CV import that treats the document as evidence

PDF signatures and limits are checked before parsing begins.

Extracted values retain warnings where a human review matters.

The original CV remains private and importing never publishes.

DOCX imports go through the same scanner-validated pipeline as a PDF before extraction begins.

A field the CV doesn't contain stays empty rather than being filled with a plausible guess.

Files that fail validation — the wrong type, too large, or unreadable — are refused with a reason, not silently accepted.