1. Current-Employer & Domain Privacy Shield
Candidates can block their current employer by name or domain so their profile is never surfaced to that organization.
2. Prompt-Injection Firewall & Self-Service Erasure
All uploaded CVs are sanitized against prompt injection, and users can trigger JSON export or deletion tombstones anytime.