feat(ai): prompt-injection delimiters + synonym-aware match scoring #20

Merged
cesnimda merged 1 commits from feature/wave4-ai-hardening into main 2026-07-12 01:13:40 +02:00
Owner

Wave 4 AI hardening: delimiters/anti-injection rules in tools/summarizer CV prompts, synonym-aware keyword matching in match score (K8s/Kubernetes etc), tests.

Wave 4 AI hardening: delimiters/anti-injection rules in tools/summarizer CV prompts, synonym-aware keyword matching in match score (K8s/Kubernetes etc), tests.
cesnimda added 1 commit 2026-07-12 01:08:05 +02:00
feat(ai): prompt-injection delimiters + synonym-aware match scoring
CI and Deploy / test (pull_request) Successful in 2m6s
CI and Deploy / deploy (pull_request) Has been skipped
67ee3d7274
Wave 4 hardening. Wrap untrusted CV/job-description/instruction text
in tools/summarizer prompts with explicit delimiters and an
ignore-embedded-instructions rule, since JD text, recruiter emails,
and free-text candidate background all flow into rewrite/normalize
prompts unescaped today.

Match score previously normalized synonyms (JS/Kubernetes/K8s/etc)
only when scanning the job posting, not when checking the CV corpus,
so a CV using an abbreviation the job spelled out never matched.
SkillTagger.MatchesTag reuses the same synonym regex for both sides.
cesnimda merged commit 53d05dd4c4 into main 2026-07-12 01:13:40 +02:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cesnimda/jobtrackingapp#20