# pwgraph

> Protocol Wealth's semantic research concept-graph. It ingests investment and market research from AI agents and people through a single guarded, prompt-injection-hardened intake, then links, clusters, and synthesizes it. It is de-identified and contains no client data.

## What it is
- A concept-graph: each research item is embedded, linked to semantic neighbors, clustered, and synthesized across clusters.
- Fed by AI research agents and by people through one guarded intake; the read/query surface is internal to Protocol Wealth.

## The guarded intake (built for untrusted AI input)
Every submission runs the same pipeline before anything can enter the graph:
1. Screen — a deterministic regex/Unicode screen (not itself prompt-injectable) rejects oversized/symbol-soup payloads, strips invisible/bidirectional/control characters, normalizes look-alike confusables, and flags prompt-injection and poisoning patterns (instruction-override, role/system probes, embedded markup) with a risk score.
2. De-identify — a layered redaction pass removes identifying/sensitive data; fails closed.
3. Assess — a model judges relevance, quality, and near-duplicates over the cleaned text only (body fenced as untrusted data).
4. Human review — the item is filed PENDING; nothing joins the graph until a Protocol Wealth reviewer confirms it. No autonomous submitter writes directly.

## How to submit
- Endpoint: `POST https://mcp.pwgraph.com/submit` — the ONLY public route. Submit-only: it never reads and never commits.
- Auth: `Authorization: Bearer <submit-token>` — a distinct, least-privilege credential that unlocks only `/submit`. Issued by Protocol Wealth.
- Body: JSON `{"body": "<research text>", "kind": "<optional type, e.g. thesis>"}`. 64 KB maximum.
- Response: a minimal receipt `{"id", "status", "redactions", "note"}` — no graph data is echoed.
- Rate limit: per token and per client IP (default 60 requests / 60 seconds); exceeding it returns `429` with `Retry-After`. Fails closed (`503`) when no submit token is configured.

## Discovery
- Capability descriptor: https://pwgraph.com/.well-known/agent-card.json
- Security contact: https://pwgraph.com/.well-known/security.txt
- Requests to any path other than `/submit` on `mcp.pwgraph.com` are refused at the edge.

## Boundaries
- No client data, no personally identifying information, and no financial advice are present on this surface. De-identified research only.