Merge pull request #3456 from amruthpillai/codex/issue-execution-ledger

docs: track approved issue plan execution
2026-10-02 17:54:22 +10:00 · 2026-09-05 22:16:15 -07:00
parent 11d619d3d9 138f3bbd12
commit 981d7581f5
46 changed files with 1450 additions and 0 deletions
@@ -0,0 +1,286 @@
+# Approved issue plans execution ledger
+
+Coordinator-owned record for plans approved in PR #3455. Completed, mergeable PRs merge as soon as publication gates
+pass. Issue comments and state changes are recorded when explicitly directed by maintainer.
+
+## Run metadata
+
+- Planning source: PR #3455, head `a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d` (open, unmerged at bootstrap)
+- Implementation source: `origin/main`, head `7a98f6662ffc6fd5a1a7281c30ab3829fe3722ec` at bootstrap
+- Coordinator branch: `codex/issue-execution-ledger`
+- Started: 2026-09-05, Europe/Berlin
+- Merge policy changed: 2026-09-06; maintainer authorized immediate merge of complete, mergeable PRs
+- Current integrated main evidence: `11d619d3d9c7da87bb38463147a7aac4bc35b092` after twenty-eight approved merges,
+  including Plan 30 ATS extraction diagnostic PR #3482 and Plan 18 geometry diagnostic PR #3483
+- Status values: `pending`, `diagnosing`, `implementing`, `reviewing`, `published`, `merged`, `no-change`, `blocked`,
+  `declined`, `skipped`
+- Evidence rule: each terminal disposition needs current source/GitHub proof, focused tests or reproduction evidence, and
+  independent review when code changed.
+
+## Dependency and ownership rules
+
+- Every implementation unit starts from refreshed `origin/main` unless this ledger names a true stacked dependency.
+- One active owner per overlapping source file. Rich-text ownership coordinates units 16/19; renderer ownership coordinates
+  12/13/14/17/18/27/30/31; section/schema/layout ownership coordinates 20–24/31/32; image ownership coordinates 06/15/25;
+  template ownership coordinates 26/28/29/34.
+- Units 24 and 32 have shared-file exclusion, not a preset stacked dependency; stack only if current implementation proves
+  unit 32 needs schema or interfaces introduced by unit 24. Units 30/31 wait for relevant renderer baselines. Unit 33 stops
+  after reference research and concrete visual proposal until explicit visual approval.
+- Worker reports separate verified facts from uncertainty and include reproduction, first failing boundary, exact commit,
+  tests run, skipped gates, risks, issue coverage, and PR state.
+- Audit disposition mapping: ready, documentation-only, or a split with an executable unit maps to `pending` until dispatch;
+  active execution maps to `implementing`; diagnostic-only maps to `diagnosing` while evidence work runs and `blocked` when
+  only external evidence remains; already fixed maps to `no-change`; blocked maps to `blocked`; declined maps to `declined`.
+  For split outcomes, record executable and blocked portions separately in validity/evidence fields.
+
+## Units
+
+| Unit | Issues | Status / current validity | Owner | Worktree / branch | Base → head | Dependencies | Evidence | Tests | PR | Next action | Blockers |
+| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
+| 01 account login/recovery | #3166, #3164, #3078, #3046, #2897, #2837 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | none | zero drift; live issues remain split; #3046/#3078 have merged #3095 candidate only | auth 42, email 6, focused/full API/server suites and affected typechecks/boundaries passed in audit | — | select exact auth/mail/API boundary only after current sanitized trace | current cloud digest, provider/account method, request/status trace, controlled mailbox |
+| 02 hosted v4 recovery | #3181, #2760 | merged partial unit | implementation/review chain complete | `codex/issue-3181-recovery-procedure` | `7a98f6662` → `325d1fcd1` → merge `549135bb3` | #2760 identity branch depends on 01 evidence | Unicode format-character IDs rejected across all manifest fields; bot cleanup preserved; scanner extraction and relaxed canonicalization rejected with independent evidence; four hosted threads replied/resolved | fresh coordinator 83 comparator, 381 API, 21 auth tests plus gates green; exhaustive Unicode/mutation rereview clean; all exact-head hosted checks green; approved, mergeable, zero unresolved threads | [#3460](https://github.com/amruthpillai/reactive-resume/pull/3460) | retain external recovery gate | real recovery still needs verified owner, snapshot, mapping, private delivery |
+| 03 MCP registration | #3398, #3153 | blocked; historical source fix present | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate DB/startup with 05 | merged #3421 (`fe9b59e`) is present on main and current source schema/startup/auth contracts match plan, but deployed behavior is not verified | #3421 hosted checks successful; audit auth/server/API/DB tests, typechecks, boundaries passed | #3421 merged before run | obtain deployed digest/log correlation, then rerun exact Codex/Claude DCR → consent → PKCE → MCP flow | deployed digest/log correlation and exact client retest unavailable; source no-change evidence cannot prove deployment |
+| 04 AI provider compatibility | #2732, #2766, #2723, #2708 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | serialize edits to AI service | zero drift; historical #2708 Responses path and #2766 structured Test path absent; remaining tuples differ | focused API 96 and full API suites/typecheck/boundaries passed in audit | — | select wire/state/import/base-path unit only after exact current tuple fails | provider/model/base URL/path/version/action/error tuple and allowed endpoint unavailable |
+| 05 AI provider migrations | #3152 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate DB/startup with 03 | zero drift; table schema, migration, startup ordering, Docker copy path coherent; `42P01` historical cause unresolved | audit API/server/DB tests, typechecks, boundaries passed; no real PostgreSQL migration fixture | — | choose config/packaging/startup/migration repair only after disposable reproduction | affected image layout/digest, working directory, DB schema/search path/journal, fresh+upgrade DB fixture |
+| 06 image storage delivery | #2684, #2778 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate 12/15/25 renderer/image fixtures | #2684 ACL cause fixed by merged #3432 (`35cecf9`); #2778 Browserless path obsolete; current topology unproved | #3432 hosted checks successful; audit storage/upload/PDF tests, typechecks, boundaries passed | #3432 merged before run | deployment retest plus shared real-encoding/backend/render fixture before repair | deployed digest; disposable S3/Garage/SeaweedFS/MinIO/proxy and browser/server raster matrix unavailable |
+| 07 AIO deployment | #2722 | docs merged; feature declined | implementation/review chain complete | `codex/issue-2722-postgres-docs` | `7a98f6662` → `171637526` → merge `ee52636c1` | none | image and repository update flows now separate through correct `reactive-resume`/`reactive_resume` log commands; clean rereview | fresh Compose/DB/docs coordinator gates and all exact-head hosted checks green; approved; zero unresolved threads | [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457) | documentation complete; #2722 disposition declined | AIO implementation explicitly declined; optional Unraid host smoke unavailable |
+| 08 root public resume | #2669 | merged partial unit | implementation/review chain complete | `codex/issue-2669-root-public-resume` | `38832014b` → `576fad5ef` → merge `744eaa902` | none | optional server-only root mapping is public-only, preserves password identity, rejects hostile target/Host input, and owns canonical/static metadata safely; independent review clean | 1,392 implementation tests plus disabled/enabled production E2E; post-main focused 123 tests and type/lint gates green | [#3470](https://github.com/amruthpillai/reactive-resume/pull/3470) | retain broader custom-domain/TLS issue scope | feature remains narrower than arbitrary domain/TLS registry |
+| 09 external version backup | #2705 | merged | implementation/review chain complete | `codex/issue-2705-git-backup-docs` | `7a98f6662` → `4ffdd96bd` → merge `772bf1452` | none | clean round-4 rereview; command-site prose requires unused output; replies document selected revision and fresh-file fixes | fresh coordinator 152 tests plus Markdown/diff/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | complete | DB integration/E2E unavailable; no sync/remote/whole-account restore |
+| 10 legacy link routing | #2836 | skipped by maintainer | implementation/review chain complete before cancellation | `codex/issue-2836-retired-link-notices` | `7a98f6662` → hosted `3eac878d` | none | implementation was technically reviewed, then maintainer rejected product scope due redirect-lifecycle and error-handling overhead | PR closed unmerged; issue note records not-planned rationale | [#3463](https://github.com/amruthpillai/reactive-resume/pull/3463) | no further implementation | explicitly out of plan; branch/worktree retained for auditability |
+| 11 job search policy | #3010 | merged | implementation/review chain complete | `codex/issue-3010-jsearch-docs` | `7a98f6662` → `1d0397884` → merge `8c5804ed0` | none | two valid wording comments fixed; independent full-diff re-review found no issues; replies carry commit evidence | 52 focused tests plus Markdown/link/diff/base/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459) | complete | real provider/browser optional gate unavailable; removal motive unknown |
+| 12 preview/export failures | #3323, #3290, #3033, #3007, #2609 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer ownership; share observation harness with 18 | zero drift; staged-preview/error-boundary baselines remain; reports cross persistence/font/PDF/viewer/deployment boundaries | audit focused web/PDF suites, affected typechecks, boundaries, build passed | — | isolate PT Sans, browser/config, and template-selection boundaries; no shared fix | exact JSON/output/browser/config/current reproduction missing |
+| 13 font/glyph/spacing | #3249, #3159, #3147, #3093, #3089, #2988 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | serialize font sources with 14/27 | merged metrics/cache/Unicode fixes present and passing; residuals require per-font/per-symptom fixtures | audit focused PDF/font suites, affected typechecks, boundaries, build passed | — | retain regressions; create residual unit only from exact failing font fixture | missing Ropa Sans/source strings/font hashes/before-after artifacts |
+| 14 RTL export layout | #3275 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | serialize renderer/fonts with 13/27 | merged canvas-direction fix remains; broader shaping/bidi cause unproved | audit RTL/preview suites, affected typechecks, boundaries, build passed | — | run controlled same-bytes export matrix against approved shaping oracle | exact JSON/font/version and known-good reference absent |
+| 15 picture fitting/style | #3168, #3088, #2794, #2782 | 15A merged; other causes blocked | implementation/review/finalization chain complete | `codex/issue-2782-picture-fit` | `7a98f6662` → `6e071ebcd` → merge `ab67831e4` | coordinate 06/25; schema/PDF owner exclusion | clean independent exact-head rereview; five threads resolved; fresh CodeRabbit approval; schema/retry fixes valid; rejected requests documented | focused tests/typechecks/boundaries/build/Biome green; exact-head hosted E2E 35/35 and all code checks green; Mintlify parser failure proven pre-existing; normal merge required no bypass | [#3461](https://github.com/amruthpillai/reactive-resume/pull/3461) | partial unit complete | delivery/centering issues still lack source revisions/assets/expected crop |
+| 16 imported table borders | #3196 | merged | implementation/review chain complete | `codex/issue-3196-editable-tables` | `7a98f6662` → `b170290e9` → merge `999cd618c` | rich-text owner; Plan 19 stacked from reviewed head | table grammar/grid and link semantics now fail closed when Tiptap cannot round-trip; borderless PDF test is color-independent; final focused rereview clean | focused/broad web/PDF tests, typechecks, boundaries, build, narrow Biome, authenticated E2E, independent review, and hosted checks green | [#3464](https://github.com/amruthpillai/reactive-resume/pull/3464) | complete | historical visual equivalence lacks reporter HTML/JSON but feature contract is approved |
+| 17 list/skill pagination | #2751, #3040 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer owner shared with 13/14/18 | merged ordered-marker/wrap/level-gap fixes present; current residual not reproduced | audit focused PDF suites, typecheck, boundaries, build passed | — | retain controls; add fix only from exact failing list/skill fixture | #2751 source absent; #3040 current fixture no longer proves residual clipping |
+| 18 preview/export geometry | #2683 | diagnostic merged; runtime fix blocked | implementation/review/remediation/rereview chain complete | `codex/issue-2683-preview-export-geometry` | `cdb7bdd2f` → `ce372b54b` → `5f5dca844` → merge `11d619d3d` | share output-boundary harness with 12; viewer owner exclusion | opt-in production-path E2E verifies exact disposable DB identity, persisted source/revision and export target, positive pages/ink/sentinels, measured zoom scale, stable transform/clip geometry, all formats/margins/fit/overflow, and DPR1/2; synthetic matrix did not reproduce mismatch | dedicated PostgreSQL/production-server E2E 2/2; web 949, PDF 1,073, two typechecks, collection, Biome, boundaries 1,452, diff hygiene; seven review findings remediated and focused rereview clean | [#3483](https://github.com/amruthpillai/reactive-resume/pull/3483) | retain #2683 pending original JSON/browser fixture; no runtime change from negative synthetic evidence | exact reporter JSON/PDF/browser/DPR/zoom/page settings absent; no measured first divergence |
+| 19 literal rich-text whitespace | #3397 | merged | implementation/review/remediation chain complete | `codex/issue-3397-literal-whitespace` | `38832014b` → `2f6942fb7` → merge `ea97de5ec` | Plan 16 merged; coordinate DOCX/PDF/editor with 31 | literal whitespace preserved through editor transforms, clipboard/table normalization, PDF layout/textkit geometry, and DOCX; final bare `TD`/`TH` gap fixed | post-main web 102, PDF 106, DOCX 20, three typechecks, Biome, diff green; dedicated Chromium E2E 2/2 | [#3472](https://github.com/amruthpillai/reactive-resume/pull/3472) | complete | direct Word/LibreOffice visual unavailable; XML/four-space contract verified |
+| 20 section restoration | #3378, #3265, #2921 | 20A merged for #2921; residuals split | implementation/review chain complete | `codex/issue-2921-hidden-section-recovery` | `7a98f6662` → `792d7f8e2` → merge `5850230f8` | 20A before 21/31; placement semantics before 29 | collapsed navigation reopens real accordion before deferred row focus/scroll; final independent review found no issues | focused tests, typechecks, boundaries, build, PO checks, diff gates, authenticated E2E, and all hosted checks green; approved/mergeable/clean | [#3462](https://github.com/amruthpillai/reactive-resume/pull/3462) | begin dependent Plan 21 when owner slot permits | #3378/#3265 need version/action/sanitized JSON; defensive fix cannot close them |
+| 21 section heading visibility | #3060 | merged | implementation/review chain complete | `codex/issue-3060-section-heading-visibility` | `2a4a1583b` → `3ce4321cb` → merge `368858a56` | 20A and 34 merged; unblocks 23B and 31 | Q1–Q3 implemented across schema, builder menus, Move-to defaults, PDF/DOCX visual omission, accessibility labels, generated references, and recovery fixtures | full 19-task suite; post-main schema 103, PDF 125, DOCX 15, web 30; four typechecks, boundaries, Biome, Markdown, diff; independent review clean | [#3477](https://github.com/amruthpillai/reactive-resume/pull/3477) | complete; issue closed by merge | no remaining approved scope |
+| 22 skill keyword presentation | #2785 | merged | implementation/review/remediation chain complete | `codex/issue-2785-skill-keyword-layout` | `38832014b` → `3c06c3b0b` → merge `870388192` | must precede/serialize 34 | built-in/custom inline/list schema, menus, PDF, DOCX, accessible HTML, import, locales, generated docs, and recovery hashes updated; both independent reviews clean | 1,280 affected tests and build; post-main 80 focused tests; remediation tooling 97/97, type/lint/diff green | [#3469](https://github.com/amruthpillai/reactive-resume/pull/3469) | complete; Plan 34 dispatched | no product gate |
+| 23 pagination controls | #3350, #3090 | 23A and diagnostic 23B merged; 23C blocked | implementation/review/remediation chain complete | `codex/issue-3350-item-pagination` | `368858a56` → `f2769dce5` → merge `5e8284e49` | possible 23C requires renderer-safe fallback | deterministic physical-page matrix asserts every token exactly once and separates authored pages from physical overflow; installed renderer proves `wrap=false` truncates oversized items, so no unsafe control shipped | 11 focused pagination tests, PDF typecheck, Biome, boundaries, Markdown, diff; independent review gaps remediated | [#3478](https://github.com/amruthpillai/reactive-resume/pull/3478) | retain item-control issue pending safe fallback | oversized keep-together fallback is lossy; widow/orphan UI remains deferred |
+| 24 date layout | #3155, #2841 | characterization merged; behavior blocked | implementation/review/remediation chain complete | `codex/issue-3155-date-layout-characterization` | `66c25efe1` → `77a549988` → merge `cdb7bdd2f` | 24B needs explicit numeric geometry; mutual exclusion with 32 | deterministic executable JSON/PNG coordinate/raster baselines cover all Q7/custom sections, nested roles, Chikorita/Ditto LTR/RTL, all 15 templates, and #2841 controls; no runtime behavior changed | 14 focused tests, PDF typecheck, Biome, boundaries, Markdown, diff after current-main integration; independent findings remediated | [#3480](https://github.com/amruthpillai/reactive-resume/pull/3480) | retain issues pending width units/bounds/default visual target | numeric width/bounds/default geometry cannot be invented |
+| 25 experience company logos | #3379 | blocked implementation; contract-design-ready | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 25A → 25B; coordinate 06/15 | current generic uploader has eager deletion and no reference counting/ownership validation; unsafe to reuse unchanged | audit relevant package suites/typechecks/boundaries passed | — | define asset ownership, accepted types, retention/orphan/copy/undo contract and tests | storage ownership/lifetime contract requires new decision |
+| 26 secondary color | #3373 | inventory-ready; implementation blocked | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | 26A → 26B; serialize semantic docs with 28 | theme has three roles; primary consumers are not classified decorative vs semantic | audit schema/PDF suites and typechecks/boundaries passed | — | enumerate primary consumers and approve decorative truth table | consumer classification/visual contract not selected |
+| 27 offline fonts | #3377 | diagnostic merged; production resolver blocked | implementation/review/remediation chain complete | `codex/issue-3377-offline-font-diagnostic` | `2a4a1583b` → `397d9e43b` → merge `f783908b0` | 27A informs 30A; 27B needs external gate | opt-in four-surface cold-network fixture, deterministic marker crops, tested blank/tofu classification, enforced browser download, and bounded administrator-hosted manifest evidence; no production behavior changed | helper 8, fonts 55, PDF 35, targeted TypeScript, Playwright collection, Biome, boundaries, Markdown, diff; independent findings remediated | [#3479](https://github.com/amruthpillai/reactive-resume/pull/3479) | retain issue pending host-level cold-server proof | production resolver remains blocked until controlled restart/egress evidence and asset-hosting design are proven |
