feat: NVIDIA Sr DevOps application, drop cohort caps, fix Workday/decision-log bugs

Scout run 2026-09-04 (36 companies, 778 eligible) plus the NVIDIA package it
surfaced, and the tooling and policy fixes found along the way.

Application
- NVIDIA Senior DevOps Engineer, Zurich (JR2024256): submitted 2026-09-05.
  Evidence Fit 64/100 Stretch, hard gate FAIL x2, channel Weak. Sent on an
  explicit user override with the working model unresolved, so hybrid-vs-onsite
  is a live screening topic. 2pp resume + 1pp cover letter, both validators
  PASS, 0 boxes, 0 Tier 1 findings open.

Policy
- Drop the 7 Core / 2 Adjacent / 1 Stretch cohort caps. They had no derivation
  and were overridden whenever they bound, and the cohort was confounded: it
  tested fit class while holding channel constant at Weak across all six
  applications. Keep the recording, drop the rationing.
- Channel replaces the slot budget as the rationed variable: no application
  goes out cold when a named contact is published and reachable.
- Propagated through shared_ops, session_file_template, cohort_tracker
  (counts, never counts-against-a-target) and application_cohort.json.

Tool fixes
- fetch_workday emitted 404 URLs for every Workday company (NVIDIA, Novartis,
  Equinor): externalPath is site-relative and needs the locale + site prefix.
  6/6 short-form 404, 3/3 long-form 200. 773 dead links repaired across 42
  archived reports.
- find_decision_url silently de-linked decisions on two boards, which is why
  ruled-out roles kept resurfacing as undecided. RUAG rotates its UUID on
  repost; BIS migrated its vacancy URL scheme, orphaning 5 decisions including
  a live application. Fixed as a two-tier match, not a slug key -- slugs
  collide (two live RUAG reqs shared one).

Knowledge base
- claims.json: add Bash / shell scripting, the third canonical gap of this
  shape after Ansible and Linux administration.
- bundle_data_platform: BS-4 was framed as a delivered observability stack over
  what claims.json calls a proof of concept -- the defect the 2026-08-21 sweep
  was told to look for.
- CLAUDE.md and AGENTS.md: correct the RUAG Data Lakehouse shortlist claim,
  which the JD does not support and which both files still asserted.
- resume_template: comment-guard the missing babel/ngerman language block.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QFb8tTCig5r1KzkQiNXcYt

job_scout/state/application_cohort.json

@@ -1,6 +1,6 @@
 {
   "cohort_id": "evidence-first-2026-01",
-  "status": "active",
+  "status": "active (log, not a capped cohort)",
   "started": "2026-07-27",
   "target_mix": {
     "core": 7,
@@ -85,6 +85,17 @@
       "hard_gate": "fail",
       "channel": "weak",
       "outcome": "applied"
+    },
+    {
+      "company": "NVIDIA",
+      "role": "Senior DevOps Engineer, Zurich (JR2024256)",
+      "application_date": "2026-09-05",
+      "fit_class": "stretch",
+      "evidence_fit": 64.0,
+      "hard_gate": "fail",
+      "channel": "weak",
+      "outcome": "applied"
     }
-  ]
+  ],
+  "policy_change_2026_09_05": "Slot caps (7 core / 2 adjacent / 1 stretch) DROPPED by user decision. target_mix is retained only as a record of the original design and is no longer read by cohort_tracker.py or enforced anywhere. This file continues as a durable application log. Channel is now the rationed variable: no application goes out cold when a named contact is published and reachable. See resume_builder/reference/application_strategy.md."
 }

