A static site, one versioned DemoAdapter, fixed synthetic choices, local browser state and deterministic matching. Security headers, schema parsers and regression tests protect those boundaries.
Boundaries before claims
Trust and safety
A marketplace cannot call itself safe because its interface looks private. Each production claim needs infrastructure, monitoring and an accountable owner.
01
What is genuinely operating here
02
What is deliberately absent
Accounts, authentication, verification, applications, resumes, uploads, messages, contact relay, D1/R2, network requests, rate limits, report handling and production data storage do not exist.
03
Production safeguard gates
Before real data: adult-only policy, purpose/legal-basis review, notices, retention owners, recruiter verification, magic-link threat model, document quarantine/scanning, private R2, controlled relay, access audit, real export/deletion, abuse response, anti-scraping and discrimination safeguards.