Blueprint 01 / 14

product band

JobCache experience

Mechanism, interaction model, and visual language across the public product.

  • Search
  • Evidence
  • Market intelligence
  • Shared sessions
Deep dive ↓ Open module ↗
01.1 · cell 1.1 product · data · evidence

JobCache experience

Discover and request

How a JobCache user asks for current market truth and sees acquisition state without confusing queued work with evidence.

  • Search intent to Search / refresh request: search or add source
  • Search / refresh request to Truthful acquisition state: verified response
search or add sourceverified response
actormixed

Search intent

A human or agent describes roles, places, filters, or a source URL.

JobCache user
perspectivemixed

Search / refresh request

Stateless search when possible; explicit acquisition request when evidence is missing.

JobCache App
processtarget

Truthful acquisition state

Current, stale, refreshing, unavailable, or failed are distinct product states.

JobCache App
request becomes resultsearch / refresh intent
  1. 01 · actor · mixed Search intent

    A human or agent describes roles, places, filters, or a source URL.

    JobCache user
  2. 02 · perspective · mixed Search / refresh request

    Stateless search when possible; explicit acquisition request when evidence is missing.

    JobCache App
  3. 03 · process · target Truthful acquisition state

    Current, stale, refreshing, unavailable, or failed are distinct product states.

    JobCache App

Flows

  • Search intent → Search / refresh request search or add source
  • Search / refresh request → Truthful acquisition state verified response
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
01.2 · cell 1.2 product · data · evidence

JobCache experience

Search, roles, and evidence

The product view is role-first: results remain traceable to ads, observations, freshness, and disagreement.

  • Role search to Role result: ranked query
  • Role result to Evidence timeline: supported by
  • Evidence timeline to Saved view / snapshot: pin result
ranked querysupported bypin result
perspectivetarget

Role search

Filters and ranking operate on current role projections rather than disconnected URLs.

JobCache App
processmixed

Role result

One role may aggregate several source ads while retaining disagreement.

JobCache Core
perspectivetarget

Evidence timeline

Ads, observations, validity intervals, provenance, and corrections.

JobCache App
storeas-built

Saved view / snapshot

Session-local immutable result references and collaboration.

JobCache App D1
request becomes resultevidence becomes trusted workproduct interaction
  1. 01 · perspective · target Role search

    Filters and ranking operate on current role projections rather than disconnected URLs.

    JobCache App
  2. 02 · process · mixed Role result

    One role may aggregate several source ads while retaining disagreement.

    JobCache Core
  3. 03 · perspective · target Evidence timeline

    Ads, observations, validity intervals, provenance, and corrections.

    JobCache App
  4. 04 · store · as-built Saved view / snapshot

    Session-local immutable result references and collaboration.

    JobCache App D1

Flows

  • Role search → Role result ranked query
  • Role result → Evidence timeline supported by
  • Evidence timeline → Saved view / snapshot pin result
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
01.3 · cell 1.3 product · operations · evidence

JobCache experience

Trust, sessions, and service state

Sharing, freshness, failure, paid placement, and support remain legible instead of being hidden behind a polished result.

  • Opaque shared session to Trust explanation: context
  • Trust explanation to Status and support: explain or escalate
contextexplain or escalate
storeas-built

Opaque shared session

Link capability owns saved work and collaboration without exposing Core identity.

JobCache App D1
perspectivetarget

Trust explanation

Freshness, provenance, uncertainty, degraded service, and paid placement.

JobCache UI/API/MCP
perspectivetarget

Status and support

Public service truth plus scoped correction, export, and support entry points.

Status and Management
evidence becomes trusted workclaims and risks shape policysession context and evidence
  1. 01 · store · as-built Opaque shared session

    Link capability owns saved work and collaboration without exposing Core identity.

    JobCache App D1
  2. 02 · perspective · target Trust explanation

    Freshness, provenance, uncertainty, degraded service, and paid placement.

    JobCache UI/API/MCP
  3. 03 · perspective · target Status and support

    Public service truth plus scoped correction, export, and support entry points.

    Status and Management

Flows

  • Opaque shared session → Trust explanation context
  • Trust explanation → Status and support explain or escalate
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 02 / 14

operating model

Management policy

Policy, obligations, governance, control ownership, and review criteria.

  • Policy
  • Obligations
  • Governance
Deep dive ↓ Open module ↗
02.1 · cell 1.4 governance · operations · evidence

Management policy

02 · Management policy

Management turns legal duties, product promises, security rules, and economic constraints into versioned policy and reviewable controls.

  • Policy sources to Versioned policy: interpret
  • Versioned policy to Control catalogue: require
  • Control catalogue to Approval + review: prove and approve
interpretrequireprove and approve
obligationopen

Policy sources

Law, contracts, standards, product promises, risk decisions, and operator constraints.

Accountable owner
policytarget

Versioned policy

Applicability, interpretation, requirements, prohibited effects, ownership, and review cadence.

Management
servicetarget

Control catalogue

Privacy, security, AI, publication, retention, reliability, cost, and accessibility controls.

Owning products
boundarytarget

Approval + review

Owner, approver, evidence threshold, exception, escalation, and renewal.

Management
claims and risks shape policypolicy becomes controls
  1. 01 · obligation · open Policy sources

    Law, contracts, standards, product promises, risk decisions, and operator constraints.

    Accountable owner
  2. 02 · policy · target Versioned policy

    Applicability, interpretation, requirements, prohibited effects, ownership, and review cadence.

    Management
  3. 03 · service · target Control catalogue

    Privacy, security, AI, publication, retention, reliability, cost, and accessibility controls.

    Owning products
  4. 04 · boundary · target Approval + review

    Owner, approver, evidence threshold, exception, escalation, and renewal.

    Management

Flows

  • Policy sources → Versioned policy interpret
  • Versioned policy → Control catalogue require
  • Control catalogue → Approval + review prove and approve
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 03 / 14

relationship

Ingestion × JobCache

User-triggered ingest, public fast paths, and reusable acquisition mechanisms.

Deep dive ↓ Open module ↗
03.1 · cell 2.1 runtime · data · evidence

Ingestion × JobCache

Interactive acquisition seam

A user-triggered miss acknowledges acquisition immediately, preserves the observation, and delivers an immutable result later.

  • Lookup or refresh to Current truth?: check
  • Current truth? to Preserve + schedule: miss
  • Preserve + schedule to Immutable delivery: eventual result
checkmisseventual result
perspectivemixed

Lookup or refresh

One public request with no session identity in scraper evidence.

JobCache App
processmixed

Current truth?

Return verified Core truth directly when it exists.

JobCache App
processmixed

Preserve + schedule

Acknowledge missing work without claiming that queued data is fresh.

Ingestion
processtarget

Immutable delivery

Result snapshot or honest terminal failure reaches the requesting session.

JobCache App
search / refresh intentverified result / pending statebounded acquisition work
  1. 01 · perspective · mixed Lookup or refresh

    One public request with no session identity in scraper evidence.

    JobCache App
  2. 02 · process · mixed Current truth?

    Return verified Core truth directly when it exists.

    JobCache App
  3. 03 · process · mixed Preserve + schedule

    Acknowledge missing work without claiming that queued data is fresh.

    Ingestion
  4. 04 · process · target Immutable delivery

    Result snapshot or honest terminal failure reaches the requesting session.

    JobCache App

Flows

  • Lookup or refresh → Current truth? check
  • Current truth? → Preserve + schedule miss
  • Preserve + schedule → Immutable delivery eventual result
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 04 / 14

domain

JobCache

The commercial product over a current, evidence-backed public job corpus.

Deep dive ↓ Open module ↗
04.1 · cell 2.2 product · runtime · privacy · data

JobCache

JobCache App and Core seam

The product edge owns opaque session state; the shared Core owns public role and ad truth.

  • UI · API · MCP to JobCache App API: public contract
  • JobCache App API to D1 session state: session-local
  • JobCache App API to Authenticated Core seam: stateless or reduced
public contractsession-localstateless or reduced
perspectivemixed

UI · API · MCP

Distinct human and agent perspectives over one App contract.

JobCache App
serviceas-built

JobCache App API

Stateless reads or exactly one opaque session per capability request.

JobCache App
storeas-built

D1 session state

Views, grants, immutable snapshots, reductions, and erasure outbox.

JobCache App D1
boundaryas-built

Authenticated Core seam

Product-local session identifiers stop here.

JobCache App and Core
product interactionverified result / pending statesearch and session toolssearch and immutable delivery
  1. 01 · perspective · mixed UI · API · MCP

    Distinct human and agent perspectives over one App contract.

    JobCache App
  2. 02 · service · as-built JobCache App API

    Stateless reads or exactly one opaque session per capability request.

    JobCache App
  3. 03 · store · as-built D1 session state

    Views, grants, immutable snapshots, reductions, and erasure outbox.

    JobCache App D1
  4. 04 · boundary · as-built Authenticated Core seam

    Product-local session identifiers stop here.

    JobCache App and Core

Flows

  • UI · API · MCP → JobCache App API public contract
  • JobCache App API → D1 session state session-local
  • JobCache App API → Authenticated Core seam stateless or reduced
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 05 / 14

relationship

JobCache × AI

SOTA chat interfaces query public JobCache truth through bounded search, evidence, and session capabilities.

Deep dive ↓ Open module ↗
05.1 · cell 2.3 product · control · data · evidence

JobCache × AI

05 · JobCache × AI

A vendor chatbot reaches JobCache through public search and evidence tools; JobCache sessions, optional accounts, capabilities, and charge targets remain product-owned.

  • SOTA chat surface to Session capability: invoke with granted scope
  • Session capability to Public search + evidence tools: authorize
  • Public search + evidence tools to Grounded answer: ground response
invoke with granted scopeauthorizeground response
perspectivetarget

SOTA chat surface

The person converses in a provider-owned client; provider identity is not JobCache identity.

AI vendor
boundarytarget

Session capability

A JobCache session is the normal scope; an optional JobCache account may grant capabilities and identify a charge target.

JobCache App
servicemixed

Public search + evidence tools

Typed queries expose bounded roles, ads, freshness, provenance, and immutable result references.

JobCache App/Core
processtarget

Grounded answer

The chatbot cites JobCache evidence and returns saved work only to the authorized session.

AI vendor + JobCache
session context and evidencesearch and session toolsusage, policy, cost, and audit05 ↔ 08 · protocol, tools, and results
  1. 01 · perspective · target SOTA chat surface

    The person converses in a provider-owned client; provider identity is not JobCache identity.

    AI vendor
  2. 02 · boundary · target Session capability

    A JobCache session is the normal scope; an optional JobCache account may grant capabilities and identify a charge target.

    JobCache App
  3. 03 · service · mixed Public search + evidence tools

    Typed queries expose bounded roles, ads, freshness, provenance, and immutable result references.

    JobCache App/Core
  4. 04 · process · target Grounded answer

    The chatbot cites JobCache evidence and returns saved work only to the authorized session.

    AI vendor + JobCache

Flows

  • SOTA chat surface → Session capability invoke with granted scope
  • Session capability → Public search + evidence tools authorize
  • Public search + evidence tools → Grounded answer ground response
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 06 / 14

domain

Ingestion

Acquire, preserve, schedule, extract, enrich, and publish public observations.

Deep dive ↓ Open module ↗
06.1 · cell 3.1 runtime · data · control · evidence

Ingestion

Public corpus ingestion

Resilient pull-based work distribution over unreliable actors, with raw evidence preserved before canonical publication.

  • Operator policy to Sporewright router: shape
  • Sporewright router to Private RabbitMQ: rank + lease
  • Private RabbitMQ to Execution pool: pull
  • Public job sources to Execution pool: fetch + parse
  • Execution pool to Corbet S3 mailbox: deposit
  • Corbet S3 mailbox to Content-addressed enrichment: pull immutable input
  • Content-addressed enrichment to Canonical COPY fold: validated result
shaperank + leasepullfetch + parsedepositpull immutable inputvalidated result
policymixed

Operator policy

Weights, budgets, source catalogue, and curiosity shape the routing field.

