Deploy SAT & ACT Learning Lab 1.7.0+hfbuild2

DEPLOYMENT_NOTES.md

@@ -1,4 +1,4 @@
-# Deployment notes — SAT & ACT Learning Lab 1.7.0+hfbuild1
+# Deployment notes — SAT & ACT Learning Lab 1.7.0+hfbuild2
 
 Target private Space: `DearmonAnalytics/SAT_ACT_Learning_Lab`
 
@@ -6,7 +6,7 @@ Turso database: `dearmon-sat-act-learning-lab`
 
 Schema namespace: `sat_act_learning_lab_v1`
 
-Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417845819`
+Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD2_5047BDC914D0_D7D872616C53`
 
 ## Runtime contract
 
@@ -95,7 +95,7 @@ Encrypted-source secret: `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417
 
 Core secrets are `OPENAI_API_KEY`, `TURSO_DATABASE_URL`, `TURSO_AUTH_TOKEN`,
 `LEARNER_ID_HMAC_SECRET`, `INSTRUCTOR_EXPORT_SECRET`, and
-`SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417845819`. Live avatar video additionally uses optional
+`SAT_ACT_APP_FERNET_V1_7_0_HFBUILD2_5047BDC914D0_D7D872616C53`. Live avatar video additionally uses optional
 `SIMLI_API_KEY`.
 
 Email recovery uses `AUTH_RECOVERY_EMAIL_ENABLED`, `AUTH_SMTP_HOST`,
@@ -117,7 +117,7 @@ packaged Simli client route, and transport settings are listed in
 `environment.example` used to prepare this deployment. Remote avatar-client
 module overrides are intentionally rejected.
 
-Version 1.7.0+hfbuild1 uses immutable item/timing/scoring snapshots and explicit recovery
+Version 1.7.0+hfbuild2 uses immutable item/timing/scoring snapshots and explicit recovery
 compatibility contracts. Resume only a saved contract that is explicitly supported;
 legacy checkpoints follow the tested compatibility allowlist. Incompatible work
 stays blocked and requires an approved transition or learner choice, never silent
@@ -129,10 +129,11 @@ restore expired/revoked access or overwrite legitimate new learner work.
 The owner kit ships no decryption key or production data. Its first local build
 creates the matching source key/payload. Deployment defaults to local dry-run;
 only explicit --execute plus DEPLOY opens remote changes. Python 3.12.13 is the
-validated application patch; the Python 3.12 provider family alone does not prove
-patch availability. Actual startup fails if the required patch is unavailable.
+validated application patch. This Space explicitly selects python_version:
+"3.12.13"; the builder verifies agreement with runtime.txt and the loader.
+Health verification records the actual interpreter before deployment succeeds.
 
-Acceptance testing for v1.7.0+hfbuild1 must verify the exact Dearmon Analytics paper,
+Acceptance testing for v1.7.0+hfbuild2 must verify the exact Dearmon Analytics paper,
 ink, blue, teal, and coral palette; compact 1,240-pixel workspace; bundled
 same-origin Inter, Source Serif 4, and Geist Mono; and one crisp DA gradient rule
 across the compact chooser and three shadow-free horizontal Practice rails.
@@ -209,7 +210,7 @@ safe retries without prompting the deployer operator.
 
 ## Key lifecycle and rollback
 
-The current loader reads only `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417845819`. A later release must generate a
+The current loader reads only `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD2_5047BDC914D0_D7D872616C53`. A later release must generate a
 new versioned, fingerprinted secret name. The deployer adds that secret before
 the repository commit and retains earlier keys. Roll back by reverting the
 Space repository to the prior commit recorded in `deployment_receipt.json`.

README.md

@@ -5,7 +5,7 @@ colorFrom: indigo
 colorTo: yellow
 sdk: gradio
 sdk_version: 6.24.0
-python_version: "3.12"
+python_version: "3.12.13"
 app_file: app.py
 pinned: false
 license: other
@@ -14,7 +14,7 @@ short_description: Dynamic SAT/ACT practice, mastery, and reasoning graphs
 
 # Dearmon Analytics SAT & ACT Learning Lab
 
-Release `1.7.0+hfbuild1` provides original dynamic practice for current SAT and
+Release `1.7.0+hfbuild2` provides original dynamic practice for current SAT and
 ACT skill blueprints, a complete eight-level question-skill hierarchy,
 individual mastery tracking, targeted practice, and test-like diagnostic
 sessions with separate raw results and unofficial practice-score estimates. It adds username/password
@@ -25,7 +25,7 @@ Signed-in students can also download their complete personalized Topic Graph as
 a branded PNG, printable PDF, accessible hierarchy-and-concepts CSV, and
 verification manifest; demo sessions remain nonexportable.
 
-Release 1.7.0+hfbuild1 retains the exact Dearmon Analytics paper, ink, blue, teal, and
+Release 1.7.0+hfbuild2 retains the exact Dearmon Analytics paper, ink, blue, teal, and
 coral system established in v1.4.4 for the compact 1,240-pixel workspace. Bundled Inter, Source Serif 4, and
 Geist Mono fonts are served from same-origin routes. The compact test chooser
 and closely stacked Section → Domain → Narrow Topic rails use one restrained DA
@@ -45,7 +45,7 @@ printable exam/answer-key PDFs so raw LaTeX is never the learner-facing
 fallback. The collapsed item-specific Concepts Needed swim lane, complete
 analogous worked examples, separate hints, and mastery whitening remain.
 
