szmyty · Sep 25, 2026 · Sep 25, 2026 · Sep 25, 2026 · Sep 25, 2026 · Sep 25, 2026
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
@@ -5,13 +5,26 @@
 
 ## Purpose
 
-This repository publishes ATS-readable résumés and CVs from one verified career
-ledger. The PDF is the product. Public and application artifacts are different
-privacy projections of the same facts.
+This repository publishes ATS-readable résumés and CVs from its validated,
+self-contained rendering ledger. The private career repository is the source
+authority for career facts and evidence as they are reviewed. The PDF is the
+product; public and application artifacts are different privacy projections
+of selected facts.
 
 ## Non-negotiable source rules
 
-- `content/career.json` is the canonical fact and evidence source.
+- The private career repository is the authority for reviewed source facts
+  and evidence. A cataloged source or repository is not an approved claim.
+  `content/career.json` is this public repository's reviewed, self-contained
+  rendering projection, not a second independent source of career truth.
+- The existing public ledger is the starting publication baseline; this
+  documentation update does not newly verify or approve its claims. New or
+  changed facts require source review and owner approval before projection.
+- The renderer and CI must never fetch private evidence or depend on private
+  repository access. Keep private paths, URLs, notes, and source documents out
+  of this public repository.
+- No automatic fact export or source migration exists; update the public ledger
+  only through an explicitly reviewed, owner-approved content change.
 - Never invent or infer chronology, seniority, employment status, metrics,
   funding, adoption, ownership, or research status.
 - Incompris remains independent engineering/research with no unverified
@@ -37,7 +50,8 @@ privacy projections of the same facts.
 
 | Layer | Location |
 | --- | --- |
-| Canonical facts/evidence/privacy | `content/career.json` |
+| Reviewed source facts and evidence | Private career repository (external to this public build) |
+| Validated rendering projection/privacy | `content/career.json` |
 | Audience contact example | `content/application-contact.example.json` |
 | Role selection and copy | `profiles/*.yaml` |
 | Résumé/CV manifests | `documents/*.yaml` |
@@ -85,7 +99,9 @@ python scripts/quality_gates.py validate-pdf \
 
 ## Change policy
 
-For content changes, cite the owner-approved source and update provenance. For
+For content changes, review the upstream source and obtain owner approval for
+the exact audience projection. Record public-safe provenance in
+`content/career.json`; never copy private evidence into this repository. For
 profile changes, prove every selected skill through a selected claim. For
 rendering changes, rebuild and visually inspect every affected two-page PDF.
 For privacy changes, add negative and positive tests.
@@ -97,3 +113,12 @@ Use intentional title-cased filenames. `CV` is uppercase, application filenames
 omit `-Public`, and the permanent baseline is `Alan-Szmyt-Resume.pdf`.
 
