Skip to content

Five form-system lessons, and the watchlist reads PeopleForce and Pinpoint - #76

Merged
selfishprimate merged 5 commits into
mainfrom
seekter/2026-10-27-icims-peopleforce-pinpoint
Oct 27, 2026
Merged

selfishprimate merged 5 commits into
mainfrom
seekter/2026-10-27-icims-peopleforce-pinpoint

Conversation

@selfishprimate

@selfishprimate selfishprimate commented Oct 27, 2026 •

Copy link
Copy Markdown
Owner

Lessons from the 26-27 Oct runs, one commit each:

  • Greenhouse: typing "No" into a select filters by substring, so on a list of whole-sentence options it can pick "Yes, … non-immigrant visa". Type enough to be unique and read the options first.
  • Teamtailor: declining the Teamtailor banner can leave an employer's OneTrust dialog open, and while it is up the phone field swallows every digit.
  • Cezanne HR (old Occupop links): fills by typing; the cover letter is a rich-text DIV that a find ref never reaches. cord: no application form at all, only a message to the hiring manager, gated by a visa-eligibility question.
  • iCIMS is not a dead end: once the candidate signs in, the wizard fills through the same-origin iframe. PeopleForce needs no account; its cover letter is a rich-text editor over a hidden textarea.
  • New providers: peopleforce (<host>/v.json) and pinpoint (<slug>.pinpointhq.com/postings.json), both with a live check. Tests for the readers and the live checks; 110 pass.

Leak scan run on the staged diff: no identity values, emails, phones or postcodes. One test fixture location was neutralised.

selfishprimate and others added 5 commits October 27, 2026 13:26
The Yes/No shortcut (focus, type "No", Return) assumes the list filters to one
option. Greenhouse filters by substring, so on a US work-authorization list whose
options are whole sentences, "No" kept "Yes, I have US Work authorization via a
non-immigrant visa…" on top and Return selected it. Measured 26 Oct 2026, caught
by reading the value back before submit. Type enough of the wanted sentence to be
unique and read the visible options first.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Declining Teamtailor's own cookie banner left an employer-run OneTrust dialog
open mid-page (26 Oct 2026). While it was up, clicking the phone input left focus
on BODY and every typed digit was lost. Choosing its necessary-only button and
clicking the phone field again fixed it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Cezanne HR (old Occupop links redirect there, and live.mjs reads them as
UNKNOWN): one page, real typing works, but the cover letter is a rich-text DIV
that a find ref never reaches; a coordinate click into the box does. No consent
box. Measured 26 Oct 2026.

cord job pages have no application form: the only route is messaging the hiring
manager from the candidate's cord account, which Seekter never does, and cord
asks about visa eligibility for the role's region before the message can be sent.
Its Logistics block states sponsorship in plain text, so read that first.
Measured 27 Oct 2026.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…no account

iCIMS was listed as an account wall and left there. Measured 26 Oct 2026: only
the login, the password and an SMS-consent question are the candidate's; the rest
of the five-step wizard sits in a same-origin iframe and fills through
contentDocument, the resume goes in through a proxy input and a DataTransfer, and
Return inside a native select saves and reloads the step. A US work-authorization
No did not end the application there, unlike an Ashby tenant the same day.

PeopleForce career sites (careers.<company>.com, "Powered by PeopleForce") apply
with no account. Measured 27 Oct 2026: the cover letter is a rich-text editor over
a hidden textarea, so the setter alone leaves it looking empty, and the page
scrolls while typing, so coordinate clicks from an older screenshot land on other
fields, once on the consent checkbox. Focus fields from JS instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Two systems the employer sweep could not read, both with an open feed and no key:
PeopleForce serves its open vacancies as a JSON array at <host>/v.json, and
Pinpoint at <slug>.pinpointhq.com/postings.json. Each provider also answers the
live check (a posting is open while it is in the feed). Found on 27 Oct 2026
when a remote role turned up on a PeopleForce career site the sweep had never
seen; four companies on Pinpoint came onto one watchlist the same day. Tests for
both readers and both live checks.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@selfishprimate
selfishprimate merged commit c908274 into main Oct 27, 2026
5 checks passed
@selfishprimate
selfishprimate deleted the seekter/2026-10-27-icims-peopleforce-pinpoint branch October 27, 2026 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant