Ultiwrite — Asymmetric Diligence

Ultiwrite — Asymmetric Diligence

Standard inputs. A wider investigation.

Ultiwrite connects documents and evidence with independent verification to investigate businesses, counterparties, financings, acquisitions and portfolios. This EmDash connector puts the connection to that investigative workflow inside your CMS admin.

What you can do

• Check the connected Ultiwrite account and its usage.
• Browse cases and released reports with pagination.
• Retrieve a saved Decision Brief by case or report ID.
• Create a private, single-use evidence-upload link and open the secure Ultiwrite uploader.
• Open available report pages in Ultiwrite for the full deliverable and entitled downloads.

Asymmetric diligence, investigative intelligence, business due diligence, document forensics and merchant risk are Ultiwrite service capabilities. This plugin is the thin connection to the service, not an embedded analysis engine.

Deliberate access

No automatic submission of CMS content. No access to your posts, drafts, media or visitors. Administrators choose every outbound action. The API key is stored as an EmDash secret setting, and network access is limited to Ultiwrite's canonical domain.

An Ultiwrite account with explicit API approval is required for connected actions. Service usage follows the account's permissions, quota and plan. The uploader and report downloads open on Ultiwrite; report downloads require sign-in. This connector shows structured API responses, not a replacement for the complete report.

Publisher: DWS Offshore Fund. Website: https://dwsoffshorepartners.com

Frequently asked questions

Do I need Bluesky to use the plugin?

No. Bluesky/Atmosphere is used by the publisher to release this package. Customers use their approved Ultiwrite API account.

Does the plugin analyze my CMS content automatically?

No. It has no CMS content permission or publish hook. It connects administrators to account checks, case browsing, saved Decision Briefs and an explicit secure-upload action.

Is an API key enough?

The Ultiwrite account must also have explicit API approval. The key needs the relevant scopes, and account request and analysis limits still apply.

Why did a request return 403 or 404?

403 can mean missing API approval or scope. 404 can mean the resource is unavailable to this account or the API is not active on the service. The plugin does not bypass either condition.

Where are files and reports stored?

Evidence is uploaded directly in Ultiwrite's uploader. This connector does not persist files, reports or signed upload links. EmDash stores the encrypted connection key; result data is temporarily returned to authorized administrators for display.

Does a completed case mean a business is approved?

No. Workflow status is not a diligence conclusion. Review the full report, limitations and evidence before making a decision.

Is the service free?

The connector code is MIT-licensed. Ultiwrite service access, quotas, features and charges depend on the customer account and commercial terms.

Security

Report suspected vulnerabilities through https://dwsoffshorepartners.com/contact. Do not include credentials, customer evidence or signed upload URLs in public issues.

The connector exposes one private POST admin route requiring plugins:manage. It declares only network access to dwsoffshorepartners.com, with a fixed set of Partner API paths. It has no content, media, storage or visitor-data capability, no public route, no MCP tool and no publish hook.

The API credential is declared as a secret in admin.settingsSchema and saved via ctx.settings. The host must configure EmDash encryption. The saved value is never supplied as an input default or returned in UI blocks. HTTP error bodies and host exception strings are not rendered. Redirects are refused. Returned signed uploader links must use the canonical HTTPS host and exact uploader path, be single-use and have a future expiry.

Authorized EmDash administrators share the configured connection. They can access the Ultiwrite organization authorized by its key. Deploy only in a trusted admin workspace. API responses and brief contents are visible to those administrators; this is not a per-editor OAuth integration.

Signed upload links are sensitive bearer capabilities. They are displayed only after an explicit action and are not stored by this connector. Disconnect deletes the local setting but does not revoke the key server-side; use the Ultiwrite dashboard for revocation.

This package contains no production credentials, evidence, proprietary engine source or tracking code. No live customer credentials are used in automated tests.

0.1.0: Initial EmDash connector with private admin controls, encrypted API-key storage, account and usage checks, paginated cases, Decision Brief lookup, and transient secure-upload links.

Install and connect

1. Install Ultiwrite from the EmDash registry when the release is available, or use its built registry archive for a supported local installation. Review the declared network permission.
2. Ensure the EmDash host has EMDASH_ENCRYPTION_KEY configured before saving any secret.
3. Open the Ultiwrite admin page and choose Connection settings.
4. In Ultiwrite, request API access at https://dwsoffshorepartners.com/settings/api. After explicit approval, create a dashboard API key with the read scope and, for upload links, the evidence scope.
5. Save the key in the masked field. Then choose Check account and usage. Do not use a Bluesky credential here.
6. Browse cases, enter a case/report ID to read a saved Decision Brief, or explicitly create a secure upload link.

Only trusted users with EmDash's plugins:manage permission may use the connection. It is shared among those administrators. The plugin does not read CMS content or upload evidence automatically.

Open a new upload link promptly and keep it private. Uploads happen on Ultiwrite, not through the CMS. A missing or unreleased report is not a negative finding. Full report downloads require a signed-in Ultiwrite browser session.

Disconnect removes the locally stored key. Revoke it in Ultiwrite to invalidate other copies. API approval, service availability, request allowance and analysis credits are enforced by Ultiwrite.