# @lssm-tech/bundle.personal-os

Evidence-scored PersonalOS product composition and requirements coverage.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.5`
- Package path: `packages/bundles/personal-os`
- Manifest path: `packages/bundles/personal-os/package.json`
- Manifest Git blob: `67682e4b8809def8318f1c90c0b4d5f0d965cb7d`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/bundle.personal-os](https://lssm.co/docs/packages/bundle.personal-os/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/bundle.personal-os.txt)

## Package metadata

```json
{
  "layer": "bundles",
  "physicalArea": null,
  "primaryArea": "personal-and-learning",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "solutions",
    "catalogKind": "bundle",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Personal workflows, learning and progress](https://lssm.co/docs/areas/personal-and-learning/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/bundles/personal-os/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/README.md",
  "blobSha": "a8036433d0fc73785caae884cbf7cb65442a8fe7",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# `@lssm-tech/bundle.personal-os`

Canonical cross-domain composition for PersonalOS and the personal/non-work
product portfolio. The bundle preserves 103 exact needs across PersonalOS,
Personalization, RoleMorph, personal agency, learning, health and wellbeing,
HCircle, Pactena, life administration, personal finance, and platform quality.

The server-only `./runtime` entrypoint composes typed mission/goal,
productivity, household, health-connection, goal-scoped support, governed
coach-lifecycle, private progress-celebration, and rights commands. It recomputes
the domain-separated payload digest before authority, requires an exact fully
bound receipt and authorized encrypted-state digest, hydrates one
subject-scoped snapshot, runs pure reducers, and commits the snapshot, receipt,
event, idempotency result, and outbox atomically. It then projects a minimized
workspace cursor with bounded planning, delegation, goal-scoped support,
non-clinical health, reversible coach, and private progress-policy summaries.
Consent summaries populate a bounded subject-facing dashboard window with
purpose, known downstream consumers, expiry, and granted/expired/revoked state.
Counts remain exact when the window is truncated, active records are prioritized,
and raw evidence plus authority receipts stay server-only.

The server runtime also composes subject-owned support incidents through a
separate exact-subject transaction port. It parses the command, loads current
state, computes the before and proposed semantic state digests, obtains
server-side authority for that exact transition, independently verifies the
receipt, and only then commits. Confirmation and denial create a digest-bound
no-effect audit; exact replays do not reacquire authority. Public reads expose
only minimized status, revision, channel, timestamps, and accessibility need
identifiers. The bundle does not accept client-issued authority receipts.
Support grant preflight recomputes current household membership, active goals,
consent, evidence, and source revision before authority. Grant, revoke, block,
and categorical report events enter a separately leased outbox destination.
That worker validates the complete content-free audience plan before delivery
and exact event, subject, recipient, window, intent digest, and distinct
assurance receipts before acknowledgement. Concrete provider credentials,
callback reconciliation, manual delivery acceptance, and production canaries
remain host qualification rather than bundle evidence.
Coach proposal and
activation are presentation-only,
expiry- and consent-bound, default to human authority, and retain explanation,
evidence, authority receipt, undo, and compensation references. Proposal,
activation, inspect, undo, and reset validate their hydrated revisions and exact
feature/task policy scope before authority; raw behavioral signals, measurements,
provider payloads, and credentials never enter the projection. The runtime
subpath has no browser condition and is excluded
from fresh browser artifacts.

The same server-only entrypoint now composes the Personal Life Administration
module through the shared two-phase authority and encrypted atomic state port.
It recomputes the complete command and semantic state digests, rejects
self-consistent idempotency substitutions before authority, persists only
AES-GCM ciphertext under exact subject/version AAD, and commits the finalized
receipt, immutable event, snapshot, idempotency result, and minimized provider
effect destinations in one forced-RLS PostgreSQL transaction. A local on-disk
PGlite E2E closes and reopens the database mid-rights-plan, completes a portable
export, proves cross-subject isolation and ciphertext privacy, and rejects
cipher-integrity tampering. A forced outbox failure proves the snapshot, event,
receipt, idempotency result, and effects all roll back. Real export/deletion
processors, legal-hold policy and UX, cache/index/analytics/backup propagation,
managed KMS/PostgreSQL recovery, product accessibility, acceptance, and canary
evidence remain unqualified.

The server-only runtime also owns durable Personal Finance execution. Five
canonical finance commands are parsed and exact-bound to the authenticated
subject/version, consent, expected aggregate revision, action risk, evidence,
idempotency key, and domain-separated action digest. The runtime hydrates only
an AES-GCM subject snapshot, runs the pure append-only reducer, prepares and
finalizes authority against exact before/proposed semantic digests, verifies an
independent draft/proposal/receipt proof, and atomically commits ciphertext,
event, receipt, idempotency result, and projection/audit outbox entries. An
on-disk PGlite journey completes record, correction, scenario, connection, and
provider-page operations across restart; RLS isolation, ciphertext privacy,
replay, digest tampering, verified no-effect denial, and forced-outbox rollback
are covered. Live regulated providers, managed credential/KMS/PostgreSQL
operations and recovery, finance product UI/accessibility, regulatory review,
manual acceptance, and canaries remain external qualification gates.

The finance host also projects the decrypted exact-subject ledger only after
restart into three minimized views: an integrity-bound wealth snapshot with no
cross-currency total, aggregate cash-flow and budget metadata with no item-level
payloads, and an expiring family-office view containing opaque encrypted
document references. The projection recomputes the semantic source digest,
requires independent source and receipt binding, excludes rejected provenance,
and never exposes provider payloads or credentials.

A second on-disk PGlite journey persists an owner-assigned household care item,
reopens the database, and projects it only to the exact current delegated actor.
Actor-version substitution and revoked delegation return no care data, the
stored snapshot contains ciphertext rather than the care title, and the owner
can complete the item after restart. Broader household invitations, abuse-safe
exit UX, real notifications, manual accessibility, and production canaries
remain separate qualification gates.

