# Module 2 — provenance, rights and privacy

All 40 PNG diagrams are reproducibly drawn by `academy/module-2/render.py`. Narration, captions, transcript and learning text derive from `content.json` (editorial source `content.py`). No stock photos, music, client/patient records, cloned personal voice or third-party logos are incorporated. Pharmaceutical equipment is represented as simplified original illustrations, not certified engineering drawings.

Speech uses the existing local Kokoro v1.0 ONNX model and stock af_heart voice. Model and voice archive observed hashes were recorded in Module 1 recovered-source README; this build uses those same named toolchain files. Publisher model card: https://huggingface.co/hexgrad/Kokoro-82M (Apache-2.0). Runtime source and MIT notice: https://github.com/thewh1teagle/kokoro-onnx/blob/main/LICENSE. The MIT notice and standard Apache 2.0 text are retained here. The model weights and voice vectors are not redistributed. No assertion is made about independent verification of upstream training-data rights or exclusive rights in generated output.

Video diagrams use DejaVu Sans/DejaVu Sans Bold. Font notice: `assets/academy/dejavu-font-notice.txt`. HTML uses system fonts. No paid voice-generation API is called. The media workspace is a processing tool; final course URLs reference repository-hosted same-origin MP4s, not workspace upload URLs.

Browser behaviour: no added third-party scripts, analytics or embeds. Video source is attached after Play activation. Page, diagram and caption requests can occur before playback; therefore the privacy note does not incorrectly imply that no host requests occur before Play. Site hosting receives normal network metadata. Operator hosting retention/deletion policies are not fabricated or independently approved here.

Optional localStorage key: `valistera_module2_v1`. Contains save preference, studied lesson IDs, passed-check lesson IDs and latest final score. Defaults off. Workbook text and individual final quiz responses are not stored or transmitted. Disabling saving removes the key; Clear removes only Module 2 data and disables saving. Storage failures are handled without blocking learning. This is not an LMS or auditable GMP training record.

Human audiovisual, independent technical and rights/privacy acceptance remain review decisions. Module 1 approval does not automatically approve Module 2.