Add Instructions for Personal Opsec Applications

[jamesbiederbeck]

This feels icky and I'm sad you put it into the world. Someone was always going to do it, sure, but my heart sank as I read the readme.

At least do the public the service of telling them how to use this in a defensive manner.

If nothing else, you do your potential users a disservice and skip your due diligence of pointing out fair credit reporting laws. A company using this would, I hope, face a significant scandal when someone like me inevitably requests a copy of their screenings.

[SecFathy]

I hear you — and honestly I felt some of the same discomfort while building it.

CrystalLens is not meant to enable shady HR practices. It’s a research MVP to show how these screenings actually work in practice, so people can:
• understand the mechanics,
• see the risks,
• and be better prepared to defend themselves.

You’re absolutely right that I should highlight the defensive use case more clearly — e.g. showing individuals how to audit their own online footprint, how a third party might interpret their posts, and why transparency matters.

I’ll add stronger disclaimers in the README about:
• Fair Credit Reporting laws / GDPR,
• that this is educational only,
• and pointers for people to use it to self-audit their digital presence.

Thanks for pushing me on this — feedback like yours is exactly what helps shape the project in a more responsible way. 🙏