v1.0.57 - Dynamic Learn Screen Curriculum & Security Remediation

Vastavik Learning v1.0.57 Release Notes

🚀 Dynamic Curriculum in Learn Screen & Strix Security Audit Remediation

1. Dynamic Course & Curriculum Synchronization in Learn Screen

• Real Backend & Firestore Curriculum: Replaced hardcoded courses and static nodes with dynamic data from \LearningViewModel.
• Live Modules on Winding Road: The course road now dynamically displays the exact modules configured in the Curriculum Editor (e.g. String in Java, Functions in Java, Array in Java).
• Interactive Video Lesson Drawer: Tapping a module opens the lesson drawer rendering real video lessons (String Function Making, Question solving, Function arguemenets) with lesson IDs and direct navigation to the video player.
• Dynamic Course Switcher: Course chips at the top dynamically render all published courses (Java Class 10, Kotlin Classes for Beginners, etc.) with live curriculum switching.

2. Security Vulnerability Remediations

• IDOR Remediation (CWE-639): Enforced strict JWT authentication on search and practice history endpoints, removing unauthenticated client \uid\ overrides.
• Client-Controlled Identity Elimination (CWE-807): Enforced JWT authentication on practice submissions and AI telemetry sync, ensuring identity is bound to verified bearer tokens and enforcing document ownership checks.
• Log Privacy Protection (CWE-532): Replaced unredacted chat prompt/response logging in \ChatScreen.kt\ with privacy-safe \ActivityLog.aiChat\ while preserving full conversational history in the dedicated \�i_chat_sessions\ Firestore store for admin inspection.

---

📦 Release Assets

1. **\�astavikLearning-v1.0.57.apk**: Main Vastavik Learning Android Application (\�ersionCode = 57)
2. **\�astavik-codeoss-extension.apk**: CodeOSS Companion Extension APK (\�ersionCode = 24)