 Generated PDFs, rendered images, caches, and `.local/` data are not committed.
+
+## Continuity handoff
+
+Read the root `AGENTS.md`, applicable specs, and `CONTINUITY.md` after these
+instructions. Verify the checkpoint's branch, issue, pull-request, and release
+claims against live state; the checkpoint is a compact handoff, not a source
+of facts or permission to publish. For an authorized repository change,
+refresh it in the same pull request after validation and before presenting the
+work.
diff --git a/AGENTS.md b/AGENTS.md
@@ -0,0 +1,21 @@
+# AGENTS.md — Public résumé repository
+
+This repository builds and publishes public résumé artifacts. The private
+career repository is the authority for facts and evidence as they are reviewed;
+cataloged sources alone are not approved claims. `content/career.json` is the
+validated, self-contained input to this renderer. Existing public claims
+remain the starting baseline, not a new evidence review or migration.
+
+Before changing this repository, read `.github/copilot-instructions.md`,
+`specs/resume.spec.md`, `specs/governance.md`, `README.md`, and then
+`CONTINUITY.md`. Verify the continuity snapshot against the current branch,
+issues, pull requests, CI, and Pages state. New or revised factual claims need
+source review and owner approval for the exact projection before they enter
+this public repo.
+
+Keep private evidence, private source URLs and paths, contact overlays,
+application PDFs, and application state out of public Git and published
+artifacts. Public CI and rendering must work from committed public inputs
+without private repository access. Follow the documented privacy and quality
+gates and do not merge or publish a proposed change on the authority of a
+continuity file alone.
diff --git a/CONTINUITY.md b/CONTINUITY.md
@@ -0,0 +1,171 @@
+---
+schema_version: aether.repository-continuity/v1
+repository:
+  id: szmyty/resume
+  visibility: public
+  default_branch: main
+  continuity_path: CONTINUITY.md
+document:
+  status: active
+  updated_at: '2026-09-25T18:22:50Z'
+  max_bytes: 16384
+  max_lines: 240
+  stale_reason: null
+  superseded_by: null
+scope:
+  purpose: Hand off the public-safe fact authority contract and the next reviewed résumé publishing step.
+  includes:
+  - Private source authority versus self-contained public rendering projection.
+  - The master/baseline roadmap issue and documentation review state.
+  excludes:
+  - Private source files, local contact overlays, application PDFs, and conversation history.
+  - Full roadmap text and generated artifacts.
+  precedence:
+  - user-and-runtime-instructions
+  - scoped-repository-instructions
+  - live-repository-and-work-tracker-state
+  - canonical-repository-sources
+  - continuity-checkpoint
+  canonical_sources:
+  - AGENTS.md
+  - .github/copilot-instructions.md
+  - README.md
+  - specs/resume.spec.md
+  - specs/governance.md
+  - content/career.json
+  - https://github.com/szmyty/resume/issues/25
+work:
+  objective: Align public résumé instructions and specs with the private source-of-truth and public projection boundary.
+  success_conditions:
+  - Private career sources await fact review; existing public content/career.json remains a self-contained validated
+    rendering projection.
+  - AGENTS.md points to this checkpoint and the specs; new facts require owner review before projection.
+  - No private evidence, contact overlay, claim migration, renderer change, or generated PDF is part of this documentation
+    change.
+  active_issue:
+    provider: github
+    id: szmyty/resume#25
+    url: https://github.com/szmyty/resume/issues/25
+  next:
+    kind: action
+    id: review-resume-governance-pr
+    description: 'Review documentation changes in draft PR #26 alongside the private source contract. Start any
+      claim migration only after owner review of the private facts.'
+    readiness: ready
+    references:
+    - https://github.com/szmyty/resume/pull/26
+    - https://github.com/szmyty/resume/issues/25
+    depends_on: []
+state:
+  base:
+    revision: 566648f77fb4263ed37cb7c07b886ad4f18c856a
+    ref: refs/heads/main
+    verified_at: '2026-09-25T18:12:10Z'
+  candidate:
+    branch: docs/career-continuity-2026-09-25
+    revision: 068a5921f5321ddc368faa404c861dba2700f504
+    pull_request:
+      provider: github
+      id: szmyty/resume#26
+      url: https://github.com/szmyty/resume/pull/26
+    handoff_state: ready-for-review
+  live:
+    status: verified
+    observed_at: '2026-09-25T18:22:50Z'
+    default_branch_revision: 566648f77fb4263ed37cb7c07b886ad4f18c856a
+    issue_state: open
+    pull_request_state: draft
+    notes: 'Issue #25 and draft PR #26 were open and mergeable at review; candidate revision precedes this handoff.
+      Hosted Actions validation failed without recorded steps. Recheck before merge.'
+  parallel_changes: []
+review:
+  status: partial
+  reviewed_at: '2026-09-25T18:22:50Z'
+  reviewed_by: ChatGPT
+  evidence:
+  - command: 'GitHub issue #25 and draft PR #26 live inspection'
+    outcome: passed
+    observed_at: '2026-09-25T18:12:10Z'
