Protective ruling card
- Card
- prot-0f2aa7b7b3841a49a3a321b3bdd68fe7
- At
- 2026-09-28 12:21 UTC
- Decision id
- —
- Ruling id
- 0f2aa7b7b3841a49a3a321b3bdd68fe7c02c62e216523006f60426effda71cd1
- Outcome
- —
- Raw JSON
- prot-0f2aa7b7b3841a49a3a321b3bdd68fe7.json
What the risk kernel ruled
It can only shrink, refuse or close.
- Ruling
- 0f2aa7b7b3841a49a3a321b3bdd68fe7c02c62e216523006f60426effda71cd1
- At
- 2026-09-28 12:21 UTC
- Answers
- protective: venue_integrity
- Breaker
- active → active
- Guards applied
- G1_venue_integrity, G2_weekend_freeze, G5_daily_kill, G10_breaker
| instrument | held | asked | approved | set by |
|---|---|---|---|---|
| METAUSDT | +2.49% | hold | 0 (flat) | G1_venue_integrity |
| MSTRUSDT | +2.50% | hold | +2.50% | as asked |
Book-level guards
| guard | status | ceiling | reason |
|---|---|---|---|
| G5 daily kill | passed | — | day return within the -1.5% kill basis and inputsEnvelope simulation uses a -1.5% daily kill (envelope_clean.py) {
"day_open_equity": "49985.20616429",
"day_return": -2.1380904111655183e-05,
"equity": "49984.13743539",
"kill_at": -0.015
} |
| G10 breaker | passed | — | breaker active; snapshot and quote fresh basis and inputs2.5% is past the worst no-edge 72h drawdown (-2.48%, envelope_clean.json); losing-streak and staleness rules ported from ARGUS risk/circuit.py (MIT); a model outage never leads to a deterministic trade (DESIGN.md §9.5); policy v2 (run2-a5): the losing-streak trip lapses, since a flat book in reduce-only could never close the winner that clears it; policy v2 (run2-a6): a flatten is itself a taker trade on every leg {
"book_demands": "active",
"book_trips": "",
"breaker_state": "active",
"breaker_trips": "",
"consecutive_losses": 0.0,
"drawdown": -2.1380904111655183e-05,
"effective": "active",
"llm_outage": false
} |
METAUSDT: every guard
| guard | status | ceiling | reason |
|---|---|---|---|
| G1 venue integrity | fired | exit | exit: Demo last 726.41 is 90.7 bps from live 733.06, beyond the measured p99 of 67.2 bps basis and inputsDemo flash prints (BTCUSDT Demo mark 65.6% from its index, 2026-06-29 00:00 UTC); excursion counts and p99 gaps in demo_integrity.json and fade_demo.json; weekend Demo index moves 0.1-1.5 bps/h vs 18-66 bps/h on weekdays (weekend_vol.json) {
"demo_index": "732.5347450639180285",
"demo_index_move_bps_3h": 42.65144529002026,
"demo_last": "726.41",
"demo_live_gap_bps": 90.71563037132022,
"demo_live_p99_bps": 67.2,
"demo_mark": "732.36",
"live_last": "733.06",
"mark_index_gap": 0.00023854849902413974,
"mark_index_limit": 0.03,
"session_open": true,
"stale_index_min_move_bps_3h": 2.0
} |
| G2 weekend freeze | passed | — | outside the weekend freeze and its buffers basis and inputsUTA Demo does not track these perps on weekends. Mostly it freezes: weekend mean |1H move| of the Demo index 0.1-1.5 bps against 5.6-29.1 bps live (weekend_vol.json); MSTR +204 bps live vs +5 bps Demo from Saturday 00:00 to 12:00 UTC on 2026-09-19. Sometimes it jumps on its own: AAPL +80 bps Demo vs +17 bps live on 2026-09-12 (fade_demo2.txt); policy v2 (run2-a4): a trade still open when the record is scored has no result, so the window closes them all {
"asset_class": "us_equity",
"phase": "open"
} |
| G5 daily kill | passed | — | day return within the -1.5% kill basis and inputsEnvelope simulation uses a -1.5% daily kill (envelope_clean.py) {
"day_open_equity": "49985.20616429",
"day_return": -2.1380904111655183e-05,
"equity": "49984.13743539",
"kill_at": -0.015
} |
| G10 breaker | passed | — | breaker active; snapshot and quote fresh basis and inputs2.5% is past the worst no-edge 72h drawdown (-2.48%, envelope_clean.json); losing-streak and staleness rules ported from ARGUS risk/circuit.py (MIT); a model outage never leads to a deterministic trade (DESIGN.md §9.5); policy v2 (run2-a5): the losing-streak trip lapses, since a flat book in reduce-only could never close the winner that clears it; policy v2 (run2-a6): a flatten is itself a taker trade on every leg {