job_scout/state/decisions.json

@@ -1511,13 +1511,6 @@
     "note": "Claude judgment 2026-07-06: direct title match on data lakehouse/data platform, local WLB-exception tier",
     "date": "2026-07-06"
   },
-  "https://jobs.ruag.ch/offene-stellen/devops-engineer-c5i/349979ee-d679-4dcf-acba-66662b0a1ecf": {
-    "company": "RUAG (Thun/Bern)",
-    "title": "DevOps Engineer C5I m/f/d",
-    "decision": "shortlist",
-    "note": "Claude judgment 2026-07-06: DevOps title match, local tier; you already pulled a JD dump for this exact req (jd_ruag_devops_c5i.txt), signalling prior interest",
-    "date": "2026-07-06"
-  },
   "https://jobs.ruag.ch/offene-stellen/senior-software-engineer-mit-ai-ml-erfahrung/ca1f10d4-6fe8-4ff4-a189-28d440349750": {
     "company": "RUAG (Thun/Bern)",
     "title": "Senior Software Engineer mit AI/ML Erfahrung m/f/d",
@@ -1810,13 +1803,6 @@
     "note": "Submitted 2026-08-26. Adjacent, Evidence Fit 71, Document Quality ~91 est (critique scored 86 pre-Tier-1). 2pp resume + 1pp CL, both validator PASS. IMPORTANT FINDING: the application form's preferred-work-location dropdown offered NO Zurich option, despite the JD body saying 'Miami, Zurich or New York' and the site's own Zurich filter returning this req. Careers site is operated by Citadel Enterprise Americas LLC. Treat the Zurich seat as unconfirmed for any future Citadel application - check the form before investing. Working-model question (5-day onsite?) never resolved and may now be moot. Channel cold; user applied with low expectation.",
     "date": "2026-08-26"
   },
-  "https://careers.axpo.com/jobs/8263436-staff-plattform-engineer-w-m-d": {
-    "company": "",
-    "title": "",
-    "decision": "skip",
-    "note": "User decision 2026-08-27: not of interest. Baden is a 90min commute from Thun and Axpo is unlikely to pay materially above his current ~140k. RULE: for a commute that long the package must be much better - BIS-style tax-free or FAANG-like comp. Azure + Terraform are also named requirements with 0 canonical evidence, but that was NOT the deciding factor.",
-    "date": "2026-08-27"
-  },
   "https://jobs.ruag.ch/offene-stellen/ai-engineer-c5i/4afaa9aa-74c1-4b4d-9232-cf65651ce8ec": {
     "company": "RUAG C5I",
     "title": "AI Engineer C5I (Thun)",
@@ -1844,5 +1830,117 @@
     "decision": "applied",
     "note": "Submitted 2026-08-27. Ref JRQ$540-19848, Zimmerwald. Core, Evidence Fit 79, Document Quality 92, hard gate PASS, channel weak. German 2-page CV plus 1-page motivation letter; the six-year Bundeswehr officer career is included as military-context and motivation evidence. User explicitly accepted the critique's remaining BS-1 wording issue ('ohne manuellen Eingriff') as good enough and submitted without the proposed correction. Honest gaps at submission: physical datacenter work, Pull-GitOps as a named practice, GPGPU, ClickHouse and second Swiss official language. Lohnklasse and Engineer-III level were not recorded as clarified.",
     "date": "2026-08-27"
+  },
+  "https://jobs.ruag.ch/offene-stellen/senior-devops-kubernetes-engineer-c5i/2eef27f6-9546-499d-8492-c1cec22f548a": {
+    "company": "",
+    "title": "",
+    "decision": "shortlist",
+    "note": "Rank 1 and the only Core-classifiable target in the log. Re-verified live on the board 2026-09-04. Every required line has canonical evidence: Kubernetes SW-3/SW-7, Linux BS-6/PP-3, GitLab CI-CD SW-5/VZ-1, Ansible BS-6. Only von-Vorteil items missing (VMware/Nutanix/Proxmox, 0 canonical). JD states militärische Karriere als höherer Unteroffizier oder Offizier von Vorteil, so BW-1 scores. Gated on the Frank Haugwitz call (comp, PSP eligibility, whether a second C5I application is welcome while 18027 is pending).",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/senior-data-engineer-mssql-mit-data-lakehouse-perspektive/96da2356-d9f4-45da-a0ed-caa1acbe8ef9": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-09-04. Repost of the pulled Data Lakehouse / Senior Data Platform Engineer req with the disqualifier moved into the title. Required: mehrjährige Erfahrung im Aufbau und Betrieb von ON PREMISE Data Warehouse Lösungen, plus MSSQL, Talend, SAP S/4HANA. claims.json has 0 for MSSQL, Talend and SAP; his stack is AWS cloud-native. Settles the 2026-08-31 downgrade.",
+    "date": "2026-09-04"
+  },