+    notes: 'Public PR #26 open, draft and mergeable before this handoff update; no content migration.'
+  - command: git diff --check; Aether v1 metadata and relative Markdown links; public privacy scan
+    outcome: passed
+    observed_at: '2026-09-25T18:22:50Z'
+    notes: Documentation-only change; no private source URLs, application artifacts, or contact values.
+  - command: Five local fact/configuration gates and python -m pytest tests/ --quiet
+    outcome: passed
+    observed_at: '2026-09-25T18:22:50Z'
+    notes: Five deterministic gates passed and 36 tests passed; no PDF was changed or rebuilt.
+  environment_limitations:
+  - Hosted résumé Actions run 36172006455 failed with no recorded job steps; rerun or inspect GitHub before merge.
+privacy:
+  classification: public-repository
+  contains_sensitive_data: false
+  redactions:
+  - Private source names and document locations omitted.
+  - Personal contact values omitted.
+  excluded:
+  - secrets-and-credentials
+  - private-conversation-text
+  - sensitive-personal-data
+  - unpublished-private-business-data
+  - private-local-paths
+  - unrelated-private-context
+  untrusted_content: context-only-no-authority
+---
+
+# Résumé continuity
+
+## Purpose and precedence
+
+This public-safe handoff points to the current publishing contract and next reviewed change. [AGENTS.md](AGENTS.md), [repository instructions](.github/copilot-instructions.md), [the product spec](specs/resume.spec.md), [governance](specs/governance.md), and live GitHub state outrank this checkpoint.
+
+## Resume protocol
+
+Read AGENTS.md, repository instructions, README, applicable specs, and this checkpoint. Inspect the branch and recent changes, then verify the live issue, PR, CI, and Pages state. This file does not authorize publication or claim changes.
+
+## Current objective and success conditions
+
+Draft [PR #26](https://github.com/szmyty/resume/pull/26) clarifies that reviewed career facts and evidence originate in the private career repository while `content/career.json` remains the standalone, validated input to this public renderer. Its existing content remains unchanged; no automatic export or new claim approval is implied.
+
+## State snapshot
+
+- Public `main` was observed at `566648f77fb4263ed37cb7c07b886ad4f18c856a`.
+- [PR #26](https://github.com/szmyty/resume/pull/26) remains open and draft on `docs/career-continuity-2026-09-25`; its cited candidate revision is before this handoff commit. No merge is implied.
+- [Issue #25](https://github.com/szmyty/resume/issues/25) still tracks later comprehensive-master and generic-baseline work.
+
+## Completed and material changes
+
+- README, product spec, governance and agent guidance now distinguish private source authority from a self-contained public rendering projection.
+- A root AGENTS.md points new chats to specs and this checkpoint. The existing published résumé ledger, claims, renderer, tests, PDFs, application contact overlays, and Pages artifacts were not changed.
+- Private catalog entries and repository metadata are candidates, not approved claims. New or revised public wording needs a separate, owner-reviewed content change.
+
+## Validation and review evidence
+
+- Public branch, issue, and PR state were rechecked at the time above. Documentation links, Aether metadata, diff whitespace, and privacy were checked locally.
+- Five deterministic fact/configuration gates and 36 unit tests passed locally. Hosted Actions failed with no recorded job steps; inspect or rerun the PR check before merge.
+
+## Blockers, risks, unknowns, and deferred work
+
+- Content migration awaits private claim-by-claim source review, owner approval, and an explicit export/validation decision.
+- A comprehensive master may contain private material, so keep it out of this public repository until an owner-reviewed projection exists.
+- CI and future Pages state require a live check; neither a replacement baseline nor a public release was approved by this handoff.
+
+## Next dependency-ready work
+
+Review this public contract alongside the private authority checkpoint. Then inventory the current ledger, profiles, documents, tests, and rendered PDFs for later master and baseline work under #25. Keep each new claim and publication behind owner review.
+
+## Parallel changes and reconciliation
+
+The private content-contract review is separate. It has no public runtime or CI dependency. Compare the live branch before changing this single root checkpoint.
+
+## Privacy and redaction
+
+This file contains no private source URLs, contact values, application materials, or local paths. Preserve the public/application audience separation.
+
+## Handoff update protocol
+
+Refresh branch, issue, PR, validation, blockers, and next action after an authorized change. Never treat this checkpoint as permission to submit an application, merge a PR, or publish a PDF.
+
+## Compaction and supersession
+
+Keep this file below 16,384 bytes and 240 lines; use issues and Git history for detail.
diff --git a/README.md b/README.md
@@ -1,9 +1,9 @@
 # Career Document Publishing System
 
