Job pipeline & delivery stack
A private local-first job dashboard (Job Digest) plus public proof points: automation, retrieval-augmented matching, test automation on Lifter (Expo Web), and a security case study. No live access to private data — architecture and open patterns only.
n8n orchestration
Problem: Job sources and AI review should run on a schedule without manual clicks, without exposing the dashboard to the internet.
Solution: Cron-style HTTP triggers with a Bearer secret call digest and optional AI review batches. Workflow export documents the Festpreis-style deliverable: schedule → fetch → review → notify.
Stack: n8n, HTTP Request, Job Digest POST /api/cron/*
Outcome: Repeatable daily pipeline on localhost; secrets stay in n8n credentials, not in the workflow JSON.
RAG-assisted job matching
Problem: A single static profile prompt wastes context and misses role-specific rules (stack rejects, Festpreis automation, pre-sales).
Solution: Profile and strategy chunks are embedded with Ollama, stored in SQLite, and retrieved by cosine similarity against each job description before the LLM returns apply/maybe/skip JSON.
Stack: Ollama embeddings, SQLite rag_chunks, local LLM review
Outcome: Sharper verdicts with smaller relevant context; falls back to full profile if embeddings are offline.
Playwright on Lifter
Problem: Freelance QA gigs expect reproducible E2E evidence, not only manual store testing.
Solution: Playwright runs against Expo Web on port 8081: onboarding skip, tab navigation, FAB → log screen, and session title input. testIDs on critical controls.
Stack: Playwright, Expo Web, Lifter e2e/
Outcome: Local npm run test:e2e suite suitable as a portfolio and Upwork QA sample.
Security review
Problem: The tool stores job mail credentials and session-protected APIs on a developer machine.
Solution: Documented threat model: HMAC sessions, AES-GCM vault for IMAP secrets, cron Bearer auth, localhost Ollama, and dev-vs-prod hardening notes.
Stack: Next.js middleware, vault.key, security-case-study.md
Outcome: Fixed-price security review template aligned with CompTIA Security+ practice and client QA sign-off (app-signoff).