f0f178d77e
docs(remaster): full-system audit + rebuild-vs-refactor decision
...
Deep, code-grounded audit of Job Tracker producing the mission deliverables
under docs/remaster/: system audit, bug report, architecture/data-model/AI/UX
reviews, remaster proposal, migration plan, competitor research, and the gated
REBUILD_DECISION.
Verdict: Incremental Refactor (no full rebuild). Evidence: no Critical defects;
hardened cookie/CSRF auth (token never in JS storage), real SSRF defence,
enforced multi-tenancy via global query filters, decoupled provider-swappable
AI service, 135 backend tests. Debt is localised (god controllers/entity,
missing hot-path indexes, prompt-injection hardening, CRA build debt) and
reachable by in-place, test-guarded refactors.
Also harden .gitignore: exclude agent tooling (.claude/, .bg-shell/, .agent.md)
and restore/broaden the runtime-secrets block (**/keys/, **/backups/, exports,
CV artifacts) so nested DataProtection keys can't be committed accidentally.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-05 10:04:03 +02:00
cesnimda
5f2f0a881a
Record authorization replay findings
2026-04-11 17:07:10 +02:00
cesnimda
811963749e
Fix cross-user job history leak
2026-04-11 17:05:52 +02:00
cesnimda
41595605b9
Add hostile fixture setup for authz testing
2026-04-11 16:57:15 +02:00
cesnimda
ac217dab53
Record security remediation verification
2026-04-11 16:31:05 +02:00
cesnimda
b4719a9916
Add adversarial security assessment findings
2026-04-11 14:30:32 +02:00
cesnimda
e5bcf9d5ea
feat: harden gmail sync foundation
2026-04-01 16:09:29 +02:00
cesnimda
0d65835857
feat: add cv benchmark workflow and admin visibility
2026-04-01 12:25:45 +02:00
cesnimda
44ff64896a
Complete S07 daily-loop UAT closure
2026-03-27 10:03:31 +01:00
cesnimda
e03f2e90a3
docs: Re-ran the focused daily-loop UI regressions, repaired the local…
...
- "docs/s07-uat.md"
- "job-tracker-ui/package-lock.json"
- ".gsd/KNOWLEDGE.md"
- ".gsd/milestones/M001/slices/S07/tasks/T03-SUMMARY.md"
GSD-Task: S07/T03
2026-03-27 09:55:26 +01:00
cesnimda
d2b5251bf8
feat: Re-ran the acceptance flow and refreshed the S07 UAT closure with…
...
- "docs/s06-acceptance-run.md"
- "docs/s07-uat.md"
- ".gsd/milestones/M001/slices/S07/tasks/T02-SUMMARY.md"
GSD-Task: S07/T02
2026-03-27 09:51:26 +01:00
cesnimda
8f0f9bae22
docs: Added docs/s07-uat.md to close S07 with imported acceptance-run e…
...
- "docs/s07-uat.md"
- ".gsd/milestones/M001/slices/S07/tasks/T01-SUMMARY.md"
GSD-Task: S07/T01
2026-03-27 09:36:39 +01:00
cesnimda
48b24b4516
feat: Added a repeatable live acceptance runner and recorded real S06 b…
...
- "scripts/s06-acceptance-run.sh"
- "docs/s06-acceptance-run.md"
- ".gsd/KNOWLEDGE.md"
- ".gsd/DECISIONS.md"
- ".gsd/milestones/M001/slices/S06/tasks/T03-SUMMARY.md"
GSD-Task: S06/T03
2026-03-27 09:24:27 +01:00
2c6d3f8f6f
Harden deploy workflow and record next-session handoff
2026-03-24 00:02:24 +01:00
603f5e8b74
Add attachment metadata and overview strategy snapshot
2026-03-23 22:46:44 +01:00
05bc42c3d5
Add shared attachment context controls for AI job tools
2026-03-23 22:30:54 +01:00
73983526d3
Add attachment selection controls and lazy-load app screens
2026-03-23 22:23:00 +01:00
0c8258e90f
Add attachment-aware AI drafting and CV section tools
2026-03-23 22:17:03 +01:00
5a31f86e4d
Add reminder emails and AI CV improvement tools
2026-03-23 21:46:37 +01:00
7293582376
Refresh tracker for translated job text behavior
2026-03-23 21:09:01 +01:00
12aa537882
Update cleanup tracker after localization pass
2026-03-23 21:08:10 +01:00
9661a321da
Translate job details and saved views flows
2026-03-23 20:56:33 +01:00
653f713a78
Evolve summarizer into AI service with OCR support
2026-03-23 20:12:34 +01:00
90fdd8e1a5
Track cleanup progress and polish profile/system flows
2026-03-23 19:49:41 +01:00
cesnimda
cesnimda