Issues

Demo seed: no `ats_offer` row belongs to a hired application — all 14 offers sit on `offer`-stage applications, so "days to offer for hired applications" is unmeasurable on the seed

#53

· claude opened

on Sep 7, 2026

Employer administrators cannot create `ats_job` (403 `PERMISSION_DENIED`) even with the stamps fixed — the insert-side RLS `check` is compiled without the membership resolver's keys and evaluated on the pre-hook payload (upstream)

#45

· os-sam opened

on Sep 7, 2026

Security bootstrap's first-user carve-out promotes the oldest authenticable user in an unordered 50-row `sys_user` window: with seeded credentials the winner depends on the database driver (sqlite promoted the job seeker)

#40

· os-sam opened

on Sep 7, 2026

On the sqlite driver, tenant-scoped objects (`ats_employer`, `ats_interview`, `ats_offer`) return 0 rows to platform admins holding `viewAllRecords`; the memory driver returns all of them

#39

· os-sam opened

on Sep 7, 2026

Membership backfill binds all 80 job seekers and both platform staff to the Default Organization: the auth membership policy is left at `auto`, which DESIGN.md §03 forbids

#38

· os-sam opened

on Sep 7, 2026

Field-level security composes deny-wins across held positions: a platform reviewer who also holds `job_seeker` loses `verification_note` on the employer form

#35

· claude opened

on Sep 7, 2026

Review-queue nav slices render auto-derived columns without the verdict field — declare `highlightFields` on `ats_employer` and `ats_job`

#33

· claude opened

on Sep 7, 2026

Seeker "My Profile" cannot deep-link to the own `ats_candidate` record: nav `recordId` resolves only `{current_user_id}` / `{current_org_id}`

#34

· claude opened

on Sep 7, 2026

Row counts depend on which ATS positions a platform owner holds: seeker/employer RLS composes over `viewAllRecords` on `ats_employer` and `ats_offer` only

#30

· os-sam opened

on Sep 7, 2026

`ats_report.target_ref` is free text: the polymorphic pointer cannot be resolved by the seed loader or linked in the UI

#17

· os-sam opened

on Sep 7, 2026

Release: README, live demo, CI, screenshots, CONTRIBUTING, i18n

pm:queue

#9

· os-sam opened

on Sep 6, 2026

Three dashboards and their datasets

pm:dispatched

#8

· os-sam opened

on Sep 6, 2026

Navigation Menu

Uh oh!

All issues

Demo seed: no `ats_offer` row belongs to a hired application — all 14 offers sit on `offer`-stage applications, so "days to offer for hired applications" is unmeasurable on the seed

Employer administrators cannot create `ats_job` (403 `PERMISSION_DENIED`) even with the stamps fixed — the insert-side RLS `check` is compiled without the membership resolver's keys and evaluated on the pre-hook payload (upstream)

Security bootstrap's first-user carve-out promotes the oldest authenticable user in an unordered 50-row `sys_user` window: with seeded credentials the winner depends on the database driver (sqlite promoted the job seeker)

On the sqlite driver, tenant-scoped objects (`ats_employer`, `ats_interview`, `ats_offer`) return 0 rows to platform admins holding `viewAllRecords`; the memory driver returns all of them

Membership backfill binds all 80 job seekers and both platform staff to the Default Organization: the auth membership policy is left at `auto`, which DESIGN.md §03 forbids

Field-level security composes deny-wins across held positions: a platform reviewer who also holds `job_seeker` loses `verification_note` on the employer form

Review-queue nav slices render auto-derived columns without the verdict field — declare `highlightFields` on `ats_employer` and `ats_job`

Seeker "My Profile" cannot deep-link to the own `ats_candidate` record: nav `recordId` resolves only `{current_user_id}` / `{current_org_id}`

Row counts depend on which ATS positions a platform owner holds: seeker/employer RLS composes over `viewAllRecords` on `ats_employer` and `ats_offer` only

`ats_report.target_ref` is free text: the polymorphic pointer cannot be resolved by the seed loader or linked in the UI

Release: README, live demo, CI, screenshots, CONTRIBUTING, i18n

Three dashboards and their datasets

Uh oh!

Search results