+  "https://www.bis.org/vacancy/jr100472": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-09-04. Architecture GOVERNANCE, not building: define and maintain architectural strategies and frameworks, enterprise-architecture standards, architecture forums. Aker BP authoring-vs-building shape for the third time. Plus required Managerial Experience 1 to 3 years supervising teams, and 6 to 10 years in architecture. His titles are Component Owner / Application Owner, technical ownership, not people management. Also jr100429 silent since 2026-07-10, so stacking applies. Deadline 21 Sep 2026, 3-yr FTC.",
+    "date": "2026-09-04"
+  },
+  "https://careers.axpo.com/jobs/8247206-data-automation-engineer-w-m-d": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "POSTING IS DEAD. Left Unverifiable on 2026-08-31; re-checked 2026-09-04 and the Teamtailor API still returns the row while the public page still returns HTTP 404. Stale row in Axpo's feed, not a transient. Treat Axpo API rows as needing a live page check before any Phase 0.",
+    "date": "2026-09-04"
+  },
+  "https://careers.axpo.com/jobs/8263436-staff-platform-engineer-w-m-d": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "USER DECISION 2026-08-27: not of interest. Baden is a 90min commute from Thun and Axpo is unlikely to pay materially above his current ~140k. RULE: for a commute that long the package must be much better - BIS-style tax-free or FAANG-like comp. Azure + Terraform are also named requirements with 0 canonical evidence, but that was NOT the deciding factor. // JD re-read 2026-09-04 (URL had drifted from staff-plattform- to staff-platform-, so it resurfaced untagged): confirms the requirement text - fundierte Kenntnisse in Kubernetes, Microsoft Azure, Terraform. claims.json has Azure as evidence:unverified / output:FORBIDDEN and Terraform unverified. Decision unchanged and the commute/comp reason still governs.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.postfinance.ch/PostFinance/job/Kubernetes-Engineer/74638-de_DE": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-09-04. Best geography in the log (Bern/Homeoffice) and dead-on lane work: on-prem vanilla Kubernetes (Talos), GitLab CI/CD, GitOps, Grafana. Blocked on PUBLISHED COMP: CHF 115'000-130'000 at 100%, printed in the JD. Below the current ~140k, far below the 180k bar. Also requires Go for controllers/operators (Golang 0 canonical) and Terraform (unverified). Fourth PostFinance req with a printed band in the 100-135k range - this is a comp-bar exclusion, not a fit exclusion. Revisit only if the comp bar moves.",
+    "date": "2026-09-04"
+  },
+  "https://career2.successfactors.eu/sfcareer/jobreqcareer?jobId=1628&locale=de_DE&company=Swissgrid": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-09-04. Real level upside (leads ~5 experts, represents Swissgrid externally) but two required Gaps: fundierte Kenntnisse der Funktionsweise von elektrischen Energiesystemen (Elektrotechnik) und des Netzbetriebs - 0 canonical, this is a power-systems role wearing an AI title - and nachweisbare Führungserfahrung in the civilian-engineering sense (BW-1 is genuine leadership but not an engineering-management record). Aarau commute from Thun compounds it.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/devops-engineer-c5i/f48073a5-1687-46d4-b2ae-62a60c51c9ad": {
+    "company": "RUAG (Thun/Bern)",
+    "title": "DevOps Engineer C5I m/f/d",
+    "decision": "skip",
+    "note": "DOWNGRADE from the stale 2026-07-06 shortlist. JD read 2026-08-31: same platform core as Senior DevOps (Kubernetes) C5I but down-level, and it adds required Windows EDR management and Data Rights Management / Tagging & Labeling - 0 canonical each. Weaker twin of rank 1; if RUAG C5I gets one application it should be the Senior DevOps (Kubernetes) req.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/head-of-devops-office-c5i/abc407b4-7a20-441a-9689-f6d244c99224": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "TITLE IS MISLEADING - not a DevOps role. JD read 2026-08-31: this is the office/reception function of the C5I business area - travel management, vehicle admin, personnel admin, MS Office, kaufmännische Ausbildung / Direktionsassistent:in. Do not re-surface it as a platform role.