cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: consolidate repository guides and preserve audit history

Browse Source
This commit is contained in:
cesnimda
2026-09-11 14:22:41 +02:00
parent 115441a409
commit 682a3028bb
404 changed files with 3402 additions and 2621 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/ai/safety.md
+3 -6
View File
@@ -1,8 +1,5 @@
# safety
# AI safety and privacy
AI output is suggestion-only and cannot overwrite the Career Profile automatically. Prompts delimit
untrusted source text, require preservation of factual claims, and instruct providers not to invent
employers, titles, dates, or metrics. Attachments are included only when explicitly selected.
Local processing is the default. External CV processing is opt-in and gated; provider selection and task type are recorded in the AI interaction/usage paths. The sidecar is private to the backend network in Compose, requires `AI_SERVICE_TOKEN` on protected endpoints, runs with reduced container privileges, and bounds parser work.
Provider outages degrade AI features without blocking core tracking. Calls and tokens are metered and
limited by plan. See `docs/ai/security.md` and `docs/ai/privacy.md`.
Known limits: local tests do not prove provider equivalence, production privacy configuration, or real outage behavior. Do not paste personal CVs, tokens, or provider responses into audit notes. See [security notes](../security/security-notes.md) for open verification gates.