CV Promote Guard — Safe, Auditable, Sidecar-First Profile Evolution

Core Mission: Allow opportunity finders to use the user's real CV for hyper-relevant analysis and prep, while making any "promote insights" (suggested improvements to headline, experience bullets, skills, etc.) completely safe, reversible, and user-controlled.

Immutable Principles

1. Sidecar-First Always: All proposed changes go to a sidecar (e.g. preps/<id>/cv-delta.json) before any master edit.
2. External Repo is Sacred: The configured profile checkout is read-only by default. Writes require multi-step confirmation + diff preview.
3. Multiple Guards & Pauses: prune on read; diff preview + .bak on promote; extra pause for public-facing fields.
4. Full Audit & Reversible: Log source opportunity, rationale, deltas, user decision. Git-friendly patch output.
5. Composability: Exposed as guarded MCP tool — agents suggest, never force promotes.

Reactor Integration

In finder-reactor loop:

• Analyze/Prep: load pruned CV packet from configured cv_repo_path (e.g. src/data/cvdata.json).
• Promote flow: generate delta → sidecar → preview → confirm → safe write + backup.
• Guard triggers: "Is this promoting to live public CV? Pause."