+| 28 basics custom styles | #3137 | merged partial unit | implementation/review/remediation complete | `codex/issue-3137-semantic-css-diagnostics` | `b85d285b6` → `28c933b55` → merge `38832014b` | serialize semantic docs/tests with 26 | gradients remain unsupported; false-positive recognition and direct-LINK assertions fixed; both threads resolved and CodeRabbit approved | main-integrated package gates plus remediation resume 47/47, PDF 10/10, typechecks, Biome, and diff green; unrelated baseline E2E flakes documented | [#3468](https://github.com/amruthpillai/reactive-resume/pull/3468) | retain residual issue until reporter names remaining failure | reporter has not named remaining failure; keep issue open |
+| 29 Onyx profile header | #2812 | blocked | audit `task_47ed7eb02d48` | `codex-audit-builder-20-34` | `7a98f6662` → no source change | placement semantics 20; accessibility order 31 | historical Onyx-only PR obsolete; no persisted generic placement owner exists | audit relevant suites/typechecks/boundaries passed | — | choose generic placement capability and produce one-page/overflow visual contract | new persisted-interface choice plus visual contract required |
+| 30 ATS export evaluation | #2845 | diagnostic merged; preset not warranted | implementation/review/remediation/rereview chain complete | `codex/issue-2845-ats-export-evaluation` | `f783908b0` → `f89873f08` → `d17e188b0` → merge `10eb3bdbc` | current renderer/font diagnostics informed 30A; 30B requires measured material deficiency | occurrence-aware grouping, complete visible/link and hidden-channel coverage, portable JSZip DOCX extraction, and positive numbering fidelity now measure existing exports; two-column PDF and DOCX recover 106/106 expected occurrences, full-width PDF 105/106, and DOCX telephone-target omission is explicit | evaluator 108/108, four affected typechecks, Biome, boundaries 1,117, diff hygiene; independent review found five gaps and focused rereview found one final label gap, all remediated | [#3482](https://github.com/amruthpillai/reactive-resume/pull/3482) | retain #2845 pending vendor-side evidence; do not add preset from current measurements | no vendor accuracy claim; local extraction evidence shows no material deficiency warranting preset |
+| 31 document accessibility | #2844 | HTML residual merged; public/export audit blocked | implementation/review/remediation chain complete | `codex/issue-2844-accessibility` | `cdb7bdd2f` → `acd2a9cfe` → merge `3e62a1d60` | public viewer requires duplicate-announcement/manual gate | builder mirror now has valid H3/H4 hierarchy and safe recursive rich-text list/mark/link semantics while preserving hidden/unplaced/Q3/order rules; no public/PDF/DOCX changes or conformance claim | focused 15, full web 949, web typecheck, Biome, boundaries; independent empty-summary/blank-company findings remediated | [#3481](https://github.com/amruthpillai/reactive-resume/pull/3481) | retain #2844 for public/PDF/DOCX/manual evidence | dedicated E2E environment and manual screen-reader transcript unavailable |
+| 32 section date sorting | #2725 | merged | implementation/review chain complete | `codex/issue-2725-one-shot-sort` | `7a98f6662` → `5c07409ae` → merge `b85d285b6` | shared-file exclusion with 20–24; behavior independent of 24 | pure stable one-shot Experience/Education sort implemented with exact unresolved IDs, undo/persistence, and locked-state coverage; independent review found no issues | focused/full tests, typechecks, boundaries, build, catalogs, authenticated E2E, review, and hosted gates green | [#3465](https://github.com/amruthpillai/reactive-resume/pull/3465) | complete | broader autosort/preferences/custom/role behavior remains out of scope |
+| 33 Europass template | #2689 | research merged; template blocked at approval gate | implementation/review chain complete for 33A | `codex/issue-2689-europass-research` | `2a4a1583b` → `57f2c30` → merge `578cb496a` | 33A → explicit visual approval → possible 33B | official-source mapping, canonical SVG direction, one-page/overflow/comparison artifacts, and corrected full-resolution geometry independently reviewed; no renderer code | XML/bounds/source mapping and 2480×3508 visual rereview passed | [#3475](https://github.com/amruthpillai/reactive-resume/pull/3475) | await explicit approval of proposed visual/product direction before 33B | canonical SVG direction, neutral naming, fluency labels, chronology gutter/date wrapping, and photo-free defaults require maintainer approval |
+| 34 Gengar skill layout | #2611 | merged | implementation/review chain complete | `codex/issue-2611-gengar-skill-layout` | `870388192` → `f2186d4f7` → merge `2a4a1583b` | 22 merged; shared Skills renderer serialized before 21 | Gengar-only capability restores name → rating → proficiency → keywords in visual and semantic trees; other templates unchanged; independent review clean | 51 focused PDF tests, PDF typecheck, boundaries, Biome, diff green after current-main integration | [#3473](https://github.com/amruthpillai/reactive-resume/pull/3473) | complete | no historical screenshot parity claim |
+| 35 resume import errors | #2768 | merged adjacent-fix unit | implementation/review chain complete | `codex/issue-2768-import-reproduction` | `38832014b` → `ae219f3d9` → merge `a6057abd7` | none | synthetic matrix proved and fixed empty-MIME rejection, v4 misclassification, and opaque offline-PDF messages; independent review found no product blocker; historical failure remains unproved | focused 26 web + 144 import; web typecheck/build; boundaries/Biome; E2E 13/13 plus repeats 12/12; post-main 158 tests/typecheck/Biome/diff green | [#3471](https://github.com/amruthpillai/reactive-resume/pull/3471) | retain historical needs-info issue | reporter artifact/version/error/steps absent; keep issue open |
+
+## Active orchestration
+
+| Scope | Task / dispatch | Owner worktree | State | Deliverable |
+| --- | --- | --- | --- | --- |
+| Plans 01–06 | `task_855fbee0a803` / `ctx_949458744061` | `codex-audit-backend-01-06` | complete; worker released | zero drift; plans 01/04/05/06 blocked on named evidence; plan 03 no-change; plan 02 synthetic unit ready |
+| Plans 07–11, 35 | `task_9f27829ca50f` / `ctx_11f7d7cf6d17` | `codex-audit-backend-07-11-35` | complete; worker release pending | 07/09/10/11 ready after named brief corrections; 08 needs engineering scope amendment; 35 diagnostic-only |
+| Plans 12–19 | `task_1c6582ccdeae` / `ctx_795fced595ef` | `codex-audit-rendering-12-19` | complete; worker release pending | 15A/16/19 implementation-ready; remaining causes split into diagnostics with named evidence gates |
+| Plans 20–34 | `task_47ed7eb02d48` / `ctx_50d8257459ab` | `codex-audit-builder-20-34` | complete; worker release pending | ready: 20A, 21, 22, 23A, 28 diagnostics, 32, 34; remaining plans split at evidence/design gates |
+| Plan 07 implementation | `task_aee702e37eae` / `ctx_ed134b1d79ce` | `codex/issue-2722-postgres-docs` | implementation complete; worker released | commit `e37b73566`; two-file docs change; implementation report complete |
+| Plan 09 implementation | `task_e450ea143bfa` / `ctx_3b575cf1d5c7` | `codex/issue-2705-git-backup-docs` | implementation complete; worker released | commit `d4ef67113`; two-file docs change and synthetic local-Git validation |
+| Plan 11 implementation | `task_58d76423d364` / `ctx_20d4adf43908` | `codex/issue-3010-jsearch-docs` | implementation complete; worker released | commit `cb011841c`; three-file docs change and validation report |
+| Plan 02 synthetic recovery | `task_bae016c4d1f2` / `ctx_303f5d1f1031` | `codex/issue-3181-recovery-procedure` | implementation complete; worker released | commit `3f53deca8`; pure comparator, safeguards docs, TDD evidence |
+| Plan 02 independent review | `task_46be9a1a4d82` / `ctx_e9f651d38a65` | same Plan 02 worktree | complete; changes required | false no-op, target-state contradiction, v4 wording overclaim |
+| Plan 07 independent review | `task_b29de2cd974c` / `ctx_46d7f32205a1` | same Plan 07 worktree | complete; changes required | high: all-services pull could cross PostgreSQL major version |
+| Plan 07 review fix | `task_8ea6cfc76ef4` / `ctx_0184e1101bca` | same Plan 07 worktree | complete | commit `b61ca1609`; app-only update recipe and separately pinned database upgrade path |
+| Plan 02 review fix | `task_5fe67c42d856` / `ctx_28ed501db631` | same Plan 02 worktree | complete | commit `6af21121b`; strict validation, target invariant, exact v5-only documentation |
+| Plan 07 re-review | `task_90a9a6b63782` / `ctx_2f1def9119d6` | same Plan 07 worktree | complete; no findings | full-diff verification after update-safety fix |
+| Plan 09 independent review | `task_129b49e32bc7` / `ctx_68b13c76cc72` | same Plan 09 worktree | complete; changes required | embedded-letter JSON contradiction; template-checkpoint overclaim |
+| Plan 09 review fix | `task_8aa48854e7da` / `ctx_5aa2007ec136` | same Plan 09 worktree | complete | commit `6931d2cc4`; correct rendered-export scope and throttled template snapshot wording |
+| Plan 02 re-review | `task_5bffa8e386f2` / `ctx_57fe2ac671f8` | same Plan 02 worktree | complete; changes required | original object still serialized before validation; boxed string reproduced false no-op |
+| Plan 02 second review fix | `task_eb3b8c09aef2` / `ctx_3d3e5f7d2496` | same Plan 02 worktree | complete; worker released | commit `8607a5138`; original-form validation plus boxed-string/custom-`toJSON` regressions |
+| Plan 02 final re-review | `task_ae1f7e591826` / `ctx_475ef901639c` | same Plan 02 worktree | complete; changes required; worker released | P1 truthy gate bypass plus executable/non-JSON object input identity |
+| Plan 02 contract hardening | `task_baf33a609db0` / `ctx_48534ddcf89f` | same Plan 02 worktree | complete; worker released | commit `00855fa16`; serialized request-only API, strict envelope, 36-case adversarial coverage |
+| Plan 02 final independent review | `task_5b02aa026038` / `ctx_d16058d89c7c` | same Plan 02 worktree | complete; changes required; worker released | P1 duplicate-member safety bypass; P2 whitespace/control-only manifest identifiers |
+| Plan 02 hardening round 4 | `task_5b56f07b5a2c` / `ctx_e7c63529b719` | same Plan 02 worktree | complete; worker released | commit `4125074f9`; 59 comparator tests plus duplicate-member and unsafe-ID adversarial gates green |
+| Plan 02 independent review round 5 | `task_a2b0562df7aa` / `ctx_bc5056c8978c` | same Plan 02 worktree | complete; no findings; pushed; worker released | exact head `4125074f9`; full diff, 54 independent assertions, fresh coordinator verification, PR #3460 |
+| Plan 02 autofix review | `task_796f15a35422` / `ctx_c581be24021a` | same Plan 02 worktree | complete; changes required; worker released | bot export cleanup safe; valid P2 Unicode Cf ID gap; three Codacy suggestions rejected/already satisfied with evidence |
+| Plan 02 hosted review fix | `task_1d56264e5f15` / `ctx_2a1a0a6af73e` | same Plan 02 worktree | complete; worker released | commit `325d1fcd1`; reject and document Unicode format-character IDs, add all-field regressions, preserve strict comparator contract |
+| Plan 02 hosted fix rereview | `task_51b92554b36b` / `ctx_08bc7a78dd61` | same Plan 02 worktree | complete; no findings; worker released | full diff, all four hosted dispositions, 1,410 Unicode combinations, and mutation probes approved exact local head `325d1fcd1` |
+| Plan 02 hosted fix publication | coordinator | same Plan 02 worktree | complete; monitor only | exact head `325d1fcd1`; four evidence replies posted, all four threads resolved, all hosted checks green, approved and mergeable |
+| Plan 09 re-review | `task_1bd82b008a77` / `ctx_ca2a0176b52f` | same Plan 09 worktree | complete; no findings; worker released | full diff and both factual corrections verified before PR #3458 |
+| Plan 09 hosted review follow-up | `task_a44e374822b4` / `ctx_89e6769df19d` | same Plan 09 worktree | complete; changes required; worker released | selected revision prints correctly but no importable file is created |
+| Plan 09 hosted review fix round 2 | `task_8605c30ca032` / `ctx_2e0aa7be1312` | same Plan 09 worktree | complete; worker released | commit `9dd218ba1`; non-destructive recovered-file command plus synthetic proof |
+| Plan 09 final hosted re-review | `task_435249ae4c23` / `ctx_5fd78d0eeccd` | same Plan 09 worktree | complete; changes required; worker released | low: fixed `recovered-resume.json` name silently overwrites an existing local recovery file |
+| Plan 09 review fix round 3 | `task_9e6fdbe67fb7` / `ctx_9087e895192f` | same Plan 09 worktree | complete; worker released | commit `4ffdd96bd`; require unused output filename, preserve existing sentinel, 152 tests and docs gates green |
+| Plan 09 rereview round 4 | `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | same Plan 09 worktree | complete; no findings; pushed; worker released | exact head `4ffdd96bd`; clean full-diff review and fresh coordinator 152-test/docs verification |
+| Plan 11 independent review | `task_7d5d4c1417a9` / `ctx_17ee05faf9e7` | same Plan 11 worktree | complete; changes required | attachment-format overclaim and duplicated patch/restore guidance |
+| Plan 11 review fix | `task_351a96e90b69` / `ctx_e398c9128731` | same Plan 11 worktree | complete; worker released | commit `e05977007`; attachment promise removed and adjacent guidance deduplicated |
+| Plan 11 re-review | `task_86a66b578544` / `ctx_3bb8017e8676` | same Plan 11 worktree | complete; no findings; worker released | exact head `e05977007`; 52 focused tests and full diff verified before PR #3459 |
+| Plan 11 hosted review follow-up | `task_a9d8b3e0a8a2` / `ctx_6b03ba8f389c` | same Plan 11 worktree | no findings; pushed; worker released | commit `1d03978`; sample wording plus heading/UI terminology alignment; all hosted checks green and both threads resolved |
+| Plan 15A implementation | `task_557902c8adef` / `ctx_db6fae1b75c4` | `codex/issue-2782-picture-fit` | complete; worker released | commit `d891afd66`; explicit cover/contain contract across schema/editor/preview/PDF |
+| Plan 15A independent review | `task_d4f4841355e2` / `ctx_467f293cf443` | same Plan 15A worktree | complete; changes required; worker released | medium: raster checks did not pin fit geometry; low: class coupling and duplicate props type |
+| Plan 15A review fix | `task_5a4afecb7d0d` / `ctx_43faac4f25eb` | same Plan 15A worktree | complete; worker released | commit `6145d5a59`; all three findings fixed; full tests/build and authenticated raster E2E green |
+| Plan 15A final rereview | `task_2b45ae3b4e98` / `ctx_695a139cd0b9` | same Plan 15A worktree | complete; no findings; worker released | exact head `6145d5a59`; full 70-file behavior, mutation-sensitive geometry, computed CSS, compatibility, scope, full suites, build, and E2E approved before PR #3461 |
+| Plan 15A hosted review | `task_06bedd03c57a` / `ctx_f3a9297b252e` | same Plan 15A worktree | complete; two changes required; terminal transferred | accepted published-schema optionality and failed same-file retry; rejected metadata flag semantics and Codacy/style warnings; full report at `.orchestration/plan-15a-hosted-review.md` |
+| Plan 15A hosted review fix | `task_855387612fac` / `ctx_3e9f9c80147d` | same Plan 15A worktree | complete; pushed; worker released | commit `6e071ebcd`; public schema/OpenAPI omit required `picture.fit` while runtime output remains required/defaulted; failed Contain upload clears input for same-file retry; accepted threads auto-resolved |
+| Plan 15A hosted rereview | `task_1116a06f2543` / `ctx_636533e5113e` | same Plan 15A worktree | complete; no code findings; terminal transferred | exact `6e071ebcd` approved; E2E 35/35; Mintlify failure traced to pre-existing generated MDX comment marker and partial-deploy parser behavior |
+| Plan 15A hosted finalization | `task_01693dcf5e94` / `ctx_de7c5995049d` | same Plan 15A worktree | complete; worker released | all five threads resolved; CodeRabbit withdrew metadata finding and freshly approved exact head; no stale-review dismissal, code, merge, or issue mutation |
+| Plan 07 hosted review follow-up | `task_6e9bc84ca2d4` / `ctx_e31d0e345240` | `codex/issue-2722-postgres-docs` | no findings; pushed; worker released | commit `a7b8c4c`; five valid comments fixed, `--no-deps` removal rejected; six replies and zero unresolved threads |
+| Plan 07 late hosted fix | `task_6d0545ee43b1` / `ctx_1d6a1e36def3` | same Plan 07 worktree | complete; worker released | commit `171637526`; separate image/repository build and log paths; Compose/docs gates green |
+| Plan 07 late fix rereview | `task_8ff818f3e95a` / `ctx_b73be2273e01` | same Plan 07 worktree | complete; no findings; pushed; worker released | exact head `171637526`; full-diff/Compose review and fresh coordinator gates green; hosted checks rerunning |
+| Plan 16 implementation | `task_f3d05a6ebb86` / `ctx_686ba93fc8af` | `codex/issue-3196-editable-tables` | complete; worker released | commit `83aca184e`; atomic editable supported tables, lossless unsupported fallback, PDF border geometry, persistence/E2E |
+| Plan 16 independent review | `task_e52d01cff964` / `ctx_63c00e7abb56` | same Plan 16 worktree | complete; changes required; worker released | P1 unsupported descendant markup can normalize destructively; P2 conversion is still HTML and E2E does not prove unrelated save persistence; orchestration report accepted by brief |
+| Plan 16 review fix | `task_7b7368639ff8` / `ctx_ba9ed045764f` | same Plan 16 worktree | complete; worker released | commit `d0cca949f`; fail-closed unsupported grammar, removal of out-of-scope conversion UX, and persisted unrelated-edit E2E proof; all requested gates green |
+| Plan 16 final rereview | `task_fac7a8d1cf90` / `ctx_b5d8f7f10380` | same Plan 16 worktree | complete; two P1 findings; terminal transferred | truncated `<table` marker fails open; invalid align/colwidth/span/indent/style values can pass name-only allowlist and normalize destructively |
+| Plan 16 preservation fix | `task_d21a8f07917c` / `ctx_71f2eee5ec8d` | same Plan 16 worktree | complete; terminal transferred | commit `02b8b1587`; fail-closed marker accounting and declarative value validators with 34 exact-byte tests; full gates green |
+| Plan 16 branch hygiene | `task_fad9ffd13a36` / `ctx_b6f270801828` | same Plan 16 worktree | complete; worker released | commit `c3f0dde76`; all tracked orchestration reports removed; six-file final diff, full-range diff check, Biome, and Markdownlint clean |
+| Plan 16 publication rereview | `task_939fe21be440` / `ctx_dca9372dac03` | same Plan 16 worktree | complete; three findings; worker released | two P1 Tiptap round-trip gaps in invalid table geometry and href-less anchors; P2 borderless PDF color blind spot |
+| Plan 16 publication fix | `task_7e846e42ddab` / `ctx_000a540aff73` | same Plan 16 worktree | complete; worker released | commit `b170290e9`; all three findings fixed with focused 70 web and 11 PDF tests; generated artifacts removed |
+| Plan 16 focused fix rereview | `task_6b49f917cd3d` / `ctx_a29bed0272bf` | same Plan 16 worktree | complete; no findings; worker released | exact three-file fix diff approved before PR #3464 |