JobCache operator
processas-built

Sporewright router

Ranks due work and actor class; mints lease and causal receipt.

Open layer ↘
serviceas-built

Private RabbitMQ

Priority lanes carry work, never participant credentials.

JobCache orchestrator
actormixed

Public job sources

Portals, feeds, APIs, discovery, and refresh signals.

Public web
processmixed

Execution pool

Browser, Tauri, and container actors parse locally and return feedback.

JobCache participants
storeas-built

Corbet S3 mailbox

Scoped transient deposits, immutable raw archive, and B2 overflow.

JobCache ingestion
processtarget

Content-addressed enrichment

Fingerprint, extract, embed, validate, and reconcile once per input and recipe.

JobCache pipeline
boundaryas-built

Canonical COPY fold

Receipt validation and idempotent batch publication into Core.

JobCache Core
bounded acquisition workvalidated canonical depositpublic leases and feedback
  1. 01 · policy · mixed Operator policy

    Weights, budgets, source catalogue, and curiosity shape the routing field.

    JobCache operator
  2. 02 · process · as-built Sporewright router

    Ranks due work and actor class; mints lease and causal receipt.

    Open deeper layer ↘
  3. 03 · service · as-built Private RabbitMQ

    Priority lanes carry work, never participant credentials.

    JobCache orchestrator
  4. 04 · actor · mixed Public job sources

    Portals, feeds, APIs, discovery, and refresh signals.

    Public web
  5. 05 · process · mixed Execution pool

    Browser, Tauri, and container actors parse locally and return feedback.

    JobCache participants
  6. 06 · store · as-built Corbet S3 mailbox

    Scoped transient deposits, immutable raw archive, and B2 overflow.

    JobCache ingestion
  7. 07 · process · target Content-addressed enrichment

    Fingerprint, extract, embed, validate, and reconcile once per input and recipe.

    JobCache pipeline
  8. 08 · boundary · as-built Canonical COPY fold

    Receipt validation and idempotent batch publication into Core.

    JobCache Core

Flows

  • Operator policy → Sporewright router shape
  • Sporewright router → Private RabbitMQ rank + lease
  • Private RabbitMQ → Execution pool pull
  • Public job sources → Execution pool fetch + parse
  • Execution pool → Corbet S3 mailbox deposit
  • Corbet S3 mailbox → Content-addressed enrichment pull immutable input
  • Content-addressed enrichment → Canonical COPY fold validated result
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
06.2 · nested layer 1 runtime · control · feedback · evidence

Ingestion

Adaptive JobCache work routing

The orchestrator combines declared policy, observed feasibility, curiosity, and causal outcomes to distribute pull-based work across unreliable actor classes.

  • Declared policy to Addressed tensor field: shape
  • Due work to Rank + curiosity: prioritize
  • Addressed tensor field to Rank + curiosity: score options
  • Live eligibility to Rank + curiosity: current capability
  • Rank + curiosity to Lease + receipt: select
  • Lease + receipt to Normalized outcome: attempt
  • Normalized outcome to Pathwise learning: project
  • Pathwise learning to Addressed tensor field: update path
shapeprioritizescore optionscurrent capabilityselectattemptprojectupdate path
policyas-built

Declared policy

Budgets, source rules, quality floors, urgency, and curiosity enter at broad addresses.

JobCache operator
processas-built

Due work

Freshness, source turnover, user-triggered misses, and retries define current demand.

JobCache orchestrator
processas-built

Addressed tensor field

Each address prefix contributes preference and learned evidence for an actor-class option.

Sporewright
boundaryas-built

Live eligibility

Actors pull only work they can currently attempt; reachability remains empirical and changeable.

Participant and orchestrator
processas-built

Rank + curiosity

Expected utility, uncertainty, load, and exploration select an actor class without pinning one device.

Sporewright
processas-built

Lease + receipt

A bounded task carries the exact causal address and revision used to choose it.

JobCache orchestrator
storeas-built

Normalized outcome

Reachability, parse quality, latency, failure class, and cost become bounded signals.

JobCache ingestion
processas-built

Pathwise learning

Feedback changes the leaf and bounded ancestors; aging keeps the network responsive to drift.

Sporewright
  1. 01 · policy · as-built Declared policy

    Budgets, source rules, quality floors, urgency, and curiosity enter at broad addresses.

    JobCache operator
  2. 02 · process · as-built Due work

    Freshness, source turnover, user-triggered misses, and retries define current demand.

    JobCache orchestrator
  3. 03 · process · as-built Addressed tensor field

    Each address prefix contributes preference and learned evidence for an actor-class option.

    Sporewright
  4. 04 · boundary · as-built Live eligibility

    Actors pull only work they can currently attempt; reachability remains empirical and changeable.

    Participant and orchestrator
  5. 05 · process · as-built Rank + curiosity

    Expected utility, uncertainty, load, and exploration select an actor class without pinning one device.

    Sporewright
  6. 06 · process · as-built Lease + receipt

    A bounded task carries the exact causal address and revision used to choose it.

    JobCache orchestrator
  7. 07 · store · as-built Normalized outcome

    Reachability, parse quality, latency, failure class, and cost become bounded signals.

    JobCache ingestion
  8. 08 · process · as-built Pathwise learning

    Feedback changes the leaf and bounded ancestors; aging keeps the network responsive to drift.

    Sporewright

Flows

  • Declared policy → Addressed tensor field shape
  • Due work → Rank + curiosity prioritize
  • Addressed tensor field → Rank + curiosity score options
  • Live eligibility → Rank + curiosity current capability
  • Rank + curiosity → Lease + receipt select
  • Lease + receipt → Normalized outcome attempt
  • Normalized outcome → Pathwise learning project
  • Pathwise learning → Addressed tensor field update path
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 07 / 14

domain

Internals

JobCache Core around CrateDB: canonical public truth, evidence, ads, and roles.

Deep dive ↓ Open module ↗
07.1 · cell 3.2 runtime · data · privacy · evidence

Internals

JobCache Core and privacy seams

CrateDB owns public corpus truth while JobCache App and CareerVector retain their unrelated local identities.

  • JobCache App to Observer privacy seam: reduced request
  • Observer privacy seam to Protected Core API: authenticated
  • Protected Core API to and from CrateDB: search / lifecycle
  • CrateDB to and from Corpus pipeline: reconcile + project
  • CrateDB to Workspace privacy seam: public projection
  • Workspace privacy seam to CareerVector: workspace-local delivery
reduced requestauthenticatedsearch / lifecyclereconcile + projectpublic projectionworkspace-local delivery
serviceas-built

JobCache App

Observer-facing sessions, views, grants, snapshots, and product delivery.

JobCache App
boundaryas-built

Observer privacy seam

session_id stays in App; only declared reductions cross.

JobCache App/Core
serviceas-built

Protected Core API

Authenticated search, deposit, delivery, and lifecycle boundary.

JobCache Core
storeas-built

CrateDB

Roles, ads, facts, evidence, vectors, lineage, tasks, and outcomes.

Open layer ↘
processmixed

Corpus pipeline

Reconcile ad→role, retain disagreement, age evidence, and publish projections.

JobCache Core
boundaryas-built

Workspace privacy seam

workspace_id, documents, prompts, and activity stay in CareerVector.

CareerVector/Core
servicemixed

CareerVector

Private workspace receives public projections and keeps private truth locally.

CareerVector
search and immutable deliveryvalidated canonical depositpublic evidence toolspublic facts / private request
  1. 01 · service · as-built JobCache App

    Observer-facing sessions, views, grants, snapshots, and product delivery.

    JobCache App
  2. 02 · boundary · as-built Observer privacy seam

    session_id stays in App; only declared reductions cross.

    JobCache App/Core
  3. 03 · service · as-built Protected Core API

    Authenticated search, deposit, delivery, and lifecycle boundary.

    JobCache Core
  4. 04 · store · as-built CrateDB

    Roles, ads, facts, evidence, vectors, lineage, tasks, and outcomes.

    Open deeper layer ↘
  5. 05 · process · mixed Corpus pipeline

    Reconcile ad→role, retain disagreement, age evidence, and publish projections.

    JobCache Core
  6. 06 · boundary · as-built Workspace privacy seam

    workspace_id, documents, prompts, and activity stay in CareerVector.

    CareerVector/Core
  7. 07 · service · mixed CareerVector

    Private workspace receives public projections and keeps private truth locally.

    CareerVector

Flows

  • JobCache App → Observer privacy seam reduced request
  • Observer privacy seam → Protected Core API authenticated
  • Protected Core API ↔ CrateDB search / lifecycle
  • CrateDB ↔ Corpus pipeline reconcile + project
  • CrateDB → Workspace privacy seam public projection
  • Workspace privacy seam → CareerVector workspace-local delivery
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
07.2 · nested layer 1 data · evidence · runtime

Internals

Role, ad, fact, and evidence corpus

CrateDB keeps canonical public knowledge compact while preserving source disagreement, provenance, temporal validity, and retrieval structures.

  • Source ads to Role aggregate: cluster
  • Source ads to Facts + evidence timeline: supports
  • Facts + evidence timeline to Role projection: reduce without erasing
  • Role aggregate to Role projection: aggregate
  • Role projection to Vector + lexical retrieval: index
  • Vector + lexical retrieval to Product-safe result: retrieve
  • Role projection to Product-safe result: serve
clustersupportsreduce without erasingaggregateindexretrieveserve
processmixed

Role aggregate

A stable public role hypothesis groups listings that describe the same opportunity.

JobCache Core
storeas-built

Source ads

Canonical listing records retain source identity, fingerprints, and role membership.

CrateDB
storemixed

Facts + evidence timeline

Field assertions remain attributable, time-bounded, and able to disagree.

Open layer ↘
processmixed

Role projection

Reducers choose a useful current answer without erasing alternate observations.

JobCache Core
storetarget

Vector + lexical retrieval

One content-addressed embedding per recipe complements indexed structured search.

CrateDB
boundarymixed

Product-safe result

Search and evidence APIs publish bounded public truth without App or workspace identity.

JobCache Core
  1. 01 · process · mixed Role aggregate

    A stable public role hypothesis groups listings that describe the same opportunity.

    JobCache Core
  2. 02 · store · as-built Source ads

    Canonical listing records retain source identity, fingerprints, and role membership.

    CrateDB
  3. 03 · store · mixed Facts + evidence timeline

    Field assertions remain attributable, time-bounded, and able to disagree.

    Open deeper layer ↘
  4. 04 · process · mixed Role projection

    Reducers choose a useful current answer without erasing alternate observations.

    JobCache Core
  5. 05 · store · target Vector + lexical retrieval

    One content-addressed embedding per recipe complements indexed structured search.

    CrateDB
  6. 06 · boundary · mixed Product-safe result

    Search and evidence APIs publish bounded public truth without App or workspace identity.

    JobCache Core

Flows

  • Source ads → Role aggregate cluster
  • Source ads → Facts + evidence timeline supports
  • Facts + evidence timeline → Role projection reduce without erasing
  • Role aggregate → Role projection aggregate
  • Role projection → Vector + lexical retrieval index
  • Vector + lexical retrieval → Product-safe result retrieve
  • Role projection → Product-safe result serve
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
07.3 · nested layer 2 data · evidence · feedback

Internals

Evidence aging and drift

Freshness is a field-specific inference over observations and contradictions, not a destructive timestamp update on canonical facts.

