Milestone 6: governed Academy media library

[botsarefuture]

Purpose

Start the Educational Media Pipeline with a governed, accessible media lifecycle rather than untracked file paths.

What changed

• adds a versioned media contract and read-only cacheable public manifest
• adds role-separated author, reviewer, and publisher API transitions
• adds an accessible Admin Media Library for drafts, revisions, and localizations
• allows incomplete private drafts while blocking placeholders and missing rights/accessibility data from review
• validates the real Foundations pathway illustration end to end
• documents the lifecycle, staging workflow, roadmap state, and v0.3.31 release

Architectural decisions

Binary storage remains separate from governed metadata. This slice accepts reviewed local or HTTPS sources and does not reuse the encrypted learner-recording vault. Published revisions are immutable, and the public manifest exposes only published metadata without private review notes.

Validation

• npm test (28 tests)
• PYTHONPATH=server python3 -m unittest discover -s server -p "test_*.py" (19 tests)
• npm run build
• npm run check:version
• clean Docker Compose staging build and seed
• author → reviewer → publisher media workflow with permission-denial checks
• draft privacy, immutable published revision, public cache headers, and review-note redaction
• browser audit at 390px: no horizontal overflow, 44px controls, published fields effectively disabled

Known limitations

Lesson blocks do not yet resolve governed asset references. Binary upload/CDN storage is intentionally deferred to a later Milestone 6 slice.