-Release 1.7.0+hfbuild1 assigns all 1,983 trusted built-in question profiles their full
+Release 1.7.0+hfbuild2 assigns all 1,983 trusted built-in question profiles their full
 Exam → Section → Official Domain → Official Skill Family → Narrow Exam
 Target → Prerequisite Bundle → Atomic Skill → Observable Failure Attribute
 path. Each stable profile contains its complete ancestor and transitive-
@@ -73,7 +73,7 @@ pretest/EFT items and AI supplemental printable items are excluded. Fewer than
 eight observed items or less than one quarter of a standard section remains a
 preliminary, very-low-confidence result below the reporting threshold.
 
-Release 1.7.0+hfbuild1 retains one OpenAI-assisted follow-up beneath each graded
+Release 1.7.0+hfbuild2 retains one OpenAI-assisted follow-up beneath each graded
 explanation and a signed-in cross-question Learning Diagnostic. The diagnostic
 unlocks only after strict majority coverage of both Reading and Math for the
 same exam. It sends OpenAI only allowlisted aggregate performance evidence—not
@@ -126,7 +126,7 @@ attribute-level mastery or retention records.
 This private Space uses the separate Turso database
 `dearmon-sat-act-learning-lab` and schema namespace
 `sat_act_learning_lab_v1`. Its encrypted application uses the versioned Space
-secret `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417845819`.
+secret `SAT_ACT_APP_FERNET_V1_7_0_HFBUILD2_5047BDC914D0_D7D872616C53`.
 
 Required Space secrets are `OPENAI_API_KEY`, `TURSO_DATABASE_URL`,
 `TURSO_AUTH_TOKEN`, `LEARNER_ID_HMAC_SECRET`, `INSTRUCTOR_EXPORT_SECRET`, and
@@ -175,7 +175,7 @@ controls, and retention policies.
 
 ## Upgrade note
 
-Version 1.7.0+hfbuild1 uses immutable item/timing/scoring snapshots and explicit recovery
+Version 1.7.0+hfbuild2 uses immutable item/timing/scoring snapshots and explicit recovery
 compatibility contracts. Resume only a saved contract that is explicitly supported;
 legacy checkpoints follow the tested compatibility allowlist. Incompatible work
 stays blocked and requires an approved transition or learner choice, never silent
@@ -187,8 +187,9 @@ restore expired/revoked access or overwrite legitimate new learner work.
 The owner kit ships no decryption key or production data. Its first local build
 creates the matching source key/payload. Deployment defaults to local dry-run;
 only explicit --execute plus DEPLOY opens remote changes. Python 3.12.13 is the
-validated application patch; the Python 3.12 provider family alone does not prove
-patch availability. Actual startup fails if the required patch is unavailable.
+validated application patch. This Space explicitly selects python_version:
+"3.12.13"; the builder verifies agreement with runtime.txt and the loader.
+Health verification records the actual interpreter before deployment succeeds.
 
 ## Independent practice-content notice
 

release_manifest.json

@@ -1,12 +1,12 @@
 {
-  "built_utc": "2026-09-08T02:14:05+00:00",
+  "built_utc": "2026-09-08T10:17:35+00:00",
   "database_name": "dearmon-sat-act-learning-lab",
-  "encrypted_payload_sha256": "0e25867f7b2fcb2a4a9b00e5e9476008b017c4f2c0161baee9b6f5a46c856ba4",
+  "encrypted_payload_sha256": "07e5fd2cf076a49bae6afef5ba12a905be1df108908839f24613dd116c13becf",
   "entry_module": "sat_act_lab.app_main",
-  "fernet_secret_name": "SAT_ACT_APP_FERNET_V1_7_0_HFBUILD1_5047BDC914D0_F4B417845819",
-  "key_fingerprint_sha256_prefix": "F4B417845819",
+  "fernet_secret_name": "SAT_ACT_APP_FERNET_V1_7_0_HFBUILD2_5047BDC914D0_D7D872616C53",
+  "key_fingerprint_sha256_prefix": "D7D872616C53",
   "plaintext_archive_sha256": "5047bdc914d0301005dba1d9e7c58bb4d1da4ceb38e04a85fb0b3bfa1b3c970e",
-  "release_version": "1.7.0+hfbuild1",
+  "release_version": "1.7.0+hfbuild2",
   "schema_namespace": "sat_act_learning_lab_v1",
   "schema_version": "dearmon-sat-act-release-v1",
   "source_members": {
@@ -233,20 +233,20 @@
       "sha256": "3b1fdd8eb2e17dc4edae8387f1bc9a18a8072a8d6fae3a71041f00f0b9b04103"
     },
     "DEPLOYMENT_NOTES.md": {
-      "bytes": 18256,
-      "sha256": "ffe5c2ebbb30ac3be762453cfa2437a280d8b8d0a8e681f56af91146c85b1083"
+      "bytes": 18324,
+      "sha256": "c70f0e04cae2ff55649686494371b55656e409c31c4f434989f13f8b808a3bfa"
     },
     "README.md": {
-      "bytes": 15342,
-      "sha256": "e5452830ecc64ad122d7b99caa501a4ee3a118414afcedd606614d5044ba9d5c"
+      "bytes": 15413,
+      "sha256": "9ee64647ceadebc6f4cd4aed5f7ca415af72f51b123baabe592083bc8f5313a8"
     },
     "THIRD_PARTY_NOTICES.md": {
       "bytes": 73850,
       "sha256": "288997d5002f0932271a0a7173a2cf074f63e3c2ad0cd9195a6c32e4c29e452b"
     },
     "app.py": {
-      "bytes": 1999214,
-      "sha256": "1168b49a9feeade7d527876a50fd15eefae304fa12898ff81aee61ed6dbc1548"
+      "bytes": 1999518,
+      "sha256": "51193eb23c376f40010aaa1a4f87a7e11a6dda16ff7a5d05a290eedb86e9fe81"
     },
     "pre-requirements.txt": {
       "bytes": 44842,