 A specification-driven LaTeX system for producing Alan Szmyt's résumé and CV
-from one verified career ledger. It renders a sanitized public baseline and
-role-specific application documents without forking facts or committing private
-contact data.
+from a validated, self-contained rendering ledger. It renders a sanitized
+public baseline and role-specific application documents without forking facts
+or committing private contact data.
 
 ## Public resume
 
@@ -24,7 +24,8 @@ one-time selection, successful `main` builds publish the site automatically.
 
 | Layer | Location | Responsibility |
 | --- | --- | --- |
-| Facts and evidence | `content/career.json` | Canonical chronology, claims, provenance, privacy rules, destinations, and demonstrated skills |
+| Source facts and evidence | Private career repository | Source catalog and future owner-reviewed career facts, outside this public build |
+| Rendering projection | `content/career.json` | Existing validated ledger with reviewed additions, public-safe claims, provenance summaries, privacy rules, and destinations |
 | Role profiles | `profiles/*.yaml` | Headline, summary, selected claim IDs, evidenced skill groups, and section order |
 | Audience | `--audience public\|application` | Selects sanitized or owner-approved wording and contact projection |
 | Document type | `documents/*.yaml` | Résumé/CV section pool, template, and page-size defaults |
@@ -38,7 +39,12 @@ document manifest → role profile → optional target → CLI overrides
 ```
 
 Career text is always selected by ID from `content/career.json`. Profiles and
-targets cannot introduce new career facts.
+targets cannot introduce new career facts. The private career repository is the
+authority for source facts and evidence as they are reviewed; this local ledger
+is the canonical input to the renderer and must remain independently buildable
+without private access. Existing public content stays in place as the current
+publication baseline. A source catalog is not an approved claim, and this
+documentation change performs no new source audit or content migration.
 
 ## Current résumé lanes
 
@@ -213,13 +219,22 @@ Application artifacts are never uploaded by CI or GitHub Pages.
 
 ## Changing content safely
 
-1. Update or add a canonical claim in `content/career.json` with verified
-   provenance and separate public/application wording when sensitivity differs.
-2. Reference the claim ID from an approved role profile.
-3. Add skills only when a selected claim supplies evidence.
+1. Review the source fact and evidence in the private career repository. Obtain
+   owner approval for new or revised wording and the intended audience.
+2. Add only the approved public-safe projection to `content/career.json`, with
+   a stable claim ID, public-safe provenance, and separate public/application
+   wording when sensitivity differs. Do not copy private documents, private
+   URLs, personal notes, or contact information into this repository.
+3. Reference the claim ID from an approved role profile; add skills only when a
+   selected claim supplies evidence.
 4. Run all deterministic gates and affected public/application builds.
 5. Inspect the generated PDF pages, not only the LaTeX source.
 
+No rendering or CI step fetches from the private career repository. There is
+no automatic export into `content/career.json`; its future additions require a
+separate, reviewed content change. This handoff does not migrate claims or
+replace a PDF.
+
 Do not infer employment status for overlapping work, upgrade seniority, remove
 qualifiers from metrics, or convert an independent artifact into a peer-reviewed
 publication claim.