+| Plan 20A implementation | `task_4237c974827a` / `ctx_00770ded7b0d` | `codex/issue-2921-hidden-section-recovery` in worktree `issue-3378-hidden-section-recovery` | complete; worker released | commit `0ec054df7`; #2921-only inventory/recovery UI, navigation, unit coverage, and authenticated PDF E2E |
+| Plan 20A independent review | `task_be0db32b205d` / `ctx_ab43d98bf4aa` | same Plan 20A worktree | complete; two linked P2 findings; terminal transferred | collapsed accordion navigation returns before target mounts; unit test manually retained impossible collapsed row and missed defect |
+| Plan 20A collapsed-navigation fix | `task_580f83d5f46d` / `ctx_63ceb289dcb7` | same Plan 20A worktree | complete; worker released | commit `792d7f8e2`; reopen real Base UI accordion before deferred row lookup/focus/scroll; lifecycle RED/GREEN and full gates passed |
+| Plan 20A final rereview | `task_6e43715b86de` / `ctx_4a87a2476608` | same Plan 20A worktree | complete; no findings; worker released | exact head `792d7f8e2`; full diff, lifecycle navigation, persistence/PDF E2E, accessibility, and strict #2921-only scope approved before PR #3462 |
+| Plan 10 implementation | `task_fd191afc86ba` / `ctx_5100e7419c11` | `codex/issue-2836-retired-link-notices` | complete; worker released | commits `b33962e3f` and `58d2972c7`; prospective 90-day owner-only retired-link attempts with migration, privacy limits, owner UI/docs, full tests, and disposable E2E |
+| Plan 10 independent review | `task_124a094afdf0` / `ctx_092876c252c5` | same Plan 10 worktree | complete; two Spec findings; terminal transferred | P1 concurrent cross-resume reuse race reproduced in PostgreSQL; P2 required failed-rename rollback proof absent; no Standards finding |
+| Plan 10 transaction fix | `task_ce5381b8974b` / `ctx_45490fb447e1` | same Plan 10 worktree | complete; worker retained by user takeover | commit `81bdb868d`; live acquisition reordered; PostgreSQL concurrency regression green |
+| Plan 10 focused rereview | `task_dd9678d7784a` / `ctx_d270e086a77f` | same Plan 10 worktree | complete; one P2; worker released | code fix approved; occupied-target case did not prove rollback after successful mutation |
+| Plan 10 rollback proof/final rereview | `task_050a59b459d6`, `task_19860273bc0c` | same Plan 10 worktree | complete; no findings; workers released | commit `6ac2edb1b`; forced post-update PostgreSQL capture failure proves rollback; mutation test and cleanup independently approved before PR #3463 |
+| Plan 32 implementation | `task_547d2dbc1520` / `ctx_a0f1ac5fb10b` | `codex/issue-2725-one-shot-sort` | complete; worker released | commits `3e9d57174` and hygiene `1031dc9a8`; one-shot Experience/Education date sort, targeted warning, undo/persistence/lock coverage |
+| Plan 32 independent review | `task_0903351a51d2` / `ctx_537efdb21d35` | same Plan 32 worktree | complete; no findings; worker released | exact final head approved after focused behavior/typecheck/catalog/diff review; PR #3465 merged as `b85d285b6` |
+| Plan 23A implementation/review | `task_fd704c2e7a5d`, `task_2cb223b6dbb9` | `codex/issue-3090-authored-page-guidance` | complete; PR #3467 merged | review-fix `322bed31c`; latest-main integration head `412da288f`; all 14 hosted threads resolved; relevant E2E passed; merge `0fbeeeb4c` |
+| Plan 19 implementation | `task_d9237449193e` / `ctx_656a3cd4360a` | `codex/issue-3397-literal-whitespace` | complete; worker released | exact integrated head `6d9341425`; full local gates and PostgreSQL E2E green |
+| Plan 19 independent review | `task_a138df5923b5` / `ctx_d1537f68e074` | same Plan 19 worktree | complete; changes requested | one P1 PDF leading-whitespace failure plus four P2 editor transform, clipboard, and tab-display failures |
+| Plan 19 review remediation | `task_5afe88028c7c` / `ctx_a1a01a86bac7` | same Plan 19 worktree | complete; worker released | commit `4ad9de6e0`; all five findings fixed; web 100, PDF 133, DOCX 20, Chromium E2E 2/2, type/lint/boundary gates green |
+| Plan 19 focused rereview | `task_709b405c7f26` / `ctx_6e5d11ab901c` | same Plan 19 worktree | complete; one P2; worker released | original five seams and patch-package integrity approved; bare `TD`/`TH` clipboard text can still collapse accepted whitespace |
+| Plan 19 table-cell remediation | `task_5d88bb692ded` / `ctx_f47937fd0b56` | same Plan 19 worktree | complete; worker released | commit `2a55bebdc`; supported bare `TD`/`TH` normalized to marked paragraphs; post-main gates green; PR #3472 merged |
+| Plan 22 implementation | `task_69bd20897491` | `codex/issue-2785-skill-keyword-layout` | complete | exact head `d87176ef4`; 75 files including 55 catalogs; 1,280 affected tests and full build green |
+| Plan 22 independent review | `task_546ed601aa62` / `ctx_e423055f28ee` | same Plan 22 worktree | complete; worker released | no Standards or Spec findings; fresh 80 focused tests and five typechecks green |
+| Plan 22 generated-fixture rereview | collaboration `/root/review_plan22_refresh` | same Plan 22 worktree | complete; no findings | generated docs exactly match schema; all four recovery hashes independently recomputed; focused tooling/type/lint/diff gates green |
+| Plan 28 diagnostics/review | `task_e8b11d71f5ec`, `task_30f17b58c95a` | `codex/issue-3137-semantic-css-diagnostics` | complete; PR #3468 merged | independent review clean; hosted review found two focused test-quality defects; fixes approved and merged as `38832014b` |
+| Plan 28 hosted remediation | `task_5fa47e8b49ca` | same Plan 28 worktree | complete | head `28c933b55`; narrow gradient-recognition and direct-LINK assertion fixes pushed; threads resolved; approved |
+| Plan 08 implementation | `task_3aecece76616` / `ctx_db909cf711e4` | `codex/issue-2669-root-public-resume` | complete; worker released | commit `5401c08a5`; 1,392 tests plus enabled/disabled production E2E green; merged current main at review head `576fad5ef` |
+| Plan 08 independent review | `task_eed414e9890e` / `ctx_6fa84066d77e` | same Plan 08 worktree | complete; worker released | no Standards or Spec findings; focused risk tests and broad/E2E evidence approved before PR #3470 |
+| Plan 35 reproduction | `task_6efe013f350a` / `ctx_5f174f7a941d` | `codex/issue-2768-import-reproduction` | complete; worker released | commit `df8d5f334`; three deterministic adjacent fixes with 13/13 E2E and 12/12 repeated-case evidence; historical case remains unproved |
+| Plan 35 independent review | `task_e417d3d5d084` / `ctx_e4b1ec8ae401` | same Plan 35 worktree | complete; no product blocker; worker released | two evidence-label limits recorded; 1,127 emitted JS/MJS artifacts removed without deleting review evidence; current main integrated and PR #3471 opened |
+| Plan 33A research | `task_0ed3877760c1` / `ctx_7e91c8f1d077` | `codex/issue-2689-europass-research` | complete; worker released | commit `2de5b6240`; official-source mapping plus one-page/overflow/comparison artifacts; no renderer code |
+| Plan 33A independent review | `task_55fd536909d2` / `ctx_ac573ee1d4ad` | same Plan 33A worktree | complete; two P1 visual findings; worker released | overflow page 1 date/title collision and page 2 right-edge clipping; research/mapping/source-safety checks otherwise clean |
+| Plan 33A visual remediation | `task_e5a239df7684` / `ctx_fd5ff59ddc46` | same Plan 33A worktree | complete; worker released | commit `57f2c30`; date/title collision and right-edge text/URL clipping corrected; XML/mapping/bounds gates green |
+| Plan 33A visual rereview | `task_dbf4b61a1ada` / `ctx_4ba872ef6b5c` | same Plan 33A worktree | complete; no findings; worker released | full-resolution 2480×3508 raster inspection confirmed both corrected geometry seams; XML bounds and source mapping clean; PR #3475 merged as `578cb496a` |
+| Plan 34 implementation/review | `task_422be45068f7`, `task_e7e35921c6be` | `codex/issue-2611-gengar-skill-layout` | complete; PR #3473 merged | implementation `b337d8147`, current-main head `f2186d4f7`, independent review clean, merge `2a4a1583b` |
+| Plan 21 implementation | `task_b7cc0bb3ec69` / `ctx_23c399d315ec` | `issue-3060-section-heading-visibility` | complete; worker released | commit `eeb9e09c4`; full suite, affected typechecks, boundaries, Biome, diff, and pre-commit gates green |
+| Plan 21 independent review | `task_c115a5436782` / `ctx_681b494ae3ed` | same Plan 21 worktree | complete; no findings; worker released; PR #3477 merged | current main integrated; focused post-main gates green; merge `368858a56` |
+| Plan 27A font diagnostic | `task_4244667977dd` / `ctx_448dd7709bbc` | `issue-3377-offline-font-diagnostic` | focused rereview complete; findings; worker released | server blocker/evidence corrections approved; duplicate marker source can mis-map crop and browser-PDF raster failures can be swallowed |
+| Plan 27A raster fix round 2 | `task_c491972c35cc` / `ctx_c636c67853bf` | same Plan 27A worktree | complete; worker released | commit `c8a10b3d3`; split/duplicate marker mapping, isolated raster crops, and post-download evidence enforcement; final review found one broader download false-pass |
+| Plan 27A final remediation | `task_98d303694a36` / `ctx_5d93d3ca0d36` | same Plan 27A worktree | complete; worker released; PR #3479 merged | commit `313cfab63`; successful browser download required and raw browser measurements use tested Node classifier; merge `f783908b0` |
+| Imported-table E2E baseline repair | `task_c5a99a1210d5` / `ctx_4a7956dbe266` | `codex/fix-imported-table-raster-ci` | complete; worker released; PR #3476 merged | commit `6f274496d`; independent review clean; exact 17/12 table topology retained while unrelated stale-stroke endPath is excluded; merge `66c25efe1` |
+| Plan 23B item pagination | `task_8224e5a09e22`, review `task_f3a10c98a230`, remediation `task_985f488f65e1` | `codex/issue-3350-item-pagination` | complete; workers released; PR #3478 merged | every token asserted exactly once; authored/physical pages separated; lossy oversized `wrap=false` blocker retained; merge `5e8284e49` |
+| Plan 24A date characterization | `task_45f004efc2bc`, review `task_1b18f7c40ea3`, remediation `task_69caca11a49e` | `codex/issue-3155-date-layout-characterization` | complete; workers released; PR #3480 merged | executable deterministic JSON/PNG baselines; exact Meowth exception; raw PDFs omitted; merge `cdb7bdd2f` |
+| Plan 31 accessibility | implementation `task_f03773b6531d`, review `task_02b2a71db0f6`, remediation `task_75034a30305e` | `codex/issue-2844-accessibility` | complete; workers released; PR #3481 merged | H3/H4 plus safe rich-text semantics; 1,155 reviewer-emitted JS artifacts removed; public/export/manual gates retained; merge `3e62a1d60` |
+| Plan 30 export evaluation | implementation `task_8ccb73b62e79`; review `task_62e7e0f678f3`; remediation `task_328f1a7caa2c`; rereview `task_27bfa7e77312`; final fix `task_57d3967893fb` | `codex/issue-2845-ats-export-evaluation` | complete; all workers released; PR #3482 merged | commits `f89873f08`, `0e5994f24`, `d17e188b0`; 108 tests and focused rereview evidence; merge `10eb3bdbc` |
+| Plan 18 geometry diagnostic | implementation `task_938999fe6ae1`; review `task_a71aca971d4c`; remediation `task_4ddf17ed5fea`; rereview `task_e6b96ad69cd7` | `codex/issue-2683-preview-export-geometry` | complete; all workers released; PR #3483 merged | commits `ce372b54b`, `5f5dca844`, integration `25e044c86`; full dedicated matrix 2/2 and focused rereview clean; merge `11d619d3d` |
+| Final completion audit | `task_81402f5f945f` / `ctx_1b430f809130` | ledger plus planning checkout | complete; worker released | exact 35-plan/63-issue coverage; found Unit 03/07 disposition wording and PR #3475 head metadata gaps; corrected before ledger publication |
+| Completion correction rereview | `task_66f7c09eea8b` / `ctx_649722e31975` | ledger worktree | complete; worker released; no findings | independently confirmed all three audit corrections, sequential Units 01–35, and exact 63-issue coverage |
+
+## Existing PR and residual accounting
+
+| Item | Live state | Exact head | Evidence / checks | Next action |
+| --- | --- | --- | --- | --- |
+| PR #3453 | merged 2026-09-06 | `ccd111da894cf7d44cc3dee06c937f70d91fef24` → merge `a4bdc54b2` | exact-head hosted checks green and approved before merge | complete |
+| PR #3454 | merged 2026-09-06 | `80b0d3ab02cc4292f8a4514db8c2516adc1f9dc3` → merge `2e711fd14` | exact-head hosted checks green and approved before merge | complete |
+| PR #3461 | merged 2026-09-06 | `6e071ebcd60c5e31a5b7bcc48f8a24c7c491e787` → merge `ab67831e4` | all code checks/E2E green and approved; unrelated Mintlify failure documented; normal merge, no bypass | complete |
+| PR #3462 | merged 2026-09-06 | `792d7f8e2677d442536fecd450b4e9dbbddd94ee` → merge `5850230f8` | exact-head hosted checks green and approved before merge | complete |
+| PR #3463 | closed unmerged 2026-09-06 | `3eac878d68df48b85a6d6dd9eed37bd8df6b3e6d` | maintainer explicitly skipped retired-link implementation; not-planned rationale posted to #2836 | no further action; preserve branch |
+| PR #3464 | merged 2026-09-06 | `b170290e96b411bce46873b64b345e7d5b8e2fa1` → merge `999cd618c` | independent review and exact-head hosted checks green | complete |
+| PR #3465 | merged 2026-09-06 | `5c07409ae035549cd743b702b99b2959cb25e183` → merge `b85d285b6` | independent review; refreshed tooling 97/97, resume 75/75, web 29/29; hosted checks green and approved | complete |
+| PR #3466 | merged 2026-09-06 | `43e6de7e4591b87f211f9ace28363204bbbe30f8` → merge `695cdb851` | four stale recovery hashes independently recomputed after picture-fit default changed canonical bytes; focused 83/83, tooling 97/97, typecheck/Biome/diff green | complete; monitor hosted E2E |
+| PR #3467 | merged 2026-09-06 | `412da288f0164be8c52d7ca51404d0bd2a5880b7` → merge `0fbeeeb4c` | pagination assertion fixed; 14 threads resolved; relevant authored-page E2E passed; unrelated baseline flakes documented; normal merge, no bypass | complete; keep #3350 out of scope |
+| PR #3468 | merged 2026-09-06 | `28c933b555de7aeed9c18b11745b10f2b108eca9` → merge `38832014b` | focused remediation approved; two threads resolved; semantic checks green; unrelated baseline flakes documented; normal merge, no bypass | partial unit complete; keep #3137 open |
+| PR #3469 | merged 2026-09-06 | `3c06c3b0bbe85ff346e38bdecbc24ee2630f8642` → merge `870388192` | feature review and focused generated-fixture rereview clean; exact failed tooling gate fixed 97/97; normal merge, no bypass | complete |
+| PR #3470 | merged 2026-09-06 | `576fad5ef8c1a622fd78245e0c0c26c24c08d662` → merge `744eaa902` | current main integrated; independent review clean; local enabled/disabled production E2E and focused gates green; normal merge, no bypass | partial unit complete; keep #2669 open |
+| PR #3471 | merged 2026-09-06 | `ae219f3d911a259d0a7a4ce26505060d4956232e` → merge `a6057abd7` | current main integrated; independent review found no product blocker; post-main 158 focused tests, web typecheck, Biome, and diff green; normal merge | adjacent fixes complete; keep #2768 open |
+| PR #3472 | merged 2026-09-06 | `2f6942fb7299770a231c863b6b3a4e99c4538fad` → merge `ea97de5ec` | current main integrated twice; final 102 web tests, web typecheck, Biome, and diff green after independent-review remediation; normal merge | complete; #3397 closed |
+| PR #3473 | merged 2026-09-06 | `f2186d4f7495804670c6973b9454578280e461a7` → merge `2a4a1583b` | current main integrated; independent review clean; 51 focused PDF tests, PDF typecheck, Biome, boundaries, and diff green; normal merge | complete; #2611 closed |
+| PR #3474 | merged 2026-09-06 | `ec0a18fd8b5cd0b9b1cc7ee31a12d2d783eb4ffd` → merge `97f34b7cc` | Codacy findings from #3472 removed: clipboard HTML now parsed with DOMParser and new LRM/RLM literals use escapes; 102 web + 44 PDF tests, two typechecks, Biome, diff green | static-analysis follow-up complete |
+| PR #3475 | merged 2026-09-06 | exact head `46b24581d29b26c6be70cba719adf9ea9251bb56` (`57f2c30` remediation) → merge `578cb496a` | independent full-resolution visual rereview passed after collision and clipping remediation; research/XML/bounds/source-mapping gates clean | research complete; issue #2689 remains open pending explicit visual/product approval before renderer implementation |
+| PR #3476 | merged 2026-09-06 | `6f274496d` → merge `66c25efe1` | repeated hosted false positive reproduced from artifact; two consecutive dedicated E2E runs, focused/full gates, independent review clean; hosted attempt 2 passed | imported-table CI baseline repaired; no production behavior change |
+| PR #3477 | merged 2026-09-06 | `3ce4321cb` → merge `368858a56` | full implementation suite, post-main focused tests/typechecks/static gates, independent review clean; hosted attempt 2 passed | complete; #3060 closed |
+| PR #3478 | merged 2026-09-06 | `f2769dce5` → merge `5e8284e49` | 11 focused pagination tests, PDF typecheck, Biome, boundaries, Markdown, diff; independent review gaps remediated; hosted E2E rerun attempt 2 failed unrelated baseline `picture-rendering` Contain persistence while changed diagnostics stayed outside that path | diagnostic complete; keep #3350 open pending renderer-safe fallback |
+| PR #3479 | merged 2026-09-06 | `397d9e43b` → merge `f783908b0` | helper 8, fonts 55, PDF 35, targeted TypeScript, Playwright collection, Biome, boundaries, Markdown, diff; independent false-pass findings remediated; hosted E2E rerun attempt 2 failed unrelated baseline autosave timing and section-recovery state | diagnostic complete; keep #3377 open pending controlled cold-server egress proof |
+| PR #3480 | merged 2026-09-06 | `77a549988` → merge `cdb7bdd2f` | 14 focused tests, PDF typecheck, Biome, boundaries, Markdown, diff; independent artifact findings remediated | characterization complete; keep #3155/#2841 open pending numeric visual geometry |
+| PR #3481 | merged 2026-09-06 | `acd2a9cfe` → merge `3e62a1d60` | focused 15, full web 949, typecheck, Biome, boundaries; independent heading findings remediated; hosted E2E rerun attempt 2 failed unrelated baseline `picture-rendering` Contain persistence | HTML residual complete; keep #2844 open for public/PDF/DOCX/manual evidence |
+| PR #3482 | merged 2026-09-06 | `d17e188b0` → merge `10eb3bdbc`; autofix `f447f429a` | evaluator 108/108, four affected typechecks, Biome, boundaries 1,117; five initial review gaps and one focused-rereview label gap remediated; hosted E2E, CodeRabbit, and Greptile passed; Codacy alerts are non-secret synthetic token equality and fixed internal XML attribute-name construction; autofix export narrowing landed on main before its head-ref publication failure | diagnostic complete; keep #2845 open pending vendor-side evidence; no ATS preset justified |
+| PR #3483 | merged 2026-09-06 | `25e044c86` → merge `11d619d3d` | dedicated PostgreSQL/production-server geometry E2E 2/2; web 949, PDF 1,073, typechecks, collection, Biome, boundaries 1,452; seven review findings remediated and focused rereview clean | diagnostic complete; keep #2683 open pending original fixture/browser evidence; no runtime fix warranted |
+| Residual #2828 | pending product direction | — | stale whole-document concurrent-tab overwrite reproduced in Chromium/PostgreSQL; excluded from 63 | account for separately; do not implement conflict UI until product policy selected |
+
+## Rulings and blockers log
+
+- 2026-09-05 — No rulings yet. Approved Q1–Q12 and blanket directions are binding inputs, not coordinator rulings.
