What problem does it solve? Recruiting tools that extract facts from private conversations can silently bind evidence to the wrong candidate, present unsupported claims as confirmed, or trigger unauthorized external writes. This Skill audits the full chain from source artifact to user-confirmed fact to external action, catching safety failures before they harm a candidate relationship. ## Core Features & Use Cases - Provenance and Identity Auditing: Verifies source-level traceability including OCR spans, speaker assignment, candidate matching, and edit history, with adversarial tests for same-name candidates and forwarded messages. - Privacy Lifecycle Review: Challenges data minimization, retention, export, deletion, vendor defaults, and cross-tenant authorization across raw images, OCR, embeddings, and backups. - External Action Governance: Requires explicit previews, execution-time permission checks, idempotency, verified results, and append-only audit records for contact, calendar, and notification writes. - Use Case: Before shipping a new OCR extraction pipeline, run this review to confirm every extracted assertion links to a quoted source span, ambiguous dates trigger clarification rather than silent guesses, and no calendar invite can be sent without explicit recruiter approval. ## Quick Start Use the evidence-safety-reviewer to audit this candidate evidence extraction flow for provenance, privacy, and unsafe external actions before release.
