A stop at the broker even if we go dark

What changed for people using Bellwether

• Every protected position now also has a stop resting at the broker. Bellwether still manages exits itself, but if the desk's own process were ever down when a stop level is hit, the broker's order is already there. If the broker's stop fills first, the desk adopts that fill instead of selling twice.
• The desk can never sell more than you hold, and never opens a short. Every sell is clamped to the confirmed position, and short selling is switched off on broker accounts that allow it (with a note in your alerts when it does so).
• Fills reach the desk in about a second through the broker's order stream instead of waiting for the next poll.