investing plugin

RDCO investing-workflow skills. Canonical authoring location for the bundle of skills that drive the investing capability — thesis synthesis, devil's advocate review, backtesting against historical bars, and the weekly pulse.

Scope

This plugin packages the operating skills for the RDCO investing capability described at [[01-projects/investing/README.md]]. v1 covers:

• Thesis builder (source-aggregated synthesis + bear case + cross-domain translation)
• Devil's-advocate critic (fresh-eyes review against bear evidence)
• Backtest runner (walk-forward validation against Alpaca historical bars)
• Weekly pulse (portfolio + thesis-anchor re-validation)

Namespace pattern

Skills in this plugin invoke under the investing: namespace:

• /investing:build-thesis — produce a thesis synthesis doc from aggregated sources
• /investing:backtest-thesis — run walk-forward backtest against a thesis ticker list
• /investing:devils-advocate — fresh-eyes bear-case critic on a thesis draft
• /investing:weekly-pulse — re-validate active theses against demand-side anchors

Install / authoring pattern

This plugin lives in the vault (~/rdco-vault/01-projects/investing/plugin/) for now — authored here, not installed via marketplace. There are two surfaces where the skills land:

1. Canonical authoring — ~/rdco-vault/01-projects/investing/plugin/skills/<skill-name>/SKILL.md. This is the source of truth, versioned with the rest of the project.
2. Active invocation — ~/.claude/skills/investing-<skill-name>/SKILL.md. Each skill is symlinked or copied here so it's invocable in the current Claude Code session. The Stage 1 build (driven by /goal) creates this symlink as part of the skill scaffold.

The double-write is deliberate: the vault copy is the artifact the founder reviews; the ~/.claude/skills/ copy is what the harness loads at session start.

Scripts

Wrapper scripts that the skills shell out to live under scripts/ in this plugin AND are symlinked into ~/.claude/scripts/ for invocation. Stage 1 lands alpaca-paper.sh first:

• alpaca-paper.sh — wraps the Alpaca paper-trading API. Reads ALPACA_API_KEY_ID + ALPACA_API_SECRET_KEY from 1Password (per feedback_no_secrets_on_disk memory). Subcommands: account, bars <symbol>, place-order, positions, cancel.

Security review checklist for paid feeds

If/when a thesis demands a paid data feed (Polygon, IEX Cloud, Tradier extended quote), apply the same install-time security review the founder requires for any third-party MCP/plugin/skill install (per feedback_mcp_install_security_review_default):

1. Vendor reputation + breach history check
2. API-key scope review (read-only where possible, no withdrawal scopes)
3. Data residency + retention policy review
4. 1Password vault entry created with restricted access
5. Cost-ceiling alarm wired before first paid request
6. Founder gate on /decisions/ page before activation

Free-tier feeds (Alpaca free market data, Yahoo Finance historical via yfinance) bypass the founder gate but still require the 1Password key handling.

References

• Project README: [[01-projects/investing/README.md]]
• Toolchain buildout state: ~/.claude/state/investing-toolchain-buildout.md
• HQ bet page: /bets/investing/ (visibility surface)
• 1Password key handling: ~/CLAUDE.md hard rules + feedback_no_secrets_on_disk memory