Policies the workflow actually enforces.

Each rule listed here is enforced at the database, the Pydantic validator, or the orchestrator — never an honour system. The id (br-NNN) maps to a row in spec/business-rules.yaml on GitHub.

• /docs/truthfulness
  Truthfulness guarantee

  How the workflow grounds every claim in the source resume — and what happens when it can't.

• /docs/privacy
  Privacy

  What we store, how long, and what never reaches analytics. PII redaction, retention, and provider opt-outs.