The workspace runtime also owns subject-controlled guardrails and goal
conflicts. It validates exact goal scope, consent, evidence, revision, digest,
and authority receipt before persisting definitions, triggers, resolutions, or
decisions. Active pause/block responses immediately pause affected goals and
deny later progress before authority. Revoke-sharing immediately blocks scoped
support and denies replacement grants. Legacy encrypted snapshots are accepted
only after their original semantic digest verifies and only allowlisted empty
domains are hydrated. Workspace projections expose bounded counts and no
guardrail descriptions or evidence.

The server runtime also derives `PersonalExperienceProjectionV1` from the
hydrated workspace plus explicit host-owned consent, sharing, and completed
rights facts. Pending, failed, revoking, or revoked health records never count
as connected sources. Export and deletion journey completion is never inferred
from a pending counter; the host must supply verified completion facts.
The same server projection now composes the RoleMorph-first presentation cursor:
all six areas retain authority boundaries, Personalization is presentation-only,
preferences are attributed and resettable, and delegated actors require the
exact active `view_shared_projection` grant and one unambiguous current member
role. The contract recomputes its domain-separated resolution digest. No policy
reason, evidence path, component payload, raw behavior, or credential enters
the public cursor.
Hosts may also provide the minimized `personalizationIdentity` cursor: an
opaque tenant digest plus one current consent reference/status. The bundle
never derives raw tenant labels or consent evidence, and surface clients bind
this cursor to the exact outer subject and actor before any scoped buffer can
collect.

The server-only runtime applies the current RoleMorph presentation as a
DataView boundary before returning workspace summaries. It strips every domain
summary when presentation is missing, invalid, stale, differently bound, or
denies any canonical area view or summary component. Only schema-valid cursor
metadata remains; the DataView spec and resolution never enter browser builds.

The runtime owns the legal peer-module composition for Personal Learning. Its
`createPersonalLearningJourneyAdapterV1()` adapter projects the existing
learning-journey engine into the consent-aware Personal Learning port while
rechecking exact subject versions, journey and command revisions, idempotency,
step cardinality, evidence, locale, and bounded due-card reads. The host still
owns the authoritative catalog, entitlements, export/deletion propagation, and
production UI qualification. `PersonalLearningDurableRuntimeV1` now owns the
server-side durable command path: it hydrates the exact encrypted subject
snapshot, rejects command-binding and revision drift before authority, invokes
only a pure learning transition planner, finalizes two-phase authority against
the proposed semantic state digest, and atomically commits the encrypted state,
immutable event, receipt, idempotency result, projection work, and minimized
telemetry work. Planner failures and consent denials preserve the last durable
checkpoint without committing partial progress.
The exact local adapter run is recorded in a dated, SHA-256-bound qualification
artifact; it contributes only contract, implementation, unit, and integration evidence
and cannot qualify the remaining host or product gates.

The server-only runtime also composes the HCircle projection consumer through
the actual `@lssm-tech/module.personal-community` service. Compiled packets now
carry exact subject and community-grantee references. The consumer recomputes a
canonical packet or revocation digest, checks every grant, source-consent,
field, projection, expiry, actor, and subject-version binding, and acknowledges
only an applied or idempotently replayed encrypted community transaction.
Revocation clears locally readable values and emits the five required purge
scopes for the host outbox. The injected issuer remains the authority boundary:
it must resolve the current source grant and issue a fully command-bound human
receipt. Real key custody, durable delivery workers, purge-SLA completion,
HCircle UI/accessibility, provider deployment, and production canaries remain
unqualified.
The exact local consumer run is recorded in
`generated/qualification/hcircle-consumer-local-qa-2026-08-10.json`; its
SHA-256-bound contract, implementation, unit, and integration evidence is scoped to the
local service composition and cannot qualify those remaining host gates.

The server-only `@lssm-tech/bundle.personal-os/projections/governed` entrypoint
exports `PersonalGovernedProjectionTransportV1`, a `PersonalProjectionTransportPort`
over the data-exchange governed gateway. Publication requires an exact
authority binding (subject, grantee, destination, consumer application, field
mapping) before it builds the access request, sealed materialization
authorization and dispatch; revocation dispatch requires exact revocation
bindings and acknowledgement watermarks. It is not emitted for browsers and is
not yet composed by a production host.

The server runtime now also composes Pactena projection packets through the
actual `@lssm-tech/module.personal-founder-support` reducer and encrypted atomic
store port. One canonical packet can create idempotent, purpose-bound founder
handoffs for an explicitly configured cockpit/portfolio/room destination; the
handoff omits subject identifiers, provenance references, and free-form outcome
narratives. Exact packet, subject, product-grantee, grant, consent, projection,
domain-door, destination, revision, receipt, and digest bindings are rechecked
before storage. Revocation enumerates the exact grant projection ids, marks each
handoff revoked, and emits the downstream delivery plus five-scope purge plan.
Real KMS custody, Pactena delivery/reconciliation, product routes, accessibility,
managed databases, E2E, purge-SLA proof, and canaries remain unqualified.
The exact local consumer run is recorded in
`generated/qualification/pactena-consumer-local-qa-2026-08-10.json`; its
SHA-256-bound contract, implementation, unit, and integration evidence covers the actual
founder-support service composition without widening those host qualification
claims.

The server-only workspace projector also emits bounded outcome summaries from
encrypted mission-goal state. Each metric exposes its explicit baseline, target,
unit, window, collection mode, current observed value, confidence, minimized
evidence identifiers, and correction/removal counts. Prior values and correction
reasons remain inside the immutable encrypted observation history.

```ts
import { PersonalWorkspaceRuntime } from '@lssm-tech/bundle.personal-os/runtime';

const runtime = new PersonalWorkspaceRuntime({
	store: subjectBoundPostgresStore,
	crypto: kmsEnvelopeCrypto,
	authority: connectBackedPersonalAuthority,
	authorityReceiptVerifier: connectReceiptTrustRoot,
	decisionAudit: subjectBoundDecisionAudit,
	ids: monotonicPersonalIds,
});
```


Provider credentials, raw health payloads, and export artifacts remain behind
injected integration ports. Local runtime tests qualify deterministic command
and persistence boundaries only; they do not qualify a production KMS,
provider, AuthOS deployment, restore drill, browser E2E, or canary.
