- One desk, one address
- Each desk runs on its own subdomain, behind a sign-in, and is never indexed.
- Every change is on the record
- Each one names the person who made it and the trade it touched, and the
database refuses to update or delete a single row of that record.
- Nothing automated writes to your systems
- The four calls that could submit an order or post a message refuse unless a
flag is set, and in production it is off. The automated lanes press a
vendor's own search and export controls and nothing else.
- A guess is labelled a guess
- Where no source states an option's side, the leg stays unknown and raises an
exception rather than being closed quietly. Where the hedge arithmetic
settles it, the trade reads inferred, not stated.