Diiirect v5.0.0: Better contracts, improved talent discovery, and platform stability

the nightly job failed 27/27 in silence — make it report, verify and answer for itself

let clients and recruiters ask a candidate for something

make the channels layer tenant-safe, threaded and enforceable

the a11y pass, the phone layout, and a lint gate that was inert

the deferred four, and the bug a browser found

"N open roles for you" — the payoff card gets its data path

"N open roles for you" — the payoff card gets its data path

close the open questions — the Q3 audit, and the two levers named

the host gets a voice, the reminder gets an audience, and four dead paths get a reader

tenant auth handoff, the privacy centre, and observability scrubbing

require a name at the apply door, and never render an anonymous card

the candidate decision log has never accepted a single row

show the applicant's email, and find their CV wherever it lives

show the applicant's email, and find their CV wherever it lives

land the review pass that was left uncommitted in the working tree

commit the generated types for vendor_health and vendor_balance

the tasks function wrote a path into bucket_folder, 404ing every attachment in the webapp

one stale belief about seven columns caused four defects

the candidate video-interview recorder was entirely in English

stop promising a scheduled-report email nothing sends

resolve two post-merge collisions the merge itself could not see

the SNS topic allowlist has never been switched on — make that visible

reject a key that already carries the environment folder

reject a key that already carries the environment folder

skills never loaded — the embed crosses a schema boundary

the four collisions the consolidation itself created

send what the vendor documents, not what we invented

the CSP, the font tracing and the CORS list were all a step from breaking

render the preview in the browser, and remove the extraction scaffolding

the availability line never rendered, and 'fluent' was printed as 'Native'

the jobs table advertised every non-hourly role as a yearly salary

degrade to the graph when no vendor can serve, and a probe script, closes webapp#type-check

track what is LEFT at each vendor, not just cost and spend, closes webapp#type-check

vendor failover, a circuit breaker, and the outage it found, closes webapp#type-check

delete the WhatsApp template fiction and resolve LinkedIn ids properly

record which key signed what, so a void document is knowable

record which key signed what, so a void document is knowable

regenerate types for the attribution column, and catch the Sensitive PLACEHOLDER trap

regenerate types for the attribution column, and catch the Sensitive PLACEHOLDER trap

bound the reminder sweep, and stop post-send edits to signed terms

bound the reminder sweep, and stop post-send edits to signed terms

the admin talent picker could never return a result

the signature-reminder idempotency key was only ever logged

the signature-to-activation path lost contracts silently

the signature-to-activation path lost contracts silently

a failed decline must not tell both parties the contract is dead

a failed decline must not tell both parties the contract is dead

close what the completed audit found in this branch's own work

close what the completed audit found in this branch's own work

prove the key is in production mode, and stop losing signatures

prove the key is in production mode, and stop losing signatures

the mode gate misread DocuSeal's own refusal and would have blocked a good key

the mode gate misread DocuSeal's own refusal and would have blocked a good key

the remediation sweep called every void signature "indeterminate"

the remediation sweep called every void signature "indeterminate"

make "billed for it" and "can reach it" the same question

checkIsAdmin granted platform-admin on bare admin-workspace membership

3 security hardening fixes

the public pages can finally be read by the public

console shell — URL contract, chrome, palette, live hoist

dataset query core, seven descriptors, and the sharePct fix

metric registry, the ACL/sampling migration, and -6 route entries

the console — three surfaces, entity drill, ten pages retired

/boston-2026 — the trip page where you circle a date

the résumé funnel, rebuilt on the shared studio, closes base64-throu#a-Server-Action

five unauthenticated public forms billed HubSpot with no rate limit

the last role-less admin check gated a service-role magic-link minter

the résumé generator was dead in production on every path

media uploads, the freeze-gated maintenance jobs, and the proxy guard

microfrontend boundary, SEO routes, and retiring the old KB

Sentry, the dev-CLI service, and the reader/admin client guard

the authoring console — roles, optimistic locking, review queue

the content API — machine-written drafts that cannot self-publish

bootstrap the first editor without failing empty environments

dev seed — 34 articles across every tier, verified

expose the schema, document it, and gate its access model

search, the public-route view, and the maintenance split

generateStaticParams cannot use a cookie-carrying client

surface PostgREST errors, and record what is actually proven

add the health endpoint the deploy checks actually need

build without a database instead of failing the promote

repoint every internal link the rename could not anchor

sections had no localized title