# PH3AR — Full Machine Discovery

Canonical URL: https://ph3ar.com
PlatPhorm same-as URL: https://ph3ar.platphormnews.com
Service: ph3ar
Version: 1.0.0

## Purpose

PH3AR remains an entertainment and technology product. Its main workflow searches OMDB for real movie or television metadata and requests AI-assisted recommendations when OpenAI is configured. The RSS Wire adds a network-reading workflow without replacing PH3AR's identity.

## Public UI

- `/` — PH3AR community landing page.
- `/watch-this` — movie and television search and recommendation experience.
- `/feeds` — live PlatPhormNews RSS and Atom aggregation with source status.
- `/about`, `/careers`, `/contact`, `/privacy` — public site information.
- `/api-docs` — human-readable API overview.

## Public APIs

- `GET /api/health` and `GET /api/v1/health` — public-safe health and compliance state.
- `GET /api/feeds` — JSON envelope containing aggregation metadata, source outcomes, and items.
- `POST /api/getMediaDetails` — OMDB title lookup; honestly returns unavailable when OMDB is not configured.
- `POST /api/getMediaDetailsBatch` — bounded OMDB batch lookup.
- `POST /api/getRecommendation` — rate-limited AI recommendation request; honestly returns unavailable when OpenAI is not configured.

## Protected APIs

- `POST /api/jobs/generate` — real AI job-draft generation. Requires `Authorization: Bearer $PLATPHORM_API_KEY` or `X-PlatPhorm-API-Key: $PLATPHORM_API_KEY`. It never claims publication.

## RSS Aggregation

Canonical topology comes from `https://platphormnews.com/api/network/graph`. Pending crawlable domains come from `https://base.platphormnews.com/sitemap-index.xml`. The aggregator unions trusted PlatPhormNews hosts, excludes itself to prevent recursion, tries `/rss.xml`, `/feed.xml`, and `/atom.xml`, rejects redirects and non-HTTPS/non-Platform item URLs, limits response sizes, and exposes timeout, invalid, unavailable, and partial states. Items are bounded and deduplicated. No missing feed or item is synthesized.

## Platform Contract

Discovery routes: `/openapi.yaml`, `/llms.txt`, `/llms-full.txt`, `/llms-index.json`, `/robots.txt`, `/sitemap.xml`, `/sitemap-index.xml`, `/rss.xml`, `/feed.xml`, `/manifest.webmanifest`, `/.well-known/mcp.json`, `/.well-known/agents.json`, `/.well-known/ai-plugin.json`, `/.well-known/security.txt`, and `/.well-known/trust.json`.

The MCP endpoint exposes real read-only tools for the network feed, resources describing the product and discovery surface, and a movie-recommendation prompt template. It implements JSON-RPC 2.0 initialize, ping, tools/list, tools/call, resources/list, resources/read, prompts/list, and prompts/get.

Incoming W3C `traceparent` and safe `tracestate` are accepted. Responses return trace correlation headers. Trusted cross-site feed and discovery requests propagate W3C and PlatPhorm correlation headers. Trace export is not implemented and health reports that limitation.

Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.