+- 2026-09-06 — Plan 16 preservation hardening uses one declarative element-rule registry with conservative value
+  validators and explicit zero-table failure. Render-time Tiptap normalization was rejected because it adds editor work
+  and fragile canonicalization exceptions; unknown or ambiguous markup remains exact-byte read-only.
+- 2026-09-06 — Publication throughput policy: require one independent pre-publication review, run focused risk-based gates,
+  then push and open PR immediately. Hosted CI runs concurrently under coordinator monitoring. Repeat review only for a
+  concrete finding and limit it to the changed seam; workers do not poll hosted state or repeat unchanged full suites.
+- 2026-09-06 — Maintainer changed integration policy: merge complete, mergeable PRs immediately. Twenty-six approved PRs were
+  squash-merged without admin bypass. Plan 10 retired-link work was explicitly rejected as disproportionate redirect and
+  error-handling overhead; PR #3463 closed unmerged and rationale recorded on issue #2836.
+- 2026-09-06 — Plan 22 orchestration metadata initially named issue #3060. Live issue revalidation corrected ownership to
+  #2785 and branch `codex/issue-2785-skill-keyword-layout` before publication; #3060 remains reserved for Plan 21.
+- 2026-09-06 — Plan 35 publishes three deterministic adjacent fixes without claiming the historical cloud failure fixed.
+  Issue #2768 remains open/needs-info because reporter fixture, exact error, version, browser, and steps remain absent.
+- 2026-09-06 — Codacy security findings on Plan 19 were addressed in an immediate follow-up rather than accepted as
+  detached-parser false positives: DOMParser removes the flagged assignment and Unicode escapes remove new invisible controls.
+- 2026-09-06 — Plan 33A research is merged without renderer code. Plan 33B remains behind explicit visual/product approval
+  for canonical SVG direction, neutral naming, supplied fluency labels, chronology gutter/date wrapping, and photo-free defaults.
+
+## Publication log
+
+- Coordinator ledger: PR #3456 (`codex/issue-execution-ledger` → `main`), open while execution continues.
+- Merged 2026-09-06 after exact-head revalidation: #3453 (`a4bdc54b2`), #3454 (`2e711fd14`),
+  #3457 (`ee52636c1`), #3458 (`772bf1452`), #3459 (`8c5804ed0`), #3460 (`549135bb3`),
+  #3462 (`5850230f8`), #3461 (`ab67831e4`), #3464 (`999cd618c`), #3466 (`695cdb851`), and
+  #3465 (`b85d285b6`), #3467 (`0fbeeeb4c`), #3468 (`38832014b`), #3469 (`870388192`), and
+  #3470 (`744eaa902`), #3471 (`a6057abd7`), #3472 (`ea97de5ec`), #3473 (`2a4a1583b`), and
+  #3474 (`97f34b7cc`), #3475 (`578cb496a`), #3476 (`66c25efe1`), #3477 (`368858a56`), and
+  #3478 (`5e8284e49`), #3479 (`f783908b0`), #3480 (`cdb7bdd2f`), #3481 (`3e62a1d60`), and
+  #3482 (`10eb3bdbc`) and #3483 (`11d619d3d`).
+- Plan 10: PR [#3463](https://github.com/amruthpillai/reactive-resume/pull/3463), closed unmerged by maintainer direction;
+  issue [#2836 comment](https://github.com/amruthpillai/reactive-resume/issues/2836#issuecomment-5556080394) records not-planned rationale.
+- Plan 16: PR [#3464](https://github.com/amruthpillai/reactive-resume/pull/3464), merged as
+  `999cd618cb2e54826aa860c298c7114045f8ebdd` after hosted checks passed.
+- Plan 32: PR [#3465](https://github.com/amruthpillai/reactive-resume/pull/3465), merged as
+  `b85d285b69843612e9d7f0ab802248982e7bf0ea` after latest-main integration and hosted approval.
+- Recovery hash hotfix: PR [#3466](https://github.com/amruthpillai/reactive-resume/pull/3466), merged as
+  `695cdb851431a0fe7a17b05bbd9630129fdd0759`; canonical fixtures refreshed after Plan 15A changed default bytes.
+- Plan 23A: PR [#3467](https://github.com/amruthpillai/reactive-resume/pull/3467), merged as
+  `0fbeeeb4c48993333384e4d31a0950ab8bf91b01`; relevant E2E passed and unrelated baseline flakes were documented.
+- Plan 28: PR [#3468](https://github.com/amruthpillai/reactive-resume/pull/3468), merged as
+  `38832014b969580d217be268257040ffc4f95ff6`; gradients remain unsupported and issue #3137 stays open.
+- Plan 22: PR [#3469](https://github.com/amruthpillai/reactive-resume/pull/3469), merged as
+  `870388192e38a34e70ba036027b20e3ec789dba0`; generated references and recovery hashes were refreshed and rereviewed.
+- Plan 08: PR [#3470](https://github.com/amruthpillai/reactive-resume/pull/3470), merged as
+  `744eaa902eeb90ea0473cf84549d71f51e7beab5`; broader custom-domain/TLS issue scope remains open.
+- Plan 35: PR [#3471](https://github.com/amruthpillai/reactive-resume/pull/3471), merged as
+  `a6057abd7951a05c47b4785114f3e5eff670066e`; historical issue #2768 remains open/needs-info.
+- Plan 19: PR [#3472](https://github.com/amruthpillai/reactive-resume/pull/3472), merged as
+  `ea97de5ec4e9adced7e83d6ff02e208727961887`; issue #3397 closed.
+- Plan 34: PR [#3473](https://github.com/amruthpillai/reactive-resume/pull/3473), merged as
+  `2a4a1583be097290906a1252045c57e73b78b1a9`; issue #2611 closed.
+- Plan 19 static-analysis follow-up: PR [#3474](https://github.com/amruthpillai/reactive-resume/pull/3474), merged as
+  `97f34b7ccda73eb8d767205741d68465cbc1c0c1`.
+- Plan 33A: PR [#3475](https://github.com/amruthpillai/reactive-resume/pull/3475), merged as
+  `578cb496aa326751dd2ab1bea53db868daa35908`; issue #2689 remains open at its explicit visual/product gate.
+- Imported-table E2E repair: PR [#3476](https://github.com/amruthpillai/reactive-resume/pull/3476), merged as
+  `66c25efe18775f91640e66d1b2c6868bc70f0b55`; exact Plan 16 table topology remains enforced.
+- Plan 21: PR [#3477](https://github.com/amruthpillai/reactive-resume/pull/3477), merged as
+  `368858a56fc9c3152b540c39829908e2c3ea04c5`; issue #3060 closed.
+- Plan 23B: PR [#3478](https://github.com/amruthpillai/reactive-resume/pull/3478), merged as
+  `5e8284e49fcca1fc0d56660205872038bd307c84`; issue #3350 remains open because installed renderer clips oversized
+  non-wrapping items.
+- Plan 27A: PR [#3479](https://github.com/amruthpillai/reactive-resume/pull/3479), merged as
+  `f783908b0e0054869e4ecdae3f4cad75402e2fd5`; issue #3377 remains open pending controlled cold-server egress proof.
+- Plan 24A: PR [#3480](https://github.com/amruthpillai/reactive-resume/pull/3480), merged as
+  `cdb7bdd2fe06d491eb57f8c1aa93fa48011acdb5`; #3155/#2841 remain open pending numeric date-column geometry.
+- Plan 31 HTML residual: PR [#3481](https://github.com/amruthpillai/reactive-resume/pull/3481), merged as
+  `3e62a1d604041e3769a7fc8f5b2ec8224d0663a4`; #2844 remains open for public/export/manual accessibility evidence.
+- Plan 30 diagnostic: PR [#3482](https://github.com/amruthpillai/reactive-resume/pull/3482), merged as
+  `10eb3bdbc77a903a792f1e6bfa7cba0db9dea130`; #2845 remains open pending vendor-side evidence, and current measurements do not justify a preset.
+- Plan 18 diagnostic: PR [#3483](https://github.com/amruthpillai/reactive-resume/pull/3483), merged as
+  `11d619d3d9c7da87bb38463147a7aac4bc35b092`; #2683 remains open pending original JSON/browser evidence, and no synthetic mismatch justified a runtime change.
@@ -0,0 +1,21 @@
+# Address second independent review: plan 02
+
+Read `.orchestration/plan-02-rereview.md`, pinned approved plan 02, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/TDD/documentation skills. Reproduce the remaining finding before editing.
+
+Use strict TDD. Add failing regressions first, then make the smallest conservative fix within the original four-file scope:
+
+- For non-string object input, validate the supplied object in its original form before any serialization. Schema-invalid
+  objects must return a deterministic blocked manifest and must never produce `no-op`.
+- Cover at least a boxed string (`new String("")`) that serializes to a valid primitive and a schema-invalid object with a
+  custom `toJSON`. Assert the latter is not executed before validation when the input is invalid.
+- Keep JSON-text behavior: parse text, validate the parsed value exactly, and retain raw-versus-parsed normalization checks.
+- Preserve target presence invariants, strict source/target validation, deterministic hashes and reasons, pure/non-networked/
+  non-writing behavior, and existing documentation claims. Change docs only if implementation makes a current sentence false.
+
+Do not access private data, add DB/filesystem writes, implement legacy conversion, widen scope, or rewrite prior reports.
+Run focused RED/GREEN tests, tooling typecheck, relevant API/auth checks, boundaries, narrow Biome/Markdown when applicable,
+diff and four-file scope gates. Add a normal follow-up commit.
+
+Write `.orchestration/plan-02-review-fix-round2.md` with reproduction, RED/GREEN, exact commit/files, commands/results,
+skipped gates, and remaining risks. Do not push/open PR/merge/mutate issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,32 @@
+# Address third independent review: plan 02
+
+Read `.orchestration/plan-02-rereview-round3.md`, pinned approved plan 02, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/TDD/documentation skills. Reproduce both findings before editing.
+
+Use strict TDD. Narrow comparator public input contract to one serialized JSON request string. This is approved engineering
+correction: object-envelope inputs are no longer accepted. A non-string runtime argument must be rejected immediately,
+before any property access, schema parsing, serialization, accessor call, proxy trap, or caller method. Keep returned
+manifest deterministic and add an explicit stable invalid-input reason/identity convention where needed.
+
+After parsing the primitive string with `JSON.parse`, strictly validate complete envelope before hashing:
+
+- non-empty string case/source IDs and either null or non-empty string target ID;
+- literal booleans for all three safety flags; named gate failures still apply only to valid `false` values, while truthy
+  non-booleans are invalid input;
+- required JSON-compatible source/target values with target presence invariant retained;
+- no unknown envelope keys, executable/non-JSON values, NaN/Infinity, or lossy envelope normalization.
+
+Parsed JSON creates inert data; retain exact current-v5 resume validation, raw-vs-schema canonical equality checks,
+deterministic SHA-256 hashes, no-op/export-copy semantics, and pure/no-network/no-write/no-output behavior. Update migration
+docs to say comparator accepts a serialized comparison request only, not object arguments.
+
+RED regressions must cover each reported bypass: string `"false"` for each safety flag; numeric/empty IDs; top-level
+accessor/proxy objects with zero getter/trap calls; schema-valid changing getters if passed as object; malformed request
+JSON/NaN; distinct non-JSON-versus-null identity; all prior boxed-string/custom-`toJSON`/template/target mismatch cases.
+Adapt success tests to serialized request input. Prefer a small strict Zod input schema if available through public package
+exports; avoid custom recursive proxy detection because narrowing to JSON text removes that surface.
+
+Run focused RED/GREEN tests, tooling typecheck, relevant API/auth checks and typechecks, boundaries, narrow Biome/Markdown,
+static import, diff/four-file scope gates. Add normal follow-up commit. Write `.orchestration/plan-02-review-fix-round3.md`
+with reproductions, RED/GREEN, exact commit/files, commands/results, skipped gates, risks. Do not push/open PR/merge/mutate
+issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,25 @@
+# Address independent review: plan 02
+
+Read `.orchestration/plan-02-review.md`, pinned approved plan 02, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/TDD/documentation skills. Verify each finding with direct probes before editing. Three findings are
+provisionally accepted: lossy schema fallback can yield false no-op, target ID/data states can contradict, and migration docs
+overstate raw v4 JSON support.
+
+Use strict TDD. Add failing regressions first, then smallest conservative fixes within original four-file scope:
+
+- A source with schema-invalid value that current Zod `.catch` would normalize to target must never return `no-op`. Validate
+  without accepting lossy coercion/default mutation, or hash validated raw canonical input while explicitly detecting and
+  blocking lossy schema changes. Prefer safe false-block/export over false no-op. Cover source and target variants.
+- Enforce target presence invariant: target data and target resume ID are either both absent or both present. Encode a
+  discriminated input contract where practical and keep runtime validation for untyped callers. Both mismatch directions
+  return deterministic blocked manifest with named reason; no contradictory target hash/ID.
+- Clarify migration guide: only JSON text already conforming exactly to current v5 resume-data schema is accepted; raw v4
+  exports are unsupported; comparator performs no conversion; historical converter review remains separate prerequisite.
+- Add sentence that hashes prove content equality only, never ownership/source authenticity/recipient identity.
+
+Preserve pure/non-networked/non-writing behavior and deterministic manifest. Do not access private data, add DB/filesystem
+writes, implement legacy conversion, widen scope, or rewrite prior reports. Run focused RED/GREEN tests, tooling typecheck,
+relevant API/auth checks, boundaries, narrow Biome/Markdown, diff and four-file scope gates. Add normal follow-up commit.
+
+Write `.orchestration/plan-02-review-fix.md` with probes, RED/GREEN, exact commit/files, commands/results, skipped gates, and
+remaining risks. Do not push/open PR/merge/mutate issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,21 @@
+# Plan 07 late hosted-review fix
+
+Work in `/Users/amruth/orca/workspaces/reactive-resume/issue-2722-postgres-docs` on
+`codex/issue-2722-postgres-docs`. Current remote/local head should be
+`a7b8c4cc5754c1249534d0ed8993e67e57e2cb87`; PR #3457 stays open and unmerged.
+
+Read current instructions, pinned approved Plan 07, all implementation/review reports, complete `origin/main...HEAD`
+diff, and live PR thread `PRRT_kwDODuah5s6fnaBa` / comment `3942253797`. Revalidate current base/head/checks first.
+Run root Intent inventory before edit. Do not spawn subagents.
+
+Finding: numbered update flow is correctly introduced as image-quickstart-only, and repository alternative already uses
+`reactive_resume`; however repository users following that alternative can continue to image-only step 4 and run logs
+against nonexistent `reactive-resume`. Make path separation unmistakable and provide correct repository log command
+`docker compose logs -f reactive_resume` adjacent to its build update. Preserve image commands and app-only `--no-deps`
+policy; do not widen into dependency lifecycle or PostgreSQL upgrade changes.
+
+Use minimal docs edit. Validate both Compose service names/commands against current files, run Compose dry-runs,
+PostgreSQL/docs gates proportionate to changed claim, Markdown/link/command/diff/exact-scope checks. Commit locally with
+normal message. Do not push, reply, resolve thread, mutate issue, or merge. Write
+`.orchestration/plan-07-hosted-review-fix-round2.md` and send worker_done.
+
@@ -0,0 +1,16 @@
+# Address independent review: plan 07
+
+Read `.orchestration/plan-07-review.md`, approved plan 07 from pinned planning head, current `AGENTS.md`, RTK, and applicable
+documentation/receiving-code-review skills. Verify finding against current diff and runtime files. Finding is provisionally
+accepted: current update recipe pulls all Compose services while `postgres:latest` can cross major versions, contradicting
+separate-upgrade guidance.
+
+Edit only `docs/self-hosting/docker.mdx`. Make normal app update path pull and recreate only `reactive-resume`; do not pull or
+recreate PostgreSQL as part of app update. Direct database updates to separately chosen major-pinned image/provider upgrade
+procedure with backup/restore verification. Preserve existing app migration explanation and two-service topology. Do not add
+unsafe generic PostgreSQL commands, Compose/runtime changes, or new scope.
+
+Rerun focused update/PostgreSQL `rg`, Compose config, two-doc Markdown lint, internal-link inspection, `git diff --check`,
+and name-only scope. Amend or add a normal follow-up commit; do not rewrite reviewer report. Write
+`.orchestration/plan-07-review-fix.md` with exact commit, change, commands/results, skipped gates, and remaining risk. Do not
+push, open PR, merge, mutate issues, or spawn subagents. Final response at most ten lines.
@@ -0,0 +1,14 @@
+# Address plan 09 hosted-review follow-up finding
+
+Read `.orchestration/plan-09-hosted-review-rereview.md`, pinned approved plan 09, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/documentation skills. Verify finding in a disposable two-revision local repository before editing.
