Withdrawal impossible
Only read/trade scope. Withdrawal rights and custody stay outside the system.
Trust architecture
Capital connected. Control retained.
The system is designed so one compromised component cannot withdraw funds, hide a decision or bypass the mandate.
Secrets off the client
Broker tokens belong in a server vault, never a browser, log or model context.
Human authorization
AI creates a proposal. Real orders require mandate checks and an authorized person.
Least privilege
Research, proposal, approval and execution have separate roles.
MVP / ready
MVP / ready
- Virtual portfolio
- Local demo session
- Scenario simulator
- Versioned theses
- Intelligence reports
Real money / gated
Real money / gated
- Jurisdiction and licence
- Broker due diligence
- KYC/AML and suitability
- Trading-only OAuth
- Penetration test