Resume data, profile claims, OAuth tokens, generated artifacts, and the local database stay on the user's Windows machine.
Local-first Windows engine
CareerSeeker
CareerSeeker discovers jobs, researches companies, tailors application materials, verifies every candidate claim against local source-of-truth profile data, and creates reviewable Gmail drafts. The first launch mode is L1 Drafts: the app may prepare work, but the human reviews and sends.
CareerSeeker requests Gmail draft capability only for the first launch mode and does not expose a send path in that build.
Unsupported claims are blocked before a draft is created. Reviewability and auditability are product primitives, not afterthoughts.