The PostgreSQL store supplied here must be constructed with an
`authorityReceiptVerifier`; production atomic commits fail closed when the
authority receipt lacks independent canonical verification evidence.
`preparePersonalHealthAuthorizationDispatch()` recomputes the immutable
receipt, authority-proposal, and dispatch digests before exposing a command to
effects. `runPersonalHealthAuthorizationDispatchCycle()` then leases a durable,
secret-free broker dispatch, executes the normal runtime path, and atomically
acks, retries, or supersedes it with a freshly issued revision-bound command.
`createPersonalHealthAuthorizationConnectCommand()` builds that issued or
reissued `connect_provider` command (high risk, human-required, online-only,
bound to the request, active consent policy and evidence, and digest-bound to
its payload); hosts only resolve the active consent.
OAuth code/state and PKCE material are deleted before this delivery boundary;
the workspace reducer retains connection/category/status metadata only.

Browser and public consumers use the privacy-safe entrypoint:

```ts
import {
	projectAcceptedPersonalScope,
	projectPersonalProductHealth,
} from "@lssm-tech/bundle.personal-os/experience-coverage";

const acceptedP0 = projectAcceptedPersonalScope({ priority: "P0" });
const important = projectPersonalProductHealth({ criticality: "important" });
```


Trusted Bun or Node operators explicitly opt into the operator-only entrypoint:

```ts
import {
	listPersonalGaps,
	projectPersonalOperatorHealth,
} from "@lssm-tech/bundle.personal-os/experience-coverage/operator";

const gaps = listPersonalGaps({ acceptedScope: true, criticality: "essential" });
const operatorHealth = projectPersonalOperatorHealth();
```


The public and browser artifacts contain only audience-safe rows. They neither
import operator modules nor contain repository source references,
qualification references, or internal blocker text. The build classifies the
operator entrypoint as server code and excludes it from browser transpilation.

Source discovery is inventory, not readiness. The matrix classifies discovered
artifacts as `source`, `reference`, or `fixture`. Only qualification evidence
with observation and expiry dates, producer/run provenance, and SHA-256
integrity can contribute to a requirement score. Mandatory evidence is the
additive union of the exact need kind, quality gates, provider canaries, and any
declared layers; exceptions require an explicit approved, expiring waiver.
For local evidence, operator validation also hashes the referenced artifact and
checks its run schema, producer, environment, observation time, source commit,
qualified layer allowlist, commands, and passed package results. Evidence can
credit only a layer named inside the hashed replay artifact, so a unit run cannot
be relabelled as accessibility or canary proof by an overlay. A well-formed but
invented digest cannot qualify a row.

The generated snapshot records bounded local qualification for the implemented
foundation, health, cross-surface, learning, life-administration, finance,
community, founder-support, operations, private progress
celebration, and guardrail lifecycle packages: 96 requirements are
`implemented_unverified`, seven remain `blocked_external`, none remain `stub`,
and none are `live_verified`, for 66 percent qualified completion. This total
also includes the bounded projection publisher and delegated-household support
runtime. Rows that still lack managed host composition, browser or device E2E,
accessibility, manual acceptance, provider, regulatory, or production-canary
layers retain those gaps explicitly rather than inferring them from source or
route existence.
The core, health, and golden-journey rows map the exact first-release surface
set: standalone web, PWA, Expo iOS/Android, and Tauri macOS/Windows/Linux.
This scope declaration does not substitute for the still-missing dated device,
accessibility, manual-acceptance, provider, or canary evidence.
The bounded composite native qualification run is recorded in
`generated/qualification/presentation-surfaces-source-bound-composite-local-qa-2026-08-15.json`.
It covers the exact presentation contract and composer plus current shared
contracts, API, web, mobile, and desktop lint, type, unit, integration,
mobile production export, desktop production build, package-inventory, Cargo,
and Clippy checks. Unchanged package scopes are carried only after an exact
byte-identity comparison to the prior replay; the changed web scope and its API
dependency were replayed at the current source commit. Web lint, typecheck,
unit, browser-artifact privacy, zero-exit Webpack production build, seven
browser-contract journeys, and the actual API-backed production journey passed.
The matrix
credits contract, implementation, unit, and integration evidence for the
bounded RoleMorph and Personalization rows. Browser E2E and automated
accessibility remain governed by their separate source-bound artifacts rather
than being inferred from this package replay. Expo simulator and
physical-device runs, VoiceOver/TalkBack, signed installers, Windows/Linux
packaging, provider accounts, restore drills, manual accessibility, and
canaries remain unqualified.

The current automated cross-surface accessibility composite replay is recorded in
`generated/qualification/cross-surface-accessibility-source-bound-composite-local-2026-08-15.json`.
It credits only the accessibility layer for platform accessibility,
localization, responsive/native presentation, offline continuity, privacy and
consent, profile runtime, delegated-support recovery, explicit presentation
preferences, and the exact RoleMorph resolution, suppression, canonical
preference, and fail-closed data-view boundaries consumed by the three apps.
It also credits the automated accessibility layer for the executable mission,
goal, Today plan, habit, check-in, missed-day recovery, and weekly-review
journeys that each surface builds from the shared command contracts.
The health connection consent control and non-clinical minimized wellness view
also receive only this automated accessibility credit; live providers and
provider canaries remain external blockers.
The same bounded credit covers the localized activity, sleep, biometrics, and
nutrition history categories rendered without raw provider payloads.
The human-only export and deletion controls shared by all three apps likewise
credit accessibility for the life-administration rights row, while external
processor propagation, manual acceptance, and canaries remain open.
