Founder System & Technical Master Overview
Architectural reference for Aaron (Founder & Technical Lead). Detailed inventory of the 6 authenticated role dashboards, 8 PostgreSQL tables & RLS policies, Companies House verification, Pulse AI 4-stage matchmaker, and Phase 2/3 engineering milestones.
1. What Is 100% Working Today
Teen View Dashboard
Live at /pages/dashboards/teen-dashboard.html
- Talent Spark Profile (superpowers, interests, bio)
- Active 4-stage career pathway cards
- Outbound Wave tracking & parental consent gates
- Direct access to Pulse AI & Pulse CV Studio
Employer View Dashboard
Live at /pages/dashboards/employer-dashboard.html
- Companies House verification gate banner
- Publish apprenticeships & work experience to Supabase
- Review inbound candidate Waves with superpower filters
- Shortlist, accept, or decline applications
Training Provider Dashboard
Live at /pages/dashboards/provider-dashboard.html
- Publish BTECs, T-Levels, bootcamps to
provider_courses - Career pathway stage and target-role tagging
- Candidate course wave pipeline & enquiries
- School and institutional partnership metrics
School Careers Dashboard
Live at /pages/dashboards/education-dashboard.html
- Student placement tracker in
student_placements - Gatsby Benchmarks 1–8 compliance monitoring
- Safeguarding status checks for employers
- Local opportunity explorer for student cohorts
Parent Safeguarding Dashboard
Live at /pages/dashboards/parent-dashboard.html
- Under-16 statutory consent queue (
parent_approved) - Linked teen application & course wave review
- Children & Young Persons Act 1933 hour limit alerts
- Full placement & employer credential visibility
Admin Control Panel
Live at /pages/dashboards/admin-dashboard.html
- Live Companies House CRN verification queue
- 1-click Approve, Reject, or Revoke employer access
- Real-time telemetry (users, jobs, applications)
- Executive Strategy & Pitch Hub with Quick Preview
Implemented on all 6 dashboards. Supports Google/Microsoft Authenticator with live SVG QR code, secret key, challenge verification, and AAL2 login interception.
Dual-mode serverless matchmaker (/api/pulse-matchmaker.js) powered by Gemini 2.5 Flash + deterministic Bristol catalog covering 8 career tracks with strict youth safeguarding.
Split-screen conversational AI CV builder (pulse-cv.html) with live A4 preview, superpower extraction, and print-to-PDF export designed for 14–24s.
2. Database & State Architecture Map
All 8 core PostgreSQL tables in Supabase (defined in supabase_schema.sql) with Row-Level Security policies and fallback state.
| # | Table Name | Primary Key / Rel | Core Schema Columns | Row Level Security (RLS) | Fallback State |
|---|---|---|---|---|---|
| 1 | profiles | id → auth.users.id | email, role, full_name, age, postcode, parent_email, superpowers, org_name, crn, verification_status | Auth read; user self-update; Admin verification status updates | sl_user_profile, sl_profile_* |
| 2 | opportunities | id, employer_id | title, description, opportunity_type, industry, location_city, salary_range, min_age, max_age, career_matches | Public/auth read if active; verified employers manage own listings | SL_DATA.opportunities (13) |
| 3 | applications | id, opportunity_id, teen_id, employer_id | status, cover_note, parent_approved, wave_type, course_id, teen_name, direction, nudged_parent | Teens view own; employers view listing apps; parents approve via parent_email | sl_local_applications |
| 4 | messages | id, application_id, sender_id, recipient_id | content, is_flagged, flag_reason, read_at, created_at | Restricted to sender or recipient; insert check on auth.uid() | Schema ready; Phase 2 UI wire |
| 5 | provider_courses | id, provider_id | title, qualification_type, duration, location_city, external_api_source, career_matches, pathway_stage | Public read for active; training providers manage own courses | SL_DATA.courses (30) |
| 6 | career_pathways | id, teen_id | target_role, summary, readiness_score, steps (JSONB 4 stages) | Teens view, insert, and update their own saved pathways | sl_active_pathway |
| 7 | student_placements | id, education_id, teen_id | student_name, year_group, employer_name, role_title, status, safeguarding_cleared, start_date | Schools manage and view their own student cohort placements | sl_edu_placements_* |
| 8 | pulse_conversations | id, user_id (UNIQUE) | messages (JSONB conversation history), updated_at | Users view and manage their own conversational Pulse AI thread | sl_pulse_anon |
3. Live Cloud vs. Seeded Demo Matrix
Honest operational breakdown between live Supabase cloud transactions and seeded Bristol dataset fallbacks.
Account registration, session hydration, password resets, role redirection, and TOTP 2FA enrollment/verification execute live against Supabase.
Admin dashboard queries real employer records from public.profiles and updates verification_status live with instant RLS enforcement.
Executes via /api/pulse-matchmaker.js using Gemini 2.5 Flash when API key is provided, backed by deterministic 8-career catalog and saving to career_pathways.
Verified employers/providers write live listings to PostgreSQL; UI blends live database rows with 30 curated Bristol courses and 13 anchor opportunities.
Endpoints in /api/companies-house.js query Gov.uk REST API with API key, with built-in test mock (CRN 12345678) for offline demo resilience.
School careers dashboard queries student_placements for active cohorts; fallback initializes Bristol pilot baseline metrics for investor demonstrations.
4. Next Technical Milestones (Phase 2 & Phase 3)
External Aggregators & Cross-Role Loop
Target: Next 60–90 Days
-
DfE & National Careers Service API Sync: Automated ingestion of accredited courses, T-Levels, and skills bootcamps via
/api/catalog-sync.js. -
Gov.uk Apprenticeship Feed: Live regional ingestion of South West vacancies into
public.opportunities. - Complete Cross-Role Course Waves: Link student course inquiries directly into Provider admissions, Parent approvals, and School Gatsby tracking.
- Employer Reverse-Matching: Verified employers discover anonymized Spark Profiles by superpower tags and send inbound Waves.
National Scale & Institutional SaaS
Target: Months 4–12
- School MIS Integrations: Single sign-on and automated Year 10–13 cohort sync with Wonde, Arbor, and SIMS.
-
AI Safeguarding Moderation Filter: Real-time regex and NLP filter on
public.messagesblocking phone numbers and off-platform contact. - Combined Authority Skills Analytics: Regional heatmaps for WECA and city councils mapping youth intent against local skills gaps.
- Multi-Academy Trust (MAT) Licensing: Enterprise institutional contracts and CSR youth social value audits.