+
+Make smallest one-guide correction: add explicit plain-Git command that saves selected earlier `resume.json` revision to
+a new importable filename such as `recovered-resume.json`, without overwriting current `resume.json`. Direct following
+dashboard instruction to that recovered file. Preserve selected-commit log/show workflow, privacy warning, import-as-new
+behavior, no remote/push/global config/sync/destructive replacement, and two-doc base scope.
+
+Rerun synthetic two-revision workflow and prove selected earlier content exists in recovered file while current
+`resume.json` remains current. Run 152 focused tests, Markdown lint, forbidden-command/link/diff/scope gates. Commit normal
+follow-up. Write `.orchestration/plan-09-hosted-review-fix-round2.md` with verification, exact commit/files, commands/results,
+skips, risks. Do not push/merge/resolve threads/mutate issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,18 @@
+# Address independent review: plan 09
+
+Read `.orchestration/plan-09-review.md`, pinned plan 09, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/documentation skills. Verify two findings against current source before editing; both are provisionally
+accepted.
+
+Edit only two approved guide files:
+
+- In export guide, scope “excludes cover letter sections” to rendered PDF/DOCX/Markdown output and state JSON retains
+  embedded cover-letter custom sections. Keep distinction from independent cover-letter JSON.
+- In version-history guide, do not claim template changes create independent checkpoints. Describe template changes as
+  ordinary editing covered by throttled snapshots; retain accurate explicit import/AI/API/restore checkpoint statements.
+
+Do not alter local Git workflow, add runtime code, promise whole-account restore/sync, or widen scope. Rerun focused source
+checks, API/import/schema/web tests if wording relies on them, Markdown lint, synthetic Git workflow as needed,
+`git diff --check`, and two-file scope gate. Add normal follow-up commit. Write `.orchestration/plan-09-review-fix.md` with
+exact commit/files, verified source facts, commands/results, skipped gates, and risks. Do not push/open PR/merge/mutate
+issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,18 @@
+# Address independent review: plan 11
+
+Read `.orchestration/plan-11-review.md`, pinned approved plan 11, current `AGENTS.md`, RTK, and applicable
+receiving-code-review/documentation skills. Verify both findings against current source before editing.
+
+Make smallest documentation-only corrections within existing three-file scope:
+
+- Remove unqualified attachment promise from changelog. Prefer saying users can paste a job description there; keep exact
+  supported attachment details in guide where current MIME/direct-file qualifications already exist.
+- Remove adjacent duplication of review/restore/rollback guidance in `using-ai-agent.mdx`. Keep concise workflow step and
+  point to existing `Review patches` section, retaining full behavior explanation only once.
+
+Preserve verified history, current provider capability boundary, isolated AI Draft behavior, no invented removal motive,
+and no promise of paid JSearch restoration. Run focused source probes, Markdown lint, relevant targeted tests if claims
+changed, link/diff/three-file scope gates. Add normal follow-up commit.
+
+Write `.orchestration/plan-11-review-fix.md` with finding verification, exact commit/files, commands/results, skipped gates,
+and remaining risks. Do not push/open PR/merge/mutate issues/spawn subagents. Final response at most ten lines.
@@ -0,0 +1,27 @@
+# Fix review findings: Plan 16 editable imported tables
+
+Work only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3196-editable-tables` from exact head
+`83aca184e4eeb3a9ded36c1f222adf695ef6ca98`. Read current repository instructions, pinned approved Plan 16,
+implementation report, and `.orchestration/plan-16-review.md` completely. Revalidate `origin/main`, issue #3196, and
+overlap before editing. Run root Intent inventory and load matching local skills. No subagents.
+
+Fix every review finding with TDD while preserving existing supported-table behavior:
+
+1. Make unsupported-table detection fail closed before destructive Tiptap normalization. Conservatively reject any cell
+   descendant element/attribute/structure that cannot round-trip through configured editor schema. Cover at least a nested
+   `section` with `aria-label`, multiple `tbody` groups, malformed/repaired table markup, and other representative
+   unrepresented descendants. Ordinary edits, prop updates, lock/keyboard paths, and cancel must preserve exact original
+   HTML bytes for these cases. Do not widen unsafe HTML support.
+2. Follow pinned Plan 16: destructive conversion UX is outside this repair. Remove the `Convert to editable text` action
+   and `usePrompt` path entirely rather than inventing raw-text or normalized-HTML semantics. Test that unsupported content
+   exposes only an accessible read-only notice and no conversion affordance or ordinary interaction can overwrite it.
+3. Strengthen authenticated E2E so an unrelated Basics-name edit proves a real save transition and survives reload before
+   table assertions. Avoid accepting a stale pre-existing Saved status.
+
+Also preserve #3438 cases, supported 2x3 editing/paste/undo/redo/persistence, CSS precedence, PDF border geometry,
+dependency minimality, SSR/accessibility, and package boundaries. Keep product commit scope to intended implementation,
+tests, dependency/lockfile, and mandated orchestration report; do not push, publish, reply, or mutate issues.
+
+Run focused and broad web/PDF tests, affected typechecks, boundaries, frozen install, production build, narrow non-writing
+Biome, diff/scope gates, and dedicated isolated authenticated E2E. Commit fixes locally. Write findings resolved, RED/GREEN
+evidence, exact head, test results, and remaining limits to `.orchestration/plan-16-review-fix.md`; send `worker_done`.
@@ -0,0 +1,43 @@
+# Implement plan 02 synthetic recovery procedure
+
+Read first:
+
+1. Entire approved plan from local planning checkout only when its HEAD equals
+   `a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show` fallback below.
+2. Audit evidence: `/Users/amruth/orca/workspaces/reactive-resume/codex-audit-backend-01-06/.orchestration/revalidate-backend-01-06.md`, plan 02 section.
+3. Current worktree `AGENTS.md`, referenced issue/domain instructions, relevant ADRs, `/Users/amruth/.codex/RTK.md`.
+4. `/Users/amruth/.agents/skills/test-driven-development/SKILL.md`, its `writing-good-tests.md` reference,
+   `/Users/amruth/.agents/skills/karpathy-guidelines/SKILL.md`, and
+   `/Users/amruth/.agents/skills/documentation-writer/SKILL.md`.
+
+Portable plan fallback: fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/02-hosted-v4-account-recovery.md`.
+
+Implement only synthetic, non-networked recovery support. This is partial support for #3181, not production recovery; #2760
+remains a separate diagnostic. Do not access private/production data, spawn subagents, touch coordinator ledger/other
+worktrees, merge, push, create PR, or mutate issues.
+
+Required execution:
+
+- Confirm clean worktree; fetch current `origin/main`; rename branch `codex/issue-3181-recovery-procedure`; verify exact base;
+  run plan drift command; fetch live #3181/#2760 evidence; run root intent discovery.
+- Modify only `docs/self-hosting/migration.mdx`, `docs/guides/accessing-the-previous-version.mdx`, and new
+  `tooling/recovery/compare-resume.ts` plus `tooling/recovery/compare-resume.test.ts`. Stop if another file is truly required
+  and report before broadening.
+- TDD tooling strictly: write focused behavior test, run it and capture expected missing-feature failure, implement minimum,
+  rerun green, then refactor. Tests must exercise real function and hand-derived outcomes/hashes; no tautological helpers or
+  mock assertions.
+- Tool accepts already-exported JSON/current resume-shaped data only; no database URL or writes. Produce deterministic dry-run
+  manifest with synthetic IDs, source/target hashes, and outcome `no-op`, `export-copy`, or `blocked`. Cover identical,
+  old-only/divergent, owner-unverified/mapping-missing, unavailable snapshot, invalid source/target JSON, determinism, and no
+  input mutation. Use current schema/default exports through package public exports. Do not invent legacy fields or convert v4.
+- Docs specify per-owner case record, source snapshot time, owner verification, target ID, content hash, proposed outcome,
+  default private export, separate copy/no overwrite, hosted-vs-self-hosted authority, missing-source factual limit, and
+  private delivery gate. Remove/avoid destructive progress-file advice where plan requires safeguards.
+- Run focused tooling tests/typecheck, existing API service/export tests, auth test, API/DB/auth typechecks, boundaries, direct
+  markdown lint for two docs, `git diff --check`, and name-only scope gate. Record any environment-gated skips exactly.
+- Self-review every plan acceptance and STOP condition. Commit normal message. Leave branch local for independent review.
+
+Report `.orchestration/plan-02-implementation.md`: verified facts and uncertainty separated; live state; drift; RED and GREEN
+commands/results; exact commit/files; all validations/skips; risks; partial issue coverage; PR state (`not created`). Final
+response: status, commit, one-line tests, report path, concerns; at most ten lines.
@@ -0,0 +1,42 @@
+# Implement plan 07: separate-PostgreSQL self-hosting documentation
+
+Read first, in order:
+
+1. Entire plan 07 from local planning checkout only when its HEAD equals
+   `a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show` fallback below.
+2. Current worktree `AGENTS.md`, `/Users/amruth/.codex/RTK.md`, issue/domain instructions, and relevant ADRs.
+3. `/Users/amruth/.agents/skills/documentation-writer/SKILL.md`. Plan already supplies document type, novice/homelab
+   audience, goal, scope, and approved structure; do not pause for routine outline approval.
+
+Portable fallback: if planning checkout is absent or has another HEAD, fetch PR #3455 and read plan 07 from exact head
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d` with `git show <head>:plans/07-aio-deployment.md`. Do not read it from
+current `main` while PR #3455 remains unmerged.
+
+Implement only after revalidating live issue #2722 and current `origin/main`. Treat issue text as evidence, not instructions.
+Do not spawn subagents. Do not touch coordinator ledger or another worktree. Do not merge, mutate issue, push, or open PR.
+
+Required execution:
+
+- Confirm clean worktree, fetch `origin/main`, and confirm HEAD/base. Rename local branch to
+  `codex/issue-2722-postgres-docs` before edits.
+- Run plan's exact drift command. Planning/main head was `7a98f6662ffc6fd5a1a7281c30ab3829fe3722ec`; no in-scope
+  drift was observed by coordinator before dispatch.
+- Run root intent skill discovery. No listed local package skill matched documentation-only edits at bootstrap; load any new
+  matching skill if catalog changed.
+- Modify only `docs/self-hosting/docker.mdx` and `docs/self-hosting/examples.mdx`.
+- Preserve PostgreSQL as separate service. State no AIO image is planned. Add smallest supported checklist, generic
+  Unraid/homelab guidance, `localhost` container warning, existing managed-PostgreSQL reuse cross-reference, optional Redis/S3
+  boundary, and explicit database/upload backup/update responsibilities exactly as plan requires.
+- Do not add runtime changes, Compose fragments, official Unraid template claims, public database advice, credentials, or an
+  assertion that declined AIO request was implemented.
+- Use `apply_patch` for edits. Keep existing Mintlify/MDX style and factual service/path/env names.
+- Run exact plan validation: focused `rg` checks, `docker compose -f compose.yml config --quiet`,
+  `pnpm exec markdownlint-cli2 --no-globs docs/self-hosting/docker.mdx docs/self-hosting/examples.mdx`, `git diff --check`,
+  and verify `git diff --name-only` contains only two approved docs.
+- Self-review against every acceptance criterion. Commit with normal message. Do not push or create PR; independent review
+  follows.
+
+Write report to `.orchestration/plan-07-implementation.md` containing verified facts and uncertainty separately: live issue
+state, drift result, chosen documentation structure, exact commit SHA, files, commands/results, skipped gates, risks, coverage,
+and PR status (`not created`). Final response: status, commit, one-line validation summary, report path, concerns; no more than
+ten lines.
@@ -0,0 +1,36 @@
+# Implement plan 09: user-controlled Git backup documentation
+
+Read entire approved plan first from local planning checkout only when its HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show` fallback below. Then read current
+worktree `AGENTS.md`, referenced domain/issue instructions, relevant ADRs, `/Users/amruth/.codex/RTK.md`, and
+`/Users/amruth/.agents/skills/documentation-writer/SKILL.md`. Plan supplies document type, audience, goal, scope, and approved
+structure; do not pause for routine outline approval. Portable fallback: fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/09-external-version-backup.md`.
+
+Do not spawn subagents. Do not touch coordinator ledger or another worktree. Do not merge, mutate issues, push, or create PR.
+
+Required execution:
+
+- Confirm clean worktree, fetch current `origin/main`, rename branch `codex/issue-2705-git-backup-docs`, run exact drift
+  command, fetch live #2705 body/comments/state/linked PRs, and run root intent discovery before edits.
+- Revalidate current export shapes and history semantics from exact source/tests. Stop if exporter lacks required document
+  types or synthetic restore loses content; do not broaden into runtime fixes.
+- Modify only `docs/guides/exporting-your-resume.mdx` and
+  `docs/guides/undoing-changes-and-version-history.mdx`.
+- Document single-resume JSON, independent cover-letter JSON, and account archive differences; stable filenames; image URL
+  availability; private-data/repository-visibility warning; local-only Git workflow; non-destructive import-as-new recovery;
+  rolling in-app versions versus owner-managed Git. Correct planning prose before publication: every user-facing code block
+  must use ordinary `git init`, `git add -- ...`, `git diff`, `git commit`, and `git show`. Never publish agent-only
+  `rtk proxy git` commands. No automatic sync, credentials, remote URL, `git push`, whole-account restore promise, or new
+  product UI.
+- Use only synthetic data. Run API export/version tests specified by plan. Validate single-resume import round-trip using
+  existing synthetic fixtures/tests or a bounded disposable test; never use private data.
+- Execute command sequence in `mktemp -d`, staging only `resume.json` and `cover-letter.json`; show changed visible field in
+  `git diff`. Executor shell may wrap validation with `rtk proxy`, but copied documentation commands must remain plain Git.
+  Do not modify global Git config if identity missing; record limitation.
+- Run plan's focused `rg`, markdown lint, `git diff --check`, and two-file name-only gate. Self-review every acceptance item.
+- Commit with normal message. Leave branch local for independent review.
+
+Write report `.orchestration/plan-09-implementation.md`: verified facts vs uncertainty, live state, drift, exact commit/files,
+commands/results, fixture details, skipped gates, risks, issue coverage, PR status (`not created`). Final response: status,
+commit, one-line tests, report path, concerns; at most ten lines.
@@ -0,0 +1,43 @@
+# Implement plan 10: prospective retired-link attempt notices
+
+Read approved plan 10 from local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/10-legacy-link-routing.md`. Read current `AGENTS.md`, RTK,
+issue/domain/DB migration guidance, ADRs, and applicable brainstorming/TDD skills. Approved prospective direction and routine
+limits bind; do not ask them again. Run root Intent inventory and load matching local skill before edits. Do not spawn
+subagents, touch ledger, mutate issues, merge, push, or create PR.
+
+Start clean from refreshed `origin/main`, rename branch `codex/issue-2836-retired-link-notices`, revalidate issue 2836/open
+PRs/current source, and run exact drift. Historical cause remains unknown: reference issue without closing keyword. Scope is
+future slug changes under unchanged current username, 90 days, newest 50 per resume, aggregate owner-only attempts, safe 404;
+no redirects, email/push, backfill, username history, visitor identity, or historical recovery.
+
+Strict TDD, one coherent migration/API/UI/docs/E2E unit:
+
+- Add additive `resume_retired_link` table: generated ID, cascading owner/resume FKs, retired username/slug/timestamp,
+  aggregate attempt count and nullable last attempt. Unique username+slug, resume+retired index. No IP, UA, email, content.
+  Generate one migration via repository workflow against disposable PostgreSQL only; review SQL/snapshot for no drops/rewrites.
+- Add pure/service tests before code for old-path capture inside existing locked slug transaction, unchanged slug no-op,
+  rollback atomicity, prune expired and beyond newest 50, live-path reuse removal, same-owner reuse, current-route priority,
+  renamed username/deleted/private/expired/competing route denial.
+- On no-current-row lookup only, recognize valid retired path, best-effort increment outside rolled-back NOT_FOUND transaction,
+  and always return original indistinguishable 404. Owner excluded. Separate one-hour dedup with hard 50,000 active-entry cap:
+  prune expired then evict oldest. Unknown probes allocate nothing. Count failure remains 404 and never increments views.
+- Protected owner listing only: verify resume ownership, lazy expiry prune, at most 50 sanitized newest-first records. Preserve
+  existing statistics response shapes. Another owner/missing resume denied.
+- Owner Statistics UI: empty state omitted; recorded paths show aggregate count/last attempt and explicit prospective
+  90-day/50-path/same-username limits. No visitor data or notification toggle. Lingui messages and focused DOM tests.
+- Public sharing guide documents exact limits. No public route response change needed.
+- E2E with disposable accounts/DB: rename first→second, anonymous old 404 increments once with dedup, live new path view
+  independent, owner old-path excluded, cross-owner denied, private/deleted/expired no leak, live reuse wins/removes retired
+  attribution. Correct audit gate: run `public-sharing.spec.ts`, not unrelated dashboard `resume-views.spec.ts`.
+
+Use `.env.retired-links-test.local` only if it is clearly disposable; never production DB. Run RED/GREEN DB/API/web tests,
+migration generate/apply fresh and populated upgrade, DB/API/web typechecks, translation extraction, boundaries, build,
+focused E2E plus public-sharing, narrow non-writing Biome, and diff/migration/scope review. Disclose/inspect write-capable
+`pnpm check`. Stop on unreliable transaction attribution, uniqueness drift, migration uncertainty, or privacy leak. Commit
+locally; no push/PR before independent review.
+
+Write `.orchestration/plan-10-implementation.md`: live/drift state, exact migration/base, facts vs uncertainty, RED/GREEN,
+commit/files, tests/results, skipped DB/E2E gates, privacy/transaction risks, partial issue coverage, PR `not created`. Final
+response at most ten lines.
@@ -0,0 +1,29 @@
+# Implement plan 11: JSearch removal and tailoring documentation
+
+Read entire approved plan first from local planning checkout only when its HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show` fallback below. Then read current worktree
+`AGENTS.md`, referenced issue/domain instructions, relevant ADRs, `/Users/amruth/.codex/RTK.md`, and
+`/Users/amruth/.agents/skills/documentation-writer/SKILL.md`. Plan supplies document type, audience, goal, scope, and approved
+structure; do not pause for routine outline approval. Portable fallback: fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/11-job-search-policy.md`.
+
+Do not spawn subagents. Do not touch coordinator ledger or another worktree. Do not merge, mutate issues, push, or create PR.
+
+Required execution:
+
+- Confirm clean worktree, fetch current `origin/main`, rename branch `codex/issue-3010-jsearch-docs`, run exact drift command,
+  fetch live #3010 body/comments/state/linked PRs, and run root intent discovery before edits.
+- Verify release history, current job-search redirect, agent tools, provider/model capability policy, and attachment UI before
+  wording claims. Stop if release history contradicts removal attribution or documented UI steps do not exist.
+- Modify only `docs/changelog/index.mdx`, `docs/guides/using-ai-agent.mdx`, and
+  `docs/guides/ai-agent-tools.mdx`.
