System
Control loop that never skips the gate
Intent → draft → shadow → armed → tick. Every transition is stored, permission-checked, and halt-aware. The loop is the product.
Bot lifecycle
Draft bots stay inert until you promote them. Shadow runs full code paths with simulated fills.
PermissionEngine v2
Allowances, rate limits, venue scopes, and human approval gates — fail closed on ambiguity.
Heartbeat desk
Ambient market pulse and health checks so the fleet does not go silent.
MCP parity
Agents calling MCP tools hit the exact same TradeGate as a human on the CLI.