01Control philosophy

STRATA operates on the premise that AI is fallible and markets are adversarial. Every control is designed to fail safe — meaning when a component degrades or disagrees, the system stops trading rather than continues trading.

Three modes govern every deterministic gate:

Deployment protocol New governance rules ship in ADVISORY mode first. We measure delta against enforcement for one to four weeks, review the forensic label distribution, and only then flip to ENFORCING. This prevents the well-known quant failure of introducing a rule that looks correct in backtest but destroys live performance.

02Risk matrix

Every material risk vector the platform faces, with the active mitigation. Reviewed monthly.

High · Market Flash crash / shock move Price Sentinel 60s loop detects rapid adverse PnL drops; escalates to EMERGENCY_CLOSE or REDUCE_50. Cascade BTC-dump detection tightens all alt longs simultaneously.
High · Market Thesis invalidation by news NRU matches incoming headlines against Analyst invalidation watchlists. Matches trigger urgent interrupts with 60-min debounce; affected theses killed; positions reviewed.
High · Market Liquidation risk on leverage V2 Crypto primordial explicitly anchors liquidation risk awareness. WVU (crypto review) flags positions approaching liquidation. Entry State Machine rejects extended entries.
High · AI AI skips position review Safety net auto-upgrades NO_TRADE decisions with 0 position reviews to MANAGE, injects a correction into the unit. Primordial 01 anchors "position review mandatory" in every trading unit's hypergraph.
High · AI Verdict oscillation Material Change Controller suppresses repeat actions when inputs have not changed. Anti-oscillation primordial anchored in ERU, WVU, IB Equity Review. Prior verdicts (last 5 per symbol) fed back each cycle.
High · AI Hallucinated tickers / data Trading units only accept tickers from the configured universe. Price values are Float64 from real data services. Review units catch contradictions; deterministic layer catches invalid sizing or extreme exposure.
Medium · Ops Exchange API outage Kill switch flag stops all new execution. Duplicate close guard and recently-opened guard prevent double orders during recovery. Position Registry survives restarts via logs/active_positions.json.
Medium · Ops REI API degradation Every unit API call has a 60-second timeout and structured-response validation. Malformed or missing responses trigger a safety net (no new trades); operator is alerted via logs and dashboard.
Medium · Ops Redis failover Theses, primordials TTLs, prior verdicts, performance state all stored in Redis. On failover, TTLs re-issue on next cycle. Positions persist separately on disk.
Medium · Execution Slippage / chase Entry State Machine evaluates velocity, range position, 1h extension. Returns one of ALLOW_MARKET, ALLOW_LIMIT, CONVERT_PULLBACK, DELAY_RETEST, REJECT_EXTENDED.
Medium · Execution Profit giveback Profit Ladder tightens stops progressively as PnL grows. Risk Brake triggers when >45% of peak profit is given back. Price Sentinel enforces 50% profit ratchet.
Medium · Execution Churn / over-trading Anti-churn primordials anchored. Direction guard prevents CLOSE then re-open same direction same cycle. 60-min recently-opened guard. Material Change Controller suppresses repeat actions.
Low · Strategic Regime change Analyst cycle runs every 30 min, ingests NRU digest, tests theses against invalidation conditions. Theses transition ACTIVE → WEAKENING → KILLED. Posture adjusts deployment state accordingly.
Low · Strategic Concept drift in REI Primordials re-issue monthly via 30-day TTL. Forensics output labels every closed trade; patterns of thesis-failure vs execution-failure become visible within weeks.
Low · Compliance Entity / jurisdiction Ecliptica PTE LTD, Singapore. IBKR integration via legitimate TWS API. Research documents stored encrypted. No client funds custody; trades on allocator's own exchange accounts or via managed wrapper.

03Defense in depth

Every order passes through at least four independent checkpoints before reaching an exchange. A failure at any checkpoint blocks the order.

1. Primordial anchoring     AI has internalized invariant
2. Cycle payload reminder    cycleLoopAwareness field
3. Safety net                code checks AI output structure
4. Review unit gate          ERU / WVU / IB Equity Review
5. Portfolio Manager         posture + exposure + redundancy
6. Entry State Machine       chase / extension / breakout
7. Risk Brake                session / shock / giveback
8. Material Change Controller justification requirement
9. Exposure Graph            book-level what-if
10. Price Sentinel           60s independent safety loop

Additionally, the Post-Trade Forensics layer runs after every close and labels the trade along six failure modes: thesis failure, expression failure, entry timing, stop placement, profit harvesting, premature exit. Labels feed back to Analyst and trading units.

