L1 = you tap every live order · L2 = you approve plans, model_auto wallets execute inside caps · L3 = trade-only · L4 = full autonomy with guardrails (testnet staging + capped spend). Changing the level is human-only and audited.

Live orders awaiting your tap

At L1 every live order lands here. At L2+ model_auto wallets execute inside caps and only rejections surface here.

Tool budget requests

Send prompt

Prompts and invocations

Rules

Conditions

History

Equity

New paper order

Order proposals

Order proposals (paper + live — approve or reject here)

Risk limits (human-only — the model can never change these)

Strategies (deterministic, paper-only, human-gated)

Live wallets (keys stay server-side, never shown)

Trade-only keys. Start on testnet. Mainnet needs live-enabled + arming + per-order approval. No withdraw path exists in this system.

Symbol → wallet routing

Positions

Trade history

Tool budget (wallet 3 — human funds, model requests)

Whale prints (public tape, research only)

Market sources

Prediction markets (paper/research)

Venue health + reconcile

Markouts (adverse selection)

Backtest runs

Heartbeats

Safety state

Audit log

Decision journal

Journal digest (7-day counts — what the model sees)

Journal chain

Model outbox (unclaimed notifications)

Events

Failures (every part)