  • Immutable observation to Typed assertion: extract
  • Field aging policy to Typed assertion: age
  • Typed assertion to Current support: corroborate
  • Typed assertion to Contradiction + drift: compare
  • Field aging policy to Refresh priority: due
  • Current support to Refresh priority: lower urgency
  • Contradiction + drift to Refresh priority: raise urgency
extractagecorroboratecompareduelower urgencyraise urgency
storeas-built

Immutable observation

Source, capture time, content fingerprint, extractor recipe, and causal receipt.

JobCache ingestion
storemixed

Typed assertion

A normalized value with provenance, confidence, and an explicit validity interval.

JobCache Core
policytarget

Field aging policy

Expected turnover and source behavior determine decay; absence is not fabricated change.

JobCache Core
processtarget

Current support

Recent corroborating observations strengthen an assertion without overwriting history.

JobCache Core
processtarget

Contradiction + drift

Material disagreement closes validity, splits a role hypothesis, or requests new evidence.

JobCache Core
processtarget

Refresh priority

Uncertainty, age, product demand, and acquisition cost feed the ingestion work field.

JobCache orchestrator
  1. 01 · store · as-built Immutable observation

    Source, capture time, content fingerprint, extractor recipe, and causal receipt.

    JobCache ingestion
  2. 02 · store · mixed Typed assertion

    A normalized value with provenance, confidence, and an explicit validity interval.

    JobCache Core
  3. 03 · policy · target Field aging policy

    Expected turnover and source behavior determine decay; absence is not fabricated change.

    JobCache Core
  4. 04 · process · target Current support

    Recent corroborating observations strengthen an assertion without overwriting history.

    JobCache Core
  5. 05 · process · target Contradiction + drift

    Material disagreement closes validity, splits a role hypothesis, or requests new evidence.

    JobCache Core
  6. 06 · process · target Refresh priority

    Uncertainty, age, product demand, and acquisition cost feed the ingestion work field.

    JobCache orchestrator

Flows

  • Immutable observation → Typed assertion extract
  • Field aging policy → Typed assertion age
  • Typed assertion → Current support corroborate
  • Typed assertion → Contradiction + drift compare
  • Field aging policy → Refresh priority due
  • Current support → Refresh priority lower urgency
  • Contradiction + drift → Refresh priority raise urgency
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 08 / 14

domain

AI

Vendor-owned SOTA chatbots and protocol adapters host conversation while products retain data and tool authority.

Deep dive ↓ Open module ↗
08.1 · cell 3.3 product · runtime · control · privacy

AI

08 · AI

CareerVector and JobCache integrate SOTA vendor chatbots through protocol adapters and typed tools instead of building a competing model or general-purpose agent runtime.

  • Person to Vendor SOTA chatbot: choose + authorize
  • Vendor SOTA chatbot to Protocol adapter: protocol events
  • Protocol adapter to Typed product tools: typed intent only
choose + authorizeprotocol eventstyped intent only
actormixed

Person

Chooses and authorizes a vendor chatbot independently from either product.

Person
perspectivemixed

Vendor SOTA chatbot

ChatGPT, Gemini, Copilot, and later vendors own model execution, conversation UX, and provider identity.

AI vendor
servicemixed

Protocol adapter

Official app-server, ACP, MCP, or later vendor-supported protocols normalize lifecycle, streaming, cancellation, and tools.

Open layer ↘
boundarytarget

Typed product tools

The products expose explicit context and operations; the model receives no ambient database, filesystem, terminal, or Management authority.

Owning product
05 ↔ 08 · protocol, tools, and resultspublic evidence toolsprovider policy and content-free evidence08 ↔ 12 · connector events and tools
  1. 01 · actor · mixed Person

    Chooses and authorizes a vendor chatbot independently from either product.

    Person
  2. 02 · perspective · mixed Vendor SOTA chatbot

    ChatGPT, Gemini, Copilot, and later vendors own model execution, conversation UX, and provider identity.

    AI vendor
  3. 03 · service · mixed Protocol adapter

    Official app-server, ACP, MCP, or later vendor-supported protocols normalize lifecycle, streaming, cancellation, and tools.

    Open deeper layer ↘
  4. 04 · boundary · target Typed product tools

    The products expose explicit context and operations; the model receives no ambient database, filesystem, terminal, or Management authority.

    Owning product

Flows

  • Person → Vendor SOTA chatbot choose + authorize
  • Vendor SOTA chatbot → Protocol adapter protocol events
  • Protocol adapter → Typed product tools typed intent only
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
08.2 · nested layer 1 runtime · control · privacy · evidence

AI

CareerVector assistant connector runtime

The TUI has an as-built managed device-local connector host; web placement remains open behind the same provider, event, tool, isolation, and recovery contracts.

  • Client execution placement to Managed runtime store: select host boundary
  • Managed runtime store to App Server · ACP: install + launch
  • App Server · ACP to Provider authorization: provider lifecycle
  • Provider authorization to Workspace-scoped thread: start or resume
  • Workspace-scoped thread to Connector event stream: turn stream
  • Workspace-scoped thread to Scoped tool transport: typed intent
  • Scoped tool transport to Connector event stream: tool result
  • Connector event stream to Supervision + rollback: terminal state
  • Supervision + rollback to App Server · ACP: interrupt, rollback, restart, or stop
select host boundaryinstall + launchprovider lifecyclestart or resumeturn streamtyped intenttool resultterminal stateinterrupt, rollback, restart, or stop
boundaryopen

Client execution placement

Device-local TUI execution is selected; the web execution bridge remains an explicit product decision.

Product owner
boundaryas-built

Managed runtime store

Pinned provider artifacts install into private application data, activate atomically, and retain rollback.

CareerVector TUI
serviceas-built

App Server · ACP

Codex JSONL and native ACP connectors initialize, report capability, stream, and cancel through reviewed adapters.

CareerVector TUI
processas-built

Provider authorization

In-product login and provider-owned credentials remain device-local and separate from workspace access.

Provider connector
storetarget

Workspace-scoped thread

Target durable mapping and transcript resume across link-holding browser, TUI, and Tauri clients.

CareerVector D1 + connector
processas-built

Connector event stream

Messages, progress, cancellation, limits, errors, and terminal state are normalized at the client boundary.

CareerVector TUI
boundarytarget

Scoped tool transport

Only the approved CareerVector tool boundary receives injected workspace/connector/thread scope.

CareerVector tool service
processas-built

Supervision + rollback

Cancel, crash, reconnect, protocol mismatch, install failure, and credential revocation fail explicitly.

CareerVector TUI
  1. 01 · boundary · open Client execution placement

    Device-local TUI execution is selected; the web execution bridge remains an explicit product decision.

    Product owner
  2. 02 · boundary · as-built Managed runtime store

    Pinned provider artifacts install into private application data, activate atomically, and retain rollback.

    CareerVector TUI
  3. 03 · service · as-built App Server · ACP

    Codex JSONL and native ACP connectors initialize, report capability, stream, and cancel through reviewed adapters.

    CareerVector TUI
  4. 04 · process · as-built Provider authorization

    In-product login and provider-owned credentials remain device-local and separate from workspace access.

    Provider connector
  5. 05 · store · target Workspace-scoped thread

    Target durable mapping and transcript resume across link-holding browser, TUI, and Tauri clients.

    CareerVector D1 + connector
  6. 06 · process · as-built Connector event stream

    Messages, progress, cancellation, limits, errors, and terminal state are normalized at the client boundary.

    CareerVector TUI
  7. 07 · boundary · target Scoped tool transport

    Only the approved CareerVector tool boundary receives injected workspace/connector/thread scope.

    CareerVector tool service
  8. 08 · process · as-built Supervision + rollback

    Cancel, crash, reconnect, protocol mismatch, install failure, and credential revocation fail explicitly.

    CareerVector TUI

Flows

  • Client execution placement → Managed runtime store select host boundary
  • Managed runtime store → App Server · ACP install + launch
  • App Server · ACP → Provider authorization provider lifecycle
  • Provider authorization → Workspace-scoped thread start or resume
  • Workspace-scoped thread → Connector event stream turn stream
  • Workspace-scoped thread → Scoped tool transport typed intent
  • Scoped tool transport → Connector event stream tool result
  • Connector event stream → Supervision + rollback terminal state
  • Supervision + rollback → App Server · ACP interrupt, rollback, restart, or stop
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 09 / 14

operating model

Management

Observability, monitoring, Ops, QA, Status, Wiki, support, recovery, cost, and audit.

  • Observability
  • Monitoring
  • Ops
  • QA
  • Status
  • Wiki
  • Support
  • Recovery
  • Cost
  • Audit
Deep dive ↓ Open module ↗
09.1 · cell 2.4 operations · governance · evidence

Management

JobCache management

JobCache operations turns product and corpus evidence into monitoring, support, recovery, cost, and audit workflows.

  • JobCache Ops evidence to Monitoring + alerting: observe
  • Monitoring + alerting to Support + recovery: investigate + act
  • Support + recovery to Cost + audit: record outcome
observeinvestigate + actrecord outcome
storemixed

JobCache Ops evidence

Health, corpus, freshness, sources, devices, routing, cost, audit, and recovery projections.

Open layer ↘
processmixed

Monitoring + alerting

Service and corpus signals become owned thresholds, alerts, and investigations.

JobCache Ops
boundarymixed

Support + recovery

Named actions correct product, session, source, or corpus problems at the owning boundary.

JobCache
storemixed

Cost + audit

Usage, charge targets, commercial separation, commands, and recovery retain evidence.

JobCache Management
policy becomes controlsusage, policy, cost, and auditobservations, controls, and recovery
  1. 01 · store · mixed JobCache Ops evidence

    Health, corpus, freshness, sources, devices, routing, cost, audit, and recovery projections.

    Open deeper layer ↘
  2. 02 · process · mixed Monitoring + alerting

    Service and corpus signals become owned thresholds, alerts, and investigations.

    JobCache Ops
  3. 03 · boundary · mixed Support + recovery

    Named actions correct product, session, source, or corpus problems at the owning boundary.

    JobCache
  4. 04 · store · mixed Cost + audit

    Usage, charge targets, commercial separation, commands, and recovery retain evidence.

    JobCache Management

Flows

  • JobCache Ops evidence → Monitoring + alerting observe
  • Monitoring + alerting → Support + recovery investigate + act
  • Support + recovery → Cost + audit record outcome
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
09.2 · nested layer 1 operations · control · evidence

Management

JobCache operations runtime

The as-built JobCache Ops UI/API/MCP exposes bounded product evidence and named recovery actions; the normalized Management envelope and complete command receipts remain target work.

  • Health + ingestion to Ops UI + MCP: project
  • Corpus + freshness to Ops UI + MCP: investigate
  • Sources + device paths to Named recovery actions: diagnose
  • Ops UI + MCP to Named recovery actions: request named action
  • Named recovery actions to Operator audit: record
  • Ops UI + MCP to Management envelope: publish bounded observation
  • Operator audit to Verified command receipt: normalize + verify
projectinvestigatediagnoserequest named actionrecordpublish bounded observationnormalize + verify
storeas-built

Health + ingestion

Service, CrateDB, queue, and ingestion health projections.

JobCache Ops API
storeas-built

Corpus + freshness

Corpus size, source coverage, freshness, drift, and cost evidence.

JobCache Ops API
storeas-built

Sources + device paths

Source matrix, participant capability, providers, and routing evidence.

JobCache Ops API
perspectiveas-built

Ops UI + MCP

Human cockpit and agent tools project the same bounded API.

JobCache Ops
boundaryas-built

Named recovery actions

Pause/resume source, rerun failure, reset drift, and state override use declared endpoints.

JobCache Ops API
storeas-built

Operator audit

State-changing actions write a product-owned audit record.

JobCache Ops API
boundarytarget

Management envelope

Normalize classification, evidence address, semantic references, correlation, and retention.

JobCache Management
storetarget

Verified command receipt

Preview, approval, idempotency, effect, compensation, and closing evidence become one contract.