04Failure modes

We reject the framing that AI trading systems are black boxes. Every material failure mode is documented, instrumented, and has a defined response. The table below covers the categories we actively monitor.

ModeDetectionResponse
AI returns invalid JSONParser validates structureCycle skipped, alert logged, unit retains prior state
AI returns 0 position reviewsCount check post-parseDecision upgraded to MANAGE, auto-correction fired
AI oscillates verdictsMaterial Change ControllerAction suppressed, logged as no-material-change
Review unit rejects proposalReview gate stageProposal blocked, reason logged, no execution
PM posture = NO_NEW_RISKPortfolio ManagerHard block on all new entries
Entry extended beyond rangeEntry State MachineREJECT_EXTENDED · block, log, wait next cycle
Shock move detectedPrice Sentinel (60s)EMERGENCY_CLOSE or REDUCE_50 depending on severity
Cascade BTC dumpPrice Sentinel cross-assetAll alt longs tightened to 1.5x ATR stop
Profit giveback >45%Risk BrakeTIGHTEN or REDUCE_50 depending on regime
3 consecutive stops same symbolRe-entry ControllerSymbol blocked until thesis reconfirmation
Thesis killed (Analyst)Analyst cyclePositions reviewed, matching entries blocked
Exchange rejects orderTradingService error handlerLogged, duplicate guard engaged, retry policy applied

05Operational posture

Four traffic states govern the overall aggressiveness of the system at any given moment. The Analyst sets the state; the Portfolio Manager enforces it.

PosturePM behaviorTypical trigger
FULL_DEPLOYMENTNormal evaluation, standard PM rulesClear regime, thesis-aligned flow
TACTICAL_ONLYMax 1 new trade, 50% sizing capMixed signals, thesis weakening, elevated vol
REDUCENo new entries, reduce existing exposurePosture deterioration, regime transition forming
NO_NEW_RISKHard block on all new entriesPre-FOMC, thesis invalidation, pending catalyst

Performance state layers on top: HEALTHY, CAUTIOUS, DEFENSIVE based on recent PnL trajectory. Performance degradation shortens cycle intervals (more monitoring) and biases Portfolio Manager toward smaller sizes.

06Observability & audit trail

Every material decision in the system is logged with enough context to reconstruct it later. This is not optional — the forensic label feedback loop requires it.

07Kill switches and manual controls

Operators can intervene at multiple levels without restarting the system.

08Data integrity and sources

STRATA runs on commercial-grade data sources. No web scraping for anything that touches trade decisions.

SourceUseCoverage
LaevitasCrypto derivativesFunding, OI, basis, liquidations, options flow
Polygon.ioEquity market data + technicalsReal-time OHLC, RSI, SMA, MACD, fundamentals
IB GatewayReal equity execution + market dataBid/ask/last/volume, order placement
BenzingaAnalyst ratingsUpgrades, downgrades, initiations, price targets
SynopticNews streamReal-time news, analyst Twitter streams
Kimi 2.5 (Moonshot)OCRPDFs, scanned documents, tables, multi-column
Hyperliquid SDKCrypto + commodity perp executionPerps trading, position state
CEX feedsReference pricesBinance, OKX, Bybit, CoinGecko

Raw payloads (especially Laevitas) are not sent to AI units directly. The data services layer processes, normalizes, and summarizes data first. This preserves REI's native numerical processing and keeps token usage predictable.

09Deployment and infrastructure

ComponentTechnologyNotes
RuntimeNestJS + TypeScript on RailwayAuto-deploy from branch; typecheck enforced
State storeRedisTheses, primordials TTL, verdicts, performance, cycle context
Document storePostgreSQLResearch items, daily recaps, extraction results
Position persistenceJSON on diskPositions survive restarts via logs/active_positions.json
Exchange integrationHyperliquid SDK, IB GatewayDirect API, no intermediaries for trade placement
Unit isolationPer-unit credentialsEach unit authenticates on a distinct, isolated channel; separation prevents cross-unit contamination

10What we do not claim

Honest posture on the limits of the system:

11 Further diligence

Complete technical architecture detail is in architecture. Full unit inventory and teaching-endpoint reference in units. For a walkthrough of how a single cycle executes, see how it works.

Questions beyond the scope of this documentation should be directed to founder@ecliptica.ai.

Engage
Request access

STRATA is in selective deployment with institutional counterparties. For allocator diligence, partnership inquiries, or licensing discussions, contact Ecliptica directly.