Web, mobile, and desktop semantic, label, focus/live-region, localized catalog,
RTL-readiness, reduced-motion, offline recovery, native-property, production
build/export, package-inventory, and Rust host checks passed. Chromium was
blocked before test execution by the managed macOS Mach bootstrap sandbox, and
the desktop strict TypeScript command was obstructed by unrelated duplicate
exports in the concurrently dirty main-worktree dependency. Browser/native
E2E, screen-reader, zoom, contrast, switch/voice, visual regression,
professional localization review, real devices, signed installers, manual
acceptance, and production canaries remain open.

The identity and authentication row credits the integrated source-bound AuthOS
chain in
`generated/qualification/identity-auth-source-bound-local-qualification-2026-08-14.json`.
It covers AuthOS contracts/runtime, reusable lifecycle UI, the Better Auth and
PersonalOS bridges, health identity binding, and authenticated API composition
through 1,279 tests and 4,049 assertions. Reusable sign-in, verification, MFA,
passkey, recovery, session, security, audit, and sign-out screens reject
critical or serious Axe findings and invalid React nesting while preserving
focusable landmarks under reduced motion. The shared-worktree type/declaration
obstructions are recorded in the artifact rather than reported as passing.
Managed identity/provider delivery, manual assistive-technology, recovery and
account-closure drills, real devices, acceptance, and canaries remain
unqualified.

The identity-cohesion E2E composes the real Personal Experience identity
session with the real Personalization tracker, in-memory store, and scoped
signal emitter. It proves account-switch drain ordering, tenant/consent/sign-out
discard, exact subject/actor/version scope rejection, and fail-closed sign-out
when delivery fails. This local replay does not qualify the separately owned
CommunicationOS host, manual acceptance, or production canaries.
This artifact uses `personal-qualification-run.v2`: its exact source scopes are
bound to a full Git commit, and local validation rejects the evidence if that
commit is missing, a scope is unsafe, or any declared source changed afterward.
All credited local artifacts now use v2. Legacy v1 artifacts fail closed because
they do not bind exact source scopes or qualified evidence layers.
The evidence inventory test also rejects orphaned qualification files that no
current requirement credits; superseded runs are removed instead of lingering
as ambiguous release evidence.

The health and platform qualification is recorded in
`generated/qualification/health-platform-source-bound-composite-local-qa-2026-08-15.json`.
Its source-continuous 313-test replay binds the provider-neutral health contracts and
runtime, strict provider adapter, health module, and current web, mobile, and
desktop packages to one full commit. It credits only local implementation,
unit, and integration layers. Simulated providers and automated semantic checks
do not qualify live providers, manual accessibility, real devices, signed
installers, restore drills, regulatory status, or production canaries.

The Personal Operations qualification is recorded in
`generated/qualification/operations-source-bound-local-qa-2026-08-10.json`.
It is freshly replayed against the entire operations module and uses the same
v2 source-scope check. It remains bounded to local contracts, pure evaluators,
tests, and multi-runtime builds; managed RUM, load, restore, support,
accessibility, manual acceptance, and production-canary evidence remain open.
The support-incident row separately credits its encrypted host E2E and the
current web source accessibility suite from
`generated/qualification/support-incident-source-bound-composite-local-qa-2026-08-15.json`.
The browser process could not be launched in this environment, so browser Axe,
staffed accessible-channel acceptance, incident drills, response objectives,
manual acceptance, and production canary evidence remain required.

The core foundation qualification is recorded in
`generated/qualification/foundation-source-bound-composite-local-qa-2026-08-24.json`.
It binds the subject/command contracts, authority runtime, encrypted Postgres
state, authenticated API, RoleMorph, Personalization, Personal Calm composer,
goals, productivity, household, and their canonical digest prerequisite to one
source-continuous 906-test/3,560-assertion replay. Every declared package passed
lint, strict typecheck, its full test suite, and its production build on the
bound commit. That current replay also resolves only the exact superseded
implementation blocker IDs it proves; deployment, provider, manual, canary,
real-device, and deferred CommunicationOS blockers remain open. The
Personalization slice includes
collection-time consent and retention, ciphertext-only behavior evidence,
correction, export, deletion, expiry purge, and durable retry/dead-letter
delivery. The current 227-test encrypted E2E composite is recorded in
`generated/qualification/personalization-e2e-source-bound-composite-local-qa-2026-08-15.json`.
It additionally proves exact scoped queries, minimized telemetry, preference
lifecycle, receipt policy, advisory aggregate analysis, and identity-buffer
retirement. A separate receipt-policy E2E run proves exact request/evidence-bound
receipt issuance, consent and redaction denial, raw-payload exclusion, and
durable digest-only audit without claiming deployed training or canary evidence.
The outcome slice includes authenticated record,
substitution denial, correction, removal, immutable encrypted history, and a
minimized current-value projection. It credits only local implementation, unit, and
integration layers; accessibility labs, real devices, provider qualification,
restore drills, manual acceptance, and canaries remain open.

The current private progress-celebration qualification is recorded in
`generated/qualification/progress-celebration-source-bound-composite-local-qa-2026-08-15.json`.
The host rejects missing or abandoned target goals before authority. Its
on-disk PGlite E2E configures an exact owned goal, closes and reopens the
encrypted workspace, projects deterministic capped private XP with exact
evidence and authority receipt references, proves RLS subject isolation and
ciphertext privacy, replays idempotently, and disables the policy without
deleting the goal or policy history. Automated web accessibility contracts and
the production build pass, but no browser process launched in this replay.
Browser E2E, manual assistive-technology acceptance, real-device and
longitudinal behavior, managed KMS/PostgreSQL recovery, and canary evidence
remain open and prevent `live_verified` status.
The host artifact also uses v2 source-scope binding, so later changes to its
contract, digest, reducer, encrypted hydration, or minimized projection paths
invalidate the credited evidence until the run is refreshed.

Delegated household support qualification is recorded in
`generated/qualification/sharing-agency-source-bound-local-qa-2026-08-10.json`.
It binds the household authority reducer and minimized projection compiler,
publisher, acknowledgement, and revocation paths to one fresh local replay.