JobCache Management
  1. 01 · store · as-built Health + ingestion

    Service, CrateDB, queue, and ingestion health projections.

    JobCache Ops API
  2. 02 · store · as-built Corpus + freshness

    Corpus size, source coverage, freshness, drift, and cost evidence.

    JobCache Ops API
  3. 03 · store · as-built Sources + device paths

    Source matrix, participant capability, providers, and routing evidence.

    JobCache Ops API
  4. 04 · perspective · as-built Ops UI + MCP

    Human cockpit and agent tools project the same bounded API.

    JobCache Ops
  5. 05 · boundary · as-built Named recovery actions

    Pause/resume source, rerun failure, reset drift, and state override use declared endpoints.

    JobCache Ops API
  6. 06 · store · as-built Operator audit

    State-changing actions write a product-owned audit record.

    JobCache Ops API
  7. 07 · boundary · target Management envelope

    Normalize classification, evidence address, semantic references, correlation, and retention.

    JobCache Management
  8. 08 · store · target Verified command receipt

    Preview, approval, idempotency, effect, compensation, and closing evidence become one contract.

    JobCache Management

Flows

  • Health + ingestion → Ops UI + MCP project
  • Corpus + freshness → Ops UI + MCP investigate
  • Sources + device paths → Named recovery actions diagnose
  • Ops UI + MCP → Named recovery actions request named action
  • Named recovery actions → Operator audit record
  • Ops UI + MCP → Management envelope publish bounded observation
  • Operator audit → Verified command receipt normalize + verify
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
09.3 · cell 3.4 operations · governance · evidence

Management

Shared Management perspectives

Observability, monitoring, Ops, QA, Status, and Wiki project the same evidence while commands return to the product that owns the state.

  • Observability + monitoring to Ops · QA · Status · Wiki: project
  • Policy + obligation register to Ops · QA · Status · Wiki: constrain
  • Ops · QA · Status · Wiki to Owned control + recovery: request declared action
  • Owned control + recovery to Observability + monitoring: verify outcome
projectconstrainrequest declared actionverify outcome
perspectivemixed

Ops · QA · Status · Wiki

Purpose-specific human and agent views over normalized product evidence and shared semantics.

Open layer ↘
storeas-built

Observability + monitoring

Health, logs, metrics, traces, events, costs, releases, and semantic evidence addresses.

Management
obligationtarget

Policy + obligation register

Versioned requirements connect sources to controls, assurance, recovery, and review.

Open layer ↘
boundaryopen

Owned control + recovery

A named command crosses back into the responsible product and returns an auditable receipt.

Owning product
observations, controls, and recoveryprovider policy and content-free evidenceobservations, controls, and recovery
  1. 01 · perspective · mixed Ops · QA · Status · Wiki

    Purpose-specific human and agent views over normalized product evidence and shared semantics.

    Open deeper layer ↘
  2. 02 · store · as-built Observability + monitoring

    Health, logs, metrics, traces, events, costs, releases, and semantic evidence addresses.

    Management
  3. 03 · obligation · target Policy + obligation register

    Versioned requirements connect sources to controls, assurance, recovery, and review.

    Open deeper layer ↘
  4. 04 · boundary · open Owned control + recovery

    A named command crosses back into the responsible product and returns an auditable receipt.

    Owning product

Flows

  • Observability + monitoring → Ops · QA · Status · Wiki project
  • Policy + obligation register → Ops · QA · Status · Wiki constrain
  • Ops · QA · Status · Wiki → Owned control + recovery request declared action
  • Owned control + recovery → Observability + monitoring verify outcome
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
09.4 · nested layer 1 operations · control · privacy · evidence

Management

Federated Management authorities

The fourth-column Management system keeps JobCache, Internals, and CareerVector execution authority product-owned while shared perspectives correlate typed observations, commands, and receipts.

  • JobCache Management to Observation envelope: publish bounded observation
  • Internals Management to Observation envelope: publish bounded observation
  • CareerVector Management to Observation envelope: publish privacy-safe observation
  • Observation envelope to Nine-hub knowledge mesh: normalize and link
  • Nine-hub knowledge mesh to Ops · QA · Status · Wiki: project
  • Ops · QA · Status · Wiki to Human / agent investigation: explain
  • Human / agent investigation to Declared command intent: request declared change
publish bounded observationpublish bounded observationpublish privacy-safe observationnormalize and linkprojectexplainrequest declared change
serviceas-built

JobCache Management

Owns customer/session operation, product support, JobCache Ops, and bounded observations.

JobCache
serviceas-built

Internals Management

Owns corpus, ingestion, routing, freshness, and CrateDB operation.

JobCache Core
serviceas-built

CareerVector Management

Owns aggregate service operation, browser/TUI/Tauri release policy, connector policy, and participant-supplied case diagnostics.

CareerVector
boundaryopen

Observation envelope

Producer, scope, classification, evidence, freshness, correlation, and semantic references.

Owning product
storetarget

Nine-hub knowledge mesh

Idea, Implementation, Journal, Behaviour, Suite, Test, Anomaly, Infra, and Event remain the shared vocabulary.

Git-backed knowledge graph
perspectiveas-built

Ops · QA · Status · Wiki

As-built purpose-specific perspectives moving toward one normalized evidence envelope.

Management
actortarget

Human / agent investigation

Trace symptoms to authority, architecture, code, tests, runtime evidence, and recovery.

Authorized operator
boundaryopen

Declared command intent

A state change returns to its owner through a named, scoped, auditable capability.

Open layer ↘
  1. 01 · service · as-built JobCache Management

    Owns customer/session operation, product support, JobCache Ops, and bounded observations.

    JobCache
  2. 02 · service · as-built Internals Management

    Owns corpus, ingestion, routing, freshness, and CrateDB operation.

    JobCache Core
  3. 03 · service · as-built CareerVector Management

    Owns aggregate service operation, browser/TUI/Tauri release policy, connector policy, and participant-supplied case diagnostics.

    CareerVector
  4. 04 · boundary · open Observation envelope

    Producer, scope, classification, evidence, freshness, correlation, and semantic references.

    Owning product
  5. 05 · store · target Nine-hub knowledge mesh

    Idea, Implementation, Journal, Behaviour, Suite, Test, Anomaly, Infra, and Event remain the shared vocabulary.

    Git-backed knowledge graph
  6. 06 · perspective · as-built Ops · QA · Status · Wiki

    As-built purpose-specific perspectives moving toward one normalized evidence envelope.

    Management
  7. 07 · actor · target Human / agent investigation

    Trace symptoms to authority, architecture, code, tests, runtime evidence, and recovery.

    Authorized operator
  8. 08 · boundary · open Declared command intent

    A state change returns to its owner through a named, scoped, auditable capability.

    Open deeper layer ↘

Flows

  • JobCache Management → Observation envelope publish bounded observation
  • Internals Management → Observation envelope publish bounded observation
  • CareerVector Management → Observation envelope publish privacy-safe observation
  • Observation envelope → Nine-hub knowledge mesh normalize and link
  • Nine-hub knowledge mesh → Ops · QA · Status · Wiki project
  • Ops · QA · Status · Wiki → Human / agent investigation explain
  • Human / agent investigation → Declared command intent request declared change
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
09.5 · nested layer 2 control · privacy · operations · evidence

Management

Typed Management command

A command is an explicit capability request to the owning domain, with authorization, preview, idempotent execution, evidence, receipt, and recovery.

  • Named intent to Actor capability: authorize
  • Actor capability to Preflight + preview: admit
  • Preflight + preview to Idempotent execution: commit
  • Idempotent execution to Immutable receipt: record
  • Immutable receipt to Verify or compensate: prove outcome
  • Verify or compensate to Named intent: close or compensate
authorizeadmitcommitrecordprove outcomeclose or compensate
processtarget

Named intent

Versioned command type, target authority, scope, reason, and prohibited effects.

Authorized operator
boundaryopen

Actor capability

Identity, delegated permission, expiry, data classification, and approval class.

Target product
processtarget

Preflight + preview

State/version predicates and the expected effects are checked before mutation.

Target product
servicetarget

Idempotent execution

The owning runtime validates and performs exactly the allowlisted effect.

Target product
storetarget

Immutable receipt

Actor, capability, accepted preconditions, result, evidence, and recovery state.

Target product
processtarget

Verify or compensate

Expected evidence closes the command; partial or failed work invokes named recovery.

Management and target product
  1. 01 · process · target Named intent

    Versioned command type, target authority, scope, reason, and prohibited effects.

    Authorized operator
  2. 02 · boundary · open Actor capability

    Identity, delegated permission, expiry, data classification, and approval class.

    Target product
  3. 03 · process · target Preflight + preview

    State/version predicates and the expected effects are checked before mutation.

    Target product
  4. 04 · service · target Idempotent execution

    The owning runtime validates and performs exactly the allowlisted effect.

    Target product
  5. 05 · store · target Immutable receipt

    Actor, capability, accepted preconditions, result, evidence, and recovery state.

    Target product
  6. 06 · process · target Verify or compensate

    Expected evidence closes the command; partial or failed work invokes named recovery.

    Management and target product

Flows

  • Named intent → Actor capability authorize
  • Actor capability → Preflight + preview admit
  • Preflight + preview → Idempotent execution commit
  • Idempotent execution → Immutable receipt record
  • Immutable receipt → Verify or compensate prove outcome
  • Verify or compensate → Named intent close or compensate
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
09.6 · nested layer 1 governance · control · evidence · operations

Management

Source-backed operating obligations

External constraints and product commitments become applicability decisions and typed records that constrain the existing nine-hub implementation and assurance chain.

  • External source to Applicability decision: assess
  • Product commitment to Applicability decision: declare scope
  • Applicability decision to Typed obligation record: record decision
  • Typed obligation record to Behaviour + controls: require
  • Behaviour + controls to Assurance + review: verify
  • Assurance + review to Typed obligation record: review and revise
assessdeclare scoperecord decisionrequireverifyreview and revise
obligationopen

External source

Law, regulation, contract, standard, norm, or user expectation with verifiable citation.

Legal and product authority
obligationtarget

Product commitment

An explicit public or architectural promise made by the accountable product owner.

Product owner
processopen

Applicability decision

Applicable, not applicable, or honestly open by product, module, actor, data, interface, and jurisdiction.

Named decision authority
storetarget

Typed obligation record

Source, force, applicability, interpretation, requirements, controls, assurance, and accountability.

Open layer ↘
servicetarget

Behaviour + controls

Idea interpretation becomes required Behaviour and Implementation or Infra controls.

Owning product
storetarget

Assurance + review

Suite, Test, runtime evidence, anomaly, event, journal, recovery, and accountable review.

QA and accountable owner
  1. 01 · obligation · open External source

    Law, regulation, contract, standard, norm, or user expectation with verifiable citation.

    Legal and product authority
  2. 02 · obligation · target Product commitment

    An explicit public or architectural promise made by the accountable product owner.

    Product owner
  3. 03 · process · open Applicability decision

    Applicable, not applicable, or honestly open by product, module, actor, data, interface, and jurisdiction.

    Named decision authority
  4. 04 · store · target Typed obligation record

    Source, force, applicability, interpretation, requirements, controls, assurance, and accountability.

    Open deeper layer ↘
  5. 05 · service · target Behaviour + controls

    Idea interpretation becomes required Behaviour and Implementation or Infra controls.

    Owning product
  6. 06 · store · target Assurance + review

    Suite, Test, runtime evidence, anomaly, event, journal, recovery, and accountable review.

    QA and accountable owner

Flows

  • External source → Applicability decision assess
  • Product commitment → Applicability decision declare scope
  • Applicability decision → Typed obligation record record decision
  • Typed obligation record → Behaviour + controls require
  • Behaviour + controls → Assurance + review verify
  • Assurance + review → Typed obligation record review and revise
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
09.7 · nested layer 2 governance · control · evidence · operations

Management

Operating obligation record fields

The record preserves the whole justification and proof chain without confusing an obligation ID with one of the nine semantic hub IDs.

