draft-imran-systems-and-arguments-45Internet-Draft
← draft-imran-systems-and-arguments-45
Off the Bit Section 6: Curriculum Vitae Category: Informational Access: CONTROLLED
M. Imran Token lifetime: 86400 s 24 hour life, revocable X-Robots-Tag: noindex

6. Curriculum Vitae

Access controlled, for reasons that are about other people's privacy rather than about mine

6.1. Rationale

Sections 3 through 5 of the index draft are a more useful record than any résumé. They carry numbers, named failures, revision dates, and claims you can check against people who were in the room.

The document itself carries client names, reference contacts and a phone number that belong to other people's privacy as much as to my convenience. So it goes out on a signed link rather than sitting at a guessable path in a public bucket.

6.2. Request

POST /api/cv

Returns 202 Accepted and mails a signed link, openable more than once inside 24 hours. Time to live 86400 seconds. Rate limited to three per address per day and sixty per source network per hour. Your address goes to the access log in 6.4 and nowhere else, is never added to a list, and is deleted the same day you ask.

6.5. Alternatives

PreferencePath
PreferredWrite to hey@mosthofaimran.com and say what the role is.
FineUse the form in 6.2.
Also fineDo not request it at all. Sections 3 through 5 will tell you more about how I work.

6.7. Delete your address

POST /api/cv/forget

Removes every row holding that address, including any link still live, which stops working immediately. Answers 202 whether or not there was anything to delete, for the same reason 6.2 does: an endpoint that says "no such address" is a way to ask whether an address is on file.

6.4 has promised same-day deletion since the gate was built, and the endpoint has worked the whole time. Nothing on the site said where it was, so the promise existed and the way to use it did not. Erratum 7.27.

6.6. Who else processes this

A privacy claim that lists what I keep, and not who else holds it, covers half the problem. Three companies see something.

ProcessorWhat it seesWhy
CloudflareEvery request, and a page-view beacon in your browserHosting, the token store, the file. Web Analytics is on, so a third-party script loads on every page. Section 10 has the cost
ResendYour address and the linkDelivering the mail. There is no other way to send you one
SlackYour address when you request a link. When one is opened, a token number and a count, and no addressTelling me a request happened. Until 2026-09-03 nothing did, and a gate nobody is alerted about fails silently
ImranSection 6, access controlled[Page 8]