Clarify upstream lineage and Hackpost differences

.gitignore

@@ -23,6 +23,7 @@ salary_data.json
 job_scraper/seen_jobs.json
 job_scraper/hackpost_applications.json
 job_scraper/hackpost_saved.json
+job_scraper/hackpost_ships.json
 job_scraper/*.md
 *_BehavioralReport.pdf
 linkedin_Profile.pdf

ACKNOWLEDGEMENTS.md

@@ -0,0 +1,34 @@
+# Acknowledgements and project lineage
+
+Hackpost CLI is a modified fork of [Mads Lorentzen's AI Job Search](https://github.com/MadsLorentzen/ai-job-search).
+
+The upstream project supplied the foundation for:
+
+- Claude Code profile setup and candidate-data structure
+- job-posting fit evaluation
+- the drafter-reviewer application workflow
+- LaTeX CV and cover-letter generation and verification
+- interview preparation, outcomes, ranking, templates, portal adapters, and upskilling
+- the original security guards, tests, and documentation structure
+
+We are grateful to Mads Lorentzen and the upstream contributors for publishing this work under the MIT License. The original copyright and license notice remain in [`LICENSE`](LICENSE), and the upstream Git history is preserved in this repository.
+
+## What Hackpost added
+
+Hackpost maintains a separate product layer for AI-native freelance bounties:
+
+- a dependency-free `hackpost` executable
+- live bounty discovery from `hackpost.io/api`
+- bounty search by skill and minimum budget
+- local save, application-intent, ship, and token-activity records
+- `/hackpost-apply`, a project-bounty workflow that produces a capability brief and stops before external submission
+- an inspectable privacy command and explicit no-upload boundary
+- an environment doctor for local prerequisites
+- an opt-in hacker activity leaderboard foundation
+- offline fictional bounty data when the public API is unavailable
+
+Hackpost CLI is independently maintained by xAGI Labs. It is not endorsed by or affiliated with Mads Lorentzen, the upstream contributors, Anthropic, or Claude.
+
+## Upstream support
+
+If the original framework is useful to you, please star the [upstream repository](https://github.com/MadsLorentzen/ai-job-search) and consider supporting its author through the links in the upstream README.

HACKPOST.md

@@ -1,14 +1,30 @@
 # Hackpost integration
 
-This fork preserves the upstream AI Job Search workflows and adds a local-first Hackpost bounty surface.
+This fork preserves the upstream AI Job Search workflows and adds a local-first Hackpost bounty surface. See [ACKNOWLEDGEMENTS.md](ACKNOWLEDGEMENTS.md) for exact project lineage and attribution.
 
 ```bash
 npm link
 hackpost gigs --skill agents --min-budget 2000
 hackpost bounty hp-1048
-hackpost apply hp-1048 --url https://hackpost.dev/bounties/example
+hackpost apply hp-1048
+hackpost ship --title "Browser agent eval harness" --tokens 250000
+hackpost privacy
+hackpost doctor
 ```
 
 Then start Claude Code in this repository and run `/hackpost-apply HP-1048`. The workflow evaluates project fit, prepares truthful application materials, and stops before external submission.
 
-`HACKPOST_API_URL` can point the CLI at another Hackpost API deployment. If it is unavailable, the CLI uses the included fictional offline snapshot.
+The CLI reads live bounties from `https://hackpost.io/api` by default. `HACKPOST_API_URL` can point it at another deployment. If the API is unavailable, the CLI uses the included fictional offline snapshot.
+
+## How Hackpost differs from upstream
+
+| Area | Upstream AI Job Search | Hackpost CLI |
+| --- | --- | --- |
+| Primary opportunity | Employment postings | Scoped AI bounties and freelance projects |
+| Discovery | Country and portal-specific search skills | Hackpost's normalized bounty API plus offline snapshot |
+| Application output | Tailored CV and cover letter | Fit assessment, capability brief, concise application note, and optional portfolio/CV material |
+| Submission | Prepares job-application documents | Stops before external submission and points back to the canonical bounty source |
+| Local records | Job tracker and outcomes | Saved bounties, application intent, shipped projects, and optional token totals |
+| Reputation | Not included | Local proof-of-work and opt-in leaderboard foundation |
+| Privacy UX | Gitignore and security guards | Adds `hackpost privacy`; token/ship records are local and never uploaded by v0.2 |
+| Runtime UX | Claude slash-command framework | Adds a dependency-free Node executable alongside the inherited Claude workflows |

LICENSE

@@ -1,6 +1,7 @@
 MIT License
 
 Copyright (c) 2026 Mads Lorentzen
+Copyright (c) 2026 xAGI Labs contributors (Hackpost modifications)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

NOTICE

@@ -0,0 +1,10 @@
+Hackpost CLI
+Copyright (c) 2026 xAGI Labs contributors
+
+This software is a modified fork of AI Job Search:
+https://github.com/MadsLorentzen/ai-job-search
+
+AI Job Search copyright (c) 2026 Mads Lorentzen and is distributed under the MIT License.
+The original MIT license notice is preserved in LICENSE. The Hackpost-specific command surface,
+bounty integration, local activity records, privacy boundary, and associated documentation are
+independent modifications maintained by xAGI Labs.