04d801e349a085d0f9f83e1b568454323c7bcfff7f1cde213f1b0ee66c",
+  "release_version": "1.4.2",
   "schema_namespace": "sat_act_learning_lab_v1",
   "schema_version": "dearmon-sat-act-release-v1",
   "source_members": {
     "sat_act_lab/__init__.py": {
       "bytes": 71,
-      "sha256": "2cc4420186299725b00fb206f1fb4be160c23713e4c408661327f51f22400294"
+      "sha256": "c2ea016aa58c3d10813a8b0cb468b2723622209c7c33b1b7c313de217c884369"
     },
     "sat_act_lab/act_english_bank.py": {
       "bytes": 79622,
@@ -31,16 +31,16 @@
       "sha256": "9f557aea11cc2796e011031c70776dfd9cf3f4c0f8255fcbff9ded341580a4e4"
     },
     "sat_act_lab/app_main.py": {
-      "bytes": 355315,
-      "sha256": "8abed1a97ba4a74d8bfc8d0c88148ae6fdada1c549b5ba54e20908aa559017b2"
+      "bytes": 425891,
+      "sha256": "0a2e53318d7a2c0ef36382d74a9c40cbd8969cbe2f7ede7d493b4b7c7ea9e8f7"
     },
     "sat_act_lab/attribute_graph.py": {
       "bytes": 131004,
       "sha256": "8188d65e7894a4c69aed1fdf9f8f4a0c7e90ca6055be44776fac8a39a7bb4dea"
     },
     "sat_act_lab/auth.py": {
-      "bytes": 52755,
-      "sha256": "f6bc1f7f656b8366e69b171291ead6de32ff543fded3dc6b2a53ff6f3c752747"
+      "bytes": 53065,
+      "sha256": "ec077ace7061a00b6615711c0bd689819736b1e13732d9550c50412c713086f5"
     },
     "sat_act_lab/avatar.py": {
       "bytes": 73246,
@@ -50,6 +50,10 @@
       "bytes": 49657,
       "sha256": "7c9cf2c1532818203b7a52de24d61031aeb65d31ccd7f6be627c0bb2c99ecf93"
     },
+    "sat_act_lab/brand_fonts.py": {
+      "bytes": 181295,
+      "sha256": "f3e552f76e81cd1a65187cfa95c126b42497f7a623000057c55aa210eb24e978"
+    },
     "sat_act_lab/curriculum.py": {
       "bytes": 34704,
       "sha256": "0ace42ff71e3eee09b7b0828807cda7ecad2ea86caeda9cb67c0b941ab70c960"
@@ -58,6 +62,14 @@
       "bytes": 37662,
       "sha256": "544b2163c3d39259108847468d8f9bb027ae65d3b13ee934a8f6d9a43d167943"
     },
+    "sat_act_lab/diagnostic_reports.py": {
+      "bytes": 74953,
+      "sha256": "eedae1cd9aa5643b9923eb4c2d4879a17c066c4286e4aaccecea02f6094c04cb"
+    },
+    "sat_act_lab/diagnostic_skills.py": {
+      "bytes": 119601,
+      "sha256": "f31abccc2a3ef0554df6f5de50bdcb0d4871c3dd24d0ecacd8b8467b31f29b70"
+    },
     "sat_act_lab/exam_engine.py": {
       "bytes": 100384,
       "sha256": "2abb720cd5a0a5a459cbcdc7ec1a8919ea50d7203cc809adccdefed4317e3a7f"
@@ -74,6 +86,14 @@
       "bytes": 51827,
       "sha256": "cf32579466f8a97f1d299c78ace4a0fef16c6db51685dce0f164f160e910d06c"
     },
+    "sat_act_lab/mastery_dashboard.py": {
+      "bytes": 12958,
+      "sha256": "5540dbdc9cc43cfd7f61c2a6bc9581044d0ff9ce22441022a58896f68a20ba03"
+    },
+    "sat_act_lab/mastery_dashboard_view.py": {
+      "bytes": 26202,
+      "sha256": "e1f2698a5c89a36893ea297556c89e93820e6dad2fae7e2916cb17f7c69c221b"
+    },
     "sat_act_lab/math_rendering.py": {
       "bytes": 22555,
       "sha256": "8b9ddb347ba4921597546a6430bcbc322eea1fe7f57e457432448ffb5e3bf6af"
@@ -83,16 +103,16 @@
       "sha256": "96dda3ddb76bc2d837769865fdbe177ad650bfd21cd158d161e5cb13123fa6a9"
     },
     "sat_act_lab/question_engine.py": {
-      "bytes": 237008,
-      "sha256": "c073090634e055cdd53e3e1af38e5d3967b73cb193c94c187e767269b74c7915"
+      "bytes": 239549,
+      "sha256": "49035bcdabbfeb78852b3a7c5a7756c97ec6106a28baafda66147eed5d091c9c"
     },
     "sat_act_lab/topic_graph_report.py": {
       "bytes": 19837,
       "sha256": "0a6bb8a950a1f600e2d365bbbc7e9afba48c23be30d5440aa0fb94a2ed4ecbea"
     },
     "sat_act_lab/tracking.py": {
-      "bytes": 143382,
-      "sha256": "35705325d13dd4a71ac0a7568d98b49365d999ad000d3245d87cf041f01988c7"
+      "bytes": 218973,
+      "sha256": "ddaca8f431faaef98ade06974e399bb4b09cc6c61ac64093d5a86cc928366a85"
     }
   },
   "space_file_hashes": {
@@ -101,16 +121,16 @@
       "sha256": "3b1fdd8eb2e17dc4edae8387f1bc9a18a8072a8d6fae3a71041f00f0b9b04103"
     },
     "DEPLOYMENT_NOTES.md": {
-      "bytes": 7495,
-      "sha256": "8fc2538674135f75ab59f2d88796e78221a1d7d55a8c44273149047a7e3ff68b"
+      "bytes": 9910,
+      "sha256": "a7badb012c1a37b1c10da63f6ed3733d9eb5de99a87c0c1a5182eae469abefa7"
     },
     "README.md": {
-      "bytes": 6894,
-      "sha256": "634a018397457137466c50b9c43d7cbdcc89570c3c99ea7aa72388fa0353b5bd"
+      "bytes": 8342,
+      "sha256": "c0fce1840ec6bbfc51fc228f5f9e9caf4d46bf08eaddf81f22acfca95cc9294c"
     },
     "app.py": {
-      "bytes": 709677,
-      "sha256": "0d4ff72267e861e5ba4d9bc28baa67fb860cc56d6a6027f126c19963a947cd1a"
+      "bytes": 1086778,
+      "sha256": "a3b6b387d9ccdebfe9441ca84fb0e67362d8d56d0f3fa68ad34ad10d59ab5c2d"
     },
     "requirements.txt": {
       "bytes": 301,