risk-graph-indexer Resources

These are the trusted sources for teaching this codebase. The repo's own docs are the

highest-trust resource — they're written by the team that built it and kept current.

Knowledge

In-repo (highest trust — primary source)

Top-level overview, service table, mermaid architecture + sequence diagrams, quick start. Use for: the 30-second pitch and the docker service map.

The canonical architecture doc: 3 services, the monitored set, node lifecycle, what creates nodes/edges. Use for: the authoritative data-flow model. Best single doc to teach from.

Hard requirements + invariants + anti-hallucination notes (e.g. "Memgraph has no APOC", "no full-graph scans"). Use for: how the team actually works, and gotchas.

The EdgeType / NodeType constants — the literal vocabulary of the graph (HOLDS, APPROVES, ADMIN_CTRL, …). Use for: the ground-truth edge/node list.

The 20 event decoders (decoder.go, decoder_protocol.go, topics.go). Use for: how raw logs become typed events.

The indexer's bootstrap + run loops. Use for: the actual consume→decode→write entrypoint.

The authoritative 15-stage enrichment pipeline + periodic maintenance tasks (oracle bridger, LP/receipt refreshers, parity monitor). Use for: anything about node classification, discovery, or the enrichment worker. Best doc for Lesson 5's subsystem.

The single-writer / graph-writer architecture behind pkg/graphwrite. Use for: when a ticket sends you into the lane/recorder/consumer write internals (beyond the "one atomic tx" model taught in Lesson 4).

Other topic-specific deep dives. Use for: targeted reading when a lesson goes deep on a subsystem.

External (for bridging the gaps)

Wisdom (Communities)

"community" is the user's own team and their reviewers. Use for: real feedback on changes.

communities are the relevant fallback for stack questions, not the domain itself.)

Gaps

lessons are partly filling that gap. Confirm with the user whether a team onboarding doc exists.