# Risk Graph

> Session-authenticated graph reads, portfolio look-through, breach preview, and signed organization decisions.

Risk Graph is the dashboard surface for graph-based portfolio review. It maps the active organization's deployed vault positions through Philidor's risk engine and lets the user test exposure limits and modeled shocks.

## Session Access

The dashboard uses session-authenticated graph routes under `/dashboard/v1/graph`. The browser does not hold a partner API key.

| Route                                               | Role                                                     |
| --------------------------------------------------- | -------------------------------------------------------- |
| `GET /dashboard/v1/graph/look-through`              | Read look-through results for vault keys                 |
| `GET /dashboard/v1/graph/breach`                    | Read the latest breach-preview materialization           |
| `GET /dashboard/v1/graph/incident-exposure`         | Read incident exposure for selected vaults               |
| `GET /dashboard/v1/graph/incident-exposure/summary` | Read incident exposure summary rows                      |
| `POST /dashboard/v1/graph/check`                    | Evaluate limits and issue a signed organization decision |

The dashboard mirrors the public Risk Graph response shapes while using the logged-in session for access.

## Portfolio Prefill

The Graph tab waits for the organization portfolio, then preloads deployed vault positions with live value and resolvable on-chain addresses. Idle assets are excluded from the initial graph input.

If the organization has no tracked vault deposits, the graph can open with a labeled demo state instead of a blank canvas.

## Signed Decisions

Posting to `/dashboard/v1/graph/check` is the intent to sign a decision for the active organization. The backend records the creator as the dashboard organization and binds optional organization-modeled loss data into the decision envelope when supplied.

The response includes the snapshot id, build time, verdict, findings, exposures, unresolved vaults, and the signed decision object.

## Failure Mode

Graph materialization failures return `503` with `Retry-After`. The dashboard treats these as unavailable graph data, not as a clear result.

Public verification for signed decisions is documented on [Security](/docs/security).