The additional
`generated/qualification/support-delegation-postgres-source-bound-local-e2e-2026-08-12.json`
run executes the subject-owned household, consent, mission, goal, and support
sequence through two-phase authority and the encrypted Postgres adapter, then
rehydrates the minimized grant after an on-disk restart. Exact replay and RLS
isolation pass while private purpose, consent, evidence, and goal text remain
outside ciphertext inspection and projections. Provider reconciliation,
product-device acceptance, manual accessibility, incident operations, and
production canaries remain open.

The package test command keeps deterministic non-PGlite tests on a 15-second
ceiling and runs stateful PGlite tests serially with a 60-second functional
ceiling. This prevents local resource contention from masquerading as a domain
failure; it does not qualify latency, throughput, load, or production SLOs,
which remain governed by separate performance evidence.

Learning host qualification is recorded in
`generated/qualification/learning-host-source-bound-composite-local-qa-2026-08-14.json`.
It binds the Personal Learning module and bundle host boundary to a source-bound
local replay. The durable runtime additionally has a restartable PGlite journey
covering real learning-engine progress, AES-GCM snapshots, exact replay,
revision conflict, RLS subject isolation, minimized outbox work, plaintext
exclusion, and cipher-integrity failure. Authoritative catalog entitlements,
product UI, manual accessibility, device E2E, rights propagation, managed
restore drills, and production canaries remain open.

Breadth qualification is split across exact source-bound artifacts for
`life-admin-source-bound-local-qa-2026-08-13.json`,
`personal-finance-host-source-bound-local-e2e-2026-08-14.json`,
`community-source-bound-local-qa-2026-08-14.json`, and
`founder-support-source-bound-local-qa-2026-08-14.json`. The split prevents a
change in one domain from refreshing or invalidating another domain's evidence.
The additional
`life-admin-organize-postgres-source-bound-local-e2e-2026-08-14.json` run
credits only local E2E for calendar, encrypted personal files, and knowledge:
it persists through an on-disk restart, projects/searches metadata without the
content reference, archives safely, replays idempotently, and enforces subject
RLS. Provider, blob-custody, accessibility, device, manual, managed-restore,
and canary evidence remain open.

Household care now also reaches the authenticated organizer through an
exact-actor, bounded metadata projection. Local contract/runtime/API/web tests
cover delegated capability scope, expiry and version denial, cardinality,
private-purpose exclusion, translated empty copy, and semantic list rendering.
Manual assistive-technology acceptance, live providers, managed restore, and
production canaries remain open and are not inferred from this automated run.

Life-administration rights and restore qualification are refreshed separately
in `life-admin-rights-postgres-source-bound-local-e2e-2026-08-13.json` and
`postgres-restore-rehearsal-source-bound-local-qa-2026-08-13.json`. The rights
replay binds 48 module tests, 42 forced-RLS PostgreSQL tests, and three exact
bundle PGlite scenarios to their current source scopes. The PostgreSQL suite
passed its declared serialized 15-second qualification profile; a contended
five-second default run timed out two denial-audit cases and is explicitly not
counted as passing evidence. Managed recovery, downstream deletion processors,
manual acceptance, accessibility certification, and canaries remain open.
Provider credentials, production encrypted stores, UI, manual accessibility,
devices, moderation and support operations, restore drills, formal regulatory
qualification, and canaries remain open as applicable.

Pactena and HCircle integrations use the `./projections` entrypoint. It derives
allowed destinations from the founder-domain and CommunicationOS read-only
inventories, compiles only fields named by an active PersonalOS sharing grant,
and emits no profile, provenance, provider payload, protected trait, or
consequential-use authority. The publisher binds acknowledgements to the exact
grant, grantee, consumer, and destination. Revocation invalidates local access
before attempting remote delivery; an unavailable remote remains pending and
cannot reopen access.

The cross-product projection E2E publishes one exact subject through both the
actual Community and Founder Support services, replays without duplicate
writes, and revokes both consumers with the complete five-scope purge plan.
Post-revocation recreation fails closed. The replay remains local: durable
cross-service delivery, managed key custody, purge-SLA completion, manual
acceptance, and production canaries are still unqualified.

Every requirement has an explicitly authored journey-semantics catalog entry;
there is no generic fallback. Actionable needs require distinct happy,
recovery, and denial variants with concrete state transitions and actions.
Recovery declares resume, repair, rollback, or an alternative plus durable
no-data-loss and idempotency guarantees. Denial identifies the exact rejected
authority, consent, dependency, policy, or validation condition. Non-actionable
needs use an observation-only qualification path that cannot mutate personal
state. Validation rejects missing, unknown, interpolation-only, and duplicated
boilerplate entries.

Priorities follow the agreed product program: P0 trust foundation, P1 killer
product, P2 game changers, and P3 breadth. Current out-of-program rows are
marked `deferred` with retained blockers as their rationale and resume
conditions; the ledger does not leave an unmapped stub silently planned. Run
`bun run coverage:generate` to refresh the deterministic, operator-only
JSON/Markdown ledger and the safe public catalog.

The dated web production-composition qualification run exercises the actual
API/runtime path through the ordered household, mission, goals, simulated
health authorization, offline Today replay, habits, check-in, recovery, review,
coach reversal, delegation/revocation, and rights journey. Its SHA-256-bound
artifact credits only the exact contract and E2E layers that ran. The final-page
Axe scan remains a supporting signal rather than a complete accessibility
layer. It does not claim a deployed host, live provider, PostgreSQL, manual WCAG
review, device coverage, restore drill, or production canary.

### Health requalification — 2026-09-05

Four health records have fresh source-bound local proofs for history, revocation,
wellbeing goals and safe insights. The replay passed clean builds, lint,
typechecks, package dry runs and 75 tests across three health packages. Previous
artifacts remain intact. These records credit only their declared local layers;
other stale foundation/accessibility evidence and live provider/device acceptance
remain open. Coverage generation retains those gaps rather than restoring old
completion percentages.