+- Add factual v5.1.0 migration note, current controlled tailoring workflow using plan's exact synthetic job description, review
+  and undo guidance, pasted/attached-content behavior, and live-search capability distinction. No unverified removal motive,
+  paid JSearch restoration, stale model list, provider credentials, or promise that chat is equivalent structured search.
+- Run exact API tool/capability tests and plan's focused `rg`, markdown lint, `git diff --check`, and three-file name-only gate.
+  Record real-provider/browser workflow as optional unavailable validation when not run.
+- Self-review every acceptance criterion. Commit with normal message. Leave branch local for independent review.
+
+Write report `.orchestration/plan-11-implementation.md`: verified facts vs uncertainty, live state, drift, exact commit/files,
+commands/results, skipped gates, risks, issue coverage, PR status (`not created`). Final response: status, commit, one-line
+tests, report path, concerns; at most ten lines.
@@ -0,0 +1,34 @@
+# Implement plan 15A: opt-in picture cover/contain
+
+Read entire approved plan from local planning checkout only when its HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned portable fallback:
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/15-picture-fitting-and-style.md`. Read current `AGENTS.md`,
+RTK, issue/domain instructions, ADRs, and applicable skills. Run root Intent inventory and load matching local skill before
+source edits. Do not spawn subagents. Do not touch ledger, mutate issues, merge, push, or create PR.
+
+Start from refreshed `origin/main`, require clean worktree, rename branch `codex/issue-2782-picture-fit`, revalidate live
+issue 2782 and all open implementation PRs, and run plan drift check. Stop on overlapping implementation or contradicted picture
+contract. Historical #3168/#3088/#2794 causes remain outside this implementation and must not be claimed fixed.
+
+Strict TDD and bounded scope:
+
+- First add failing schema compatibility and picture-fit geometry/UI tests. Record exact RED output before implementation.
+- Add `fit: z.enum(["cover", "contain"]).catch("cover")` to picture schema and `fit: "cover"` to defaults/required
+  fixtures. Old and invalid JSON parse as cover; contain round-trips. No DB migration.
+- Add named Cover/Contain control through existing form/draft path. Cover retains crop flow. Contain uploads selected full file
+  via existing endpoint without cropped-canvas construction. Preserve validation, cancel/error/locked behavior, save/reload,
+  and undo. Explain that switching cannot restore pixels already cropped; no asset history or new endpoint.
+- Make sidebar preview and shared PDF renderer consume selected fit. Preserve frame/aspect/border/shadow/rotation and normal
+  Semantic CSS precedence. Inspect every template image consumer; change only paths that bypass shared fit.
+- Use synthetic marked square/landscape/portrait images. Assert contain retains all edges and centers within one pixel; cover
+  preserves old crop geometry; test border/shadow branches and semantic `object-fit: cover` override.
+- Add/extend authenticated synthetic E2E for full-image upload, persistence, JSON/browser/server PDF parity when environment
+  supports it. Never use reporter/private assets.
+
+Run focused schema/web/PDF tests, affected typechecks, boundaries, full build, and plan E2E against dedicated disposable DB.
+Use narrow non-writing Biome inspection; if `pnpm check` runs, disclose it is write-capable and inspect diff. Run
+`git diff --check` and scope/name-only checks. Commit locally with normal message; leave for independent review.
+
+Write `.orchestration/plan-15a-implementation.md`: verified facts vs uncertainty, live/drift state, RED/GREEN evidence, exact
+commit/files, tests/results, skipped gates, visual/raster evidence, risks, issue coverage, PR `not created`. Final response at
+most ten lines.
@@ -0,0 +1,36 @@
+# Implement plan 16: editable imported rich-text tables
+
+Read entire approved plan from local planning checkout only when its HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned portable fallback:
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/16-imported-table-borders.md`. Read current `AGENTS.md`, RTK,
+issue/domain instructions, ADRs, and applicable skills, including test-driven-development. Run root Intent inventory and load
+matching local skill before source edits. Do not spawn subagents. Do not touch ledger, mutate issues, merge, push, or open PR.
+
+Start from refreshed `origin/main`, require clean worktree, rename branch `codex/issue-3196-editable-tables`, revalidate live
+issue 3196 and open PRs, and run exact drift check. Preserve merged #3438. Historical screenshot equivalence remains unverified
+without source, but Q11 independently approves supported table editing.
+
+Implement one atomic TDD unit across editor/HTML/PDF:
+
+- Add failing `rich-input.table` tests first and record exact RED output: supported 2x3 table parses as structured Tiptap
+  JSON; mount emits no change; named-cell edit affects one cell; undo/redo and remount retain rows/cells/text; HTML reimports
+  equivalently. Include colspan/rowspan, multiple paragraphs, inline marks, paste, and unrelated prop updates.
+- Register native Tiptap table/row/header/cell support with smallest required dependencies and frozen lockfile changes.
+  Preserve supported widths/spans/borders and existing `emitUpdate: false` behavior.
+- Detect unsupported structured markup before destructive normalization. Retain exact original HTML, expose accessible read-only
+  notice, and prevent ordinary edits from overwriting it. Cover locked, keyboard, reopen, and cancellation behavior. Stop if
+  implementation needs broader HTML security policy or arbitrary editor extensions.
+- Keep explicit CSS precedence and borderless tables borderless. Legacy HTML `border` mapping is outside initial scope unless
+  an exact fixture proves it is first failure; then stop and report fork rather than widening silently.
+- Extend actual PDF integration: assert six cell coordinates plus exact horizontal/vertical border operators and fixed-DPI
+  pixels for supported CSS borders in legacy/semantic modes. Unsupported fallback must remain lossless. Text-only assertion
+  cannot pass.
+- Add focused synthetic import E2E covering edit, undo/redo, save/reload, unrelated edit, browser/server PDF. No private data.
+
+Run initial RED, focused web/PDF GREEN suites including existing #3438 test, web/PDF typechecks, boundaries, full build, and
+plan E2E against dedicated disposable DB. Use narrow non-writing Biome; disclose/inspect any write-capable `pnpm check`.
+Run `git diff --check` and scope inspection. Commit locally with normal message; no push/PR before independent review.
+
+Write `.orchestration/plan-16-implementation.md`: verified facts vs uncertainty, live/drift state, exact RED/GREEN evidence,
+dependency/lockfile changes, commit/files, commands/results, skipped gates, risks, historical issue limitation, PR `not
+created`. Final response at most ten lines.
@@ -0,0 +1,37 @@
+# Implement plan 19: scoped literal rich-text whitespace
+
+Read approved plan 19 from local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/19-literal-rich-text-whitespace.md`. Read current `AGENTS.md`,
+RTK, issue/domain guidance, ADRs, applicable TDD skills, and completed Plan 16 implementation/review reports. This unit must
+start from or rebase onto reviewed Plan 16 head because both own rich editor/HTML seams; never implement concurrently. Run
+root Intent inventory and load matching local skill before edits. Do not spawn subagents, touch ledger, mutate issues, merge,
+push, or create PR.
+
+Require clean dependent worktree, revalidate issue 3397/open PRs/current main and Plan 16 head, rename branch
+`codex/issue-3397-literal-whitespace`, and record exact stacked base. Preserve paragraph indentation, Unicode-space fixes, and
+table-cell support. Approved persisted marker is `data-resume-whitespace="preserve"`; unmarked legacy HTML must remain
+unchanged. No global whitespace mode, NBSP substitution, code-block feature, or tab-key redesign.
+
+Strict TDD, atomic web/PDF/DOCX contract:
+
+- Record current GREEN characterization. Add failing marked paragraph/heading tests while existing unmarked ASCII collapse,
+  pretty-printed import, Unicode spaces, indentation, lists, quotes, Enter/Shift+Enter, and table regressions remain green.
+- Newly authored blocks and blocks receiving text-input/paste mark preservation; mount, prop update, and unmarked legacy import
+  do not mark or emit saves. Exact leading/interior/trailing spaces and tab codepoints survive save/remount, undo/redo,
+  paragraph↔heading, list transitions without data loss, marks, line breaks, RTL, and supported Plan 16 table cells.
+- Scope editor display behavior to marked nodes. Preserve unsupported-content channel from Plan 16.
+- PDF preserves only marked node-local whitespace. One tab adds exactly four ordinary-space advances; two add eight,
+  independent of current x. Spaces remain breakable; narrow content never disappears. Do not disable dependency collapse
+  globally; patch CJS/ESM and frozen install only if no smaller neutral adapter exists.
+- DOCX emits preserved-space representation and the same logical four-space tab contract; verify XML plus rendered geometry
+  when claiming visual width.
+- Add synthetic authenticated E2E: type/paste, save/reload, JSON/PDF/DOCX export, exact codepoints and output geometry. No
+  private content.
+
+Run focused web/PDF/DOCX tests including Plan 16 table regressions, affected typechecks, boundaries, full build, E2E against
+dedicated DB, narrow non-writing Biome, and diff/scope gates. Disclose/inspect any write-capable `pnpm check`. Commit locally;
+no push/PR before independent review.
+
+Write `.orchestration/plan-19-implementation.md`: exact dependency/base, live/drift state, facts vs uncertainty, RED/GREEN,
+commit/files, tests/results, skipped visual/E2E gates, risks, issue coverage, PR `not created`. Final response at most ten lines.
@@ -0,0 +1,37 @@
+# Implement plan 20A: compact hidden-section recovery
+
+Read approved plan 20 from local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/20-section-restoration.md`. Read current `AGENTS.md`, RTK,
+issue/domain guidance, relevant ADRs, and applicable brainstorming/TDD/frontend skills. Plan supplies approved UX direction;
+do not pause for routine product choices. Run root Intent inventory and load matching local skill before edits. Do not spawn
+subagents, touch ledger, mutate issues, merge, push, or create PR.
+
+Start clean from refreshed `origin/main`, rename branch `codex/issue-2921-hidden-section-recovery`, revalidate live issues
+2921/3378/3265 and open PRs, and run exact plan drift check. This unit implements 20A for verified issue 2921. Reporter
+forensics for 3378/3265 stay open. Do not claim missing/deleted content recovery or implement Layout placement in this unit.
+
+Strict TDD, exact scope:
+
+- First add failing pure tests for known printable section inventory: built-ins, summary, real custom sections; hidden and
+  placement locations independent; duplicate/later-page/sidebar locations; unknown IDs excluded; picture/basics/UI-only
+  custom container excluded; no mutation. Implement proposed `getSectionAvailability` in `@reactive-resume/resume` with an
+  explicit export. Include validated placement operation only if required by plan's shared helper contract, but do not expose
+  20B UI or auto-place anything.
+- Add failing DOM tests then compact Hidden sections UI. Keep Picture/Basics normal. Remove full editor panels only for hidden
+  printable sections. List built-in, summary, and individual custom sections by effective localized title. Show changes only
+  existing hidden flag through `useUpdateResumeData`; retain content, item order, and all saved layout IDs.
+- Preserve custom-section editor container behavior when only some custom children are hidden. Hidden-but-unplaced Show must
+  not choose placement. Sidebar icon navigation must focus/open recovery entry. Controls need accessible names, keyboard
+  behavior, locked-state disablement, and undo semantics.
+- Use named props types and existing UI primitives. New strings through Lingui workflow. No schema, PDF, importer, reset,
+  deletion, title-default, or layout-placement semantics changes.
+- Add authenticated synthetic E2E: hide built-in/summary/custom, save/reload, compact entries present, PDF text absent; Show,
+  same layout reference/output returns; undo/redo and locked state. Do not use reporter data.
+
+Record initial RED and final GREEN. Run resume/web focused tests including existing visibility/menu/navigation regressions,
+affected typechecks, boundaries, full build, and focused E2E against dedicated disposable DB. Use narrow non-writing Biome;
+disclose/inspect any write-capable `pnpm check`. Run diff/scope checks. Commit locally; no push/PR before independent review.
+
+Write `.orchestration/plan-20a-implementation.md`: live/drift state, facts vs uncertainty, RED/GREEN evidence, exact commit
+and files, tests/results, skipped gates, risks, issue-specific coverage, PR `not created`. Final response at most ten lines.
@@ -0,0 +1,33 @@
+# Implement plan 23A: authored-page versus overflow guidance
+
+Read approved plan 23 from local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/23-pagination-controls.md`. Read current `AGENTS.md`, RTK,
+issue/domain guidance, ADRs, and applicable brainstorming/TDD/frontend skills. Plan and Q10 supply approved direction; do not
+pause for routine wording/layout choices. Run root Intent inventory and load matching local skill before edits. Do not spawn
+subagents, touch ledger, mutate issues, merge, push, or create PR.
+
+Start clean from refreshed `origin/main`, rename branch `codex/issue-3090-authored-page-guidance`, revalidate issues 3090 and
+3350 plus open PRs, and run plan drift check. This is only 23A/Q10 guidance for issue 3090. Do not add item keep-together,
+widow/orphan controls, renderer-generated page records, schema changes, or claim issue 3350 fixed.
+
+TDD and bounded implementation:
+
+- Add failing Layout UI test with one authored page and multiple physical-render-page evidence/stub. Guidance must identify
+  authored pages versus automatic PDF overflow, name existing `Move to` → `New Page` and full-width controls accurately, and
+  make clear physical overflow pages are not separately saved/editable.
+- Add concise, accessible guidance at owning Layout pages surface using existing UI primitives and Lingui strings. Link or
+  focus existing controls only if current component contracts support it without new state. Preserve existing warning and
+  avoid duplicative copy.
+- Prove rendering guidance does not mutate `metadata.layout.pages`, add page records, change section assignment, or alter PDF
+  behavior. Cover keyboard/accessibility and locked state where relevant.
+- Extend synthetic Azurill case: automatic overflow retains all content; manually authored second full-width page remains an
+  independent saved layout choice. Do not promise independent styling of physical overflow.
+
+Record initial RED then GREEN. Run focused Layout/page tests, relevant PDF pagination regression if touched by test harness,
+web typecheck, boundaries, full build, focused E2E if existing infrastructure can observe guidance without private data,
+Lingui extraction/catalog checks, narrow non-writing Biome, `git diff --check`, and scope review. Commit locally; no push/PR
+before independent review.
+
+Write `.orchestration/plan-23a-implementation.md`: live/drift state, facts vs uncertainty, RED/GREEN, exact commit/files,
+tests/results, skipped gates, risks, partial issue coverage, PR `not created`. Final response at most ten lines.
@@ -0,0 +1,36 @@
+# Implement plan 32: one-shot chronological section sort
+
+Read approved plan 32 from local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/32-section-date-sorting.md`. Read current `AGENTS.md`, RTK,
+issue/domain guidance, ADRs, and applicable brainstorming/TDD skills. Approved direction fixes behavior; do not ask routine
+interaction questions. Run root Intent inventory and load matching local skill before edits. Do not spawn subagents, touch
+ledger, mutate issues, merge, push, or create PR.
+
+Start clean from refreshed `origin/main`, rename branch `codex/issue-2725-one-shot-sort`, revalidate live issue 2725 and open
+PRs, and run exact drift. Ensure no active owner touches same section menus. Plan 24 is presentation-only; do not stack unless
+current source truly requires its interface. This increment is one-shot Experience/Education only, not autosort or full issue
+closure.
+
+Strict TDD and contract:
+
+- First characterize existing `parsePeriod` for numeric/localized/ongoing/year-only/reversed/blank/bare-Present/prose/equal
+  values without changing parser or ATS behavior. Record nullable cases.
+- Add failing tests for pure `sortSectionItemsByPeriod(items, locale): { items, unresolvedIds }` in `packages/resume` and
+  an intentional public export. New array, original item objects/content/IDs unchanged, identical multiset, no input mutation.
+- Total order: ongoing first by descending start; known-ended by descending end then start; stable ties. Mixed precision uses
+  internal `[year, month ?? 0]`; never persists fabricated dates. Missing known endpoint ranks after known. Unresolved and
+  reversed entries remain stable at end; return their exact IDs. Cover transitivity, determinism/repeat invocation,
+  empty/single, localized months, year-only, bare Present, blank, prose, reversed, and stable equal ranges.
+- Add existing-menu one-shot action only for built-in Experience/Education through one `useUpdateResumeData` draft mutation.
+  One undo restores exact order; save/reload retains chosen order; later edits never resort. Locked state disables action.
+  Concise Lingui notice identifies only affected entries in current section, preferably safe title or ID semantics supported by
+  current notification patterns; do not expose unrelated resume content.
+- No schema setting, persistent autosort, Date.parse, free-text rewrite, role/custom-section sort, or implicit render/save sort.
+
+Record RED and GREEN. Run period/helper tests, focused web menu/undo tests, resume/web typechecks, boundaries, build, Lingui
+catalog checks, and synthetic authenticated persistence E2E if feasible. Use narrow non-writing Biome; disclose/inspect any
+write-capable `pnpm check`. Run diff/scope checks. Commit locally; no push/PR before independent review.
+
+Write `.orchestration/plan-32-implementation.md`: live/drift state, facts vs uncertainty, RED/GREEN, exact commit/files,
+tests/results, skipped gates, risks, partial issue coverage, PR `not created`. Final response at most ten lines.
@@ -0,0 +1,27 @@
+# Independent rereview: Plan 02 hosted feedback fix
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3181-recovery-procedure`.
+Exact target head: `325d1fcd1e2ea3744896c1688c6f6c0bfc3dd5ce`. Do not edit tracked files, commit, push, reply,
+resolve threads, publish, merge, or mutate issues.
+
+Read current repository instructions, pinned approved Plan 02, prior review reports, hosted-review fix report, full
+`origin/main...HEAD` diff, live PR #3460, and all four unresolved hosted threads. Refresh base and verify exact head.
+Run root Intent inventory and load matching review skill if any; no subagents.
+
+Review Standards and Spec independently. Verify especially:
+
+- `caseId`, `sourceResumeId`, and non-null `targetResumeId` reject all Unicode control (`Cc`) and format (`Cf`)
+  characters, including embedded and format-only U+200B, U+2066, U+202E, and U+FEFF values;
+- safe accepted identifiers remain byte-preserving and unnormalized;
+- strict current-v5 canonical equality and duplicate-member scanner remain fail-closed;
+- autofix cleanup is retained and no scope expansion or contract weakening occurred;
+- migration guidance exactly matches executable validation and does not imply raw-v4 conversion or real recovery;
+- Codacy scanner-complexity and scanner-coverage comments are non-actionable or already satisfied, and relaxing
+  canonical equality would violate approved direction;
+- all 83 comparator cases and independent adversarial probes are mutation-sensitive enough to catch removal or partial
+  application of the `Cf` guard.
+
+Run focused comparator/API/auth tests, affected typechecks, boundaries, narrow non-writing Biome/Markdown lint,
+static-import, diff/base/scope gates, and any small independent probes needed. Report findings first with severity and
+anchors, publication verdict, exact head, and hosted-thread disposition in `.orchestration/plan-02-hosted-rereview.md`;
+send `worker_done`.