  • Source + force to Applicability + scope: assess
  • Applicability + scope to Idea interpretation: interpret
  • Idea interpretation to Required Behaviour: require
  • Required Behaviour to Implementation / Infra: realize
  • Implementation / Infra to Suite / Test / evidence: verify
  • Suite / Test / evidence to Anomaly · Event · Journal: detect or prove
  • Anomaly · Event · Journal to Owner + review: account
  • Owner + review to Source + force: reassess
assessinterpretrequirerealizeverifydetect or proveaccountreassess
obligationtarget

Source + force

Citation, revision, effective dates, jurisdiction, and binding/contractual/normative/committed force.

Source owner
boundarytarget

Applicability + scope

Decision, authority, products, modules, actors, data classes, interfaces, and rationale.

Decision authority
perspectivetarget

Idea interpretation

Approved product/system meaning linked into the Idea hub.

Product owner
processtarget

Required Behaviour

Atomic statement, acceptance criteria, prohibited outcomes, and state.

Product and QA
servicetarget

Implementation / Infra

Enforceable control, failure behaviour, recovery, and named command path.

Owning product
storetarget

Suite / Test / evidence

Verification links and runtime evidence prove the current claim.

QA and owning product
processtarget

Anomaly · Event · Journal

Violation, incident, explanation, compensation, and recovery remain traceable.

Ops and product
actortarget

Owner + review

Approver, escalation, cadence, and source or product change close the loop.

Accountable owner
  1. 01 · obligation · target Source + force

    Citation, revision, effective dates, jurisdiction, and binding/contractual/normative/committed force.

    Source owner
  2. 02 · boundary · target Applicability + scope

    Decision, authority, products, modules, actors, data classes, interfaces, and rationale.

    Decision authority
  3. 03 · perspective · target Idea interpretation

    Approved product/system meaning linked into the Idea hub.

    Product owner
  4. 04 · process · target Required Behaviour

    Atomic statement, acceptance criteria, prohibited outcomes, and state.

    Product and QA
  5. 05 · service · target Implementation / Infra

    Enforceable control, failure behaviour, recovery, and named command path.

    Owning product
  6. 06 · store · target Suite / Test / evidence

    Verification links and runtime evidence prove the current claim.

    QA and owning product
  7. 07 · process · target Anomaly · Event · Journal

    Violation, incident, explanation, compensation, and recovery remain traceable.

    Ops and product
  8. 08 · actor · target Owner + review

    Approver, escalation, cadence, and source or product change close the loop.

    Accountable owner

Flows

  • Source + force → Applicability + scope assess
  • Applicability + scope → Idea interpretation interpret
  • Idea interpretation → Required Behaviour require
  • Required Behaviour → Implementation / Infra realize
  • Implementation / Infra → Suite / Test / evidence verify
  • Suite / Test / evidence → Anomaly · Event · Journal detect or prove
  • Anomaly · Event · Journal → Owner + review account
  • Owner + review → Source + force reassess
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
09.8 · cell 4.4 operations · governance · privacy · evidence

Management

CareerVector management

CareerVector Management observes services and releases across browser, TUI, and Tauri without acquiring workspace content, provider credentials, or ambient device control.

  • Service + client evidence to Privacy boundary: minimize
  • Participant-scoped support to Privacy boundary: bound disclosure
  • Participant-scoped support to Release + recovery: request owned action
minimizebound disclosurerequest owned action
storemixed

Service + client evidence

Health, realtime, releases, connector manifests, conformance, costs, and content-free failure classes.

Open layer ↘
policytarget

Privacy boundary

No workspace link, CV, notes, prompt, transcript, provider credential, or local application directory crosses by default.

CareerVector
boundaryopen

Participant-scoped support

A link holder deliberately supplies bounded diagnostics or a short-lived support capability.

Workspace participant
processtarget

Release + recovery

Web deploy, TUI/cterm artifact, Tauri bundle, connector supply, rollback, and user-visible recovery retain proof.

CareerVector Management
observations, controls, and recoveryAI policy, release, cost, and auditrelease and recovery evidence
  1. 01 · store · mixed Service + client evidence

    Health, realtime, releases, connector manifests, conformance, costs, and content-free failure classes.

    Open deeper layer ↘
  2. 02 · policy · target Privacy boundary

    No workspace link, CV, notes, prompt, transcript, provider credential, or local application directory crosses by default.

    CareerVector
  3. 03 · boundary · open Participant-scoped support

    A link holder deliberately supplies bounded diagnostics or a short-lived support capability.

    Workspace participant
  4. 04 · process · target Release + recovery

    Web deploy, TUI/cterm artifact, Tauri bundle, connector supply, rollback, and user-visible recovery retain proof.

    CareerVector Management

Flows

  • Service + client evidence → Privacy boundary minimize
  • Participant-scoped support → Privacy boundary bound disclosure
  • Participant-scoped support → Release + recovery request owned action
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
09.9 · nested layer 1 operations · privacy · control · evidence

Management

CareerVector client operations boundary

Browser services, terminal TUI releases, and Tauri desktop releases meet shared Management without exporting workspace links, content, provider credentials, local application directories, or ambient device control.

  • Web service evidence to Ops · QA · Status · Wiki: publish bounded state
  • TUI + Tauri releases to Ops · QA · Status · Wiki: publish release proof
  • Connector supply policy to Workspace + device seam: constrain supply
  • Participant support bundle to Workspace + device seam: bound diagnostic scope
  • Ops · QA · Status · Wiki to Product-owned command: declare intent
  • Participant support bundle to Product-owned command: delegate temporarily
  • Product-owned command to Visible recovery evidence: execute + prove
publish bounded statepublish release proofconstrain supplybound diagnostic scopedeclare intentdelegate temporarilyexecute + prove
storeas-built

Web service evidence

Health, services, realtime, queues, cost, releases, and content-free audit classes.

CareerVector Ops
boundarytarget

TUI + Tauri releases

Signed native artifacts, install/launch evidence, update policy, platform coverage, and rollback.

CareerVector release
boundarytarget

Connector supply policy

Reviewed provider/version/platform manifest, checksum/signature, conformance, and rollback evidence.

CareerVector release
perspectiveas-built

Ops · QA · Status · Wiki

Shared human and agent views over declared service, release, and support evidence.

Management
boundaryopen

Participant support bundle

A link holder selects bounded diagnostics and may mint one short-lived support capability.

Workspace participant
policytarget

Workspace + device seam

No link, prompt, CV, notes, credential, transcript, application directory, or remote device command crosses.

CareerVector
boundaryopen

Product-owned command

Web runtime or release/manifest change returns to CareerVector; workspace support remains participant-scoped.

CareerVector authority
storetarget

Visible recovery evidence

Effect, denial, rollback/compensation, participant visibility, and verification close the loop.

CareerVector authority
  1. 01 · store · as-built Web service evidence

    Health, services, realtime, queues, cost, releases, and content-free audit classes.

    CareerVector Ops
  2. 02 · boundary · target TUI + Tauri releases

    Signed native artifacts, install/launch evidence, update policy, platform coverage, and rollback.

    CareerVector release
  3. 03 · boundary · target Connector supply policy

    Reviewed provider/version/platform manifest, checksum/signature, conformance, and rollback evidence.

    CareerVector release
  4. 04 · perspective · as-built Ops · QA · Status · Wiki

    Shared human and agent views over declared service, release, and support evidence.

    Management
  5. 05 · boundary · open Participant support bundle

    A link holder selects bounded diagnostics and may mint one short-lived support capability.

    Workspace participant
  6. 06 · policy · target Workspace + device seam

    No link, prompt, CV, notes, credential, transcript, application directory, or remote device command crosses.

    CareerVector
  7. 07 · boundary · open Product-owned command

    Web runtime or release/manifest change returns to CareerVector; workspace support remains participant-scoped.

    CareerVector authority
  8. 08 · store · target Visible recovery evidence

    Effect, denial, rollback/compensation, participant visibility, and verification close the loop.

    CareerVector authority

Flows

  • Web service evidence → Ops · QA · Status · Wiki publish bounded state
  • TUI + Tauri releases → Ops · QA · Status · Wiki publish release proof
  • Connector supply policy → Workspace + device seam constrain supply
  • Participant support bundle → Workspace + device seam bound diagnostic scope
  • Ops · QA · Status · Wiki → Product-owned command declare intent
  • Participant support bundle → Product-owned command delegate temporarily
  • Product-owned command → Visible recovery evidence execute + prove
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 10 / 14

relationship

Ingestion × CareerVector

Consented contribution, browser and desktop execution, and privacy-safe reduction.

Deep dive ↓ Open module ↗
10.1 · cell 4.1 runtime · privacy · data · feedback

Ingestion × CareerVector

Consented contribution seam

A CareerVector device may perform public acquisition work without exporting workspace identity or private career data.

  • Scraping participation to Browser / Tauri bridge: enable / withdraw
  • Browser / Tauri bridge to Public scrape lease: pull
  • Public scrape lease to Deposit + feedback: execute
  • Deposit + feedback to Public scrape lease: learn
enable / withdrawpullexecutelearn
policymixed

Scraping participation

Explicit consent and truthful foreground/background capability.

CareerVector participant
serviceas-built

Browser / Tauri bridge

Negotiates native or browser execution without exposing workspace state.

CareerVector device
processas-built

Public scrape lease

Adapter task plus causal routing receipt; no workspace identifier.

JobCache orchestrator
storeas-built

Deposit + feedback

Public observation and execution outcome follow the receipt path.

JobCache ingestion
public leases and feedbackpublic result, private projectionparticipation state
  1. 01 · policy · mixed Scraping participation

    Explicit consent and truthful foreground/background capability.

    CareerVector participant
  2. 02 · service · as-built Browser / Tauri bridge

    Negotiates native or browser execution without exposing workspace state.

    CareerVector device
  3. 03 · process · as-built Public scrape lease

    Adapter task plus causal routing receipt; no workspace identifier.

    JobCache orchestrator
  4. 04 · store · as-built Deposit + feedback

    Public observation and execution outcome follow the receipt path.

    JobCache ingestion

Flows

  • Scraping participation → Browser / Tauri bridge enable / withdraw
  • Browser / Tauri bridge → Public scrape lease pull
  • Public scrape lease → Deposit + feedback execute
  • Deposit + feedback → Public scrape lease learn
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 11 / 14

domain

CareerVector

The permanently free, link-access private workspace shared by browser, terminal TUI, and Tauri desktop clients.

Deep dive ↓ Open module ↗
11.1 · cell 4.2 product · runtime · privacy · control · feedback

CareerVector

Link-access CareerVector workspace

CareerVector owns one private, collaborative workspace addressed by link and projected through browser, terminal TUI, and Tauri clients; it has no account system.

  • Workspace link boundary to Canonical private workspace: resolve link capability
  • Workspace link boundary to Three client trees: open workspace
  • Three client trees to AI integration seam: host explicit AI seam
  • Canonical private workspace to Canonical operations: read + operate
  • AI integration seam to Canonical operations: bounded intent
  • Canonical operations to Visible receipts + recovery: receipt
  • Canonical operations to Converged workspace result: canonical commit
  • Converged workspace result to Canonical private workspace: realtime convergence
resolve link capabilityopen workspacehost explicit AI seamread + operatebounded intentreceiptcanonical commitrealtime convergence
boundarymixed

Workspace link boundary

The private link grants write/collaboration access; provider login remains separate device authority.

Open layer ↘
storeas-built

Canonical private workspace

D1/Yjs owns career, job, application, document, collaboration, and operation state.

