M1 /Foundation milestone
JobMatch is not another job board.
It is a personal, explainable job-search assistant that reduces hundreds of vacancies to the opportunities worth acting on. This is the platform foundation it will be built on.
Nothing to match against yet. No job source is connected and no CV can be uploaded. Source access is gated on signed agreements (M0/M3) and CV handling on the privacy work in M2 — neither is something to prototype first and legalize later.
Isolated database
JobMatch runs on its own PostgreSQL instance with its own credentials. It stores an opaque platform user id and never copies the platform user table.
Shared sign-in
Authentication is the platform's: Hub issues the session, JobMatch only reads it. There is no second password to manage or leak.
Redacted observability
Every log line and audit row passes through an allow-list. CV text and connector credentials cannot reach a log sink by accident.
Deny-by-default routing
Only the landing and legal pages are public. Every other surface requires a session, checked again at the data boundary.
Signed in? Open your workspace →