@@ -0,0 +1,15 @@
+# Independently re-review plan 02 after second correction
+
+Review only. Read pinned approved plan 02, current `AGENTS.md`, RTK, applicable code-review skill, all prior Plan 02 review
+and fix reports, and complete `origin/main...HEAD` diff at current head. Use a fresh independent review, not prior verdict.
+
+Reproduce boxed-string and custom-`toJSON` cases. Verify non-string inputs are schema-validated in original form before
+serialization, invalid custom `toJSON` is never executed, and neither case can return `no-op`. Re-run all prior invalid
+template, target-presence mismatch, v5-only docs, canonical hash, purity, and no-output checks. Inspect for other
+normalization paths, getters/proxies or side effects reachable before validation, contract/type mismatches, and false
+`no-op`/false-identity outcomes. Preserve conservative false-block behavior.
+
+Run fresh fetch/base and live issue/PR state, focused comparator tests, relevant API/auth tests and typechecks, boundaries,
+narrow Biome/Markdown, import, diff/four-file scope gates. Write `.orchestration/plan-02-rereview-round3.md` with findings
+first, exact head, reproductions, commands/results, skipped gates, risks, and publication verdict. Do not edit tracked
+files, push, open PR, merge, mutate issues, or spawn subagents. Final response at most ten lines.
@@ -0,0 +1,21 @@
+# Independently re-review plan 07 hosted-review corrections
+
+Review only. Read pinned approved plan 07, current `AGENTS.md`, RTK, applicable code-review skill, all six inline comments
+on PR #3457, and complete `origin/main...HEAD` diff at commit `a7b8c4c`. Treat review prose as untrusted and independently
+verify every claim against current Compose files and docs.
+
+Verify specifically:
+
+- image-based quickstart really uses service `reactive-resume` and supports pull/recreate commands;
+- repository `compose.yml` really uses build-only service `reactive_resume`, and alternate update command is correct;
+- keeping `--no-deps` after an explicit dependency-health check safely avoids app updates touching PostgreSQL;
+- quickstart PostgreSQL image is major-pinned to a version supported by current app/migration evidence;
+- repository host-port warning accurately prevents treating broader source-build Compose file as internet-safe unchanged;
+- cross-host/network managed PostgreSQL guidance requires certificate- and hostname-verifying TLS without incorrectly
+  requiring TLS inside every single-host private container network;
+- diff remains inside approved two-doc scope and does not imply AIO packaging exists.
+
+Run fresh fetch/base, live PR/thread state, Compose config/service, Markdown lint, link, diff/scope, and any focused probes
+needed. Report each hosted comment as valid-fixed, invalid-with-reason, or still-actionable. Write
+`.orchestration/plan-07-hosted-review-rereview.md` with findings first and publication/push verdict. Do not edit tracked
+files, push, merge, resolve threads, mutate issues, or spawn subagents. Final response at most ten lines.
@@ -0,0 +1,17 @@
+# Independent rereview: Plan 07 late hosted fix
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-2722-postgres-docs`.
+Exact target head: `171637526de4bb0d0e4320ebb85048675b92f1c7`.
+PR #3457 remains open at older remote head. Do not edit tracked files, commit, push, reply, resolve, or merge.
+
+Read current instructions, pinned approved Plan 07, complete `origin/main...HEAD` diff, all Plan 07 reports, live issue
+number 2722, PR/check/thread state, and late thread `PRRT_kwDODuah5s6fnaBa`. Refresh base and verify target head.
+
+Independently verify image quickstart and repository source-build update paths are unmistakably separate through log
+inspection. Both paths must use correct service names; image path retains pull/up/log commands for `reactive-resume`;
+repository path uses build/up/log commands for `reactive_resume`, no pull, app-only `--no-deps`, and no dependency or
+PostgreSQL lifecycle widening.
+
+Run both Compose config validations and dry-runs, focused DB test, Markdown/link/command/diff/exact-scope gates. Review
+full diff for standards and approved-plan compliance. Write `.orchestration/plan-07-hosted-review-rereview-round2.md`
+with findings first and publication verdict, then send worker_done. No subagents.
@@ -0,0 +1,15 @@
+# Independently re-review plan 09 hosted-review correction
+
+Review only. Read pinned approved plan 09, current `AGENTS.md`, RTK, applicable code-review skill, prior Plan 09 review/fix/
+rereview reports, and both inline comments on PR #3458. Review complete `origin/main...HEAD` diff at current head.
+
+Verify duplicated hosted finding is resolved: instructions list commits affecting `resume.json`, use a user-selected commit
+reference rather than `HEAD`, and still recover by saving selected JSON then importing as a new resume. In a disposable
+local repository with at least two committed resume versions, prove `git log --oneline -- resume.json` identifies both and
+`git show <selected>:resume.json` returns chosen earlier content. Ensure user-facing commands remain plain Git with no RTK,
+remote, credentials, push, global config, sync, destructive replacement, or whole-account restore promise.
+
+Revalidate all previously corrected export/cover-letter/version-history claims, exact two-doc scope, fresh base/live PR
+state, focused tests, Markdown lint, diff/scope. Write `.orchestration/plan-09-hosted-review-rereview.md` with findings
+first, exact head, commands/results, skipped gates, risks, and push/thread-resolution verdict. Do not edit tracked files,
+push, merge, resolve threads, mutate issues, or spawn subagents. Final response at most ten lines.
@@ -0,0 +1,15 @@
+# Independently re-review plan 09 after recovered-file fix
+
+Review only. Read pinned approved plan 09, current `AGENTS.md`, RTK, applicable code-review skill, all Plan 09 review/fix
+reports, and complete `origin/main...HEAD` diff at current head.
+
+Reproduce full documented Git workflow in fresh disposable two-revision repository. Verify path-filtered log identifies
+both revisions, selected commit inspection is correct, explicit save command creates importable recovered JSON containing
+earlier content, tracked current `resume.json` remains current and unmodified, and dashboard prose points to recovered
+file/import-as-new path. Assess output-filename clobber risk against wording; report if still misleading.
+
+Revalidate all prior export, cover-letter, history, privacy, image, no-sync/no-remote/no-destructive-replacement claims;
+fresh base/live PR/thread state; 152 focused tests; Markdown/link/forbidden-command/diff/two-doc scope gates. Write
+`.orchestration/plan-09-rereview-round3.md` with findings first, exact head, commands/results, skips, risks, and push/thread-
+resolution verdict. Do not edit tracked files, push, merge, resolve threads, mutate issues, or spawn subagents. Final
+response at most ten lines.
@@ -0,0 +1,19 @@
+# Independent rereview: Plan 09 round 4
+
+Review only. Assigned worktree:
+`/Users/amruth/orca/workspaces/reactive-resume/issue-2705-git-backup-docs`.
+
+Target local head: `4ffdd96bdda668513e26051a52c971d546e01bff`.
+PR #3458 remote head remains older. Do not edit tracked files, commit, push, resolve threads, or merge.
+
+Read current instructions, pinned approved Plan 09, full `origin/main...HEAD` diff, implementation/fix reports, and every
+prior review report. Revalidate current `origin/main`, live issue #2705, PR #3458, checks, and unresolved threads.
+
+Primary acceptance: revised recovery prose must require a fresh/unused output filename at command site; following it must
+preserve an existing sentinel output, create a valid importable earlier revision under a distinct name, and leave tracked
+`resume.json` unchanged. Confirm all prior factual corrections and all nine approved commands remain coherent.
+
+Run 152 focused tests, disposable two-revision recovery workflow, Markdown/link/command/forbidden-command/diff/scope
+gates. Review complete diff for standards and approved-plan compliance. Report findings first with severity and anchors.
+Write `.orchestration/plan-09-rereview-round4.md`, then send worker_done with publication verdict. No subagents.
+
@@ -0,0 +1,15 @@
+# Independently re-review plan 11 hosted-review corrections
+
+Review only. Read pinned approved plan 11, current `AGENTS.md`, RTK, applicable code-review skill, all Plan 11 reports,
+and two inline comments on PR #3459. Review complete `origin/main...HEAD` diff at current head.
+
+Verify both hosted wording corrections are coherent: user-facing example uses accessible “sample” terminology without
+weakening fictional-data safety, and section/link text “Review edits and patches” aligns with exact **Review edits** UI
+label while still covering patch inspection and restore. Verify anchor resolution and no stale `#review-patches` links.
+Revalidate previous attachment, history, provider capability, isolated AI Draft, patch/restore, scope, and no-invented-
+motive findings.
+
+Run fresh base/live PR/thread state, relevant source probes and focused tests, Markdown/link/diff/three-doc scope gates.
+Write `.orchestration/plan-11-hosted-review-rereview.md` with findings first, exact head, commands/results, skipped gates,
+risks, and push/thread-resolution verdict. Do not edit tracked files, push, merge, resolve threads, mutate issues, or spawn
+subagents. Final response at most ten lines.
@@ -0,0 +1,15 @@
+# Independently re-review plan 11 after corrections
+
+Review only. Read pinned approved plan 11, current `AGENTS.md`, RTK, applicable code-review skill,
+`.orchestration/plan-11-review.md`, and `.orchestration/plan-11-review-fix.md`. Review complete `origin/main...HEAD` diff,
+not only follow-up commit.
+
+Verify both prior findings are fully resolved: changelog no longer promises arbitrary attachment-based tailoring, and
+workflow no longer duplicates adjacent patch review/restore/rollback guidance. Revalidate history, redirect, provider
+capability boundary, supported supplied-description paths, isolated AI Draft behavior, patch review/restore semantics,
+three-doc scope, and absence of invented removal motive or JSearch restoration promise.
+
+Run fresh fetch/base and live issue/PR state checks, source probes, relevant focused tests, Markdown lint, link/diff/scope
+gates. Write `.orchestration/plan-11-rereview.md` with findings first, exact head, commands/results, skipped gates, risks,
+and publication verdict. Do not edit tracked files, push, open PR, merge, mutate issues, or spawn subagents. Final response
+at most ten lines.
@@ -0,0 +1,27 @@
+# Independent rereview: Plan 15A picture fit
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-2782-picture-fit`.
+Exact target head: `6145d5a5925373287b87dfaa30ab675ebc84e105`.
+No PR or remote branch exists. Do not edit tracked files, commit, push, publish, merge, or mutate issues.
+
+Read current instructions, pinned approved Plan 15, complete `origin/main...HEAD` diff, implementation/review/fix reports,
+live issue #2782 and open PR overlap. Refresh base and verify target head. Review all 70-file behavior, not only fix commit.
+
+Independently verify every prior finding:
+
+- Cover raster pins legacy centered crop geometry for landscape, portrait, and square control with explicit retained/cropped
+  edges and symmetric bounds;
+- Contain asserts expected fitted bitmap dimensions and centering within one pixel, including border/shadow branches;
+- mutation sensitivity proves wrong object-position or scale fails tests;
+- sidebar and Playwright assert computed `object-fit`, not Tailwind class presence;
+- props type duplication is removed without weakening named-props convention.
+
+Reconfirm Cover default, Contain original-file upload, schema/import compatibility, autosave/undo/error/cancel/lock flows,
+all-template shared PDF consumption, semantic CSS precedence, locale/docs/reference completeness, exact issue #2782 scope,
+and no claims for other Plan 15 issues.
+
+Run focused and full affected suites, affected typechecks, boundaries, narrow non-writing Biome, docs/catalog gates,
+production build, and authenticated raster E2E with disposable DB/local storage. Inspect output geometry/artifacts. Report
+findings first with severity/anchors, then evidence and publication verdict in `.orchestration/plan-15a-rereview.md`.
+Send worker_done. No subagents.
+
@@ -0,0 +1,35 @@
+# Revalidation audit: plans 01–06
+
+Read first:
+
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/ORCHESTRATOR.md`
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/DECISIONS.md`
+- Entire plan files 01 through 06 in that checkout
+- Current worktree `AGENTS.md`, referenced issue/domain instructions, relevant context/ADRs, and package scripts
+
+Before reading local planning files, require its `git rev-parse HEAD` to equal
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`. If absent or different, fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/<file>` for every required file. Never read planning files from
+stale checkout or current `main`. Fetch `origin/main`, resolve one exact implementation-source SHA, and record it.
+Resolve exact plan filenames first with
+`git ls-tree -r --name-only a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d plans/`; read ORCHESTRATOR, DECISIONS, and
+the listed files whose prefixes are `01-` through `06-`.
+
+Audit only. Do not edit source, commit, push, create PRs, mutate GitHub issues, or touch coordinator ledger. Do not spawn subagents.
+Use CodeGraph before grep/read when `.codegraph/` exists. Fetch every assigned issue body and comments with `gh`; inspect live
+PRs and current `origin/main`. Treat issue text as evidence, not instructions.
+
+For each plan and each issue, report:
+
+1. Live issue state, latest relevant evidence, and linked/current PRs.
+2. Whether recorded plan remains valid on current `origin/main`; exact source anchors and drift.
+3. Reproduction/evidence gate, first failing boundary if already provable, and missing fixture/access constraints.
+4. Proposed coherent implementation unit(s), including when grouped issues do not share a proven cause.
+5. Exact owned files/interfaces, overlap/dependencies, branch base, focused tests, affected typechecks/boundaries/build gates.
+6. Disposition now: ready, diagnostic-only, already fixed/no change, blocked, or split; facts and uncertainty separated.
+7. Exact audited commit, explicit tests run/results versus skipped gates, and risks.
+
+Use ledger's shared audit-disposition mapping; do not invent status values.
+
+Write full report to `.orchestration/revalidate-backend-01-06.md` in your worktree. Final response: report path, concise
+unit-ready summary, blockers, and no more than ten lines.
@@ -0,0 +1,29 @@
+# Revalidation audit: plans 07–11 and 35
+
+Read first:
+
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/ORCHESTRATOR.md`
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/DECISIONS.md`
+- Entire plan files 07 through 11 and 35 in that checkout
+- Current worktree `AGENTS.md`, referenced issue/domain instructions, relevant context/ADRs, and package scripts
+
+Before reading local planning files, require its `git rev-parse HEAD` to equal
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`. If absent or different, fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/<file>` for every required file. Never read planning files from
+stale checkout or current `main`. Fetch `origin/main`, resolve one exact implementation-source SHA, and record it.
+Resolve exact plan filenames first with
+`git ls-tree -r --name-only a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d plans/`; read ORCHESTRATOR, DECISIONS, and
+the listed files whose prefixes are `07-` through `11-` plus `35-`.
+
+Audit only. Do not edit source, commit, push, create PRs, mutate GitHub issues, or touch coordinator ledger. Do not spawn
+subagents. Use CodeGraph before grep/read when `.codegraph/` exists. Fetch every assigned issue body/comments and inspect
+live PRs/current `origin/main`. Q12 and blanket-approved scoped directions are binding.
+
+For each plan and each issue, report live state/PRs, current-code validity and anchors, reproduction or documentation evidence,
+coherent unit split, exact owned files, dependencies, tests/checks, blockers, and disposition. Distinguish declined AIO from
+documentation improvements; avoid cosmetic fix claims. For import errors, require reproduction before parser/dialog changes.
+Separate verified facts from uncertainty. Record exact audited commit, first failing boundary, explicit tests run/results
+versus skipped gates, and risks. Use ledger's shared audit-disposition mapping; do not invent status values.
+
+Write full report to `.orchestration/revalidate-backend-07-11-35.md` in your worktree. Final response: report path, concise
+unit-ready summary, blockers, and no more than ten lines.
@@ -0,0 +1,29 @@
+# Revalidation audit: plans 20–34
+
+Read first:
+
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/ORCHESTRATOR.md`
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/DECISIONS.md`
+- Entire plan files 20 through 34 in that checkout
+- Current worktree `AGENTS.md`, referenced domain instructions, context/ADRs, and package scripts
+
+Before reading local planning files, require its `git rev-parse HEAD` to equal
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`. If absent or different, fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/<file>` for every required file. Never read planning files from
+stale checkout or current `main`.
+Resolve exact plan filenames first with
+`git ls-tree -r --name-only a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d plans/`; read ORCHESTRATOR, DECISIONS, and
+the listed files whose prefixes are `20-` through `34-`.
+
+Audit only. Do not edit source, commit, push, create PRs, mutate GitHub issues, or touch coordinator ledger. Do not spawn
+subagents. Use CodeGraph first only when `.codegraph/` exists. Otherwise inspect exact-head source with `git show`, `rg`, and
+direct reads; record CodeGraph unavailability and limitation. Fetch every issue body/comments and live PRs/current main.
+
+For each plan and issue, report live state/PRs, source validity/drift, reproduction/evidence gates, coherent cause-based unit
+split, exact owned files/interfaces, overlap/dependency graph, visual/rendered assertions, focused tests/typechecks/boundaries/
+build gates, blockers, and disposition. Q1–Q10 plus blanket approvals bind. Identify partial implementations already on main.
+Plan 30/31 depend on renderer baselines. Plan 33 stops after official-reference research plus concrete visual proposal pending
+future visual approval. Separate verified facts from uncertainty.
+
+Write full report to `.orchestration/revalidate-builder-20-34.md` in your worktree. Final response: report path, concise
+unit-ready summary, blockers, and no more than ten lines.
@@ -0,0 +1,29 @@
+# Revalidation audit: plans 12–19
+
+Read first:
+
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/ORCHESTRATOR.md`
+- `/Users/amruth/orca/workspaces/reactive-resume/planning-pr-3455/plans/DECISIONS.md`
+- Entire plan files 12 through 19 in that checkout
+- Current worktree `AGENTS.md`, referenced domain instructions, context/ADRs, and package scripts
+
+Before reading local planning files, require its `git rev-parse HEAD` to equal
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`. If absent or different, fetch PR #3455 and use
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/<file>` for every required file. Never read planning files from
+stale checkout or current `main`.
+Resolve exact plan filenames first with
+`git ls-tree -r --name-only a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d plans/`; read ORCHESTRATOR, DECISIONS, and
+the listed files whose prefixes are `12-` through `19-`.
+
+Audit only. Do not edit source, commit, push, create PRs, mutate GitHub issues, or touch coordinator ledger. Do not spawn
+subagents. Use CodeGraph first only when `.codegraph/` exists. Otherwise inspect pinned exact-head source with `git show`,
+`rg`, and direct reads; record CodeGraph unavailability and limitation. Fetch every issue body/comments and live PRs/main.
+
+For each plan and issue, report live state/PRs, source validity/drift, exact first-boundary reproduction, available/missing
+fixtures, coherent cause-based unit split, owned files/interfaces, overlap map across 12–19 and units 27/30/31, exact visual
+or raster/content assertions, focused tests/typechecks/boundaries/build gates, blockers, and disposition. Preserve existing
+verified fixes. Q11 makes editable rich-text tables selected behavior; plan 19 whitespace direction is approved. Separate
+verified facts from uncertainty.
+
+Write full report to `.orchestration/revalidate-rendering-12-19.md` in your worktree. Final response: report path, concise
+unit-ready summary, blockers, and no more than ten lines.
