FlowGT — Open Reference

mindmap
 root((FlowGT<br/>Open Reference))
 🎯 matching/
 roles.js — the ranking logic
 ARCHITECTURE.md — design record
 digest-runs.sql — the honest ledger
 🛡️ privacy/
 unsubscribe.js — one click, no login
 no-member-data.py — the data gate
 schema/
 consent-subscriptions.sql
 consent-v2-migration.sql
 cv-encryption.sql
 retention.sql — the 24-month promise
 📚 compliance/
 UEMA 2007 — email law
 Privacy Act 2020
 Fair Trading Act
 candidate fees · e-signature
 immigration advice · platform terms
 ⚖️ LICENSING.md — the Qt model

flowchart TD
 A[👤 Member turns email ON<br/>in their own portal] -->|verbatim sentence +<br/>time + source recorded| B[(🪪 Consent evidence<br/>job_subscriptions)]
 B --> C{⏰ Weekday?<br/>consent says weekdays only}
 C -->|weekend| Z1[🚫 Nothing sends]
 C -->|weekday| D[🎯 Match & rank<br/>relevance ORDERS, never drops]
 D --> E{Fresh roles?}
 E -->|none| Q[😴 outcome: quiet<br/>recorded — not a failure]
 E -->|yes| F[📧 Send digest<br/>≤25 per bucket]
 F --> G[(📒 Ledger<br/>digest_runs + snapshot)]
 F --> H[🔗 One-click unsubscribe<br/>in every footer]
 H -->|no login required| I[(🔕 Sticky opt-out<br/>re-consent needed to return)]
 G --> J[🖥️ Member portal shows<br/>send-time snapshot<br/>email & page never disagree]
 classDef consent fill:#e8f5e9,stroke:#2e7d32,stroke-width:2px,color:#1b5e20
 classDef ledger fill:#e3f2fd,stroke:#1565c0,stroke-width:2px,color:#0d47a1
 classDef stop fill:#ffebee,stroke:#c62828,stroke-width:2px,color:#b71c1c
 classDef action fill:#fff8e1,stroke:#f9a825,stroke-width:2px,color:#795500
 class A,B consent
 class G,I,J ledger
 class Z1,H stop
 class C,D,E,F,Q action

erDiagram
 ACCOUNTS ||--o| JOB_SUBSCRIPTIONS : "one consent record"
 ACCOUNTS ||--o{ DIGEST_RUNS : "one per send attempt"
 DIGEST_RUNS ||--o{ DIGEST_RUN_JOBS : "send-time snapshot"
 ACCOUNTS ||--o{ CV_DOCUMENTS : "encrypted, versioned"
 CV_DOCUMENTS ||--o{ CV_REVIEWS : "audited AI ledger"
 ACCOUNTS ||--o| RETENTION_NOTICES : "30-day warning"
 RETENTION_LOG }o..|| ACCOUNTS : "hash only, after deletion"
 JOB_SUBSCRIPTIONS {
 text consent_text "the exact sentence agreed to"
 int consent_at
 text unsub_token "one click, no login"
 int unsubbed_at "sticky"
 }
 DIGEST_RUNS {
 text outcome "running | sent | quiet | failed"
 text trigger_kind "scheduled never impersonated"
 int n_shown "NULL on failure, never 0"
 }
 CV_DOCUMENTS {
 text ciphertext "AES-256-GCM"
 text consent_text "recorded at upload"
 }
 RETENTION_NOTICES {
 int notified_at
 int delete_after "notice + 30 days"
 }
 RETENTION_LOG {
 text email_hash "sha256 — no identity kept"
 int deleted_at
 }

flowchart LR
 A[🕐 Any sign-in<br/>or activity] -->|resets| B[⏳ 24-month clock]
 B -->|23 months silent| C[📨 Notice email:<br/>30 days' warning]
 C -->|one sign-in| B
 C -->|30 more days<br/>of silence| D[🗑️ Deletion<br/>cascades everywhere]
 D --> E[(🧾 Ledger keeps a<br/>one-way hash only)]
 classDef ok fill:#e8f5e9,stroke:#2e7d32,stroke-width:2px,color:#1b5e20
 classDef warn fill:#fff8e1,stroke:#f9a825,stroke-width:2px,color:#795500
 classDef del fill:#ffebee,stroke:#c62828,stroke-width:2px,color:#b71c1c
 class A,B ok
 class C warn
 class D,E del