Profile

A preference can change. A hard restriction needs an explicit, confirmed successor before planning may relax it. Profile keeps that difference visible instead of turning yesterday's input into a permanent claim about the person.

wellbeing.profile@1 seals an immutable revision of restrictions, preferences, time, equipment, enabled modes, consent, and privacy choices. Every fact retains its provenance: user_entered, source_imported, model_proposed, deterministically_derived, or user_confirmed. A proposed interpretation cannot pass as a confirmed human constraint.

Storage and inference are local by default. Remote providers, lookup, reminders, retained media, calorie or weight features, imports, sharing, export, and research each require revocable consent for their purpose. Journals, measurements, symptoms, diagnoses, medication, clinical records, movement history, and genetics stay out of Homestead, shop queries, catalogues, carts, providers, and merchant messages.

The same custody boundary governs departure. wellbeing.export@1 creates the approved export. wellbeing.delete@1 closes admission, disables schedules, drains atomic work, removes permitted records and derivatives, verifies absence, and leaves a content-free receipt. A restored backup must reapply deletion tombstones before reopening data.

Return to Wellbeing, or use the reviewed profile in Eating and Fitness.