Skip to content
bellwether

Risk & safety model

Limits, halts, the kill switch, why the Executor cannot be talked out of a rule, and the paper-to-live ceremony.

6 articles

The rules the system cannot break live on one screen and are enforced by code that has no model in it. Tightening is one click; loosening is a ceremony.

  1. Limits and haltsThe Risk screen's four tabs, what each per-order limit means, the two rules that stop everything, the tradable-universe screen and the denylist, and why tightening is a click while loosening is a ceremony.Owners & operators9 min read
  2. The kill switchHalt is one click from every screen and never asks for a code; the three kinds of halt the banner tells apart, what a halt blocks and still lets out, where its history lives, what Resume does, and what Flatten does.Owners & operators11 min read
  3. The Executor cannot be argued withWhy no model, no chat and no clever proposal can move a limit. The Executor is plain code, the policy is pure and fully tested, and every loosening is a ceremony done by a person.Everyone on the book5 min read
  4. Paper vs livePaper is the default everywhere and nothing in the console switches to live; what the environment pill means, what the readiness scorecard measures, and the deploy-time ceremony that stands between a green scorecard and real money.Owners & operators4 min read
  5. How sizing scales with the size of your bookWhat changes as an account grows from $10,000 to $10 million or more: limits that follow equity, orders sized against each name's daily volume, entries worked in parts, a universe that drops thin names, and the capacity number on Strategy and in the Lab.Owners & operators5 min read
  6. Going live with real moneycoming soonPlanned. How one book reaches real-money trading (a checklist the system computes, a ceremony you perform, a $500 first stage, automatic demotion), and why none of it is a switch.Owners & operators7 min read