"book_demands": "active",
"book_trips": "",
"breaker_state": "active",
"breaker_trips": "",
"consecutive_losses": 0.0,
"drawdown": -2.1380904111655183e-05,
"effective": "active",
"llm_outage": false,
"quote_age_seconds": 2.224652,
"snapshot_age_seconds": 148.400296
} |
MSTRUSDT: every guard
| guard | status | ceiling | reason |
|---|---|---|---|
| G1 venue integrity | passed | — | Demo mark within the index limit, Demo-live gap within p99, Demo index moving basis and inputsDemo flash prints (BTCUSDT Demo mark 65.6% from its index, 2026-06-29 00:00 UTC); excursion counts and p99 gaps in demo_integrity.json and fade_demo.json; weekend Demo index moves 0.1-1.5 bps/h vs 18-66 bps/h on weekdays (weekend_vol.json) {
"demo_index": "157.9837070035235991",
"demo_index_move_bps_3h": 65.53892394562833,
"demo_last": "157.35",
"demo_live_gap_bps": 53.10070168784373,
"demo_live_p99_bps": 316.2,
"demo_mark": "157.73",
"live_last": "158.19",
"mark_index_gap": 0.0016059061300412486,
"mark_index_limit": 0.03,
"session_open": true,
"stale_index_min_move_bps_3h": 2.0
} |
| G2 weekend freeze | passed | — | outside the weekend freeze and its buffers basis and inputsUTA Demo does not track these perps on weekends. Mostly it freezes: weekend mean |1H move| of the Demo index 0.1-1.5 bps against 5.6-29.1 bps live (weekend_vol.json); MSTR +204 bps live vs +5 bps Demo from Saturday 00:00 to 12:00 UTC on 2026-09-19. Sometimes it jumps on its own: AAPL +80 bps Demo vs +17 bps live on 2026-09-12 (fade_demo2.txt); policy v2 (run2-a4): a trade still open when the record is scored has no result, so the window closes them all {
"asset_class": "us_equity",
"phase": "open"
} |
| G5 daily kill | passed | — | day return within the -1.5% kill basis and inputsEnvelope simulation uses a -1.5% daily kill (envelope_clean.py) {
"day_open_equity": "49985.20616429",
"day_return": -2.1380904111655183e-05,
"equity": "49984.13743539",
"kill_at": -0.015
} |
| G10 breaker | passed | — | breaker active; snapshot and quote fresh basis and inputs2.5% is past the worst no-edge 72h drawdown (-2.48%, envelope_clean.json); losing-streak and staleness rules ported from ARGUS risk/circuit.py (MIT); a model outage never leads to a deterministic trade (DESIGN.md §9.5); policy v2 (run2-a5): the losing-streak trip lapses, since a flat book in reduce-only could never close the winner that clears it; policy v2 (run2-a6): a flatten is itself a taker trade on every leg {
"book_demands": "active",
"book_trips": "",
"breaker_state": "active",
"breaker_trips": "",
"consecutive_losses": 0.0,
"drawdown": -2.1380904111655183e-05,
"effective": "active",
"llm_outage": false,
"quote_age_seconds": 2.427652,
"snapshot_age_seconds": 148.400296
} |
What was sent and what came back
- clientOid
- sa2a633b4200985c15b800085cb3f4f6
- Venue orderId
- not acknowledged
- Stop
- —
- Net P&L realised
- —
Dry-run preview (what Agent Hub would send)
order --action place --category USDT-FUTURES --symbol METAUSDT --side sell --orderType market --qty 1.7 --clientOid sa2a633b4200985c15b800085cb3f4f6 --posSide long --paper-trading --dry-run
{
"category": "USDT-FUTURES",
"clientOid": "sa2a633b4200985c15b800085cb3f4f6",
"orderType": "market",
"posSide": "long",
"qty": "1.7",
"side": "sell",
"symbol": "METAUSDT"
}| exec id | side | qty | price | fee | open/close | at |
|---|---|---|---|---|---|---|
| none | ||||||
Proof
Read from ledger rows 733, 734, 735, 736, 737, 738, 739, 740 of ledger.jsonl; every blob those rows commit to is below, named by its SHA-256.
| blob | media type | bytes |
|---|---|---|
| 9a63c6ff7a3a1a3914ad3d4e92e15cf809602c4d9584f6e2db366ad469b27784 | application/vnd.t2sa.ruling-context+json | 17310 |
| e3cdcd42256ec9370c49d8fc273170977028b9297d852f4caa7255a8a8b0b46a | application/json | 724 |
| 21c7cc126c953d135b6ae68d1a3eab1520c091cfb428d0c1846156ecb1a04d37 | application/json | 648 |