CareerVector D1/Yjs
perspectivemixed

Three client trees

Browser, Rust terminal TUI, and Tauri desktop are peer projections over canonical workspace state.

CareerVector clients
boundarytarget

AI integration seam

Vendor chat context and actions enter only through the explicit CareerVector × AI boundary.

CareerVector
servicemixed

Canonical operations

Direct UI and AI-assisted changes share typed, revision-safe product operations.

CareerVector API
storetarget

Visible receipts + recovery

Messages, connector/tool effects, conflicts, limits, cancellation, and undo remain attributable and observable.

CareerVector D1
processmixed

Converged workspace result

Committed state and JobCache projections return through normal realtime and read models to all three clients.

CareerVector workspace
public facts / private requestpublic result, private projectionworkspace context and typed operationsworkspace truth across three clients
  1. 01 · boundary · mixed Workspace link boundary

    The private link grants write/collaboration access; provider login remains separate device authority.

    Open deeper layer ↘
  2. 02 · store · as-built Canonical private workspace

    D1/Yjs owns career, job, application, document, collaboration, and operation state.

    CareerVector D1/Yjs
  3. 03 · perspective · mixed Three client trees

    Browser, Rust terminal TUI, and Tauri desktop are peer projections over canonical workspace state.

    CareerVector clients
  4. 04 · boundary · target AI integration seam

    Vendor chat context and actions enter only through the explicit CareerVector × AI boundary.

    CareerVector
  5. 05 · service · mixed Canonical operations

    Direct UI and AI-assisted changes share typed, revision-safe product operations.

    CareerVector API
  6. 06 · store · target Visible receipts + recovery

    Messages, connector/tool effects, conflicts, limits, cancellation, and undo remain attributable and observable.

    CareerVector D1
  7. 07 · process · mixed Converged workspace result

    Committed state and JobCache projections return through normal realtime and read models to all three clients.

    CareerVector workspace

Flows

  • Workspace link boundary → Canonical private workspace resolve link capability
  • Workspace link boundary → Three client trees open workspace
  • Three client trees → AI integration seam host explicit AI seam
  • Canonical private workspace → Canonical operations read + operate
  • AI integration seam → Canonical operations bounded intent
  • Canonical operations → Visible receipts + recovery receipt
  • Canonical operations → Converged workspace result canonical commit
  • Converged workspace result → Canonical private workspace realtime convergence
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
11.2 · nested layer 1 product · control · privacy · evidence

CareerVector

CareerVector workspace link access

The private workspace link grants write and collaboration access, a derivative link grants read-only access, and provider login remains separate device authority.

  • Create or open by link to Private write link: create or resolve
  • Private write link to Canonical workspace: grant access
  • Private write link to Link collaboration: share deliberately
  • Read-only derivative to Link collaboration: narrow to read-only
  • Canonical workspace to Injected tool scope: inject bounded capability
  • Link collaboration to Injected tool scope: preserve link scope
  • Injected tool scope to Separate provider authority: bind separately
  • Rotation · export · erasure to Canonical workspace: clone, retire, export, or erase
  • Rotation · export · erasure to Separate provider authority: revoke separately
create or resolvegrant accessshare deliberatelynarrow to read-onlyinject bounded capabilitypreserve link scopebind separatelyclone, retire, export, or eraserevoke separately
boundaryas-built

Create or open by link

No registration or login; the private route resolves the workspace capability.

CareerVector web edge
boundaryas-built

Private write link

Possession grants workspace read/write authority and is explained as the access key.

CareerVector workspace edge
storeas-built

Canonical workspace

D1/Yjs stores content and clocks; the link addresses it without an account record.

CareerVector D1/Yjs
policyas-built

Link collaboration

Trusted people use the same write capability; device/actor provenance remains visible.

Workspace participants
boundaryas-built

Read-only derivative

A separate mirror route enforces write denial server-side.

CareerVector web edge
boundarytarget

Injected tool scope

A trusted host resolves the private link and injects bounded workspace/thread authority; the model never sees it.

CareerVector tool host
processopen

Rotation · export · erasure

Link disclosure and data lifecycle need explicit clone/retire, export, erasure, and support behavior.

Product owner
boundaryas-built

Separate provider authority

Device-local connector login can expire or be revoked without changing workspace access.

Provider connector
  1. 01 · boundary · as-built Create or open by link

    No registration or login; the private route resolves the workspace capability.

    CareerVector web edge
  2. 02 · boundary · as-built Private write link

    Possession grants workspace read/write authority and is explained as the access key.

    CareerVector workspace edge
  3. 03 · store · as-built Canonical workspace

    D1/Yjs stores content and clocks; the link addresses it without an account record.

    CareerVector D1/Yjs
  4. 04 · policy · as-built Link collaboration

    Trusted people use the same write capability; device/actor provenance remains visible.

    Workspace participants
  5. 05 · boundary · as-built Read-only derivative

    A separate mirror route enforces write denial server-side.

    CareerVector web edge
  6. 06 · boundary · target Injected tool scope

    A trusted host resolves the private link and injects bounded workspace/thread authority; the model never sees it.

    CareerVector tool host
  7. 07 · process · open Rotation · export · erasure

    Link disclosure and data lifecycle need explicit clone/retire, export, erasure, and support behavior.

    Product owner
  8. 08 · boundary · as-built Separate provider authority

    Device-local connector login can expire or be revoked without changing workspace access.

    Provider connector

Flows

  • Create or open by link → Private write link create or resolve
  • Private write link → Canonical workspace grant access
  • Private write link → Link collaboration share deliberately
  • Read-only derivative → Link collaboration narrow to read-only
  • Canonical workspace → Injected tool scope inject bounded capability
  • Link collaboration → Injected tool scope preserve link scope
  • Injected tool scope → Separate provider authority bind separately
  • Rotation · export · erasure → Canonical workspace clone, retire, export, or erase
  • Rotation · export · erasure → Separate provider authority revoke separately
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 12 / 14

relationship

CareerVector × AI

Browser, terminal, and desktop clients give vendor chatbots bounded context and typed workspace tools.

Deep dive ↓ Open module ↗
12.1 · cell 4.3 product · privacy · control · evidence

CareerVector × AI

12 · CareerVector × AI

Browser, terminal TUI, and Tauri desktop hosts bind a vendor chatbot to one link-access workspace through bounded context, typed tools, visible receipts, and recovery.

  • Three client hosts to Workspace + active context: resolve link + context
  • Workspace + active context to Typed CareerVector tools: inject bounded authority
  • Typed CareerVector tools to Visible workspace result: commit + explain
resolve link + contextinject bounded authoritycommit + explain
perspectivemixed

Three client hosts

Browser, Rust terminal TUI, and Tauri desktop project the same workspace and can host the AI seam appropriate to that client.

CareerVector clients
boundarytarget

Workspace + active context

The private link and current route/job/document/selection are resolved by the trusted host; they are not an account.

CareerVector host
servicetarget

Typed CareerVector tools

Bounded reads, public JobCache queries, revision-checked writes, receipts, and undo use canonical product paths.

Open layer ↘
processtarget

Visible workspace result

Streaming, tool intent, committed effect, conflict, cancellation, and recovery converge in the workspace UI.

CareerVector clients
08 ↔ 12 · connector events and toolsworkspace context and typed operationsAI policy, release, cost, and auditassistant activity and recovery
  1. 01 · perspective · mixed Three client hosts

    Browser, Rust terminal TUI, and Tauri desktop project the same workspace and can host the AI seam appropriate to that client.

    CareerVector clients
  2. 02 · boundary · target Workspace + active context

    The private link and current route/job/document/selection are resolved by the trusted host; they are not an account.

    CareerVector host
  3. 03 · service · target Typed CareerVector tools

    Bounded reads, public JobCache queries, revision-checked writes, receipts, and undo use canonical product paths.

    Open deeper layer ↘
  4. 04 · process · target Visible workspace result

    Streaming, tool intent, committed effect, conflict, cancellation, and recovery converge in the workspace UI.

    CareerVector clients

Flows

  • Three client hosts → Workspace + active context resolve link + context
  • Workspace + active context → Typed CareerVector tools inject bounded authority
  • Typed CareerVector tools → Visible workspace result commit + explain
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
12.2 · nested layer 1 control · data · privacy · evidence

CareerVector × AI

Typed CareerVector assistant tools

A minimal capability surface resolves authorization server-side and funnels bounded reads, public JobCache queries, idempotent typed writes, receipts, and compensating undo through canonical product paths.

  • Injected workspace capability to Workspace context read: authorize read
  • Workspace context read to Public JobCache search: public search
  • Injected workspace capability to Typed operation preflight: authorize write
  • Workspace context read to Typed operation preflight: expected clocks
  • Typed operation preflight to Canonical operation commit: admit
  • Canonical operation commit to Visible reversible receipt: record effect
  • Visible reversible receipt to Compensating undo: compensate safely
  • Compensating undo to Canonical operation commit: new operation
  • Visible reversible receipt to Workspace convergence: project
authorize readpublic searchauthorize writeexpected clocksadmitrecord effectcompensate safelynew operationproject
boundarytarget

Injected workspace capability

The trusted host binds private-link workspace, connector authorization, and provider-thread scope; model-supplied IDs cannot see or widen it.

CareerVector tool service
processtarget

Workspace context read

Bounded projection and clocks for the active surface, job, or document.

CareerVector read models
servicetarget

Public JobCache search

Evidence-backed public role/ad results cross the existing privacy seam.

JobCache Core
processtarget

Typed operation preflight

Allowlist, expected clocks, idempotency, size, cardinality, provenance, and prohibited effects.

CareerVector API
servicetarget

Canonical operation commit

The existing D1/Yjs operation path performs one atomic write and normal realtime fanout.

CareerVector API
storetarget

Visible reversible receipt

Affected paths, clocks, actor, result, and bounded compensating operation feed chat and UI.

CareerVector D1
processtarget

Compensating undo

A new typed write checks current clocks and refuses to overwrite later work.

CareerVector API
processtarget

Workspace convergence

Chat and affected workspace surfaces observe the same durable result and provenance.

CareerVector workspace
  1. 01 · boundary · target Injected workspace capability

    The trusted host binds private-link workspace, connector authorization, and provider-thread scope; model-supplied IDs cannot see or widen it.

    CareerVector tool service
  2. 02 · process · target Workspace context read

    Bounded projection and clocks for the active surface, job, or document.

    CareerVector read models
  3. 03 · service · target Public JobCache search

    Evidence-backed public role/ad results cross the existing privacy seam.

    JobCache Core
  4. 04 · process · target Typed operation preflight

    Allowlist, expected clocks, idempotency, size, cardinality, provenance, and prohibited effects.

    CareerVector API
  5. 05 · service · target Canonical operation commit

    The existing D1/Yjs operation path performs one atomic write and normal realtime fanout.

    CareerVector API
  6. 06 · store · target Visible reversible receipt

    Affected paths, clocks, actor, result, and bounded compensating operation feed chat and UI.

    CareerVector D1
  7. 07 · process · target Compensating undo

    A new typed write checks current clocks and refuses to overwrite later work.

    CareerVector API
  8. 08 · process · target Workspace convergence

    Chat and affected workspace surfaces observe the same durable result and provenance.

    CareerVector workspace

Flows

  • Injected workspace capability → Workspace context read authorize read
  • Workspace context read → Public JobCache search public search
  • Injected workspace capability → Typed operation preflight authorize write
  • Workspace context read → Typed operation preflight expected clocks
  • Typed operation preflight → Canonical operation commit admit
  • Canonical operation commit → Visible reversible receipt record effect
  • Visible reversible receipt → Compensating undo compensate safely
  • Compensating undo → Canonical operation commit new operation
  • Visible reversible receipt → Workspace convergence project
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
Blueprint 13 / 14

product band

CareerVector experience

One workspace projected through browser, terminal TUI, and Tauri desktop client trees.

