merge: chore/cleanup-remove-bloat-and-secrets into main

docs/15-final-improvements.md

@@ -0,0 +1,124 @@
+# RMI 2026 — 15 Final Improvements Before Frontend Push
+# Complete AI Crypto Intelligence Platform
+
+## TIER 1 — Consumer-Facing (Week 1)
+
+### 1. Dify Chat Widget on rugmunch.io
+Embed the RMI Crypto Expert as the homepage hero. Floating chat bubble bottom-right.
+Single `<script>` tag embed. Dark theme, RMI branding.
+**Impact:** Instant AI engagement. Users ask "is this token safe?" directly.
+**Depends on:** Dify deployed ✅, 15 tools built ✅
+
+### 2. Real-Time WebSocket Price Feed
+Replace polling with persistent WS connections. `wss://rugmunch.io/ws/prices`
+Solana, Ethereum, BSC top 100 tokens. Sub-100ms latency via DataBus cache.
+**Impact:** Frontend feels instant. Professional trading terminal vibe.
+**Depends on:** DataBus WebSocket ✅, Caddy reverse proxy
+
+### 3. Automated Signal Generation
+Cron: SENTINEL scan → score < 30 → "avoid" signal. Score > 80 + low cap → "gem" signal.
+Publish to Telegram + websocket + email. Users subscribe to signal tiers.
+**Impact:** Recurring revenue. "RMI Signals" = $19.99/mo premium feature.
+**Depends on:** SENTINEL ✅, Redpanda ✅
+
+### 4. Usage-Based Billing (x402 + Stripe)
+Free: 100 API calls/day. Pro: $19.99/mo unlimited. Enterprise: custom.
+Stripe for fiat, x402 for crypto. Usage tracked via Langfuse metrics.
+**Impact:** Monetization engine. Every API call = revenue.
+**Depends on:** x402 ✅, cost tracker ✅
+
+## TIER 2 — Intelligence (Week 2)
+
+### 5. Social Sentiment Pipeline
+Ingest X/Twitter + Reddit mentions. NLP sentiment scoring.
+"$BONK sentiment is 87% positive with 450 mentions/hour" → feeds into SENTINEL risk score.
+**Impact:** First-to-market intelligence. Catch pumps before they happen.
+**Depends on:** X API (BrightData fallback) ✅, Redpanda streaming
+
+### 6. Cross-Chain Arbitrage Detector
+Compare prices across 112 chains. "ETH is $3,201 on Ethereum but $3,245 on Arbitrum — 1.4% arb."
+Factor in gas + bridge fees. Alert if net profit > $50.
+**Impact:** Premium feature. Professional traders pay for this.
+**Depends on:** DataBus ✅, chain comparability ✅
+
+### 7. MEV Protection Advisory
+Before token purchase, check: "This pool has had 12 sandwich attacks in 24h. Use Flashbots."
+Integrate with wallet connection. Warn before confirming tx.
+**Impact:** Unique value prop. No competitor does this at consumer level.
+**Depends on:** MEV detector ✅, Erigon ✅
+
+### 8. NFT Wash Trading Detector
+Extend volume authenticity to NFTs. Detect: self-trades, round-trip wash, bid stuffing.
+Score 0-100 authenticity per collection. "Bored Apes: 94% authentic. Random NFT #8472: 12% authentic."
+**Impact:** NFT market is $5B+. Wash trading is rampant. First mover.
+**Depends on:** Volume authenticity ✅, DataBus NFT providers
+
+## TIER 3 — Platform (Week 3-4)
+
+### 9. Developer API Portal
+Self-service: sign up, get API key, view docs, track usage.
+`developers.rugmunch.io` — Swagger docs, code snippets (Python/JS/Rust), rate limits.
+**Impact:** Developer ecosystem. 3rd-party apps build on RMI.
+**Depends on:** DataBus gateway ✅, Supabase auth
+
+### 10. Automated Incident Response
+If backend CPU > 90% for 5min → auto-scale warning.
+If Redis down → serve stale cache + alert Telegram.
+If disk > 85% → auto-prune old logs.
+**Impact:** 24/7 reliability without human intervention.
+**Depends on:** Prometheus ✅, Grafana ✅, health checks
+
+### 11. Content Moderation Pipeline
+User-submitted content (comments, posts, reviews) → AI moderation.
+NSFW/spam/scam detection. Human review queue for edge cases.
+**Impact:** Community features without moderation overhead.
+**Depends on:** Ollama (classification) ✅, Ghost CMS
+
+### 12. Model A/B Testing Framework
+Deploy 2 prompt variants → split traffic 50/50 → measure accuracy.
+"scam_detection_v2 has 94% accuracy vs v1 89%. Auto-promote v2."
+**Impact:** Continuous improvement without manual testing.
+**Depends on:** Prompt registry ✅, Langfuse ✅
+
+## TIER 4 — Advanced AI (Ongoing)
+
+### 13. Fine-Tuned RMI Models
+Fine-tune qwen2.5-coder:7b on Real-CATS + MBAL + Elliptic.
+`rmi-scam-detector:7b` — specialist model, 95%+ accuracy on rug detection.
+Deploy to Ollama. A/B test against generic models.
+**Impact:** Proprietary AI advantage. Moats are built on custom models.
+**Depends on:** Ollama ✅, Real-CATS ✅, model eval ✅
+
+### 14. Multi-Modal Token Analysis
+Analyze token logos, website screenshots, social media images.
+"Is this token using stolen artwork? Is the website a template?"
+Vision model (Gemini 2.5 Flash free tier) → risk signal.
+**Impact:** Catches scams that text-only analysis misses.
+**Depends on:** Gemini API ✅, browser automation
+
+### 15. Autonomous Research Agent (Cron)
+Every morning: scan top 100 tokens, identify 5 most interesting, write research report.
+Publish to Ghost CMS + Telegram + X. Fully automated.
+LLM writes → LLM reviews → human approves → publish.
+**Impact:** Content machine. Daily research without human effort.
+**Depends on:** Dify ✅, DataBus ✅, Ghost ✅, agent memory ✅
+
+---
+
+## Execution Priority
+
+| Priority | Items | Timeline |
+|---|---|---|
+| NOW | #1 Widget, #2 WebSocket, #3 Signals, #4 Billing | 3 days |
+| WEEK 2 | #5 Sentiment, #6 Arbitrage, #7 MEV, #8 NFT | 7 days |
+| WEEK 3-4 | #9 API Portal, #10 Auto-Healing, #11 Moderation, #12 A/B | 14 days |
+| ONGOING | #13 Fine-Tuning, #14 Multi-Modal, #15 Auto-Research | Continuous |
+
+## Immediate Dependencies
+
+| Blocker | Resolution |
+|---|---|
+| Dify admin setup | Go to :8899, create admin account |
+| DeepSeek API key in Dify | Settings → Model Provider → DeepSeek |
+| Caddy/nginx WebSocket proxy | 5-line config for /ws/ path |
+| Stripe integration | Create Stripe account, get API keys |