Skip to main content
Protocol Wealth

Planning interface layer

A thin planning UI with an explicit identity boundary

pwplan-core is a React and Vite planning interface whose public contract accepts de-identified planning variables and rejects named direct-identifier keys before those values reach the planning engine.

Repository
pwplan-core
Implementation
TypeScript / React
License
Apache-2.0

Role in the system

One bounded layer, not the whole stack

This repository is the human-facing planning layer. The same UI contract can target a public demo engine or a separately authenticated private gateway, while identity mapping, client records, advice, and books-and-records controls remain outside the public browser application.

Current repository posture: The public build is for fake or de-identified demonstration data. The README explicitly separates it from authenticated private-client infrastructure.

Inspectable capabilities

Claims you can try to disprove

Each capability is paired with a concrete inspection test. If the source does not support the claim, the page should change.

Typed planning contract

Planning requests use an explicit contract of planning variables rather than an open-ended client record.

Check: Inspect src/contract/planning.ts. If the request shape accepts named identity fields without a contract change, the boundary has drifted.

Direct-identifier tripwire

Client-side compliance checks reject a defined set of direct-identifier keys before sending a planning request.

Check: Inspect src/lib/compliance.ts and its tests. Adding a blocked key to a request should fail before the engine call.

Two deployments, one UI

The public demo and separately authenticated private gateway share a UI contract while keeping identity and production controls outside the public build.

Check: Compare the documented gateway configuration paths. If public code embeds private credentials or identity mapping, the separation fails.

Browser-readable planning workflow

The interface makes planning inputs and outputs inspectable without requiring users to operate the Python engine directly.

Check: Run the documented build with fake data. If a core planning route cannot render without client identity, this claim is incorrect.

Reality check

What this page does not establish

  • Blocking a named set of identity keys is not proof that arbitrary free text or combined data cannot identify a person.
  • The public demo is not a client portal, financial plan, personalized recommendation, or books-and-records system.
  • Real client identity, authentication, audit logging, and private gateway infrastructure are deliberately outside this repository.

The repository is open-source software provided under its stated license and without warranty. It is not investment, legal, tax, or cybersecurity advice. Protocol Wealth is an investment adviser, not a software vendor; publishing this code does not create a support, hosting, or implementation agreement.

Next

Verify the source, then follow the boundary

Start with the README, inspect the implementation and validation paths, and open an issue in the repository if the public description and source do not agree.