  • Browser
  • Terminal TUI
  • Tauri desktop
  • Documents
  • Assistant chat
Deep dive ↓ Open module ↗
13.1 · cell 5.1 product · privacy · runtime

CareerVector experience

Scraping participation controls

Public-corpus contribution is explicit and truthful: readiness, consent, background limits, and withdrawal stay visible.

  • Scraping participation to Consent + readiness: open explanation
  • Consent + readiness to Truthful device state: observe capability
open explanationobserve capability
perspectivemixed

Scraping participation

Persistent contribution state in the product band.

CareerVector UI
policytarget

Consent + readiness

Explain public-corpus purpose, browser capability, foreground/background behavior, and withdrawal.

Workspace participant
processtarget

Truthful device state

Disabled, ready, active, limited, failed, or unavailable.

CareerVector device
participation statecapability supports work
  1. 01 · perspective · mixed Scraping participation

    Persistent contribution state in the product band.

    CareerVector UI
  2. 02 · policy · target Consent + readiness

    Explain public-corpus purpose, browser capability, foreground/background behavior, and withdrawal.

    Workspace participant
  3. 03 · process · target Truthful device state

    Disabled, ready, active, limited, failed, or unavailable.

    CareerVector device

Flows

  • Scraping participation → Consent + readiness open explanation
  • Consent + readiness → Truthful device state observe capability
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
13.2 · cell 5.2 product · data · evidence

CareerVector experience

Three CareerVector client trees

Browser, terminal TUI, and Tauri desktop are peer clients over one link-access workspace; each may present documents and vendor AI without becoming a second source of truth.

  • Canonical workspace to Browser client: project + mutate
  • Canonical workspace to and from Terminal TUI: canonical adapter + realtime
  • Canonical workspace to and from Tauri desktop: remote UI + native bridge
  • Browser client to CV · CL · application work: edit + render
  • Terminal TUI to CV · CL · application work: edit + render
  • Terminal TUI to Vendor AI surfaces: prompt + bounded change
  • Tauri desktop to Vendor AI surfaces: host vendor AI seam
project + mutatecanonical adapter + realtimeremote UI + native bridgeedit + renderedit + renderprompt + bounded changehost vendor AI seam
storeas-built

Canonical workspace

Jobs, profile, documents, collaboration, clocks, operations, transcripts, and receipts.

CareerVector D1/Yjs
perspectiveas-built

Browser client

The complete collaborative market matrix, radar, evaluation, documents, and responsive private-link experience.

Open layer ↘
perspectivemixed

Terminal TUI

Focused Rust application workflow, managed vendor connectors, bounded tools, and native Typst document loop.

Open layer ↘
perspectiveas-built

Tauri desktop

The browser workspace in a controlled native shell with adapter runtime, native fetch/render capability, updater, and OS integration.

Open layer ↘
processmixed

CV · CL · application work

Profile projection, tailoring, line-fit evidence, PDF, notes, and application history.

CareerVector workspace
perspectivemixed

Vendor AI surfaces

Each client presents the same bounded context, typed effects, receipts, cancellation, and recovery contract.

Open layer ↘ workspace truth across three clientscapability supports workassistant activity becomes explanation
  1. 01 · store · as-built Canonical workspace

    Jobs, profile, documents, collaboration, clocks, operations, transcripts, and receipts.

    CareerVector D1/Yjs
  2. 02 · perspective · as-built Browser client

    The complete collaborative market matrix, radar, evaluation, documents, and responsive private-link experience.

    Open deeper layer ↘
  3. 03 · perspective · mixed Terminal TUI

    Focused Rust application workflow, managed vendor connectors, bounded tools, and native Typst document loop.

    Open deeper layer ↘
  4. 04 · perspective · as-built Tauri desktop

    The browser workspace in a controlled native shell with adapter runtime, native fetch/render capability, updater, and OS integration.

    Open deeper layer ↘
  5. 05 · process · mixed CV · CL · application work

    Profile projection, tailoring, line-fit evidence, PDF, notes, and application history.

    CareerVector workspace
  6. 06 · perspective · mixed Vendor AI surfaces

    Each client presents the same bounded context, typed effects, receipts, cancellation, and recovery contract.

    Open deeper layer ↘

Flows

  • Canonical workspace → Browser client project + mutate
  • Canonical workspace ↔ Terminal TUI canonical adapter + realtime
  • Canonical workspace ↔ Tauri desktop remote UI + native bridge
  • Browser client → CV · CL · application work edit + render
  • Terminal TUI → CV · CL · application work edit + render
  • Terminal TUI → Vendor AI surfaces prompt + bounded change
  • Tauri desktop → Vendor AI surfaces host vendor AI seam
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
13.3 · nested layer 1 product · control · privacy · evidence

CareerVector experience

Persistent CareerVector assistant chat

The as-built TUI chat pane and target web rail/narrow views converge on a workspace-scoped transcript, bounded context, visible tool effects, and honest recovery.

  • Browser + Tauri chat rail to and from Full-screen narrow chat: responsive projection
  • Native TUI chat pane to Active context descriptor: follow selected application field
  • Browser + Tauri chat rail to Resumable connector stream: send, stop, collapse
  • Active context descriptor to Resumable connector stream: bounded turn context
  • Full-screen narrow chat to Resumable connector stream: send, stop, return
  • Resumable connector stream to Workspace transcript: finalize events
  • Active context descriptor to Tool intent + receipt: render scoped effect
  • Tool intent + receipt to Draft + accessible focus: announce without stealing focus
  • Draft + accessible focus to Honest recovery: retry, undo, or resolve
  • Honest recovery to Resumable connector stream: resume or new turn
responsive projectionfollow selected application fieldsend, stop, collapsebounded turn contextsend, stop, returnfinalize eventsrender scoped effectannounce without stealing focusretry, undo, or resolveresume or new turn
perspectiveas-built

Native TUI chat pane

Hideable conversation beside the editor/PDF, with streamed provider output, cancellation, bounded changes, and undo.

CareerVector TUI
perspectivetarget

Browser + Tauri chat rail

Persistent right rail with collapse, bounded resize, keyboard separator, and no workspace replacement.

CareerVector browser/Tauri
perspectivetarget

Full-screen narrow chat

A dedicated conversation projection returns to the unchanged route and selection.

CareerVector web
boundarytarget

Active context descriptor

Link-scoped workspace plus bounded route, job, document, selection, and clocks; context is not authority.

CareerVector clients + host
processtarget

Resumable connector stream

Cursor replay, duplicate suppression, cancellation, authorization, limits, and terminal state.

CareerVector connector host
storetarget

Workspace transcript

Final messages and safe lifecycle events survive refresh and link-holding devices.

CareerVector D1
perspectivetarget

Tool intent + receipt

Shows affected paths, outcome, provenance, conflict, and Undo without claiming an uncommitted effect.

CareerVector clients
processtarget

Draft + accessible focus

Draft survives recoverable navigation; streaming does not steal focus or flood announcements.

CareerVector clients
processtarget

Honest recovery

Reconnect, reauthorize, retry, cancel, update/rollback, or undo remain distinct and never duplicate a mutation.

CareerVector clients + connector
  1. 01 · perspective · as-built Native TUI chat pane

    Hideable conversation beside the editor/PDF, with streamed provider output, cancellation, bounded changes, and undo.

    CareerVector TUI
  2. 02 · perspective · target Browser + Tauri chat rail

    Persistent right rail with collapse, bounded resize, keyboard separator, and no workspace replacement.

    CareerVector browser/Tauri
  3. 03 · perspective · target Full-screen narrow chat

    A dedicated conversation projection returns to the unchanged route and selection.

    CareerVector web
  4. 04 · boundary · target Active context descriptor

    Link-scoped workspace plus bounded route, job, document, selection, and clocks; context is not authority.

    CareerVector clients + host
  5. 05 · process · target Resumable connector stream

    Cursor replay, duplicate suppression, cancellation, authorization, limits, and terminal state.

    CareerVector connector host
  6. 06 · store · target Workspace transcript

    Final messages and safe lifecycle events survive refresh and link-holding devices.

    CareerVector D1
  7. 07 · perspective · target Tool intent + receipt

    Shows affected paths, outcome, provenance, conflict, and Undo without claiming an uncommitted effect.

    CareerVector clients
  8. 08 · process · target Draft + accessible focus

    Draft survives recoverable navigation; streaming does not steal focus or flood announcements.

    CareerVector clients
  9. 09 · process · target Honest recovery

    Reconnect, reauthorize, retry, cancel, update/rollback, or undo remain distinct and never duplicate a mutation.

    CareerVector clients + connector

Flows

  • Browser + Tauri chat rail ↔ Full-screen narrow chat responsive projection
  • Native TUI chat pane → Active context descriptor follow selected application field
  • Browser + Tauri chat rail → Resumable connector stream send, stop, collapse
  • Active context descriptor → Resumable connector stream bounded turn context
  • Full-screen narrow chat → Resumable connector stream send, stop, return
  • Resumable connector stream → Workspace transcript finalize events
  • Active context descriptor → Tool intent + receipt render scoped effect
  • Tool intent + receipt → Draft + accessible focus announce without stealing focus
  • Draft + accessible focus → Honest recovery retry, undo, or resolve
  • Honest recovery → Resumable connector stream resume or new turn
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
13.4 · nested layer 1 product · runtime · data · evidence

CareerVector experience

CareerVector browser client

The browser is the complete collaborative CareerVector surface: it opens by private link, projects canonical workspace state, and performs all mutations through the shared API and realtime contracts.

  • Private-link entry to Collaborative workspace: resolve workspace
  • Collaborative workspace to Document workspace: select work
  • Collaborative workspace to Typed API + operations: typed action
  • Typed API + operations to D1 + Yjs convergence: commit + fanout
  • Vendor AI surface to Typed API + operations: bounded tool intent
  • Public JobCache projection to D1 + Yjs convergence: public projection
  • D1 + Yjs convergence to Offline + recovery: observe + reconcile
resolve workspaceselect worktyped actioncommit + fanoutbounded tool intentpublic projectionobserve + reconcile
boundaryas-built

Private-link entry

Create or open a workspace without registration or login.

CareerVector web edge
perspectiveas-built

Collaborative workspace

Market matrix, radar, evaluation, jobs, application state, and presence.

CareerVector browser
perspectiveas-built

Document workspace

Profile, CV, cover letter, preview, export, variants, and application notes.

CareerVector browser
serviceas-built

Typed API + operations

Workspace-scoped reads and versioned mutations commit to canonical state.

CareerVector API
storeas-built

D1 + Yjs convergence

Durable operations, clocks, replay, presence, and multi-device collaboration.

CareerVector D1/Yjs
boundarytarget

Vendor AI surface

Target chat rail presents bounded context and typed CareerVector tool effects.

CareerVector browser
serviceas-built

Public JobCache projection

Public opportunity facts enter through the existing privacy seam.

JobCache Core
processtarget

Offline + recovery

Replay, conflict visibility, retry, undo, and honest degraded state.

CareerVector browser
  1. 01 · boundary · as-built Private-link entry

    Create or open a workspace without registration or login.

    CareerVector web edge
  2. 02 · perspective · as-built Collaborative workspace

    Market matrix, radar, evaluation, jobs, application state, and presence.

    CareerVector browser
  3. 03 · perspective · as-built Document workspace

    Profile, CV, cover letter, preview, export, variants, and application notes.

    CareerVector browser
  4. 04 · service · as-built Typed API + operations

    Workspace-scoped reads and versioned mutations commit to canonical state.

    CareerVector API
  5. 05 · store · as-built D1 + Yjs convergence

    Durable operations, clocks, replay, presence, and multi-device collaboration.

