Web service evidence
Health, services, realtime, queues, cost, releases, and content-free audit classes.
CareerVector OpsBlueprint · careervector.blueprint-graph/v7
Graph explorer
Twenty composable top-level diagrams plus recursively nested 21×21 semantic layers. Nodes descend; boundary arrows cross to neighbours.
Nested layer 1 · operations · privacy · control · evidence
CareerVector client operations boundary
Browser services, terminal TUI releases, and Tauri desktop releases meet shared Management without exporting workspace links, content, provider credentials, local application directories, or ambient device control.
- Web service evidence to Ops · QA · Status · Wiki: publish bounded state
- TUI + Tauri releases to Ops · QA · Status · Wiki: publish release proof
- Connector supply policy to Workspace + device seam: constrain supply
- Participant support bundle to Workspace + device seam: bound diagnostic scope
- Ops · QA · Status · Wiki to Product-owned command: declare intent
- Participant support bundle to Product-owned command: delegate temporarily
- Product-owned command to Visible recovery evidence: execute + prove
TUI + Tauri releases
Signed native artifacts, install/launch evidence, update policy, platform coverage, and rollback.
CareerVector releaseConnector supply policy
Reviewed provider/version/platform manifest, checksum/signature, conformance, and rollback evidence.
CareerVector releaseOps · QA · Status · Wiki
Shared human and agent views over declared service, release, and support evidence.
ManagementParticipant support bundle
A link holder selects bounded diagnostics and may mint one short-lived support capability.
Workspace participantWorkspace + device seam
No link, prompt, CV, notes, credential, transcript, application directory, or remote device command crosses.
CareerVectorProduct-owned command
Web runtime or release/manifest change returns to CareerVector; workspace support remains participant-scoped.
CareerVector authorityVisible recovery evidence
Effect, denial, rollback/compensation, participant visibility, and verification close the loop.
CareerVector authority01 · store · as-built Web service evidence Health, services, realtime, queues, cost, releases, and content-free audit classes.
CareerVector Ops02 · boundary · target TUI + Tauri releases Signed native artifacts, install/launch evidence, update policy, platform coverage, and rollback.
CareerVector release03 · boundary · target Connector supply policy Reviewed provider/version/platform manifest, checksum/signature, conformance, and rollback evidence.
CareerVector release04 · perspective · as-built Ops · QA · Status · Wiki Shared human and agent views over declared service, release, and support evidence.
Management05 · boundary · open Participant support bundle A link holder selects bounded diagnostics and may mint one short-lived support capability.
Workspace participant06 · policy · target Workspace + device seam No link, prompt, CV, notes, credential, transcript, application directory, or remote device command crosses.
CareerVector07 · boundary · open Product-owned command Web runtime or release/manifest change returns to CareerVector; workspace support remains participant-scoped.
CareerVector authority08 · store · target Visible recovery evidence Effect, denial, rollback/compensation, participant visibility, and verification close the loop.
CareerVector authority
Flows
- Web service evidence → Ops · QA · Status · Wiki publish bounded state
- TUI + Tauri releases → Ops · QA · Status · Wiki publish release proof
- Connector supply policy → Workspace + device seam constrain supply
- Participant support bundle → Workspace + device seam bound diagnostic scope
- Ops · QA · Status · Wiki → Product-owned command declare intent
- Participant support bundle → Product-owned command delegate temporarily
- Product-owned command → Visible recovery evidence execute + prove
Canonical architecture note
Open note ↗CareerVector × Management
Purpose
Operate and support CareerVector without creating a privileged browsing surface over private workspaces, a remote-control plane over terminal or desktop clients, or an unrecorded path for agents to alter user state. This is the CareerVector-facing part of the full-height fourth-column Management rail.
Product-operation split
| Surface | CareerVector authority | Management may see | Management must not see or do |
|---|---|---|---|
| Web service | Availability, D1/Yjs/realtime paths, JobCache seam, canonical operations | Aggregate health, release, queue, cost, failure, and content-free audit evidence | Enumerate workspaces, recover a private link, or browse workspace content |
| Native TUI | Local workflow, local connector processes, provider login, native Typst/ruler, device settings | Signed-release state, connector manifest/version, conformance result, content-free error class | Inventory application roots, retrieve credentials/transcripts, or issue ambient device commands |
| Tauri desktop | Network-loaded browser UI, native adapter runtime, fetch/render bridge, updater, OS integration | Bundle and updater state, adapter/runtime health, conformance, and content-free errors | Read workspace content, provider credentials, local files, or invoke undeclared device commands |
| Support case | Participant-selected evidence and a short-lived support capability | Only the declared diagnostic bundle and resulting receipt | Expand scope beyond the bundle or turn support into standing access |
Operator pathways
- Understand aggregate web-service health, realtime behavior, work queues, connector/runtime release health, turn latency, limit/exhaustion classes, and content-free error classes.
- Investigate a user-reported problem with explicit, scoped evidence supplied by the user or generated by privacy-safe diagnostics.
- Publish and roll back signed cterm/TUI releases and approved connector manifests without gaining access to provider credentials, prompts, local application directories, or workspace content.
- Review QA, releases, incidents, migrations, and public status.
- Verify export, erasure, link rotation/clone recovery, and local-data cleanup through participant-controlled evidence.
Invariants
- There is no general operator workspace browser.
- Private prompts, documents, ChatGPT credentials, and workspace content do not enter telemetry by default.
- Every write to workspace truth uses the same typed operation contract as other actors.
- There is no operator account-to-workspace membership path. Support capability is initiated by a workspace-link holder, explicit, short-lived, scoped, revocable, and visible.
- Aggregate learning and observability cannot reconstruct a person's workspace activity.
- TUI release management targets manifests and signed artifacts, never individual devices.
Current state
CareerVector Ops/QA/Status/Wiki perspectives and web-service health evidence exist. The imported TUI has checksum-pinned managed connectors, rollback mechanics, hermetic protocol tests, and native renderer/ruler evidence, but its signed cterm-plus-TUI distribution is target work. A normalized CareerVector observation envelope, participant-generated support bundle, connector supply-chain projection, and product-owned command receipts remain target/open.
Decisions still required
- Support-capability lifecycle and participant-controlled evidence-sharing UX.
- Privacy-safe telemetry tiers and redaction contract.
- Web assistant execution placement and recovery without first-party accounts.
- Signed TUI/cterm update policy, connector-manifest authority, rollback, and conformance gates.
- Operator approval boundaries for connector runtime/protocol changes.
Completion evidence
Resolve one web and one TUI support case using only participant-scoped evidence; prove denial of unrelated workspace and device access; audit every state-changing action; roll a connector or TUI release forward and back; verify erasure and credential isolation end to end.