jobtrackingapp/docs/global-jobs/00/OWNER_ACTIONS.md

# Owner actions and external approvals

28 October 2026. No registrations, agreements, emails, purchases or production changes were made. These are actionable handoffs, not drafts sent on the owner's behalf.

| Action / owner | Exact requested outcome | Blocks |
|---|---|---|
| Development owner — Phase 10 | Read `docs/cv-integration-qa/PHASE_10_HANDOFF.md`; nominate exact candidates and current callers/compatibility/preservation tests, then record applicable Phase 10 completion/entry decision. Do not treat “legacy” names as unused. | Global implementation entry; no cleanup authorized here |
| Product owner — PRODUCT-REVIEW-01 | Publish baseline-bound review, approved scope/non-goals, outstanding qualification acceptance, country/locale/provider fallback policy and explicit INT-GLOBAL-JOBS-01/GJ-01 authorization. | GJ-01 |
| Owner — design review | Approve hybrid architecture, branch order, hierarchy/radius/remote behavior, language release policy and proposed metrics/retention; identify required changes. Issue next-stage instruction only after entry gates. | Implementation sign-off; GJ-00 itself is delivered for review |
| Business/operator — NAV | Using [official instructions](https://navikt.github.io/pam-stilling-feed/), send terms acceptance, company identifier, contact person/email/phone to the listed NAV team address. Ask for consumer JWT and approved polling, stale-outage/removal/contact handling expectations. Install secret via approved development secret store and record nonsecret grant evidence. Do not use public token as production access. | NAV live feed enablement/smoke |
| Business/legal — FINN | If broad integration is desired, obtain written grant covering third-party commercial search, accessible inventory, caching/full display, attribution, expiry/removal, quotas and price. Advertiser ownership-only access is insufficient for global search. Otherwise accept manual bookmark/record + external link. | FINN API/full content; manual fallback remains possible |
| Business/legal — Adzuna | Request commercial SaaS licence for NO/SE/GB scope as needed (GB first), approved snippet/redirect/branding, saved-search alerts, local storage/TTL, deletions/termination, quota/SLA and quote. Capture signed permitted scope; no automatic trial/account creation. | GB Adzuna live connector; no full descriptions promised |
| Provider owner — Swedish services | Confirm current OpenAPI/schema/terms and suitable request volume with official JobTech contact; qualify JobSearch details/lifecycle and JobAd Links daily refresh/truncation/window. Ask about quotas/cache and update/delete reconciliation where docs do not specify. Preserve CC0 metadata and origin links. | Source operational acceptance; no registration prerequisite inferred |
| Business/legal — NHSBSA | Ask whether third-party commercial multi-employer search/index/display/alerts are allowed, not merely employer self-serve/ATS posting; request exact feed scope, terms, refresh/removal, attribution and limits. | NHS direct connector |
| Provider owner — DWP/other UK boards | Ask for explicit search-consumer agreement and documented retrieval interface if desired. Bulk upload is not search access. Leave Reed/Indeed/other boards external-only until source-specific rights review. | Other UK connectors |
| Data owner — geography | Freeze canonical administrative/settlement artefacts with version, checksum, codes/edges, CRS/geometry precision and licence; resolve Warwick/Leamington town footprints, NO settlement/municipality differences, SE multi-municipality tätort, Scotland/NI data. Obtain commercial NI postcode permission before BT postcode reuse or omit that dataset. | Precise geographic capability; broad admin-only fallback disclosed |
| Taxonomy owner | Acquire ESCO v1.2.1 candidate files through official process, exact file licence/readme/checksum and attribution; pin JobTech/SOC indexes/crosswalks; review EN/Bokmål/SV benchmark, unknown terms and “chef” ambiguity. | GJ03 data import/relevance qualification |
| Localization owner | Qualify Swedish UI if required for initial SE release; native-review all new EN/Bokmål/SV legal/professional language. Confirm Norway/Sámi and GB regional mappings; Nynorsk/Welsh/Gaelic/Scots/minority languages stay Coming Later until complete. | Shipped-locale claims and related journeys |
| Privacy/release owner | Approve lawful retention of source PII, user notes/copied descriptions/frozen evidence, diagnostic metadata, alert frequency/email consent, export/erase, backup expiry and restored-backup suppression. Consider DPIA need against concrete processing. | PII persistence/alerts and release scope |
| Infrastructure owner | Qualify isolated nonproduction MariaDB CI runner and resource/cost envelope; keep production benchmark/maintenance jobs out of discovery tests. | Hosted provider/DB/load evidence, not local planning |
| Human QA owner | Complete actual device/keyboard/AT/native-language/contrast/print qualifications and record identity/date/scope. | Human/release acceptance only |
| AI owner | Independently qualify environment/artifact/security and semantic quality, then explicitly authorize inference if needed. | Optional AI only; deterministic discovery must work without it |

No one approval substitutes for another. If a provider declines rights, leave it disabled/manual/external-only and document coverage; do not seek undocumented endpoints or scrape the source to bypass the decision. Keep secret agreements/credentials outside public docs; store only reviewed scope and evidence references.