    CareerVector D1/Yjs
  6. 06 · boundary · target Vendor AI surface

    Target chat rail presents bounded context and typed CareerVector tool effects.

    CareerVector browser
  7. 07 · service · as-built Public JobCache projection

    Public opportunity facts enter through the existing privacy seam.

    JobCache Core
  8. 08 · process · target Offline + recovery

    Replay, conflict visibility, retry, undo, and honest degraded state.

    CareerVector browser

Flows

  • Private-link entry → Collaborative workspace resolve workspace
  • Collaborative workspace → Document workspace select work
  • Collaborative workspace → Typed API + operations typed action
  • Typed API + operations → D1 + Yjs convergence commit + fanout
  • Vendor AI surface → Typed API + operations bounded tool intent
  • Public JobCache projection → D1 + Yjs convergence public projection
  • D1 + Yjs convergence → Offline + recovery observe + reconcile
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
13.5 · nested layer 1 product · runtime · privacy · evidence

CareerVector experience

CareerVector Tauri desktop client

The Tauri v2 app loads the production browser UI inside a controlled native shell and adds adapter execution, native fetch/render, signed updates, and OS integration without creating an offline workspace truth.

  • Tauri v2 shell to Allowlisted IPC bridge: invoke allowlisted command
  • Allowlisted IPC bridge to Native adapter runtime: execute adapter
  • Tauri v2 shell to Network workspace: load canonical UI
  • Native adapter runtime to Native fetch + render: fetch public source
  • Vendor AI host seam to Network workspace: typed tools only
  • Tauri v2 shell to Signed updater + bundles: verify + install
  • Signed updater + bundles to OS integration: package capability
invoke allowlisted commandexecute adapterload canonical UIfetch public sourcetyped tools onlyverify + installpackage capability
perspectiveas-built

Tauri v2 shell

Remote-loads the production Svelte workspace from allowlisted origins.

CareerVector desktop
boundaryas-built

Allowlisted IPC bridge

Only approved production origins may invoke explicit native commands.

CareerVector desktop
serviceas-built

Native adapter runtime

Rust router exposes the linked JobCache adapter families and capability report.

CareerVector desktop
storeas-built

Network workspace

The same D1/Yjs state remains canonical; the shell is not an offline editor or local database.

CareerVector D1/Yjs
serviceas-built

Native fetch + render

Native HTTP and hidden WebKit rendering extend public acquisition beyond browser CORS.

CareerVector desktop
boundarytarget

Vendor AI host seam

Desktop may host the same bounded connector and tool contract as the other clients.

CareerVector desktop
boundaryas-built

Signed updater + bundles

Linux AppImage, deb, and rpm artifacts update the shell independently from the network UI.

CareerVector release
servicetarget

OS integration

Single instance and filesystem/OS capabilities are explicit; tray, notifications, and deep links remain phased.

CareerVector desktop
  1. 01 · perspective · as-built Tauri v2 shell

    Remote-loads the production Svelte workspace from allowlisted origins.

    CareerVector desktop
  2. 02 · boundary · as-built Allowlisted IPC bridge

    Only approved production origins may invoke explicit native commands.

    CareerVector desktop
  3. 03 · service · as-built Native adapter runtime

    Rust router exposes the linked JobCache adapter families and capability report.

    CareerVector desktop
  4. 04 · store · as-built Network workspace

    The same D1/Yjs state remains canonical; the shell is not an offline editor or local database.

    CareerVector D1/Yjs
  5. 05 · service · as-built Native fetch + render

    Native HTTP and hidden WebKit rendering extend public acquisition beyond browser CORS.

    CareerVector desktop
  6. 06 · boundary · target Vendor AI host seam

    Desktop may host the same bounded connector and tool contract as the other clients.

    CareerVector desktop
  7. 07 · boundary · as-built Signed updater + bundles

    Linux AppImage, deb, and rpm artifacts update the shell independently from the network UI.

    CareerVector release
  8. 08 · service · target OS integration

    Single instance and filesystem/OS capabilities are explicit; tray, notifications, and deep links remain phased.

    CareerVector desktop

Flows

  • Tauri v2 shell → Allowlisted IPC bridge invoke allowlisted command
  • Allowlisted IPC bridge → Native adapter runtime execute adapter
  • Tauri v2 shell → Network workspace load canonical UI
  • Native adapter runtime → Native fetch + render fetch public source
  • Vendor AI host seam → Network workspace typed tools only
  • Tauri v2 shell → Signed updater + bundles verify + install
  • Signed updater + bundles → OS integration package capability
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
13.6 · nested layer 1 product · runtime · data · evidence

CareerVector experience

CareerVector native TUI client

A focused Rust client combines a guided application workflow, managed provider connectors, bounded field tools, and native Typst documents; canonical workspace attachment replaces its local alpha adapter.

  • Guided TUI shell to Local alpha adapter: edit + persist
  • Local alpha adapter to Canonical workspace adapter: replace adapter
  • Guided TUI shell to Managed connectors: connect visibly
  • Managed connectors to Visible assistant: stream + cancel
  • Visible assistant to Three bounded field tools: bounded change
  • Three bounded field tools to Local alpha adapter: revision-safe write
  • Local alpha adapter to Native Typst document loop: measure + render
  • Native Typst document loop to Signed cterm + TUI release: package + verify
edit + persistreplace adapterconnect visiblystream + cancelbounded changerevision-safe writemeasure + renderpackage + verify
perspectiveas-built

Guided TUI shell

General → CV → Cover Letter → Review → Export with normal editing and discoverable keyboard actions.

CareerVector TUI
storeas-built

Local alpha adapter

Readable application.json with stable fields and revision-safe persistence; explicitly transitional.

CareerVector TUI
boundarytarget

Canonical workspace adapter

Attach by private link, preserve unknown fields, and use shared operations, clocks, and realtime.

CareerVector workspace
serviceas-built

Managed connectors

Checksum-pinned Codex/App Server and ACP runtimes install, activate, authenticate, and roll back.

CareerVector TUI
processas-built

Visible assistant

Stream, cancel, apply bounded changes, reject stale revisions, and undo in the same visible workflow.

CareerVector TUI
boundaryas-built

Three bounded field tools

Read context, revision-checked replacements, and undo; no filesystem or terminal capability.

CareerVector TUI
serviceas-built

Native Typst document loop

Exact line measurement, in-process render/export, PDF rasterization, and Sixel presentation.

CareerVector TUI
boundarytarget

Signed cterm + TUI release

One controlled native unit per supported target, with provenance, install/launch proof, update, and rollback.

CareerVector release
  1. 01 · perspective · as-built Guided TUI shell

    General → CV → Cover Letter → Review → Export with normal editing and discoverable keyboard actions.

    CareerVector TUI
  2. 02 · store · as-built Local alpha adapter

    Readable application.json with stable fields and revision-safe persistence; explicitly transitional.

    CareerVector TUI
  3. 03 · boundary · target Canonical workspace adapter

    Attach by private link, preserve unknown fields, and use shared operations, clocks, and realtime.

    CareerVector workspace
  4. 04 · service · as-built Managed connectors

    Checksum-pinned Codex/App Server and ACP runtimes install, activate, authenticate, and roll back.

    CareerVector TUI
  5. 05 · process · as-built Visible assistant

    Stream, cancel, apply bounded changes, reject stale revisions, and undo in the same visible workflow.

    CareerVector TUI
  6. 06 · boundary · as-built Three bounded field tools

    Read context, revision-checked replacements, and undo; no filesystem or terminal capability.

    CareerVector TUI
  7. 07 · service · as-built Native Typst document loop

    Exact line measurement, in-process render/export, PDF rasterization, and Sixel presentation.

    CareerVector TUI
  8. 08 · boundary · target Signed cterm + TUI release

    One controlled native unit per supported target, with provenance, install/launch proof, update, and rollback.

    CareerVector release

Flows

  • Guided TUI shell → Local alpha adapter edit + persist
  • Local alpha adapter → Canonical workspace adapter replace adapter
  • Guided TUI shell → Managed connectors connect visibly
  • Managed connectors → Visible assistant stream + cancel
  • Visible assistant → Three bounded field tools bounded change
  • Three bounded field tools → Local alpha adapter revision-safe write
  • Local alpha adapter → Native Typst document loop measure + render
  • Native Typst document loop → Signed cterm + TUI release package + verify
Breadcrumb depth is preserved in the graph explorer Diagram + Markdown ↗
13.7 · cell 5.3 product · operations · evidence · privacy

CareerVector experience

Explain, collaborate, and recover

Origin, uncertainty, assistant actions, link/provider authority, limits, offline state, failure, and recovery stay legible across web, TUI, API, and MCP.

  • Origin and activity to Assistant actions + limits: why this happened
  • Assistant actions + limits to Offline and recovery: undo, reauthorize, or retry
why this happenedundo, reauthorize, or retry
perspectivemixed

Origin and activity

Human, system, agent, provider, client, freshness, and work-state signals.

CareerVector UI/TUI/API/MCP
perspectivetarget

Assistant actions + limits

Intent, tool effect, undo, link scope, provider authorization, plan limits, consent, and cancellation.

CareerVector UI/TUI/API/MCP
processmixed

Offline and recovery

Event replay, realtime convergence, connector reconnect, client update/rollback, and honest failure.

CareerVector runtime
assistant activity and recoveryassistant activity becomes explanationexperience closes accountability
  1. 01 · perspective · mixed Origin and activity

    Human, system, agent, provider, client, freshness, and work-state signals.

    CareerVector UI/TUI/API/MCP
  2. 02 · perspective · target Assistant actions + limits

    Intent, tool effect, undo, link scope, provider authorization, plan limits, consent, and cancellation.

    CareerVector UI/TUI/API/MCP
  3. 03 · process · mixed Offline and recovery

    Event replay, realtime convergence, connector reconnect, client update/rollback, and honest failure.

    CareerVector runtime

Flows

  • Origin and activity → Assistant actions + limits why this happened
  • Assistant actions + limits → Offline and recovery undo, reauthorize, or retry
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗
Blueprint 14 / 14

operating model

Management accountability

Change control, release evidence, incident recovery, audit, and accountable review.

  • Change
  • Release
  • Recovery
  • Accountability
Deep dive ↓ Open module ↗
14.1 · cell 5.4 operations · governance · control · evidence

Management accountability

14 · Management accountability

Management closes the loop from policy and observation through controlled change, release, recovery, audit, and accountable review.

  • Change decision to Controlled release: approve + execute
  • Controlled release to Incident + recovery: observe or restore
  • Incident + recovery to Audit + review: account
approve + executeobserve or restoreaccount
processtarget

Change decision

Intent, owner, scope, approval, preconditions, expected evidence, and rollback.

Accountable owner
boundarytarget

Controlled release

Implementation, migration, rollout, compatibility, and provenance follow an owned plan.

Owning product
processtarget

Incident + recovery

Detection, containment, compensation, communication, and restoration remain distinct and visible.

Management + product
storetarget

Audit + review

Receipts, tests, runtime evidence, outcomes, exceptions, and lessons close accountability.

Management
release and recovery evidenceexperience closes accountability
  1. 01 · process · target Change decision

    Intent, owner, scope, approval, preconditions, expected evidence, and rollback.

    Accountable owner
  2. 02 · boundary · target Controlled release

    Implementation, migration, rollout, compatibility, and provenance follow an owned plan.

    Owning product
  3. 03 · process · target Incident + recovery

    Detection, containment, compensation, communication, and restoration remain distinct and visible.

    Management + product
  4. 04 · store · target Audit + review

    Receipts, tests, runtime evidence, outcomes, exceptions, and lessons close accountability.

    Management

Flows

  • Change decision → Controlled release approve + execute
  • Controlled release → Incident + recovery observe or restore
  • Incident + recovery → Audit + review account
Boundary arrows cross to neighbours; expandable nodes descend Diagram + Markdown ↗