RefineCV

What it is

RefineCV turns any candidate CV into an agency-branded document using LLM parsing, OCR and configurable templates, with teams, credits and billing.

Security

• Found and fixed an authorization bug class where the API trusted a caller-supplied tenant ID at 63 call sites. The tenant is now derived on the server from membership.
• Revoked direct browser writes to billing tables, fixed owner-only RLS policies, hardened JWT, CORS and headers, and ran a pen-test style review with a numbered findings report.

Reliability and quality

• Intermittent production 500s turned out to be event-loop starvation from synchronous PDF rendering. I moved rendering to a serialized executor across all 5 call sites.
• An LLM-provider watchdog (/health/llm plus Slack) that discovered the production fallback model had been silently dead.
• A parsing-faithfulness scorecard on every deploy, Playwright end-to-end tests (12 staging and 10 production smoke flows), and a manual QA run system.

Product

On-canvas WYSIWYG editing with rich text, CV import, cover pages, an onboarding tour, OTP password reset, and credit and billing fixes.

Stack