LifterLMS vs TAO Testing

10.1.0 registered the core REST surface — courses, sections, lessons, memberships, access plans, students, enrollments, progress — as WordPress Abilities API abilities. 10.2.0 extends that to the commercial and assessment halves: quizzes, quiz questions, quiz attempts including grading, orders and transactions, certificate templates and awarded certificates, each with webhook topics and ability registration. It also adds a read-only student grades endpoint with per-lesson breakdowns and time-limited signed download URLs for protected media. Before this arc, the releases were almost entirely security hardening — checkout, imports, registration forms, REST authentication.

The direction is unambiguous: make every part of the LMS reachable by an agent through a standard registry rather than a bespoke integration. The refinements in 10.2.0 confirm it is being taken seriously as an interface — ability schemas now reject unknown parameters instead of ignoring them, list abilities return empty collections rather than errors, and rendered markup is omitted where a raw field exists to cut payload size. Bundling the blocks, CLI, helper and REST plugins into core in 10.1.0 removed the version-skew problem that would otherwise make this surface unreliable.

The remaining unregistered areas — engagements, notifications, reporting exports — are the likely next abilities. Payload and schema tightening looks set to continue as real agent traffic exposes rough edges.