Status: Implemented in #2373. This roadmap page is retained as the original design description.
Job Search is being extended with a guided profile-review flow for cases where technically valid results still do not match what the user actually wants.
The goal is to make the search profile easier to improve without requiring the user to reverse-engineer why a result appeared.
The profile editor will be able to review the current profile together with a bounded snapshot of recent search outcomes.
The review is intended to:
The assistant remains proposal-only. A review, answer or AI suggestion must never silently rewrite the search profile.
The existing Job Search instruction helper will produce longer, more actionable alternatives rather than short generic guidance.
Each proposal should clearly express:
Saved keywords, locations, exclusions and relevance rules remain authoritative inputs. CV and cover-letter material may be used as private candidate evidence under the existing Job Search privacy rules.
The review is not intended to claim that a returned job is objectively bad. It should explain why the current profile could reasonably have matched it and identify which profile signal could be refined.
Recent data is bounded and profile-scoped. The review may use safe stored listing fields and dismissal state, but it must not expose another profile, another user or raw provider payloads.
Changing instructions will create a private revision history for the selected search profile.
The owner should be able to:
Restoring a revision is a real profile configuration change and therefore follows the same Job Search configuration-revision and audit rules as an ordinary instruction edit.
The review and history are owner-scoped.
AI request logs keep only safe request metadata such as the request mode and profile identifier. Raw CV text, cover-letter text, saved instructions, user answers, review output and generated instruction drafts are not copied into ordinary provider request/response logs.
Administrator editing remains a separate authorized surface and must not weaken the owner API.
Internal implementation tracking: #2372.