security round 2: payload caps, traceback strip, GDPR delete, path allowlist

editorial: tighten typography + page-budget warning + per-finding skip flag

audit: one-click grammar fixes with rollback

audit: AI CV audit + structured contract/headcount/exit fields

bullet UX: AI improve + drag-to-reorder across 10 HTML templates

chat: in-chat tone picker with real-bullet samples (spec 46afe50)

fix: coerce language dicts to strings + stop asking headcount in chat

feat: company context fields in editor — sector, stage, headcount, team

refactor: new flow — chat-only step, editor+tone, then design

feat: cover letter generation — backend endpoint + frontend page + PDF export

feat: 5 research-backed CV features + 2 bug fixes

fix: grounded CV tone + merge experiences action

feat: pass current CV draft to chat LLM — can now read and edit the brouillon directly

feat: inject knowledge base contradictions + known facts into chat coaching

feat: chat executes CV instructions immediately — delete, add, reorder via cv_actions

feat: full CV preview — personal info, education, languages, structured sections with labels

feat: knowledge base backend — SQLite DB, projects CRUD, experience enrichment, contradiction detection

feat: match score (0-100%) with strengths and improvements after CV generation

feat: anti-bullshit CV prompt, tone selector (startup/corporate/creative/minimal), token optimization, chat min 3 questions

fix: voice error feedback, UI language in all prompts, coaching-style chat that pushes for specifics

feat: backend scaffold — FastAPI, models, Dockerfile, health endpoint