### Foundation and personalization replay — 2026-09-05

A new foundation record binds 48 passing checks and 908 tests (3,565 assertions)
across 12 package scopes. Four personalization records reuse the same current-source
package checks and add clean builds, package inspection and explicit PGlite
receipt-policy replay. These five records provide 125 current local layer refs.
Historical artifacts remain immutable. Accessibility, device/runtime-specific
E2E, manual acceptance and production canaries keep their independent gates.

### Automated surface accessibility — 2026-09-05

Current-source automated accessibility now covers the web, native mobile build
and desktop host checks: 264 tests, eight browser journeys with Axe checks,
iOS/Android exports, and locked Rust fmt/check/test/clippy. The record binds the
native Babel pin and credits 26 accessibility references. It does not claim
physical-device, manual screen-reader, visual-regression or production acceptance.
Other stale E2E records retain their independent completion gates.

### Qualification archive and current web/analyzer proofs

Superseded qualification records live in `generated/qualification/archive` with
unchanged bytes and listed hashes. The active directory contains referenced
records only. September 5 web and analyzer records bind actual local replays;
foundation, web and inventory qualification tests pass. This does not certify the
remaining product matrix or grant production authority.


## Declared capabilities

### Bundle Personal Os

Capability ID: `package.lssm.tech.bundle.personal.os`

Evidence-scored PersonalOS product composition and requirements coverage.

Use cases:

- Adopt evidence-scored personalos product composition and requirements coverage

Constraints:

```json
{
  "platforms": [
    "web",
    "server"
  ],
  "runtimes": [
    "node",
    "browser"
  ],
  "avoidWhen": [
    "The @lssm-tech/bundle.personal-os package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "bundle",
    "personal"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/bundle.personal-os",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/experience-coverage",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/operator",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/operator.node",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/public",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/finance-projection",
    "symbols": [
      "projectPersonalFinanceBreadthV1"
    ]
  },
  {
    "from": "@lssm-tech/bundle.personal-os/index.node",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/index.web",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature.node",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature.web",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/personal-projections.feature",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/personal-projections.feature.node",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.personal-os/projections/governed",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "solutions",
  "kind": "bundle",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "web",
    "server"
  ],
  "runtimes": [
    "node",
    "browser"
  ],
  "entrypoints": [
    ".",
    "./experience-coverage",
    "./experience-coverage/operator",
    "./experience-coverage/operator.node",
    "./experience-coverage/public",
    "./finance-projection",
    "./index.node",
    "./index.web",
    "./personal-os.feature",
    "./personal-os.feature.node",
    "./personal-os.feature.web",
    "./personal-projections.feature",
    "./personal-projections.feature.node",
    "./personal-projections.feature.web",
    "./projections",
    "./projections/governed",
    "./runtime",
    "./runtime/index.node"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/experience-coverage",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/operator",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/operator.node",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/experience-coverage/public",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/finance-projection",
    "symbols": [
      "projectPersonalFinanceBreadthV1"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/index.node",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/index.web",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature.node",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/personal-os.feature.web",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/personal-projections.feature",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/personal-projections.feature.node",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.personal.os",
    "from": "@lssm-tech/bundle.personal-os/projections/governed",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/bundle.personal-os` — subpath `.`
  - Conditional target declaration: `{"types":"./src/index.node.ts","browser":"./src/index.web.ts","node":"./src/index.node.ts","default":"./src/index.node.ts"}`
  - `types`: `./src/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.node.ts); verified source file.
  - `browser`: `./src/index.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.web.ts); verified source file.
  - `node`: `./src/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.node.ts); verified source file.
  - `default`: `./src/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/experience-coverage` — subpath `./experience-coverage`
  - `unconditional`: `./src/experience-coverage/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/index.ts); verified source file.

- `@lssm-tech/bundle.personal-os/experience-coverage/operator` — subpath `./experience-coverage/operator`
  - Conditional target declaration: `{"types":"./src/experience-coverage/operator.node.ts","node":"./src/experience-coverage/operator.node.ts","default":"./src/experience-coverage/operator.node.ts"}`
  - `types`: `./src/experience-coverage/operator.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/operator.node.ts); verified source file.
  - `node`: `./src/experience-coverage/operator.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/operator.node.ts); verified source file.
  - `default`: `./src/experience-coverage/operator.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/operator.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/experience-coverage/operator.node` — subpath `./experience-coverage/operator.node`
  - `unconditional`: `./src/experience-coverage/operator.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/operator.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/experience-coverage/public` — subpath `./experience-coverage/public`
  - `unconditional`: `./src/experience-coverage/public/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/experience-coverage/public/index.ts); verified source file.

- `@lssm-tech/bundle.personal-os/finance-projection` — subpath `./finance-projection`
  - Conditional target declaration: `{"types":"./src/finance-projection.node.ts","node":"./src/finance-projection.node.ts","default":"./src/finance-projection.node.ts"}`
  - `types`: `./src/finance-projection.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/finance-projection.node.ts); verified source file.
  - `node`: `./src/finance-projection.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/finance-projection.node.ts); verified source file.
  - `default`: `./src/finance-projection.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/finance-projection.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/finance-projection.node` — subpath `./finance-projection.node`
  - `unconditional`: `./src/finance-projection.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/finance-projection.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/index.node` — subpath `./index.node`
  - `unconditional`: `./src/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/index.web` — subpath `./index.web`
  - `unconditional`: `./src/index.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/index.web.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-os.feature` — subpath `./personal-os.feature`
  - Conditional target declaration: `{"types":"./src/personal-os.feature.node.ts","browser":"./src/personal-os.feature.web.ts","node":"./src/personal-os.feature.node.ts","default":"./src/personal-os.feature.node.ts"}`
  - `types`: `./src/personal-os.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.node.ts); verified source file.
  - `browser`: `./src/personal-os.feature.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.web.ts); verified source file.
  - `node`: `./src/personal-os.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.node.ts); verified source file.
