The final authority.
Every trading intent passes through the containment layer before it reaches a venue. The risk engine is not advisory. It vetoes. It de-risks. It refuses. The execution router cannot bypass it.
Rule of authority
AI provides advice. The risk engine provides enforcement. If they disagree, the risk engine wins. There is no override.
Veto categories
D015Opportunity replacementA new intent must beat the position it would displace by a measured margin.
D061Adaptive sizingPosition size is bounded by realised volatility and the cluster the name belongs to.
D125Cluster capsNo single cluster of correlated names may exceed its share of NAV. Per-day adds are capped.
D126Fills ledgerEvery fill is written to an append-only ledger with the full decision heritage.
Why a separate authority
A personal multi-asset system has to fail without losing capital. Stale prices, closed venues, drifted positions, paper accounts that quietly stop authenticating: each has happened in soak. Each is contained by a specific rule, named in the source tree.
The risk engine is the place these rules live. It is the only place an order can be stopped. The operator can read every decision it has ever made.