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/senior-bi-specialist-qlik-sense-mit-advanced-analytics-perspektive/7b5084b3-5bab-42fb-b211-bf77f5353f6c": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "Repost of Senior Data Analyst & Data Scientist (JD read 2026-08-31) with the disqualifier moved into the title. Qlik Sense is the title-defining tool and Qlik is 0 canonical; the req also carries SAP S/4HANA (0 canonical).",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/senior-software-engineer-c5i/4ed6e938-293d-4f9a-9d22-627bab9bb5ae": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-08-31. OSINT/GEOINT full-stack; React + TypeScript frontend is required and React is 0 canonical. Interesting domain, wrong lane.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/principal-system-engineering-c5i/b7442824-223a-425e-95e2-b238924212da": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-08-31. Real level upside and the officer career is stated as an advantage, but the required umfassende Kenntnisse von Netzwerk-, Firewall- und Servertechnologien is a title-defining gap: Firewall 0 and Netzwerk 0 canonical. Would classify Stretch, and the Stretch slot is consumed.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/system-architektin-mit-devsecops-flair/f11df831-34a9-4bda-a35b-81c004bc73b2": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "JD read 2026-08-31. TOGAF/ArchiMate/UML/SparxEA/arc42 security-architecture authoring - documentation-standard depth with 0 canonical evidence - plus a Zürich Seebach commute.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/ict-architect-c5i/aa4ce14b-c713-4b2b-931b-8c94ef041de2": {
+    "company": "",
+    "title": "",
+    "decision": "paused",
+    "note": "NOT a skip - blocked on cohort arithmetic, revisit when a slot frees. JD read 2026-08-31: cloud-native/K8s/microservices architecture plus business-IT stakeholder management are Direct, officer career stated as an advantage, and the Architect title is the level upside the BKW decline asked for. But the title-defining Konzeption von System- und Plattformarchitekturen is org-scope against his domain-scope Component Owner evidence - the Aker BP authoring-vs-building shape. Defining-responsibility-only-Adjacent classes it Stretch (1/1 consumed); the Citadel/Aker BP precedent would record it Adjacent (2/2 consumed). Both exits closed, so it is only actionable if a Phase 0 scores the architecture responsibility genuinely Direct - and the JD reading says it is not.",
+    "date": "2026-09-04"
+  },
+  "https://jobs.ruag.ch/offene-stellen/data-lakehouse-engineer-senior-data-platform-engineer/40022": {
+    "company": "",
+    "title": "",
+    "decision": "skip",
+    "note": "STALE SHORTLIST from 2026-07-06, cleared 2026-09-04. The req was pulled from the board between the 08-31 and 09-04 scrapes and reposted as Senior Data Engineer (MSSQL) mit Data Lakehouse Perspektive. The 07-06 shortlist was a title-match prior; the JD is on-prem MSSQL/Talend/SAP S/4HANA, 0 canonical each. See the successor req's own decision row.",
+    "date": "2026-09-04"
+  },
+  "https://nvidia.wd5.myworkdayjobs.com/en-US/NVIDIAExternalCareerSite/job/Switzerland-Zurich/Senior-DevOps-Engineer_JR2024256": {
+    "company": "",
+    "title": "",
+    "decision": "applied",
+    "note": "SUBMITTED 2026-09-05. Evidence Fit 64/100 Stretch, hard gate FAIL x2, channel Weak/cold - the 7th consecutive cold submit. Submitted under explicit user override: the required line 'Strong expertise in on-premises networking and compute infrastructure' is a Gap (networking 0 canonical), and hybrid-vs-onsite was NEVER RESOLVED before sending, so the working model is now a live screening topic rather than a pre-cleared one - same pattern as RUAG comp/PSP. Package: 2pp resume 13 bullets + 1pp cover letter 279 words, both validators PASS 0 warnings, 0 boxes, 0 Tier 1 findings open. Measured Document Quality 82/100 pre-edit; both Tier 1 findings closed afterwards so it is better than 82 but NOT re-measured - never quote a post-edit estimate as a score. The letter names both honest gaps out loud: on-prem networking, and that employer-side Linux/Ansible ended Dec 2022 with only a personal server carrying currency. Comp is NOT a risk here: levels.fyi Greater Zuerich IC3 median ~CHF 204k, IC4 ~CHF 379k. Thun-Zuerich is ~1h50 each way, so a 5-day-onsite answer is the main disqualifier to watch for.",
+    "date": "2026-09-05"
   }
-}
+}