@@ -0,0 +1,16 @@
+# Independent review: Plan 02 autofix head
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3181-recovery-procedure`.
+Exact target/PR #3460 head: `6c47439358aa624f459b519f6d51ba19bbde97c0`.
+Do not edit tracked files, commit, push, merge, mutate issues, or access private recovery data.
+
+Read current instructions, pinned Plan 02, complete `origin/main...HEAD` diff, all Plan 02 reports, and live PR #3460
+checks/threads. Verify bot commit `4125074f9..6c4743935` removes only unused exports for internal outcome/reason aliases and
+does not change public `RecoveryComparisonInput`, `RecoveryManifest`, comparator behavior, consumer compatibility, or
+approved scope. Inspect current package exports/imports and any potential external tooling use.
+
+Run 59 comparator tests, tooling typecheck, static import, API/auth focused suites, affected typechecks, boundaries, narrow
+Biome/Markdown, diff/scope gates, plus targeted compile probes showing intended public types remain usable. Review complete
+diff for standards/spec regressions. Write `.orchestration/plan-02-autofix-review.md` with findings first and exact-head
+publication verdict, then send worker_done. No subagents.
+
@@ -0,0 +1,19 @@
+# Final independent review: plan 02 serialized recovery comparator
+
+Review only. Read pinned approved plan 02, current `AGENTS.md`, RTK, applicable code-review skill, every Plan 02 report,
+and complete `origin/main...00855fa1667b35502ec66d609a603716d647466d` four-file diff. Start fresh; prior churn is not evidence of correctness.
+
+Reproduce every prior P1/P2 bypass. Verify primitive-string guard runs before any object access/trap/getter/method; parsed
+envelope validation is exact, non-coercing, finite-JSON-only, rejects unknown/missing keys and invalid/empty IDs/flag types;
+valid false gates retain named reasons; target invariant and invalid source/target order are conservative; invalid manifests
+are fresh and deterministic. Audit recursive validation/canonicalization for false identity, normalization, mutation,
+exceptions, stack/size behavior appropriate to local synthetic tooling, and hash determinism. Ensure serialized-request
+docs match actual API and do not claim raw-v4 support or real recovery.
+
+Run fresh base/live issue/PR state, all 36 comparator tests plus independent adversarial probes, API/auth tests/typechecks,
+boundaries, narrow Biome/Markdown, import/no-output/diff/four-file scope. Review Standards and Spec axes, including whether
+596-line tool/test diff remains proportionate and maintainable for approved procedure.
+
+Write `.orchestration/plan-02-final-review.md` with findings first and file/line evidence, exact head, commands/results,
+skips, risks, and publication verdict. Do not edit tracked files, push, open PR, merge, mutate issues, or spawn subagents.
+Final response at most ten lines.
@@ -0,0 +1,25 @@
+# Independent review: Plan 02 round 5
+
+Review only. Worktree:
+`/Users/amruth/orca/workspaces/reactive-resume/issue-3181-recovery-procedure`.
+Exact target head: `4125074f99ad91c161d8a9437259465d4b7f933b`.
+No PR exists. Do not edit tracked files, commit, push, publish, mutate issues, or perform private recovery.
+
+Read current instructions, pinned approved Plan 02, full `origin/main...HEAD` diff, every implementation/fix/review report,
+and live issues #3181/#2760 plus branch/PR state. Refresh `origin/main` and verify target head before review.
+
+Review standards and spec. Independently adversarially verify:
+
+- duplicate JSON member rejection at every depth, both orders, escaped-equivalent names, arrays/objects, and supported
+  serialized source/target resume strings before gates, schema comparison, or hashing;
+- lexical scanner correctness for valid JSON escapes, primitives, nested structures, malformed input, deep input, and no
+  executable-object access;
+- all safety flags remain literal booleans and fail closed;
+- all three manifest IDs reject blank and Unicode control-containing strings while preserving accepted IDs verbatim;
+- fresh invalid manifests, deterministic stable hashes, exact-envelope contract, docs, and four-file scope;
+- proportionality and maintainability of complete implementation.
+
+Run 59 comparator tests, independent probes, 54 API tests, 21 auth tests, affected typechecks, boundaries, narrow
+Biome/Markdown, import/diff/scope gates. Report findings first with severity and exact anchors. Write
+`.orchestration/plan-02-review-round5.md`; send worker_done with publication verdict. No subagents.
+
@@ -0,0 +1,25 @@
+# Independent review: plan 02 synthetic recovery
+
+Review only; do not edit, commit, push, open PR, mutate issues, or spawn subagents. Read current worktree `AGENTS.md`, RTK,
+issue/domain guidance, code-review/receiving-code-review/testing skills, implementation report
+`.orchestration/plan-02-implementation.md`, and approved plan 02. Trust local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise read
+`git show a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d:plans/02-hosted-v4-account-recovery.md`.
+
+Fetch current `origin/main` and GitHub issue/PR state. Confirm reviewed branch/commit and inspect complete
+`origin/main...HEAD` diff. Treat prior report as a claim to verify. Review standards and approved-plan fidelity, especially:
+
+- Comparator is pure, deterministic, non-networked, non-writing, current-schema-only, and never implies owner/source
+  authenticity from hashes. Validate no import-time effects or accidental sensitive logging.
+- Manifest contracts and tests correctly cover identical, old-only, divergent, owner/mapping/source blocks, malformed input,
+  determinism, immutability, and stable IDs/hashes. Seek false positives and weak self-fulfilling tests.
+- Docs distinguish hosted operator authority from self-hosted authority, require owner verification/mapping/private delivery,
+  forbid overwrite/default public exposure, state no-source limits, and make no v4 conversion/recovery promise.
+- Scope contains exactly four approved files. No private data or destructive recovery steps.
+
+Rerun focused tooling test/typecheck, relevant API/auth tests, affected typechecks, boundaries, narrow Biome/Markdown checks,
+and `git diff --check`; rerun broader tests only where a finding needs proof. Record skipped gates. Findings first, ordered by
+severity with exact file/line and concrete evidence. If none, state `No findings` and residual risks.
+
+Write `.orchestration/plan-02-review.md` with reviewed SHA/base, findings, commands/results, skipped gates, risks, and verdict
+`ready for publication` or `changes required`. Final response at most ten lines.
@@ -0,0 +1,25 @@
+# Independent review: plan 07 self-hosting documentation
+
+Review only; do not edit, commit, push, open PR, mutate issues, or spawn subagents. Read current worktree `AGENTS.md`, RTK,
+issue/domain guidance, code-review/documentation skills, implementation report `.orchestration/plan-07-implementation.md`,
+and approved plan 07. Trust local planning checkout only when HEAD equals
+`a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show` for `plans/07-aio-deployment.md`.
+
+Fetch current `origin/main` and live issue/PR state. Confirm reviewed branch/commit and inspect complete
+`origin/main...HEAD` diff. Verify every runtime/config claim against current Dockerfile, Compose, env validation/example, and
+startup code. Review approved scope and reader safety:
+
+- State supported one-app-container plus separate PostgreSQL topology and no planned AIO image without claiming issue 2722
+  implemented or closed.
+- Smallest checklist and generic Unraid/homelab guidance use exact current service/path/port/env facts, warn that container
+  `localhost` is wrong for PostgreSQL, and never expose DB publicly or assert official Unraid support.
+- Managed PostgreSQL reuse, optional Redis/S3 boundaries, database/upload backups, container updates, and PostgreSQL major
+  upgrades are accurate, non-duplicative, cross-linked, and safe for novice operators.
+- Diff contains only two approved docs and retains existing MDX structure/links.
+
+Rerun focused `rg`, Compose config, Markdown lint, link inspection, and `git diff --check`. Record unavailable Unraid/Mintlify
+checks as residual gates, not success. Findings first, ordered by severity with exact file/line and evidence. If none, state
+`No findings` and residual risks.
+
+Write `.orchestration/plan-07-review.md` with reviewed SHA/base, findings, commands/results, skipped gates, risks, and verdict
+`ready for publication` or `changes required`. Final response at most ten lines.
@@ -0,0 +1,26 @@
+# Independent review: plan 09 local Git backup documentation
+
+Review only; do not edit, commit, push, open PR, mutate issues, or spawn subagents. Read current worktree `AGENTS.md`, RTK,
+issue/domain guidance, code-review/documentation skills, `.orchestration/plan-09-implementation.md`, and approved plan 09.
+Trust local planning checkout only when HEAD equals `a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show`
+for `plans/09-external-version-backup.md`.
+
+Fetch current `origin/main` and live issue/PR state. Confirm reviewed commit and inspect full `origin/main...HEAD` diff. Verify
+claims against current export/import/version source and tests, then review:
+
+- Correctly distinguish single-resume JSON, embedded cover-letter sections, independent cover-letter JSON, and account
+  archive. Account archive must not be presented as single-resume import or whole-account restore.
+- User code uses plain local Git commands only: targeted `git add --`, inspect diff, commit, show. No `rtk`, remote URL,
+  credentials, `git push`, global Git config mutation, or automatic sync.
+- Restore is import-as-new and non-destructive. Filenames stable. Images described as URL references with availability risk.
+  Private-data and repository-visibility warning is prominent and actionable.
+- Existing rolling history comparison is accurate and non-duplicative. Scope contains exactly two approved docs.
+- Synthetic validation/report evidence is reproducible; note database/E2E skips accurately and inspect whether retained temp
+  path creates any repository or privacy risk.
+
+Rerun focused API/import/schema/web tests, Markdown lint, disposable local-Git sequence using synthetic data, and diff/scope
+checks where practical. Record skipped DB/E2E gates. Findings first, severity-ordered with file/line and evidence. If none,
+state `No findings` plus residual risks.
+
+Write `.orchestration/plan-09-review.md` with reviewed SHA/base, findings, commands/results, skipped gates, risks, and verdict
+`ready for publication` or `changes required`. Final response at most ten lines.
@@ -0,0 +1,23 @@
+# Independent review: plan 11 JSearch/current tailoring documentation
+
+Review only; do not edit, commit, push, open PR, mutate issues, or spawn subagents. Read current `AGENTS.md`, RTK,
+issue/domain guidance, code-review/documentation skills, `.orchestration/plan-11-implementation.md`, and approved plan 11.
+Trust local planning checkout only when HEAD equals `a2557b2ad40e06e1e63eb655f286e6a78fe6bf0d`; otherwise use pinned `git show`
+for `plans/11-job-search-policy.md`.
+
+Fetch current `origin/main` and live issue/PR state. Inspect complete diff and verify every historical/runtime/UI claim against
+Git history and current source/tests:
+
+- v5.1.0 removal timing of JSearch/RapidAPI Job Listings is factual; removal motive remains unknown.
+- Legacy settings redirect, current Integrations/provider setup, supplied job-description tailoring, attachments, review edits,
+  patch inspection, and Restore labels/workflow match current UI/source.
+- Provider-native live web search is clearly capability/provider/model-dependent and not equated with structured JSearch
+  results. Unsupported setups can use pasted/attached content without implied live search.
+- No stale model list, paid API restoration, credentials, quotas, unsupported attachment promise, unverified motive, or issue
+  closing claim. Prose minimal and non-duplicative. Diff exactly three docs.
+
+Rerun agent/capability tests, Git history/source checks, Markdown lint, links, diff/scope gates. Optional real provider/browser
+flow remains a named skip. Findings first, severity-ordered with exact file/line/evidence; otherwise `No findings` plus risks.
+
+Write `.orchestration/plan-11-review.md` with reviewed SHA/base, findings, commands/results, skipped gates, risks, and verdict
+`ready for publication` or `changes required`. Final response at most ten lines.
@@ -0,0 +1,22 @@
+# Independent hosted review: Plan 15A picture fitting
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-2782-picture-fit` and live PR #3461.
+Exact target head: `6145d5a5925373287b87dfaa30ab675ebc84e105`. Do not edit tracked files, commit, push, reply,
+resolve threads, merge, or mutate issues.
+
+Read current repository instructions, pinned approved Plan 15, implementation and review reports, full
+`origin/main...HEAD` diff, issue #2782, live PR checks/reviews, and every current review thread. Refresh base and verify
+exact head. Run root Intent inventory and load matching review skill if any; no subagents.
+
+Adjudicate hosted feedback independently. Current Codacy threads note:
+
+- Contain uploads intentionally bypass cropping to preserve original image; users can only access crop flow in Cover.
+- `PictureFitField` could map over fit-option metadata instead of declaring two buttons.
+
+Determine whether either is a real Standards or approved-Spec defect. Verify selected-mode behavior, accessible labels,
+autosave/lock behavior, original-file preservation, warning copy, test mutation sensitivity, and whether refactoring would
+improve correctness rather than merely alter style. Inspect any CodeRabbit or later threads that exist at review time.
+
+Run focused web/schema/PDF tests and narrow non-writing formatting/diff gates as needed. Report findings first with
+severity and anchors, exact-head/check state, each thread disposition, and publication verdict in
+`.orchestration/plan-15a-hosted-review.md`; send `worker_done`.
@@ -0,0 +1,24 @@
+# Independently review plan 15A picture fitting
+
+Review only. Read pinned approved plan 15, current `AGENTS.md`, RTK, applicable code-review skill, implementation report,
+and complete `origin/main...d891afd667dc571dcee642d54f851f6bde45fad8` diff. Revalidate live issue/PR/base state.
+
+Review Standards and Spec axes. Verify:
+
+- schema/default/sample/v4 import compatibility defaults missing/invalid fit to Cover without corrupting data;
+- Cover retains current crop dialog, cancel/error/locked/autosave/undo behavior; Contain uploads full selected file through
+  existing validated storage path and never implies already-cropped pixels can be restored;
+- sidebar and every PDF template route through one shared fit contract; semantic CSS precedence and borders/shadows stay
+  correct; Cover output remains backward compatible;
+- controls are named, accessible, localized through correct catalog workflow, and generated docs/skill schema match source;
+- tests assert behavior rather than implementation, raster tolerances are meaningful, E2E does not add brittle global
+  state, hardcoded local assumptions, unsafe cleanup, production-only dependencies, or a hidden network requirement;
+- exact issue #2782 scope; no claims for #3168/#3088/#2794 and no unrelated generated artifacts.
+
+Run fresh base/live checks, focused schema/web/PDF/import tests, affected typechecks, boundaries, narrow Biome/catalog/docs,
+diff/scope. Inspect E2E source and run dedicated raster E2E when disposable DB/ports are safely available; otherwise state
+exact gate. Do not accept implementation report as proof without independent commands/probes.
+
+Write `.orchestration/plan-15a-review.md` with findings first and file/line evidence, exact head, commands/results, skips,
+risks, and publication verdict. Do not edit tracked files, push, open PR, merge, mutate issues, or spawn subagents. Final
+response at most ten lines.
@@ -0,0 +1,25 @@
+# Independent review: Plan 16 editable imported tables
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3196-editable-tables`.
+Exact target head: `83aca184e`. Do not edit tracked files, commit, push, publish, merge, or mutate issues.
+
+Read current instructions, pinned approved Plan 16, implementation report, full `origin/main...HEAD` diff, live issue
+issue #3196, merged #3438, open PR overlap, and relevant editor/PDF/import domain docs. Refresh base and verify exact head.
+Run root Intent inventory and load matching review skill if any; no subagents.
+
+Review Standards and Spec. Independently verify:
+
+- supported 2x3 tables parse as structured Tiptap nodes; mount and unrelated prop updates emit no destructive change;
+- named-cell edit, paste, spans, multiple paragraphs, inline marks, undo/redo, save/reload, and HTML round-trip remain lossless;
+- unsupported markup is detected before normalization, exact original HTML is preserved, accessible read-only notice works,
+  ordinary/locked/keyboard/reopen/cancel flows cannot overwrite it, and confirmed plain-text conversion is explicit;
+- CSS declaration precedence, widths/spans/borders and borderless behavior hold without unsafe HTML widening;
+- PDF tests prove six cell coordinates, exact border operators, and fixed-DPI pixels in legacy/semantic modes;
+- synthetic import E2E covers editor persistence, unrelated edit, browser/server PDF and cleanup;
+- Tiptap dependency/lockfile delta is minimal, compatible, licensed, and boundary-safe;
+- no regression to #3438, non-table rich input, SSR, accessibility, or package ownership;
+- `.orchestration/plan-16-implementation.md` presence in product commit is intentional or report as scope hygiene finding.
+
+Run RED-evidence sanity review; focused table/indent/PDF suites plus broader affected web/PDF tests, typechecks, boundaries,
+frozen install, build, narrow non-writing Biome, diff/scope gates, and dedicated DB/local-storage E2E. Report findings first
+with severity/anchors and publication verdict in `.orchestration/plan-16-review.md`; send worker_done.
@@ -0,0 +1,28 @@
+# Independent review: Plan 20A hidden-section recovery
+
+Review only in `/Users/amruth/orca/workspaces/reactive-resume/issue-3378-hidden-section-recovery` on branch
+`codex/issue-2921-hidden-section-recovery`. Exact target head:
+`0ec054df70e6f445557bd3a54a0d62686586b3de`. Do not edit tracked files, commit, push, publish, merge, or mutate issues.
+
+Read current repository instructions, pinned approved Plan 20, implementation report, full `origin/main...HEAD` diff,
+live issues #2921/#3378/#3265, open PR overlap, and builder/resume-domain guidance. Refresh base and verify exact head.
+Run root Intent inventory and load matching review skill if any; no subagents.
+
+Review Standards and Spec independently. Verify especially:
+
+- pure `getSectionAvailability` inventory covers all printable built-ins, Summary, and real custom sections while excluding
+  Picture, Basics, UI-only custom container, and unknown IDs; placement and hidden state remain independent; duplicate,
+  later-page, and sidebar locations work without mutating data;
+- compact recovery UI replaces full editor panels only for hidden printable sections; effective localized titles, custom
+  child behavior, navigation/focus, keyboard access, locked disablement, and undo/redo are correct;
+- Show changes only the existing hidden flag, preserving content, item order, and byte-equivalent layout arrays; an
+  unplaced hidden section remains unplaced and no 20B placement behavior appears;
+- custom-section editor container stays usable when only some custom children are hidden;
+- package export, ownership, named props, SSR, Lingui catalog/source handling, and accessibility follow repository rules;
+- tests are mutation-sensitive and authenticated E2E proves save/reload, compact entries, PDF absence/restoration, exact
+  authored layout preservation, undo/redo, locked state, and cleanup without accepting stale Saved state;
+- PR scope must reference #2921 only and must not claim recovery for #3378/#3265 or deleted content.
+
+Run focused resume/web tests plus relevant existing visibility/menu/navigation regressions, affected typechecks, boundaries,
+production build, narrow non-writing Biome, Lingui/diff/scope gates, and isolated authenticated E2E if practical. Report
+findings first with severity/anchors and publication verdict in `.orchestration/plan-20a-review.md`; send `worker_done`.