Authentication is verified before protected pages and private API routes load. Public pages never render private CV, profile, report, or pipeline content.
Protected dashboard routes
Private reports and CV drafts
Manual approval before applying
No CAPTCHA or login bypass