  - `default`: `./src/personal-os.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-os.feature.node` — subpath `./personal-os.feature.node`
  - `unconditional`: `./src/personal-os.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-os.feature.web` — subpath `./personal-os.feature.web`
  - `unconditional`: `./src/personal-os.feature.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-os.feature.web.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-projections.feature` — subpath `./personal-projections.feature`
  - Conditional target declaration: `{"types":"./src/personal-projections.feature.node.ts","browser":"./src/personal-projections.feature.web.ts","node":"./src/personal-projections.feature.node.ts","default":"./src/personal-projections.feature.node.ts"}`
  - `types`: `./src/personal-projections.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.node.ts); verified source file.
  - `browser`: `./src/personal-projections.feature.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.web.ts); verified source file.
  - `node`: `./src/personal-projections.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.node.ts); verified source file.
  - `default`: `./src/personal-projections.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-projections.feature.node` — subpath `./personal-projections.feature.node`
  - `unconditional`: `./src/personal-projections.feature.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/personal-projections.feature.web` — subpath `./personal-projections.feature.web`
  - `unconditional`: `./src/personal-projections.feature.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/personal-projections.feature.web.ts); verified source file.

- `@lssm-tech/bundle.personal-os/projections` — subpath `./projections`
  - `unconditional`: `./src/projections/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/projections/index.ts); verified source file.

- `@lssm-tech/bundle.personal-os/projections/governed` — subpath `./projections/governed`
  - Conditional target declaration: `{"types":"./src/projections/governed/index.node.ts","node":"./src/projections/governed/index.node.ts","default":"./src/projections/governed/index.node.ts"}`
  - `types`: `./src/projections/governed/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/projections/governed/index.node.ts); verified source file.
  - `node`: `./src/projections/governed/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/projections/governed/index.node.ts); verified source file.
  - `default`: `./src/projections/governed/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/projections/governed/index.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/runtime` — subpath `./runtime`
  - Conditional target declaration: `{"types":"./src/runtime/index.node.ts","node":"./src/runtime/index.node.ts","default":"./src/runtime/index.node.ts"}`
  - `types`: `./src/runtime/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/runtime/index.node.ts); verified source file.
  - `node`: `./src/runtime/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/runtime/index.node.ts); verified source file.
  - `default`: `./src/runtime/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/runtime/index.node.ts); verified source file.

- `@lssm-tech/bundle.personal-os/runtime/index.node` — subpath `./runtime/index.node`
  - `unconditional`: `./src/runtime/index.node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/personal-os/src/runtime/index.node.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.node.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.node.d.ts",
      "browser": "./dist/browser/index.web.js",
      "bun": "./dist/index.node.js",
      "node": "./dist/node/index.node.js",
      "default": "./dist/index.node.js"
    },
    "./experience-coverage": {
      "types": "./dist/experience-coverage/index.d.ts",
      "browser": "./dist/browser/experience-coverage/index.js",
      "bun": "./dist/experience-coverage/index.js",
      "node": "./dist/node/experience-coverage/index.js",
      "default": "./dist/experience-coverage/index.js"
    },
    "./experience-coverage/operator": {
      "types": "./dist/experience-coverage/operator.node.d.ts",
      "bun": "./dist/experience-coverage/operator.node.js",
      "node": "./dist/node/experience-coverage/operator.node.js",
      "default": "./dist/experience-coverage/operator.node.js"
    },
    "./experience-coverage/operator.node": {
      "types": "./dist/experience-coverage/operator.node.d.ts",
      "bun": "./dist/experience-coverage/operator.node.js",
      "node": "./dist/node/experience-coverage/operator.node.js",
      "default": "./dist/experience-coverage/operator.node.js"
    },
    "./experience-coverage/public": {
      "types": "./dist/experience-coverage/public/index.d.ts",
      "browser": "./dist/browser/experience-coverage/public/index.js",
      "bun": "./dist/experience-coverage/public/index.js",
      "node": "./dist/node/experience-coverage/public/index.js",
      "default": "./dist/experience-coverage/public/index.js"
    },
    "./finance-projection": {
      "types": "./dist/finance-projection.node.d.ts",
      "bun": "./dist/finance-projection.node.js",
      "node": "./dist/node/finance-projection.node.js",
      "default": "./dist/finance-projection.node.js"
    },
    "./finance-projection.node": {
      "types": "./dist/finance-projection.node.d.ts",
      "bun": "./dist/finance-projection.node.js",
      "node": "./dist/node/finance-projection.node.js",
      "default": "./dist/finance-projection.node.js"
    },
    "./index.node": {
      "types": "./dist/index.node.d.ts",
      "bun": "./dist/index.node.js",
      "node": "./dist/node/index.node.js",
      "default": "./dist/index.node.js"
    },
    "./index.web": {
      "types": "./dist/index.web.d.ts",
      "browser": "./dist/browser/index.web.js",
      "bun": "./dist/index.web.js",
      "default": "./dist/index.web.js"
    },
    "./personal-os.feature": {
      "types": "./dist/personal-os.feature.node.d.ts",
      "browser": "./dist/browser/personal-os.feature.web.js",
      "bun": "./dist/personal-os.feature.node.js",
      "node": "./dist/node/personal-os.feature.node.js",
      "default": "./dist/personal-os.feature.node.js"
    },
    "./personal-os.feature.node": {
      "types": "./dist/personal-os.feature.node.d.ts",
      "bun": "./dist/personal-os.feature.node.js",
      "node": "./dist/node/personal-os.feature.node.js",
