REGEN v1.0.0

The first public release of REGEN: an autonomous job engine that finds roles at the employer's own careers page, builds one resume per job only from facts you can prove, fills the application, and keeps a receipt for every submit.

Live demo: https://regen-engine.onrender.com (synthetic dataset, no personal data) · Docs: wiki · Changelog: CHANGELOG.md

What's in 1.0

• Discovery on ~6,200 boards across nine ATSs (Greenhouse, Ashby, Lever, Workable, Rippling, JazzHR, Workday, SmartRecruiters, iCIMS), plus job-alert mail, new-grad lists and GitHub job lists resolved back to the employer.

• Fit gate and trust gate: citizenship, clearance, sponsorship, graduation window, years and core stack checked against the JD before any effort; personal data typed only into known ATS hosts that pass a scam check.

• Truthful tailoring: a JD-first composer over your Fact Bank, a validator that rejects any claim outside it, and an ATS read-back of the PDF.

• Apply on Greenhouse, Ashby and Rippling automatically; Workday and SmartRecruiters in the desk (a browser you sign in to); legal and status answers only from your presets; CAPTCHAs and bot checks always handed to you.

• Docker bank: pipeline, autoscaled appliers, supervisor with guardrails, Postgres ledger, API, control room, MCP over HTTP, all on 127.0.0.1.

• Zero API keys: your own AI client drives the engine over MCP.

• Human draft override (engine draft on|off|status): when you say draft, the engine answers instead of parking (agreements as your consent, export questions from your citizenship presets, open text from the Fact Bank), logged per job. Never facts you have not given, human checks or EEO beyond a decline.

• Live control room, supervisor on top: every pipeline step beats its stage, the control room shows what each one is doing, and a supervisor watchdog restarts any container that is up but silent.

Release review fixes

Every file was reviewed for this release. Highlights (full list in the changelog):

• Local services refuse other websites: Host checks on the API, MCP, live view and code relay (DNS rebinding), relay accepts browser posts only from Gmail, and the desk's VNC gets a fresh password on every start.
• The supervisor can no longer scale to zero appliers (it could not recover from that).
• Form-filler fixes found on real forms: Greenhouse resume upload retries, Ashby country-location boxes, and three answer rules that picked the wrong kind of answer.
• Fit gate: mechanical / manufacturing roles, citizenship or clearance stated only in the title; option matching for graduate-degree, open-ended salary and relocation-sentence answers; "If yes" follow-ups stay blank.
• SECURITY.md now documents every port and who may write to it; one version (1.0.0) across engine, API and web.

Verify

• python -m pytest -q → 220 passed
• python scripts/privacy_scan.py → clean
• curl -H "Host: evil.example" 127.0.0.1:8787/api/health → 400