JobFilter V2 foundation: audited zero-cost validation slice

[manazoid4]

Outcome

Begins the approved JobFilter V2 overhaul without crossing the clients-first or paid-infrastructure gates.

• adds a synthetic, no-send Revenue Rescue walkthrough at /demo/revenue-rescue
• records the Phase 0 access/security audit and route preservation matrix
• records the V2 design contract and open-source provenance policy
• keeps the demo noindex and free of provider/database writes
• makes inbound WhatsApp disabled by default and fail-closed on signature/configuration errors
• adds deterministic demo and webhook-security regressions to CI

Explicit boundaries

This PR does not change production schema, pricing, subscribers, public navigation, telecom configuration or live messaging. Applied Supabase RLS and Stripe subscriber state remain Gate 0 access items documented in docs/v2/phase-0-audit.md.

Verification

• npm audit --audit-level=high — 0 vulnerabilities
• npm run lint
• all existing CI regression scripts
• npm run test:v2-demo
• npm run test:whatsapp-security
• npm run build
• production runtime regression
• local HTTP contract: 200, noindex, simulation disclosure and primary action present

Browser screenshot automation was unavailable in the current environment, so no visual-verification claim is made.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
job-filter-v1	Ready	Preview	Aug 24, 2026 7:38pm

[supabase]

This pull request has been ignored for the connected project nfjwuwsuaapufmkppoeo because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[alwaysmeticulous]

✅ Meticulous spotted 0 visual differences across 169 screens tested: view results.

Meticulous evaluated ~4 hours of user flows against your PR.

_{Expected differences? Click here. Last updated for commit 45ca22f fix(webhook): avoid retries after intake side effects. This comment will update as new commits are pushed.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5b6203b198

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".