      "default": "./dist/personal-os.feature.node.js"
    },
    "./personal-os.feature.web": {
      "types": "./dist/personal-os.feature.web.d.ts",
      "browser": "./dist/browser/personal-os.feature.web.js",
      "bun": "./dist/personal-os.feature.web.js",
      "default": "./dist/personal-os.feature.web.js"
    },
    "./personal-projections.feature": {
      "types": "./dist/personal-projections.feature.node.d.ts",
      "browser": "./dist/browser/personal-projections.feature.web.js",
      "bun": "./dist/personal-projections.feature.node.js",
      "node": "./dist/node/personal-projections.feature.node.js",
      "default": "./dist/personal-projections.feature.node.js"
    },
    "./personal-projections.feature.node": {
      "types": "./dist/personal-projections.feature.node.d.ts",
      "bun": "./dist/personal-projections.feature.node.js",
      "node": "./dist/node/personal-projections.feature.node.js",
      "default": "./dist/personal-projections.feature.node.js"
    },
    "./personal-projections.feature.web": {
      "types": "./dist/personal-projections.feature.web.d.ts",
      "browser": "./dist/browser/personal-projections.feature.web.js",
      "bun": "./dist/personal-projections.feature.web.js",
      "default": "./dist/personal-projections.feature.web.js"
    },
    "./projections": {
      "types": "./dist/projections/index.d.ts",
      "browser": "./dist/browser/projections/index.js",
      "bun": "./dist/projections/index.js",
      "node": "./dist/node/projections/index.js",
      "default": "./dist/projections/index.js"
    },
    "./projections/governed": {
      "types": "./dist/projections/governed/index.node.d.ts",
      "bun": "./dist/projections/governed/index.node.js",
      "node": "./dist/node/projections/governed/index.node.js",
      "default": "./dist/projections/governed/index.node.js"
    },
    "./runtime": {
      "types": "./dist/runtime/index.node.d.ts",
      "bun": "./dist/runtime/index.node.js",
      "node": "./dist/node/runtime/index.node.js",
      "default": "./dist/runtime/index.node.js"
    },
    "./runtime/index.node": {
      "types": "./dist/runtime/index.node.d.ts",
      "bun": "./dist/runtime/index.node.js",
      "node": "./dist/node/runtime/index.node.js",
      "default": "./dist/runtime/index.node.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-spec](https://lssm.co/docs/packages/lib.contracts-spec/): `workspace:^`
- [@lssm-tech/lib.data-exchange-core](https://lssm.co/docs/packages/lib.data-exchange-core/): `workspace:^`
- [@lssm-tech/lib.data-exchange-server](https://lssm.co/docs/packages/lib.data-exchange-server/): `workspace:^`
- [@lssm-tech/lib.finance-ops-spec](https://lssm.co/docs/packages/lib.finance-ops-spec/): `workspace:^`
- [@lssm-tech/lib.founder-intelligence-spec](https://lssm.co/docs/packages/lib.founder-intelligence-spec/): `workspace:^`
- [@lssm-tech/lib.lssm-os-runtime](https://lssm.co/docs/packages/lib.lssm-os-runtime/): `workspace:^`
- [@lssm-tech/lib.personal-finance-runtime](https://lssm.co/docs/packages/lib.personal-finance-runtime/): `workspace:^`
- [@lssm-tech/lib.personal-finance-spec](https://lssm.co/docs/packages/lib.personal-finance-spec/): `workspace:^`
- [@lssm-tech/lib.personal-health-runtime](https://lssm.co/docs/packages/lib.personal-health-runtime/): `workspace:^`
- [@lssm-tech/lib.personal-health-spec](https://lssm.co/docs/packages/lib.personal-health-spec/): `workspace:^`
- [@lssm-tech/lib.personal-os-runtime](https://lssm.co/docs/packages/lib.personal-os-runtime/): `workspace:^`
- [@lssm-tech/lib.personal-os-spec](https://lssm.co/docs/packages/lib.personal-os-spec/): `workspace:^`
- [@lssm-tech/lib.surface-runtime](https://lssm.co/docs/packages/lib.surface-runtime/): `workspace:^`
- [@lssm-tech/module.communication-os](https://lssm.co/docs/packages/module.communication-os/): `workspace:^`
- [@lssm-tech/module.learning-journey](https://lssm.co/docs/packages/module.learning-journey/): `workspace:^`
- [@lssm-tech/module.personal-community](https://lssm.co/docs/packages/module.personal-community/): `workspace:^`
- [@lssm-tech/module.personal-experience](https://lssm.co/docs/packages/module.personal-experience/): `workspace:^`
- [@lssm-tech/module.personal-founder-support](https://lssm.co/docs/packages/module.personal-founder-support/): `workspace:^`
- [@lssm-tech/module.personal-goals](https://lssm.co/docs/packages/module.personal-goals/): `workspace:^`
- [@lssm-tech/module.personal-household](https://lssm.co/docs/packages/module.personal-household/): `workspace:^`
- [@lssm-tech/module.personal-learning](https://lssm.co/docs/packages/module.personal-learning/): `workspace:^`
- [@lssm-tech/module.personal-life-admin](https://lssm.co/docs/packages/module.personal-life-admin/): `workspace:^`
- [@lssm-tech/module.personal-operations](https://lssm.co/docs/packages/module.personal-operations/): `workspace:^`
- [@lssm-tech/module.personal-productivity](https://lssm.co/docs/packages/module.personal-productivity/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- `@electric-sql/pglite`: `catalog:data`
- [@lssm-tech/integration.personal-os-state-postgres](https://lssm.co/docs/packages/integration.personal-os-state-postgres/): `workspace:^`
- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.personalization](https://lssm.co/docs/packages/lib.personalization/): `workspace:^`
- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "bun run build:bundle && bun run build:types && bun run build:check",
  "build:check": "bun run scripts/check-build-inventory.ts",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "coverage:generate": "bun run scripts/generate-personal-experience-coverage.ts",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "lint:fix": "node ../../../scripts/biome.cjs check --write .",
  "prebuild": "contractspec-bun-build prebuild",
  "test": "bun scripts/run-tests.ts",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Bundle Personal Os documentation](https://www.npmjs.com/package/%40lssm-tech%2Fbundle.personal-os) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fbundle.personal-os",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/bundle.personal-os.txt",
  "route": "/llms/bundle.personal-os",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/bundle.personal-os.txt",
  "blobSha": "a8036433d0fc73785caae884cbf7cb65442a8fe7",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```